I have a 3005 with NAT-T enabled the only way a client can connect is when IP Passthru is enabled on the dsl router giving the local workstation the ip address of the router...when they have a NAT address they can no longer connect. ports opened on the remote router at udp 10000, 4500, 500 ip 50, ip 51 the 3005 sees the remote client trying to attach but not working. the 192.168.x.x is not used on the remote side so that is not the problem. The message on the 3005 indicates the group name etc trying to log in but then nothing more