I have a bit odd setup: imagine LAN with two routers (Mikrotiks, ROS is the latest current), each connected to its own ISP (so WAN IPs of course different). LAN is the same network, only IPs on routers are different:
ether1 (WAN): 220.127.116.11/24
bridge1 (LAN): 192.168.88.1/24
ether1 (WAN): 18.104.22.168/24
bridge1 (LAN): 192.168.88.2/24
I have several hosts on the LAN that uses internet, let's say two hosts:
GW: 192.168.88.1 (=Router 1)
GW: 192.168.88.2 (=Router 2)
So Host 1 uses internet via Router 1, and host 2 uses internet via router 2.
Now I try to do dst-nat to allow say packet to 22222/tcp порт он router 1 to reach 22 port on host 1. I do that on Router 1 and it works. But as I try to set the same on router 2, I got no return packets.
The packet flow is simple, host 1 send its reply packets to router 1 (not to router 2 where it expected to be).
So the question is, how can I mark packets that's enter via router 2 so router 1 will know it should be forwarded to router 2? Connection marks are just inside single router, and no flags I can else use, so please help!