Extreme Networks

Dears how i can create policy to deny subnet to access another one deny pc1 to access vlan MGT and permit any any thanks

scenario: if I have two vlan IT , Vlan HR for example , assign 172.16.0.1\24 for vlan IT , pc1 belongs to it (172.16.0.100) assign 192.168.0.1/24 for vlan HR ,pc2 belongs to it (192.168.0.100) how to ping from pc1 to pc2, uses VR-Router. thanks al...