I have created two VLANS (in addition to the default VLAN 1): VLAN2000: 192.168.20.0/24 VLAN4000: 192.168.2.0/24 I created an IP ACL with the following rules: Deny, Source: 192.168.2.0, 255.255.255.0