Beginner question - NVR access to the network ISP

RouterOS Beginner Basics
1

Hello from almost homemaker with mikrotik and lure much experience.
The situation is as follows.
How can I have access from My Computer trought MIKROTIK to NVR IP 10.10.10.5 / NVR’s no internet access, and only inside LAN network supplier /.
What is necessary to access NVR - route rule, firewall rule, NAT ?

I attach scheme .

Thanks.

2

any ideas ?

3

A static route on your mikrotik to the 10.10.10.0/x subnet and a static route on remote router to the 192.168.1.0/x network if they are connected. if this connection is through the internet then NAT rules need to be in place.

4

Just be sure that the interface where your NVR is connected also have an IP addres in the same network as the NVR, like 10.10.10.1/24 (considering the NVR is also /24 or 255.255.255.0). If you have it, then you already should be able to reach your NVR from any LAN computer, considering your mikrotik device is the gateway for your PC.

5

If I understand correctly, the NVR is connected directly to a LAN port on your ISP’s device, or you have a “hub” switch between the ISP modem and your Mikrotik’s WAN interface.

I also assume that the NVR’s gateway is the ISP’s device and not your Mikrotik…

If this is all true, then basically, you will want to do this:

1 - Add an IP address like 10.10.10.X/24 to the physical WAN interface (if your WAN is pppoe-client on ether1, for instance, then the new IP address would be on interface ether1 - or if your WAN public IP comes from dhcp-client, then whatever interace is dhcp-client, add the 10.10.10.x/24 address to the same interface)

2 - Create a NAT rule that will src-nat src-address=192.168.1.0/24 dst-address=10.10.10.5 to-addresses=10.10.10.X (the address you used in step 1). Be sure that this new rule comes before the srcnat going towards the Internet.

3 - If you want only your PC to have access, limit this with a filter rule. chain=forward dst-address=10.10.10.5 src-address=!192.168.1.20 action=drop

This should give the access you want. If NVR is connected directly to the Mikrotik then the configuration would be different than this. It’s similar to how I’ve granted myself DOCSYS access to my cablemodem through my router.

6

Thank you very mach.