IPSEC NAT ISSUE

[emmanuelbista3]

Hello my dear seniors and colleagues, please i will need a little help with this topology created in gns, please note although this is a simulation but its actual the topology for a real life network waitng  to implement, therefor all public ip address will be hidden for security purposes thank you for you concerns and understanding.

###########################

Now i have aso the topology depicts, just to make it brief i have configured ipsec on router GhanaHQ and Kenya Router respectively, i will show configurations,

#########################

Challenge:

I am only able from the HeadOffice Firewall outside interface to the bracnch Kenya office FIrewall Interface, 

the condition is to be able to reach what ever network behind each firewall for easy access to files in the office.

Behind the HQ firewall i have intervlan assigned to the port facing lan.

  

  

[MHM Cisco World]

One of vpn benefits is vpn can override NATing'

So with vpn tunnel you dont need NATing.

The private subnet in both side can connect to each other over public tunnel ip.