[Karlnet] IPSEC VPN Support

["Andrew Johnston" <andrew@inhb.co.nz>]

I have a client who want to use Outbouind NAT, no problem with that part.
Same client want to have a IPSEC VPN server on their private side network.

IPSEC Outbound works 100% with the passthru

If I enable Incoming NAT with a wildcard pointing to their Firewall, all is
Okay

EXCEPT:  I loose the ability to PING and SNMP manage the SR4200 (RG1000)
with the configurator.

Routed with the allocation of small public /30 subnet is not desirable as it
wastes IP's

Anybody know a way around this ?