Completly disable Internet access for Internal Switch (Hyper-V) just on one VM

I followed this tutorial to create a Internal NAT Switch on host https://myitworld.azurewebsites.net/2017/02/09/configure-hyper-v-nat-virtual-switch-nat-forwarding/ Then, I created VM1 (172.16.0.10) from which I can access the rdp using the ip of the host and using port 50000. Now I created VM2 (172.16.0.11) that need to ping and access at VM1. All fine, the problem is that I…