On GX50, how do I setup a VLAN for internal access only and block it from accessing the Internet?

[Mak]

On Cisco Meraki Go Firewall Plus GX50, how do I setup a VLAN for internal access only and block it from accessing the Internet?