Hello,

Access control for IP Group does not work. I have tried all kinds of ways to block 3 specific static IP address from accessing WAN or from WAN to those IP addresses and there is no blocking being done. Specifically what I am trying to do is block three Deco XE75 Pro from being remotely managed or accessing the cloud. I do not want TP-Link to have any connection to Decos, I am already not happy that an account is required to setup the units.

Each of the Decos has a static IP address set in ER605. They are setup as access points. I managed ER605 stand-alone through the web UI. I set the 3 IP addresses under "IP Address" then I made IP Group with that IP Address name. I then created several types of access contro lists trying to block all [WAN] IN or LAN->WAN or ALL. I tried using Decos as Source and Destination with IP_GROUP_ANY and no matter what I do, traffic is still going out from Decos and I can access them using the Deco app when on mobile network.

I have searched the forums and there are many isntances of exact same problem, mainly that access control on ER605 does not work with IP Group.

Is this correct? Is this a bug? If this is true, how can I block Deco XE75 Pros from being remotely managed, and them talking to anything outside of my local network?