@FarmTech 

Hello. when it comes to unifi and tp-link, they are quite similar.
You want to block between vlans if I understand you correctly? this is done on the router as it is also done on unifi :-) what kind of router do you have?

Unlike unifi, on  Omada system you can also set ACL on Switch but that is not something I would recommend.
Switch ACLs aren't stateful so it's easy to block everything and thus lose connection to controllers, so be careful.

There is also ACL for the Access Point for ACL on Wifi.

go to settings, network security and acl

  @MR.S Thanks for the reply. To be honest I thought I had. The router is a TL-ER7206 

I setup the new Lan as an interface, with a vlan as number 2. I called this lan unit 8.

I went to port profiles and created a profile called unit 8 lan, I inly added the unit 8 lan I had created too it. 

I then set a port on the switch to this profile. When I plug my laptop into that port I get an address on the correct subnet but I can still ping the default LAN addresses. On unfi that wouldn't happen. 

Also on the AP, I setup a WiFi network, tick vlan put number 2 in. (Access Point is plugged into a port with profile All on it so I can broadcast multiple ssid's) when I connect to the ssid I created I get the correct address but can still ping the main lan.

So I'm doing all of this from within Omada Controller like I have with unfi. Should I be logging into the router direct? 

I dont really like the idea of ACL as you say. 

Thank you again for your help. Much appreciated 

  @FarmTech 

to stop respond from gateway try create a gateway acl and deny gateway management. i have not tested this so at your own risk