Malware analysis lab: Is it possible for the VMs to be segregated from the host network?

My home network is on VLAN10, and I have created VLAN30 on a other subnet for my host laptop which will have multiple VMs on it for malware analysis, phishing reverse engineering etc.

Is it possible for this laptops network to be segregated from the VMs so it wont get infected with malware? How do you set up your home labs?

analysis cybersecurity host lab malware malware analysis network vms