Have you read this topic (Bridged network configuration), which whilst not an exact match, does tackle the issue of having more than one network (in their case for a proxy server, but I’d imagine an public / private without through traffic might be easier)