If it is anything like HP Procurve, all VLANs can talk to all VLANs by default. You need to configure acls in the Layer3 switch to stop the hopping between VLANs.
The Layer3 switch automatically has a route map. If it knows about all 3 VLAN's, it knows how to route them. Apply ACLs to prevent traffic between them.
The Layer3 switch automatically has a route map. If it knows about all 3 VLAN's, it knows how to route them. Apply ACLs to prevent traffic between them.
Have a look at: http://www.h3c.com/portal/Technical_Support___Documents/Technical_Documents/WLAN/Access_Controller/H3C_WX3000_Series_Unified_Switches/Configuration/Operation_Manual/H3C_WX3000_CG-6W103/201007/685290_1285_0.htm
specifically, Assigning an ACL to a VLAN.