Very stupid network design, im guessing there would be some sort of VLAN provision.

Speaking as someone with experience in the field of network security, I’d be frankly astonished if this was not the case.