Secondary IP routing

[deessing]

I need a scenario like this where site A FortiGate primary address is used for peer-to-peer link and then use Secondary IP as end tunnel address for site users. Will site B able to reach to Secondary IP address via Primary IP? Do I need to add any special rules here?

Site A                                                                                                                Site B

Primary IP 20.10.10.1/30  <-------------------------------------------------------------> IP 20.10.10.2/30

Secondary IP 30.10.10.1/24                                                                                    Add route to 30.10.10.1 via 20.10.10.1

Tunnel end point 30.10.10.1

[ac1]

it should work.