IPSec VPN tunnel question, Proxy-ID and peer IP same?

[MichaelSmith2]

I am creating a static routing IPSec VPN tunnel with a 3rd party.  The 3rd party wishes to NAT their hosts to their peer IP, which means the remote peer IP will be the same as the proxy-ID IP.  How do I support this?

[Thyrion]

are you able to not use proxy-IDs (does the remote support route-based vpn or do they only do policy based vpn?)

if you are able to not use proxy-ID, NAT inside the tunnel should work if you delimit the source/destination zones and networks in the NAT policy

[SDart]

Was this ever figured out... I'm in a similar circumstance.

[OtakarKlier]

Hello,

The proxy ID's are only for the networks behind the firewall not the IP of the firewall itself. 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClE6CAK

Hope this helps.