How to set up vlan on L3 switch without internet access?

Question

network hardware

There is a managed switch 3com 4200 on 48 ports. It is connected to a cable from the router. It is necessary to allocate a couple of ports on this switch, which would see the rest of the LAN, would be in the same address range (192.168.2.0/24), but were limited with access to the Internet.

Answer 1

Was Lena born earlier? Here people seem to help with difficulties in a particular issue. And here I see a reluctance to think at all!

Answer 2

I have not worked with 3com, I think everyone is silent because they cannot talk about a specific implementation on your equipment.
If there is a problem with creating a vlan, I would first block NAT from the addresses that need to be blocked in the Internet access ACL.

Answer 3

One subnet cannot be "pushed" into 2 vlans.
Either 2-subnets and routing between them (with a ban from a specific vlan-a), or, as @zorruch said, "blocked NAT from addresses that need to be blocked in the Internet access ACL.".