@Virgo The original goal was to keep some IoT devices from reaching WAN, but since I haven't played with ACL on this router before I thought I'd just do a test with a local ip camera and laptop on...

I can't seem to get access control to enforce any rules. I'm using the local management not Omada controller. Omada isn't really an option for me in this use case. Under Preferences>IP group>IP...