diff --git a/chaos_monkey/config.py b/chaos_monkey/config.py
index e62820816..fadc56258 100644
--- a/chaos_monkey/config.py
+++ b/chaos_monkey/config.py
@@ -184,6 +184,7 @@ class Configuration(object):
 
     range_class = FixedRange
     range_fixed = ['', ]
+    inaccessible_subnet_groups = []
 
     blocked_ips = ['', ]
 
diff --git a/chaos_monkey/example.conf b/chaos_monkey/example.conf
index 6f70f888a..c3be6354f 100644
--- a/chaos_monkey/example.conf
+++ b/chaos_monkey/example.conf
@@ -11,6 +11,7 @@
     "range_fixed": [
         ""
     ],
+    "inaccessible_subnet_groups": [],
     "blocked_ips": [""],
     "current_server": "41.50.73.31:5000",
     "alive": true,
diff --git a/monkey_island/cc/services/config.py b/monkey_island/cc/services/config.py
index 361854f05..b2792e6b3 100644
--- a/monkey_island/cc/services/config.py
+++ b/monkey_island/cc/services/config.py
@@ -235,6 +235,28 @@ SCHEMA = {
                                 "List of IPs/subnets to include when using FixedRange"
                                 " (Only relevant for Fixed Range)."
                                 " Examples: \"192.168.0.1\", \"192.168.0.5-192.168.0.20\", \"192.168.0.5/24\""
+                        },
+                        "inaccessible_subnet_groups": {
+                            "title": "Inaccessible IP/subnet groups",
+                            "type": "array",
+                            "uniqueItems": True,
+                            "items": {
+                                "type": "array",
+                                "title": "Subnet group",
+                                "items": {
+                                    "type": "string"
+                                },
+                                "minItems": 2,
+                                "uniqueItems": True,
+                                "description": "List of IPs/subnets."
+                                               " Examples: \"192.168.0.1\", \"192.168.0.5-192.168.0.20\","
+                                               " \"192.168.0.5/24\""
+                            },
+                            "default": [
+                            ],
+                            "description":
+                                "List of IP/subnet groups. Each group should consist of subnets that aren't supposed"
+                                " to be accessible to one another."
                         }
                     }
                 }