Hello JSL2,   Sorry for delay in reply, I've needed time to make a research. I’ve spoken with colleagues from Networking Team, however it is a configuration question and device is out of warranty, so there is a limit in troubleshooting steps, which could be provided. It is recommended to contact phone support for enterprise Configuration & Deployment, maybe this document could be useful: [URL]   Also my colleagues recommended as a troubleshooting step to use ip prefix-list from this document: [URL] p. 1430,  but it won’t work exactly as you described, it should still deny access.   Please let us know, if you have any questions. Thank you Maria Januszka #IWork4Dell Dell | Social Outreach Services - Enterprise
Device: N3048 version: 6.5.4.18 I'm doing PBR on a vlan to route out a secondary ISP as describing in the PBR Guide. This works fine. On this vlan, I also need to implement port restrictions to other vlans. If I add a access-group to the vlan interface, the route-map stops working, even if the access-group only has one entry to permit everything. Is there a trick to get this to work?    
Interaction between route-map and access-group on powerconnect vlan