I need to set up a site to site vpn, but the 501 has to be in a passive mode. It can NOT iniate the vpn. Everyone I talk to says it can not be done. Well, the device is in passive with software vpn clients, why can that not apply to a site to site...