if you are configured in routing mode [vlan 14 and vlan 21 do not share the same subnet] this is done by default.
You need a vserver to ALLOW the traffic from a client vlan to a server vlan.
If you want to limit this vserver to vlan 15, you can use the command 'vlan 15' under the vserver configuration.
Regards,
Gilles.