Alllow one host to connet to others Zones

[ignis-draco]

Hi,
I am new to OpenWRT and have built up my network so far, but I am stuck on one question.

First of all:
I use the Pi4 as a router behind the ISP router. (See picture)

How can a host from the manag zone be allowed to reach hosts in other zones?
I know I could share the whole zone but I would prefer to only allow hosts that absolutely need it.
Can I do this via the traffic rules?
Unfortunately, I'm not that knowledgeable about iptables rules.

Thank you in advance for your help.
Arne

[vgaetera]

uci add firewall rule
uci set firewall.@rule[-1].name="Allow-Manag-Forward"
uci set firewall.@rule[-1].src="Manag"
uci set firewall.@rule[-1].src_mac="00:11:22:33:44:55"
uci set firewall.@rule[-1].dest="*"
uci set firewall.@rule[-1].proto="all"
uci set firewall.@rule[-1].target="ACCEPT"
uci commit firewall
/etc/init.d/firewall restart

[ignis-draco]

Thanks for the help.