Set up a firewall rule that blocks outbound internet for the subnet range of the vlan.
In Network > Firewall | Access Rules >> Outbound Firewall Rules.
Deny by Source IP range
Set up a firewall rule that blocks outbound internet for the subnet range of the vlan.
In Network > Firewall | Access Rules >> Outbound Firewall Rules.