Hello,
I have a setup with a few VLANs with the following ACL rules applied:

For a device on the IOT vlan, I want to perform an OTA update from the Management vlan. When disabling the first Gateway ACL rule, the update works, otherwise not, with the error being that the device on the IOT vlan is not responding.

I've tried to create a switch ACL rule to allow for that communication:

This does not work either.

Am I missing something obvious? Have I hit a limit of what is possible to do with Omada? Is there a bug?

Cheers