--- For security reasons, the ACE does not allow pings from an interface on a VLAN on one side of the ACE through the device to an interface on a different VLAN on the other side of the ACE. For example, you cannot ping a VIP from a server if the VIP is on a VLAN that is different from the server VLAN.