@gskips Switch rules can only work on traffic that goes through them. In general most networks will have a central switch and everything spreads out from that. Its not a requirement, but it tends to...

@gskips Your switches support Switch ACL, that is definitely the way to go for the rules you want Remember ACL rules work top down in a "first match wins" so you want the allow rule above the rules...

@gskips Currently you can only achieve this with Switch ACLs which allow LAN<>LAN IP Groups but you have to have a full Omada l2+ / L3 switch to do this (minimum is SG2008 model) They only other way...

@HERMES2024 none of which have anything to do with a wireless AP ?

@Conondrum Do you have any Switch or EAP ACL rules that you may have inadvertadently block IoT to itself or its Gateway IP on the router ? As long as vlan 90 is trunked (as in tagged) all the way...

@ProSumerTester Can you let me know what IPs are in your groups, and what vlans they reside on. Its a bit diffuclt to decode the ACL list you have set up without know what is what and going where