@Somnus This context was helpful. I was assuming that switch ACL included the switch in the ER605, but now I understand that the 3 different ACL groups are applied to the different Omada components....

I would like to segment my network such that devices plugged into an L2 switch that are on separate VLANs are unable to communicate. Network Topology Software Controller Router ER605 v1.0 AP: EAP610...