well i hope to be clear with my problem since english is not my native language.
i have two vpns, one against oracle and another with a client.
Actually oracle needs to access to a resource what is living in the vpn checkpoint-client.
Since oracle will never reach the client because the dst ip its trying to reach lives in the other vpn is i was thinking someway i could nat the traffic from oracle to my client.
For example oracle needs to reach ip 192.168.220.240 (this one live in the client side) so what im doing is this:
Source: 132.240.149.31
Dst IP: 192.168.1.35 (ip from the dmz who is part from the vpn communities between oracle-checkpoint)
NAT SOURCE: 132.240.149.31 -> 10.23.4.240 this IP is part from the vpn communities between checkpoint-client
NAT DST IP: 192.168.1.35 -> 192.168.220.240 this is the real resource we need to reach.
But even after this nat we cant reach the dst ip, so... anyone has ever done something similar im looking for some tips and tricks.
Im going share a image where you can see the topology i think with that this could be a little more clear.