Hey,
i have the following setup on my private mikrotik routers
Internet --- Modem/Router (ISP) --- Mikrotik Router 1 --- Clients <-- all on 10.1.0.0/24
| (VPN)
Mikrotik Router 2
|
Clients on 10.0.0.0/24
I want to be able to reach the internet as well as the clients on 10.0.0.0 from 10.1.0.0.
My main problem is, that i cannot really configure anything on the ISP router as i have no rights. Otherwise i would switch it into bridging mode and the problem would be solved.
So I currently have both routers (ISP and Mikrotik 1) on the same network to avoid double nat, which results in problems as i can have only 1 gateway. The current gateway is the ISP router, which discards packets for 10.0.0.0. So i would need static routes on all clients. I have tried already with pushing routes via dhcp but not all devices accept those.
If i change the gateway to the Mikrotik 1, I get ICMP redirects for packets targeted at the internet as the ISP router is on the same network.
Is there an elegant way in solving this problem, without double nat or static routes on all clients?
I have thought about modifying the ethernet header, in the following way:
All packets form 10.1.0.0 go through Mikrotik 1, but if they are directed at 10.0.0.0 the destination MAC is changed from ISP router to Mikrotik 1. In that way it should behave the same way, as if clients directly addressed the packet on L2 for Mikrotik 1. Which would be equal to a static route but transparent for clients.
Is this possible? I already tried with bridge NAT but couldn’t get it working. The packets got discarded on the Mikrotik.
Thanks.