Networking companies (like Cisco, HPE etc.) do this all the time with their test beds deliberately disconnected from internet. It's not hard.