how to add a static route for 2nd private subnet that is reacheable through the wan

[lgkahn]

Here's the question:

I have a public ip 13 block and have the switch hooked up to that through my external microtik router
then i have one of the ports going into my wifi router (ax11000pro or be88u running merlin) that takes one of the public ips and nats it to a private subnet for local devices.

The switch both the real wan from cable modem and out to the wan in on the merlin router all reside together on a managed trendnet 10gb switch.

The issue i am running into is that i cannot access the switch via ping or web etc as i gave it an ip in and alternate private subnet
I have tried to put in a static route and this still does not work..

I have the ip on the switch as a totally differnt subnet .14 vs my .11 main private subnet.. as not to conflict and confuse the switch as the only way to really reach my .11 private subnet needs to be through the wan in on the ax11000 pro router.

Question is how can i add a static route .. right now the merlin router cannot even ping the .14 subnet/switch.. i can see it with arpping so set is up on the correct ip, but i need it reacheable preferably from the ax11000pro,
and then through one of my local pcs if i put nic on that alternative .14 subnet for maintenance..

I don't want to give it a true public ip which will work and have it on the wider internet.

thanks in advance..
anytime i try a static route ie 192.168.14.0 mask 255.255.255.0 x.x.x.x (where this is either the wan ip of the ax11000 oir the next hop up) it ignores my route.

 

[lgkahn]

i would have thought this would work but it doesnt
route add -net 192.168.14.0 netmask 255.255.255.0 gw 173.14.x.x


ie


/tmp/home/xxxx# arping 192.168.14.1
ARPING to 192.168.14.1 from 173.14.182.124 via eth0
Unicast reply from 192.168.14.1 [78:2d:7e:23:a0:05] 1.280ms
Unicast reply from 192.168.14.1 [78:2d:7e:23:a0:05] 2.721ms
^CSent 2 probe(s) (1 broadcast(s))
Received 2 reply (0 request(s), 0 broadcast(s))

admin@portal:/tmp/home/root# ping 192.168.14.1
PING 192.168.14.1 (192.168.14.1): 56 data bytes

 

[lgkahn]

as i remember private ips are not routable through public ip space. so i believe this will not work.. maybe only solution is leave a pc plugged into a port i set as isolated on the switch. and have the pc have an additional .14 ip address