Argo how to exlude admin

How would i go about setting up a IP tunnel? For Argo one for customers and another for admin without Argo. Cheers