Here is layout. I know I can setup multiple vlans on router and manage there, but I don't want to have a lot of vlan interfaces on router just to allow a PC or two to talk with another PC in other vlan.
The real scenario is I have a management vlan and a POS vlan and one PC on the management vlan needs access to PC on POS vlan but no others need access, and both vlans need access to internet.
VLAN tags are backwards in drawing....
# Module vlan configuration.#
configure vlan default delete ports all
configure vr VR-Default delete ports 1-24
configure vr VR-Default add ports 1-24
configure vlan default delete ports 10, 18
create vlan "v10"
configure vlan v10 tag 10
create vlan "v20"
configure vlan v20 tag 20
configure vlan Default add ports 1-9, 11-17, 19-24 untagged
configure vlan v10 add ports 18 untagged
configure vlan v20 add ports 10 untagged
configure vlan Default ipaddress 192.168.1.22 255.255.255.0
enable ipforwarding vlan Default
configure vlan v10 ipaddress 192.168.11.2 255.255.255.0
enable ipforwarding vlan v10
configure vlan v20 ipaddress 192.168.10.2 255.255.255.0
enable ipforwarding vlan v20
#
# Module fdb configuration.
#
#
# Module rtmgr configuration.
#
configure iproute add default 192.168.1.1