Have a somewhat niche case scenario where I'm assisting an amateur radio club deploy nodes across a geographic region. Some nodes are with traditional ISP and have public ISPs, others are with Cellular Hotspots and are really only manageable via SSTP or ZeroTier network. Currently have a hub and spoke design with a CHR in Vultr, and trying to port forward from CHR to remote locations. All devices routers and networks have successfully been able to talk to each other. I can ping from Subnet A to Subnet C over VPN etc. However when I place a DSTNAT rule for port 81, and forward to Subnet C IP Port 81, the traffic goes but the web page doesn't load.
To test this, I built the rules to watch the traffic, CHR is port forwarding to Router B's Internal IP, Router B is Port Forwarding to Node. I can see the traffic go up, but no response.
I have a similar network topology at my home, and thinking maybe my friend's node was just busted, I tried this with the NVR and it still didn't work. Traffic and counter increment up, but web page won't load.
The prevailing theory is I need a SRCNAT because the traffic is entering CHR and returning Cellular, but figured I'd ask here to see if anyone else had done something similar to this?