The best way to ensure the VLANs are segregated is to remove all routing commands.  From my understanding once you have routing enabled the VLANs will all route with or without the routing command on the specific VLAN is configured. You could try your set up and then check the routing table to see what is listed to route with this command. console# show ip route If you have to route VLAN 10 and not the others then you may look into setting up ACLs to isolate certain traffic. Here are some documents on creating ACLs www.dell.com/.../app_note_3.pdf www.dell.com/.../app_note_10.pdf www.dell.com/.../pwcnt_IP_ACLs.pdf Hope this helps, Keep us updated if you can.
I want to have a total of three VLAN's, one called "Secure" for our companies resources, one called "Management" for the switch itself (pretty much just to get out of the default VLAN 1), and one called DMZ that will plug into the perimeter interface of our proxy server and serve up guest wireless.  Then using the trunk port of the switch I will transfer this using wireless bridges to other offices with the bridges in "transparent bridging" mode.  I would just like someone to verify my configuration to make sure it's correct.  Ports 1 - 42 should be on the "secure" side, 43 - 46 will be on the DMZ, and 47-48 are trunks. configurevlan databasevlan 10,40,90vlan routing 10 1exithostname "MyHostname"sntp broadcast client enablesntp client poll timer 1024sntp server myservernameclock timezone -5 minutes 0stackmember 1 2exitip address 10.1.90.1 255.255.255.0ip address vlan 90ip domain-name WHG.Localip name-server 10.1.10.34ip name-server 10.1.10.50ip https serverip routinginterface vlan 10name "Secure"routingip address 10.1.10.1 255.255.254.0exitinterface vlan 40name "DMZ"ip address 10.1.40.1 255.255.255.0exitinterface vlan 90name "Management"exitusername "switchadmin" password (password) level 15 encryptedip ssh serverclassofservice trust ip-dscp!interface ethernet 1/g1 - 1/g42switchport access vlan 10exit!interface ethernet 1/g43 - 1/g46switchport access vlan 40exit!interface ethernet 1/g47 - 1/g48switchport mode trunkswitchport trunk allowed vlan add 10,40,90exitexit 
Want to have two VLAN's that do not interact at all. Can someone look over 
config?