DMZ with one Physical Nic

Hi,

Can you tell me if this is possible to do with ESXi5?

One physical nic but with ESXi running vm's on a routable network and having vm's behind a non routable private network as in the following example:

Physical nic = vlan1 212.212.99.0/24  ( Made up IPs)

Mangement network interface=212.212.99.100

network a ( virtual machine port group)

vm1 = 212.212.99.101

network b ( virtual machine port group)

10.10.10.0/24

vm1 = 10.10.10.10

vm2 = 10.10.10.20

To get to vm2 I'd like to have to go ( authenticate)  via vm1 which is publically accessible and is on both networks?

In short then I'd like to be able to route out into the wider world via 10.x vm's

Thanks

Paul