Giving an internal device an "external" IP address and making it accessible to external devices

EDIT - Attached diagram of the setup I am trying to get working as per anav’s suggestion:. https://imgur.com/a/SFkKCGu

Hi all,

Hoping for some help regarding something that’s perhaps quite simple to set up but I can’t seem to get my head around how it works in Mikrotik.

I have a situation where there is a device in a standalone location with a generic IP (192.168.1.122).
I’d like to make this accessible to a server in a bigger network in a different IP range (192.168.8.x), without actually exposing the original IP address to the rest of the network. I am unable to change network settings of the standalone device.

I’m currently using a Mikrotik hAP AC2 router with NAT settings to try and give the standalone device an “external” IP address. So the idea is that 192.168.1.122 is converted into an address on the other network (e.g. converted into 192.168.8.122). I’d then like to have it so that this new address (.8.122) is pingable / accessible by all devices on the 192.168.8.x network.

The internal device (192.168.1.122) does not need to access anything on the external network by itself. But I’d like a server to be able to initiate a connection to it from the external (192.168.8.x) network.

I’ve tried using src-nat / dst-nat and also netmap but so far not having much luck. I found some guides online but they have not been able to achieve the functionality I’m trying to get.

To test the setup, I’ve simply got 2 laptops (one set to 192.168.8.216 to act as the “Server”, and the other set to 192.168.1.122 to act as the standalone device), with the router positioned between them.

I’ve had a similar setup running previously on another network, but this was using Hirschmann hardware so I’m new to the world of Mikrotik.

I don’t have much of a config worth uploading - At this point I’d like to start from scratch to remove any nonsense entries I might be dealing with.

If someone is able to point me in the right direction then that’d be very much appreciated.

Many Thanks.

Try providing a detailed network diagram to attack more comments.

Looks like you are just trying to make a 1:1 map across the tik
https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT#Destination_NAT

I am going to assume the networks are /24 as you have not specified

/ip firewall nat add chain=dstnat dst-address=192.168.1.121/24 action=netmap to-addresses=192.168.8.144/24
/ip firewall nat add chain=srcnat src-address=192.168.8.144/24 action=netmap to-addresses=192.168.1.121/24