Hello,
I am new to the Mikrotik world, but so far i am pretty amazed from the stability and reliability of those routers !
However, the "Quick Setup" and some YouTube videos did the trick so far , but not any more
I kindly ask for advice for the following setup:

On one side there is Hap AC² with a real static IP over copper line, lets say 189.189.189.189, DHCP server spitting 192.168.70.xx leases , and some NAT rules for
home cameras port forwarding, also acting as VPN server.
On the other side there is Hap AC³ with LTE connectivity- dynamic ip , DHCP server giving 192.168.60.xx leases , and two static IP cameras connected to it , set as
a VPN client to the Hap AC² .
I dont know how to "see" the two cameras on the Hap AC³ side forwardet to the static IP of the Hap AC², i have tried some NAT rules on both sides , but no success at all,
no ping, no port forwarding, nothing ... ony the vpn connects OK, and then i dont know how to make it work , so i be able to access the Hap AC³ remote cameras through the static IP
of the Hap AC² .
Maybe it is silly and simple question , but i could not solve it by myself , so i kindly ask for advice how to do it.
Thank You in advance for Your help , i would greatly appreciate it !
Svetlin

If I understand correctly, you want to (externally) connect to Cameras behind the HAP AC2 through the static IP of Hap AC3 via VPN ?
Thats possible.
First of all you would need to have routing from 192.168.70.xx -> 192.168.60.xx working through the vpn tunnel.
When that works (connecting from 192.168.70.1 -> 192.168.60.xx (camera) you port forward 189.189.189.189:XXXX to 192.168.60.xx:XXXX and everything should work.

A better way would be to do dynamic DNS on the LTE router with dynamic IP (if it has a dynamic PUBLIC ip) and then just connect directly to this.

Hello, thanks for the reply !

"If I understand correctly, you want to (externally) connect to Cameras behind the HAP AC2 through the static IP of Hap AC3 via VPN "
It is in reverse order - Hap AC2 is the one with static ip , HAP AC3 is LTE connected ... and unfortunately not with a public IP ... so i
guess dynamic DNS is not an option .

Strange thing is that routing from 192.168.70.xx -> 192.168.60.xx working through the vpn tunnel , is NOT working unless i set static routing
in opposite direction also 192.168.70.xx <- 192.168.60.xx , then it works , one way routing is not working , i dont know why ... and if that is normal

Port forrwarding is working but not through the REAL STATIC IP , only in local HAP AC2 network ...

Yea, you always need working routes both ways - without it the recipient doesn't know where to send their answer to.

If you already have port forwarding working locally, i would suggest checking firewall (forward rules). A good way to identify problems is to use the logging feature on the firewall rules.
For example you can add a temporary forward accept rule with logging a see that traffic actually goes through.

for the port forwarding, I'm guessing you are to reach 1 or more camera on the same "port"?
If so, remember you need to use different ports for each camera in the forwarding rule.
If your cameras is using port 554, your forwarding rules needs to be something like
189.189.189.189:554 -> camera1IP:554
189.189.189.189:555 -> camera2IP:554
189.189.189.189:556 -> camera3IP:554
and so on.