I've read through some of the DELL documentation and its kinda helped, but I just want a general overview to get me started on this.

 

I have two VLANS setup 1 & 2, and probably dont want them to communicate.  Not sure if they do by default or not.  On VLAN 2, I was thinking just to give them port 80 and 443 for example, but not be able to ping my 10.0.0.1 subnet or gain access to our machines.   For security reasons.  Basically if this new branch on our subnet gets infected with a virus or something, I want them segmented so they dont infect our default subnet  (10.0.0.1)

 

Can I get an ACL example of how this would be done.