Dst-NAT - System reachable on two IPs - PacketLoss

Hi!

I am totally confused in my setup and hope, you can give me a hint:

RB1100AHx4 with v6.46.1

  • Computer1 on eth1 with IP 10.10.10.100/24
  • Computer2 on eth1 with IP 10.10.20.100/24
  • Router has the IP .1 on both interfaces.

What I need to achive is, that Computer 2 can reach a virtual IP 192.168.99.100 and will be “redirected” to Computer 1.

/ip firewall filter add action=accept chain=forward log=yes
/ip firewall nat add action=dst-nat chain=dstnat dst-address=192.168.99.100 log=yes src-address=10.10.10.100 to-addresses=10.10.20.100

Now, Computer1 can ping the virtual IP, UNTIL I start a second ping from the router itself to the “physical” IP.
After that, I have packet-loss on both pings.

Can you give me a hint, what I did wrong?

Regards
Stril

…one additional info:

I am running a constant ping, but I only see one packet in the NAT-table-
Connection-Tracking is set to “on”
There is no fasttrack active.