Routing/NAT between networks

Hello,

I’m trying to figure out on how to solve the below issue:

Network A (192.168.0.0/24) → VPN → Network B (10.2.0.0/24) → VPN → Network C (10.3.3.0/24)
Network A accepts connections only from Network B
I have full control on Network B and C. I want to be able to access Network A from Network C.

So far I’ve added this rule on network C but it does not work: ip firewall nat add action=src-nat chain=srcnat dst-address=192.168.0.0/24 action=src-nat to-addresses=10.2.0.1
Any help on how to make it work?

You want masquerade and you’ll want it above any other rule that the traffic may hit.

Could you please be more specific? How will the masquerade know to masquerade as network B?

You need to post more detailed info about used IP addresses and where exactly they are.

Your srcnat rule looks correct, but if you added it to router in network C, it assumes that its VPN interface is connected as part of network B and has IP address 10.2.0.1. If not, it needs to be either changed or moved to network B router. But if you want more specific answer, we need more details first.