Traffic tunnel to tunnel

[andmattia]

Hi

I've a IPSec tunnel from my Office to Cloud and it works fine. I've create some rule to forward traffic from my office throw cloud IP address.

Now I've this configuratation that I try to reach. Make a forwoard traffic from my office throw a IPSec tunnel from Cloud pfsene and my other site also connected via IPSec.

Office -> Cloud (IPSEC) --- Cloud -> MyCustomer (IPSEC)

Cloud -> MyCustomer (IPSEC) use a nat from my cloud network 172.172.1.0 to 172.173.1.0
My office network is in 172.172.2.0
My Customer Network in 192.168.X.X

From office and cloud I add a phase 2 to move traffic from 172.172.2.0 to 192.168.X.X this phase close correctly if I click connect but If i try to ping from office pfsense not start

[viragomann]

@andmattia
You need also to add a phase 2 on the Cloud -> MyCustomer IPSEC with 172.172.2.0/24 - 192.168.X.X.

BTW: Why are you using public network ranges inside your LAN??