After posting this and thinking that I understand at least something about switch ACLs I'm stuck at this scenario:

I have VLAN 20 and VLAN 60 and they must be mutually completely isolated with two exceptions:

computer with IP 192.168.20.3 must be able to SSH to computer with IP 192.168.60.3

and vice versa ...

computer with IP 192.168.60.3 must be able to SSH to computer with IP 192.168.20.3

Computers inside individuall VLAN must be accesible without limits.

I think this should be simple but I tried all combinations of rules and ACL-VLAN binds, but some combination opens SSH only in one direction, other combination blocks SSH in both direction, third combination opens too much...

Can someone please show configuration (with screenshots or CLI commands) which can fulfill this scenario.

Thank you.

Sašo