SNAT in IPsec-Tunnel

Question

Hello together, 
 
 is it possible to implement a SNAT into an existing ipsec-tunnel (site-to-site). Example: 
 
 local Network 
 192.168.1.0/24 
 here i want to implement the following network: 192.168.2.0/24, but i do not wanna change the config of the SA&acute;s. 
 remote Network 
 172.20.1.0/24 
 
 Is that possible?

sachingurung · Answer

Hi, 
 You need to change the IPSec policy on either end. You can define a NAT while configuring an IPSec policy, in Local Subnet | select NAT local LAN | NATed LAN. 
 Thanks