Add public access to one resource on Azure private AKS cluster

On Azure I have 2 vnet's (with peerings):

1. On first I have public LoadBalancer
2. On second - private AKS cluster with deployments and Nginx Ingress installed. From first vnet Ingress is accessible by private IP and private DNS name

I need to configure LoadBalancer to access Ingress from Internet. Tried to configure LoadBalancer inbound/NAT rules (Public IP -> Ingress IP inside second vnet), but it's still not visible

1. Is it possible when resources are in different vnet's?
2. Can it be configured only on LoadBalancer? Or I need to have additional route table/privatelinks between vnet's?