How to block communication between VLANs

trunk-block.PNG
Hi,

I want to enable access to the internet from both VLANs and block communication between VLAN 1 and VLAN 2.

I’ve managed to achieve that by firewall rules:

 1    chain=forward action=drop in-interface=vlan1
      out-interface=!Eth1-gateway log=no log-prefix="" 

 2    chain=forward action=drop in-interface=vlan2
      out-interface=!Eth1-gateway log=no log-prefix=""

But I’d like to know if there are other ways of getting the same result.

Thanks =)

I think this is the way to do it!
There is no communication between VLANs, but they are different networks and there is routing between them.
The access list blocks this routing. So that is what you want.