FusionHub nat One to One into Speedfusion

HI

i have 2 Balance 305 in HA, with a speedfusion tunnel to a FusionHub in a datacenter,
i need create a nat one to one IP for acces without restriction on customer firewall below the Balance.
for outgoing trafic is ok, all trafic send in the speedfusion
but for inbound trafic how i can dedicated a public IP from FusionHub to delivered in the firewall on Customer site ?
thanks in advance for your help.
see diagram.

Regards
Frederic

You would just use port forwarding on the FusionHub with a target set of the remote Firewall IP on the LAN of the B305(s).