This can be achieved using Outbound Policy, assuming the Admin LAN and Crew LAN are on different VLANs.