The appliance's external address does not have to be in the production network - you can assign it to any network of your choice. The only requirements are that backup server is able to connect to the appliance
and, therefore, to VMs in the virtual lab. However, if you want to provide someone with access to the virtual lab VMs from production network (link
), then the appliance has to be accessible from the production VM.