@d0ugmac1 Okay... the blocking is working on Switch layer and with switch ACL. But then egress traffic will be blocked even if the session is initiated from outside. Thats the reason I was looking...

@Tedd404 Like described in my initial post: I would like to create a network where I have to control the communication behaviour: 1. hosts shall not reach any other VLAN 2. hosts shall not reach the...

@d0ugmac1 Hi. My setup is: OC200 ER7206 SG3428 SG2218P Every device is on the newest available firmware

And again its me .... The concept of TP-Link is a bit strange to me, thats why I'm asking a lot. Hope this is okay... Hope it will hepl other people. My problem: I have severa networks defined: I...

@Tedd404 10.0.0.0/29 is the hole network. correct. and yes, of course are my hosts/servers inside this range.

@Tedd404 What do you mean I messed up with the subnets? My MGMT subnet is a /28 and my DMZ subnet is a /29 network. Thats correct.