What security policy are you tring to implement?
I ask becasue we seldom see small-medium networks restricting inter-VLAN traffic. We see it sometimes on larger enterprises (with dedicated firewalls for that purpose) and increasingly in data centers separating VMs or subnets ("east-west" firewalling).
An alternative approach is separate VRF instances if the subnets never talk to one another yet share a single core.
