If we read what happened below, the idiot at the keyboard (me) put the ACL on gateway and not on the EAP.

This leads to my UI redesign suggestion.

In my extremely inexperienced view, if one is creating a traffic ACL rule,it should apply network wide.

My enhancement request is: instead of tabs to enter the rule 3 times, perhaps 3 check boxes (gateway, switch, EAP) on a single page would be more effective. All should be checked by default. This way if the admin wished to disable the ACL on any of the device classes it's a simple matter of unchecking a box.

@Fae Kindly consider but others may feel differently.

Dave

I've created the following rule:

I am able to http from IOT Net to CoreNet so this does not seem to work.

Any help is appreciated.