A network which can access the Internet, but not other machines on the LAN. Not even ethernet frames.