Client isolation for only 1 client

[redskilldough]

Hi, I have an network where I allow all clients to access each other.

However, there is 1 client, which I want to restrict its access to only 1 other client.

Lets say I want to allow client id a, to only be able to access client id b, this is the rule I created:

drop ztsrc a not ztdest b;

But it does not work. Please help

Thanks

[redskilldough]

Hi,

Nvm, I used ipsrc and ipdest instead of ztsrc and ztdest, like this

drop ipsrc a.a.a.a/32 not ipdest b.b.b.b/32;

Now it works as expected.