Later I’ll post the changes to the rules, but ….sorry for the maybe stupid question.. why you can’t reach directly the remote networks via a couple of simple static routes ( since are different networks..) and you want instead use the NAT ?
Regards