VLAN MNG

Hi all,

I need little help.

Conf

CRS125 - VLAN 10 (eth2) - 1.1.1.1/30
VLAN 20 (eth3) - Managament - 10.0.0.1/24
ETH1 - wan - L2

RB951 - VLAN 10 (eth1) - 1.1.1.2/30
VLAN 20 (eth1) - 10.0.0.2/24
ETH2 - Local network 192.168.1.0/24

All works great, but i have problems with ping, I can ping Managament IP and on CRS and RB from Local network on RB951. I dont whant this. I whant that i have only on CRS ETH3 port access on vlan20 mng. Thx

No bridges, on RB is routing from 192.168.1.0/24 to 1.1.1.1/30

What I do wrong?

Thx