Lollipop router config

RouterOS General
1

Hi
I’m new member on this board and it have helped me to solve many problems with MikroTik configurations.
But now I have a small problem I couldn’t find a tip on how to solve.

I have a “normal” LAN with servers and PC:s wich works fine.
Now I want a “Lollipop” style extra Cisco VPN router (connected to MT Eth9), administrated by the VPN supplier.
All traffic from the LAN to ip 10.10.10.64/26 should route to the Cisco router that have a VPN connection to 10.10.10.64/26 address.

When I ping 10.10.10.70 from Tools menu on the MikroTik it works OK.
But from any PC in my LAN I cant ping 10.10.10.70.
When I check the MT Eth9 port its just one way traffic when I’m pinging from a PC, but both (Tx/Rx) ways when I am pinging from the MT tool.

So it seemes that the ping from a PC goes to Eth 9 and then stops …

My router:
Mikrotik 2011
config
ETH1 WAN Dhcp
ETH2-8 LAN ip 192.168.50.1/24
ETH9 Cisco router connected ip 192.168.9.1/24, No other network items connected to that port.

Static route
To Address 10.10.10.64/26 GW 192.168.9.2 source 192.168.9.1


Supplyers router (I have no access to admin)
Cisco
config
WAN ip 192 168.9.2 connected to MT port 9
That is the only connected Ptach cable on the Cisco router.

Hope someone have some tip so I can “move forward” in to the solution!

Thanks for listening /Goran

2

I have solved my problem after some considoration.

It was just a src NAT rule under Firewall

Place the rule at the “top”
General:
Chain srcnat
src 192.168.50.0/24
dst 10.10.10.64/26
Action:
Action src-nat
to 192.168.9.2

/Goran

3

The main thing is the Cisco needs to know how to get back to 192.168.50.0/24. Without that information it tries to send it out the default route. By setting up a source nat rule, you kind of get the same result since the Cisco knows that 192.168.9.1 is local to itself so it knows how to reach that address.