But the router does have an IP, I just can't connect to it (either via winbox or webfig).
Bridge mode is only on the internal network.
Let's see if I can make a simple diagram
ISP <-----> 951G-2HnD <-----> RB260GSP <----|--> HEX (router mode, separate network address)
Since the render is probably going to get screwed, the hAp is conneted to the switch not to the hex)
There are some other powerline attached devides, but they are irrelevant
It is the hAp i can't connect via it's IP address.
It surely has an IP address, it can see it on the leases assigned by 951G-2HnD, I can even ping it. Just can't connect to it
What an idiot, as i was writing these and just wrote "surely it's not a FW rule" I went and doublecheck and IT WAS a firewall rule.
Thank you looking at this and sorry for wasting your time. :(