Can't reach management subnets on routers using HOTSPOT

I have several routers in production using the HOTSPOT feature. The users can browse without issue. They are on one subnet and my device management is on another subnet. The bridge has both subnets going out a single interface. I need to be able to manage the infrastructure. I can ping the management gateway IP but none of the devices, even from the router itself. I have looked at firewall and NAT rules and see nothing that should cause a problem. I suspect that it has something to do with HOTSPOT and have even gone into IP BINDINGS and bypassed both the source and destination IP ranges.

Any insight would be greatly appreciated!

The binding for the subnet should look like this:

/ip hotspot ip-binding
add address=10.10.10.0/24 type=bypassed

Can you post what your’s look like?