Hello,

Using omada controller, swith and few AP i have this setup:
 

network1 which is default in organisation
network2 which is Guest network.

I wanted to allow device from network1 to be visible to all devices from guest network. Doing it by EAP ACL rules by IP group works, but i wanted to do it by MAC adress.

However its impossible to select created MAC group in EAP ACL to permit traffic. Is there any workaround to allow device only by its MAC adress no matter what IP it gets?
Would love to hear if any of you had similar problem or solution.