[Newbie?] WAN with virtual network passed through to LAN

[tomtom2770]

Hey everyone,

I want to set up a rather specific and uncommon (form my experience) network topology within another network with my OPNsense box. Let us call the network - which I have NO control over - "Network 1" and my new subnetwork "Network 2".

Network 1 (no control over it): 10.1.1.0/24
Virtual Network running on Network 1: 10.10.25.0/24
Network 2 (Created by my box): 192.168.1.0/24

I need to have internet access for clients in Network 2 and connect them to the same virtual network (not VLAN or VXLAN) used by machines in Network 1.

The first part is rather straightforward and already working. I configured the WAN port of my box to get an IP address via DHCP and bridged it to LAN1. Now all clients I connect to LAN1 have internet access which is supplied by Network 1.

The second part creates troubles for me. There is a virtual network configured on the machines in "Network 1" which I also want to configure on my machines in "Network 2" and enable them to communicate via the 10.10.25.0/24 range.

I have been looking into NATing and briding the connections, but this is beyond my current understanding of networks. Any help and pointers are appreciated!

Thanks in advance! 

EDIT 1: The option to block private networks on my WAN and LAN1 is disabled.

[mihak]

help us with a picture; what is your chain of traffic? WAN - Net1 - Virtual - Net2? Is Net2 connected to the same router as WAN and Net1? A picture with networks, devices, and connections would help tons.

[tomtom2770]

That's a good point! here is a simple sketch of the network topology and its IP ranges.

I am not quite sure how to visualize the virtual network which is configured as a MACVLAN Interfaces on the client machines and not on the routers itself.  That's why I added it into the text field below "Machine A/B".

I hope it clarifies what I tried to describe originally.