I found that if you have the IP target in group 1 and group 2, it does not work. Just try it with group 1 only.