NAT before ipsec vpn

Really! Per usual all good stuff.