I have a customer who is trying to conserve their public IP addresses. The VPN 3005 is behind a failover PIX firewall in a DMZ zone, and I originally tried using static NAT on the PIX for the public IP of the 3005. However none of the LAN-to-LAN tunn...