Have a core 9410 with an edge 3850. Have vlan12 as a DMZ on the edge as 10.12.0.0/29 with vlan12 interface on the core as 10.12.0.1 and the vlan 12 int on the 3850 is 10.12.0.2. Want to block off production networks 192.168.100.0/24, 192.168.110.0/...