enable access to OPNsense network from upstream private network

[molnart]

Hi, I suck at networking, so sorry if this is a very basic issue:

i am running OPNsense behind a nat on a hypervisor. The hypervisor is running on a private network on the subnet 192.168.5.0/24. My problem is, that the devices on that subnet are not able to access the devices on the OPNsense network.

I have added a WAN firewall rule enabling inbound traffic from 192.168.5.0/24 and also disabled private address blocking on WAN, but to no avail.

not sure if its relevant, but the upstream router in front of OPNsense is a Huawei HG8245

thanks for any advice