You do need to set up inter VLAN routing and then set up a firewall filter.
You do this with two firewall filter rules. The first one is deny all traffic from the source VLAN all to all on the destination VLAN unless matched by a subsequent rule
(this is one of the filter rule action options) and the second (the subsequent rule) allows access to just the printer. You can narrow this down to a particualr port/protocol combination or allow all traffic to the printer as you wish.
Edited by caffn8me (Wed 10-Jan-18 07:33:39)