Route around hotspot to public IP addresses?

I don’t have a clue where to start…

I have an AP that has a public IP address on the first bridge. The second bridge has a hotspot with a DHCP server setup. I then have 4 WDS-Slave AP units behind the hotspot that have public IP addresses assigned to them and would like to use Winbox to access them for what ever reason that may come up.

AP
Bridge 1 - public IP (ether1, wlan1) >>>Bridge 2 - 192.168.10.1 (wlan2) with Hotspot & DHCP server.

WDS1-WDS4
Bridge 1 - public IP (ether1, {wlan1 - for local access only}) all in WDS-Slave mode.

This setup works for the hotspot usage, but the only way I can remotely log into the WDS-Slave units is by using Winbox and logging into the main AP, registration list, MAC telnet. Only then I have to use command-line mode to access the units.

Do I need to create static routes or what? On which units? ETC…

Any suggestions from anyone?

I guess you need to add bypass to /ip hotspot ip-binding, otherwise WDS device is not authorized in HotSpot and that’s why access to it is not possible,