Hello!
I have a 192.168.0.0/24 local area network with PLCs and other IP devices. Let's call this a standalone production line in a factory.
This network is behind a Mikrotik router (RB4011iGS).
The WAN port of the router is also connected to a local network (10.0.0.0/24) where the whole segment is obtained.
In this segment (10.0.0.0/24) there are several similar networks (production lines) behind Mikrotik routers.
The goal would be to reach some PLCs on TCP 102 port from each production line with IP address 10.0.0.X/24.
So the idea is as follows:
The ether1 port of the 1st Mikrotik is the WAN, this has multiple IP addresses:
10.0.0.1
10.0.0.2
10.0.0.3
These would reach the following internal network PLCs:
192.168.0.10
192.168.0.20
192.168.0.30
The port ether1 on 2nd Microtik is the WAN, it has multiple IP addresses:
10.0.0.101
10.0.0.102
10.0.0.103
These would reach the following internal network PLCs:
192.168.0.10
192.168.0.20
192.168.0.30
I have tried dst-nat / src-nat pairs, incoming packets are delivered but not replies.
Unfortunately VPN is not possible.
Please help me with this! Thanks in advance!