Have been asked to setup a solution where we can access a remote office network via mobile devices which are handed off to us as a L2TP tunnel. The snag is I do not have any control over the router at the remote office. I have setup a RB3011 to terminate the L2TP feed and this is working ok. Next step is to connect ‘Site A’ with ‘Site B’ so the mobile devices can access the LAN 172.16.0.0/24 at ‘Site B’.

Due to ‘Site B’ being behind a NAT device which I am unable to do any configuration on I am thinking that either an IPSEC with remote end using ID to auth rather than IP or possible an SSTP tunnel. It does need to be encrypted whatever I choose.
Does anyone had any feedback on which protocol would be suited to try and solve this?
Thanks