Hi everyone, I have a er605 that I'm trying to set up. I have a device on vlan 1 and a device on vlan 2 I want the device on vlan 1 to be able to connect to the device on vlan 2 but not vice versa. I also don't want vlan 2 to have outbound connections. Is this possible in standalone mode? Instead of ACL could I vpn the from device 1 (on vlan 1) to vlan 2?

Thanks