Try LAN20 deny ipgroup_any

@kibokura056 Try somthin like this, I think this will work for you. PVID is right if you want only vlan2 on port 7-8 connect router to port 1-6 Or this, then you have to connect router to port 1 And...

@userNAC Yes I agree with you, we can probably say that there are no firewall options but acl on switch is a temporary work around to block intervlan. I work with unifi and cisco daily and I must say...

@userNAC Yes with this port group you also give access to gateway that is needed to communicate from vlan to vlan since all traffics go thru the router. now you have to apply the rule in top of rule...

@userNAC You ned to add gateway that belong to the device network, e.g 192.168.30.1 for device 192.168.30.5 and so on there is no point to add gateway in ip port group only in ip group i think.. but...

@userNAC Maybe you should try to add gateway in SONY TV group to, Gateway is probably blocked by ACL