OK I am trying to figure something out. A 3550 is a L3 switch. VLANs operate at L2. So if you want to have multiple VLANs that can't talk to each other and you make sure the SVI is not enabled(only see that one in CNA)then you are OK. The minute you issue ip routing all bets are now off. Now the VLANs can route between each other which eliminates the need for the VLANs. Yeah, you could put in a bunch of ACLs but cmon whats the point. Am I missing something here?
I have this problem too.