A better way to access my modem, from LAN, through the hEX S?

RouterOS Beginner Basics
1

I had a problem similar to this fellow:
http://forum.mikrotik.com/t/newbie-access-to-modem-behind-router/140907/1

I have a Ubiquity UF-WIFI ONT as my connection to fiber, which connects to my hEX S ether1 port, and the hEX S is the backbone of my home network (standard 192.168.88.1/24). From my laptop on the LAN, I wanted to log into the UF-WIFI which was 192.168.101.253. As one would expect, I couldn’t “just do it”. In fact, I couldn’t even successfully ping 192.168.101.253 from the hEX S itself, though clearly all devices were working fine. I tried following the instructions in the above link (among other ideas). But what worked in the end, was simply:
IP → ARP → Add New → manually add the IP address and MAC of the device, associated with ether1 interface.

Voila! It connects perfectly. Ping, HTTP connection to the ONT login page, everything.

My question is, in principle, is this solution a good practice? Are there any security risks associated with it that I am unaware of?

Thanks,
Colm

2

Most probably a properly configured src-nat would do. But it largely depends on how exactly is your hEX configured with regard to ether1…

3

Thanks for your reply. I will try to learn a little bit more about that topic. Then I’ll come back and refine my question if necessary.