Admin SVM and Data SVM using the same subnet, one IPspace

Hi,

My ultimate aim is to configure AD authentication for the Admin SVM. I understand that I need to create a data SVM, join it to a domain and then configure the data SVM to be a gateway tunnel to allow AD authentication to the Admin SVM.

1. I'm going to have to create a new data SVM, does it have to be on a different subnet/VLAN to the admin SVM?
2. I'm not planning to overlap IP addresses between the admin and data SVM, each LIF IP will be unique, so do I need to go down the road of muliple IPspaces?

Thanks,

Ty