One set of firewall rules, easy to view ip addresses, machines don't leak.
I would put the extra braincells to work learning vlans. putting machines in jail is a liberating experience.
You can also learn to use privoxy to control IF machines have internet access, who they talk to and when.