Hello,

I have a problem sending an IP from the subnet outgoing.

1. MT1 is the main Router in the RZ, there is a Subnet routet to an IP, which is on it. That works fine. ( subnet 10.2.3.0/29 ).
2. MT2 is the client Router, connect over the Internet PPPoE to the MT1 and get 1 IP Address ( ip 10.1.1.1/32 ).

On MT2 I have add on an Ethernet interface the gateway IP Address 10.2.3.1
One client connect to the Ethernet Interface with the IP 10.2.3.2 and the Gateway and DNS 10.2.3.1.
The client can go to the Internet, but the outgoing IP is not the 10.2.3.2. It is the 10.1.1.1.

On the MT1 I have create a route, that the subnet 10.2.3.0/29 is on 10.1.1.1.
But what is the right way back to the MT1 ?
On the MT2 is 0.0.0.0/0 to the PPPoE Interface.

I hope someone understand my Question and sorry for the bad english.

i think that VPN protocol is the best way to access to one device through another device wihch is connected to the internet...

It is over L2TP. The MT1 is the router, that brake out to the Internet, not the MT2.

I've seen a similar problem as well, where traffic on a site-to-site L2TP was NAT'ted because a masquerade rule.

Add a rule under /ip firewall nat. In the src-nat chain. Traffic from your router going towards the L2TP-tunnel interface with action accept and place it at the top of the NAT-rules.