Hi @8host 

Thanks for posting in our business forum.

Do you have ACL? If you have set up the VLAN-based ACL, of course, you don't have access to the VLANs.

You have to set up the GW ACL to allow the access. Not VPN, not Static Routing, use the GW ACL.

This link would be helpful in configuring that. ER8411 is a stateful ACL now. So, it applies to it as well. How to implement VLAN unidirectional access through ACL configuration of Business Router

Hi @8host 

Thanks for posting in our business forum.

8host wrote

Laptop conf:

 

 

Networks:

 

 

Ip groups:

 

 

 

 

 

ACL:

 

 

 

(I cannot do LAN-LAN based on Ipgroup)

 

Effect ;)

 

 

OK. None of the ACLs is set to Deny.

So, can you run this for me? Ping your gateway IP that is in another VLAN. Don't ping the IP address of the hosts. Ping the gateway 10.40.0.1, 10.51.0.1, or 192.168.0.1.

Let me know the result.