hpe 5700 (comware 7) vlan routing

[Dobson17]

I want to divide my network into smaller segments.
I want to use our HPE FF 5700-40XG-2QSFP+ switch as the router. It runs comware 7.

VLAN 101 for servers, using 10.101.0.0/16, interface ip 10.101.1.100
VLAN 102 for building A, using 10.102.0.0/16 interface ip 10.102.1.100
...
VLAN 105 for building D, using 10.105.0.0/16 interface ip 10.105.1.100

At the moment all VLANs can talk to each other.

I want:

VLAN 102 to have access to VLAN 101
VLAN 103 to have access to VLAN 101
...
VLAN 105 to have access to VLAN 101

But I want to make sure they can not reach each other.
So no traffic from VLAN 102 to VLAN 103 or VLAN 104 etc.

I wanted to try this, but failed:
- create a VPN instance for each VLAN, so it will have its own routing table
- for each VPN instance: create a route between the VPN instance and the VPN instance of VLAN 101

I also tried doing it with policy based routing and ACL's but I was also not able to figure that out.

Maybe that's not the way to go, or maybe I'm not doing it right.

Who can help me figure this out? It seems so basic..

[Parvez_Admin]

Hello @Dobson17 ,

For HPE networking and Aruba product queries, request you to post your query in Aruba Airheads Community using the link below:

https://community.arubanetworks.com/discussion

You can refer to the below link aswell for more details:

HPE Networking forum migration to Aruba Airheads c... - Hewlett Packard Enterprise Community