Display network doen't work for me

I have installed RHEV (with FreeIPA).

There are two networks in RHEVM. Display network 172.17.205.200/29 and rhevm network 172.17.192.128/26. Display and rhevm networks are in different VLANs. Both RHEVM and RHEVH hosts has display and rhevm IPs.

There are two desktops which connect to network via Cisco VPN. First (adminitrator) desktop has access to rhevm and display network. RHEVM and spice work fine. Second desktop has not access to rhevm network (Cisco admin prohibits this access). User can access UserPortal but spice doesn't work because spice client tries to connect to rhevm IP.  So all spice traffic goes throught rhevm network. Why?