Alien NAT in your network

Question

Cisco

Good day!

Question to experienced system administrators, networkers.
There are three networks. Net1, Net2, Net3.

image (better quality)
The task is to see the Net3 network server from Net1 and vice versa.
In Net2 from Net3, pc2 and pc3 are published using NAT.
From the test PC test servers pc2 (172.16.0.10) and pc3 (172.16.0.14) work i.e. packets pass inside the Net2 network.
The router is visible from the Net1 network, the test PC is visible, but pc2 and pc3 are not available.
If PC pc1 is published to the Net2 network via NAT (for example, with ip 172.16.0.4), then naturally pc1 will see pc2 and pc3.
The cisco piece of iron serves as a router (there is also 1841, there is also 881).

Dear system administrators and networkers!
Tell me, give me an idea, what can be done terrible , so that pc2 and pc3 can be seen from the Net1 network!

If there is even a guess and you don’t want to publish it, please write in a personal.

Answer 1

What is registered by the gateway at computers in Net2? And offhand I think that the connection from Net1 to pc in Net3 will appear if NAT is also raised on the subordinate router.

Answer 2

Do you have Net1 and Net2 routed among themselves?
If yes, then any computer from Net1 should see the addresses 172.16.0.10 and 172.16.0.14.
When packets from Net1 arrive at NAT, they will have source 192.168.0.240.
Accordingly, pc2 and pc3 (192.168.33.1 and 192.168.33.2) must know about the existence of the network 192.168.0.0/24. Otherwise, the default should correspond to the orange wall :)
Also, packets leaving Net1 to Net3 should not go through NAT on the router between Net1 and Net2.
The schematic lacks the addressing of edge devices and the method of network interaction.
Write me a personal mail, if it's still relevant, I'll help you deal with your network.

Answer 3

-> The cisco piece of iron serves as a router (there is also 1841, there is also 881).
IPSec tunnel.