Just wanted to say thanks for this: viewtopic.php?f=23&t=143620
and cannot recommend it enough for those new to VLANs.
I've had VLANs up and running for quite a while but just could not get management access working from any of them.
I've read your explanations and the comments and questions by mkx, sindy and anav, but could not figure out why it was not working.
With it being weekend (no working from home, as in, the router is then sorely needed) and everyone except me being from home I re-examined your config examples and it finally dawned what I've been missing in my management vlan setup all along.
It was the "input" rules -> I added those (but used a source group with just my own devices in it) and it worked immediately.
Even though it's mid-day here, I'll pull open a beer and have one on you, mkx, sindy and others Cheers!
Best regards, and have a nice day all,
a very happy Jeroen