My current situation is:

main LAN on a 192.168.1.0/24 subnet (plus a v6 subnet)

Hypervisors LAN on 172.16.0.0/24 (plus another v6)

i want to enable some devices (specified in the HyperAllowed IPGroup) to access RDP on the Hypervisor subnet

current ACLS:

yet this doesn't work, the clients in the lan can not reach the hypervisor via rdp

how should i set this up?