I've setup a small lab in this way:
manager - 10.100.10.8
GW1 - WAN 10.100.10.6 / LAN 192.168.1.1/24 / Office Mode subnet 172.16.0.0/24
GW2 - WAN 10.100.10.7 / LAN 192.168.2.1/24 / Office Mode subnet 172.16.1.0/24
First test was to setup on "RemoteAccess" both GW that are partecipating, authentication is currently done using username\password and when EndPoint client connects I see both remote network published but using Office Mode IP of GW1.
Doing a ping to 192.168.2.1 (so the LAN on secondary gateway), seems to reach that LAN (also stated by fw monitor), but i don't understand how the GW2 can routing traffic back to 172.16.0.0/24 subnet that should be used managed by GW1.
Is it a normal behaviour? I was thinking that the secondary tunnel will bring up with a different class IP.
Now the major problem is with Overlap domain. If i'm pushing from GW1 subnet 192.168.0.0/16 and from GW2 just a single host like 192.168.2.1, the client get only the 192.168.0.0/16 splitted in smaller subnets, obviously the EndPoint client reject the route "192.168.2.1/32" because there is another one that overlap.
So is it possible to do a configuration like that, or I need to remove the GW2 subnet from the GW1 encryption domain?
Thanks in advance