I'm redesigning a network of virtual machines. The virtual machines are all on 10.0.2.0/24 and 10.0.3.0/29 networks, the physical network is a 18.104.22.168/28 network, which stands between the virtual machines and the internet. I'd like to change the virtual networks, which will be broken into three VLSM subnets, to use the preceding subnets in the 22.214.171.124 range. The last subnet in the virtual network functions as a DMZ and will use the /29 subnet mask.
Because the physical network is the last network in the supernet, I am unable to place the virtual networks after that network, while staying within the current subnetting scheme. I'm wondering if it technically possible to have a smaller subnet surrounded by two larger subnets, or must they be sequential networks?
As an example: