Isolating Subnets in OpnSense

[romuloadmr]

Hello guys, i might need a bit of help here...

I want to accomplish the following:

Allow LAN1/LAN2/ access to the wider internet.
Isolate the LAN1/LAN2 subnets from each other, so that by default no traffic will flow between them.
Have the ability to poke holes between the subnets for specific purposes.

I am sorry if this has been answered here already. So far i am having problems when i create a rule to permit LAN1 traffic to WAN, since it also allows the LAN1 traffic to reach LAN2.

What is the mosf effective way to design my rules in this case?

Thanks in advance!

[guest10459]

I would like to know this as well.