Access from the global network to the local?

Question

Computer networks

Hello! At work, there is a local network of the form 10.0.0.0 (like /16, but in general xs), in one of the cabinets there is a Huawei HG8245H that has a static ip 10.0.0.5 and its own internal network 192.168.100.0/24 from several devices.
The question has already been discussed in any way more than one million times, but I don’t really understand how to set it up on this particular thing. Please do not throw stones and help)
The essence of the question is how to access computers with the address 192.168.100.34, 100.35, 100, 40 from a computer with the address 10.0.0.6? Port forwarding doesn't work. Ideally, if you type ping 192.168.100.x on 10.0.0.6, packets from that same computer will go). I understand that you need something like a VPN, plus what additional routes to 10.0.0.6? Tell me how to solve.

Answer 1

Huawei HG8245H

Wangyu that this non-named piece of Chinese shit, in principle, does not support the VPN server. And therefore, there is no way to implement what you want. Well, or install crutches like OpenWRT on the router. And Mikrotik 10.0.0.1 will not help here at all (unless you raise a VPN server on it and connect all computers that need access to this VPN server - but then why bother with a second NAT?).
And what about the option to put Zerotier on all computers that need to be combined?
By the way, the same Zerotier can be used for the task you set, provided it is possible to install ZT on one of the computers on the 192.168 network, and use it to build an L2 bridge over ZT, but here you have to resolve it by trial and error, there is no ready-made guide for Windows (is on Linux ), but in theory there should be nothing complicated.
In general, it’s not very clear why you need a second NAT and an internal network, wouldn’t it be better not to fence such a garden and take all addresses from 10.0.0.1? Then you wouldn't have to bother.

Answer 2

here you need something like VPN plus what additional routes to 10.0.0.6?

That's right - routing between networks plus (if needed) some kind of access from the outside, such as a VPN. Take and smoke manuals, of which the Internet is full.