Trying to route an IPsec to another IPsec

[Sno]

Hello everyone,

I have a small issue and I need your help. I have to connect some Azure VMs to a client network. But we cannot connect them directly because that does not comply with our security standards, and so I am trying to create a setup in which the routing passes our office Pfsense.
Unfortunately, I find it difficult to find any documentation or additional information on how to set this up.
Does anyone have experience with routing traffic from and IPsec VPN (Azure test - our office) to another one (our office - client-network) ?

Thanks in advance, any help would mean a lot to me.

[Zawi]

if p1 is up, you need to create p2 to match the traffic for example

Azure subnet<> client network