Port forwarding on IPSEC tunnel

[sangomab]

Hello There  8)

so here is my infra
I need to allow a remote site de ping in my side, but locally i only have an openvpn server configured.
My idea was to NAT one IP in the openVPN to the local interface of the firewall, like that i have something to answer the pings.

So i did configure a port forwarding on my IPSEC interface to redirect the traffic to the local interface : this part works

the NAT working but all the icmp reply are forwarded toward the OUTSIDE interface not the IPSEC tunnel.



I pass the last few days at playing with nat to make it works, but i didn't get any result.

I attached a small schema in this message
I need help :=

thanks