Secure guest VLAN and allow guest portal to main LAN

Hi all,

I'm struggling to allow the unifi guest portal from the guest VLAN (vlan10), 10.190.22.0/24, router on 10.190.22.1 to reach the controller on the main LAN (default vlan1), 10.190.30.0/24, router on 10.190.30.1, controller IP is 10.190.30.50. I have an EdgeRouter X. 

I followed this guide here to check what I did (so my setup is pretty similar), and so far I have internet access on the guest network but cannot reach the controller. I've also  got the guest network restricted to only openDNS.

https://blog.gruby.com/2015/07/05/setting-up-a-guest-network-with-the-edgerouter-lite/comment-page-1/

eth0 is Wan, switch0 is main lan and switch 0.10 is guest network. 

Any pointers as to firewall rules to set to allow the portal? I tried setting port rules for 8443 and 8880 but no luck.

Thanks in advance!