WR 21 or 31 VPN with overlapping subnets

Digi TransPort WR (Series)
, , ,
1

Newbie here and production has 2 WR21 respective at each site running SW 8.0.0 and there is overlapping subnet 192.168.2.X/24 at each site. The internet side is on cellular. Will the WR work with overlapping subnets? If so, read below…

I have a lab with2 WR21 - one with Enterprise Lic while the other is Basic Lic so can practice VPN on one side which I know is not a true practice. Anyways, my assumption is
1st setup Source NAT (SNAT) and Destination NAT (DNAT). I’m guessing a Static route for the DNAT
2nd setup IPSec VPN <–which I don’t have equipment to do but hopefully will find another device in lieu

I want to practice labbing out the SNAT/DNAT but only see check box under interface “Enable NAT on this interface” I am running 8.5.X on my lab - is there a way to do SNAT/DNAT? If so, how?

2

An update in hopes someone can give some feedback:

I now have 2 WR21 with Enterprise Lic so can do VPN. Also found on PDF page 767 that I can do subnet NATing meaning the address bits not covered by the subnet mask are taken from the original IP address. Since I have overlapping subnet 192.168.2.0/24 on both sites, my FW configs will look like this but unfortunately it still not working.

Rtr 1
pass out break end from any to 192.168.20.0/24 → to 192.168.2.0/24
Rtr 2
pass out break end from any to 192.168.23.0/24 → to 192.168.2.0/24