Hi
I don't have too much experience with SG200 but what you want to do in a simple way is called private vlan (having multiple hosts on the same vlan without being able to communicate each others) but after checking the administration guide, this feature doesn't exist.
There's another method using mac acl and keeping all hosts in the same vlan. The minding is this acl will allow traffic to your provider Mac address interface and deny all others (you will need to allow some other Mac addresses depending on your design). But i don't see anything regarding this on administration guide.
There's also vacl but not in the doc...
Also proxy-arp.... Kind of tricky config with Nat...
What you want to achieve won't work.
Do you have another switch? What's your design to see if we can leverage something else.
You want to filter all hosts communications or group of hosts?
If group of hosts, you can have multiple subnets by splitting your actual one into x subnets where x represents the number of group devices.
Thanks
Francesco
PS: Please don't forget to rate and select as validated answer if this answered your question
