IPSEC 1:1 NAT

[Guest]

[Sven Rombouts]

Hello,

I want to setup 2 edian firewall last version to make a VPN tunnel with a virtual IP on both site's.
For example

VPN ----------------------------------------------- VPN
172.16.1.0 (LOCAL)                       172.16.2.0 (LOCAL)
172.16.2.0 (REMOTE)                    172.16.1.0 (REMOTE)

there is no problem wen I used the GREEN SIDE LOCAL / REMOTE Subnet.

But I like to make 1:1 NAT in the VPN tunnel between the GREEN SIDE and the PURPLE (VPN) SIDE.

I try to do this with SNAT and DNAT, I can`t figure it out how I must do this ? (because I can`t choose IPSEC network), or must I just put in the IPSEC subnet's.

Please can someone help with this ?

Thanks,
Sven