vCloud routing within vDC

For my environment, vCloud Director 5.1.1 + vShield 5.1.1.

I have created a multiple vApp on different network subnet (e.g. 192.168.10.x & 192.168.20.x /24) within the same vDC. Could they be routable inside the same vDC? Is there any specific setting need to be done inside the vShield? or i need an external layer 3 switch outside the vCloud network to perform the routing?