We would have to review your configurations to see why, roles and rules are one obvious place to look first. If you need assistance immediately I would suggest you contact the GTAC for help.
Doug Hyde
Sr. Director, Technical Support / Extreme Networks