Block access from X2 VLAN to X0
I have a network with servers and PCs on the X0 network. 10.0.0.X I created a VLAN on X2 with its own DHCP of 192.168.0.X.
If I plug in a PC on X2 I can ping servers/PCs from X2 to X0 but I want to block it so that the guest network on X2 can't access any device on X0. Its used only to go out on the Internet through X1.
How to I create this rule etc?