Hi Jagdev,

You may use access-lists to deny traffic between the vlans, but allow traffic from all vlans to a specific vlan, where the servers are located.

For example:

Vlan x has the subnet x.x.x.x x.x.x.x

The server vlan y has the subnet y.y.y.y y.y.y.y

The access-list:

access-list 101 permit ip x.x.x.x x.x.x.x y.y.y.y y.y.y.y

(implicit "deny ip any any" at the end, so you don't have to add it to the access-list)

Apply this access-list to the vlan x interface of subnet x.x.x.x x.x.x.x :

interface vlan x

ip access-group 101 in

By applying similar access-lists to all 7 vlan interfaces (except interface vlan y, the server vlan) you achieve the desired result.

Cheers:

Istvan