So we have a Guest Network that I want to allow access to a specific local resource. We have created a Guess Access Service with no authentication and with the local resource's IP address as the first item listed in the Restricted Subnet Access with the value of allow. (see below)

For some reason, I can't ping that IP at all, however if I am connected to the normal WLAN I can ping it.
Any ideas?