Isolation Option for Communication Between SubVLANs
To prevent normal communication between subVLANs, disable
the automatic addition of the IP ARP entries on the superVLAN using the following
command:
disable subvlan-proxy-arp vlan
[vlan-name | all]

Note
The isolation option works for normal, dynamic, ARP-based client communication.