How to: Prevent Logical Servers from Being Hosted in Zones
While developing a logical datacenter diagram, you can specify which types of logical servers can reside in a specific zone to reflect the policies of your datacenter. For example, you could restrict placement of database servers in the perimeter network.
Use the following procedure to specify a zone constraint.
To restrict placement of logical servers within zones
Select the zone for which you want to specify a hosting constraint.
View the Settings and Constraints Editor.
Under Zone Containment Constraints, clear the top-level check box to disallow that type of logical server from being placed in that zone.
You can also create additional, more specific constraints on zones by authoring user-defined constraints, as illustrated in Walkthrough: Creating a Security Zone Part 1.