From: stephen@dino.dnsalias.com   
      
   AM  writes:   
   > Does NAT-T needed when remote vpnpoint is behind a device doing NAT or   
   > it is needed only if the device is not IPsec passthrough?   
      
   If you only have one user behind the NAT box using IPsec and the NAT   
   box supports IPsec passthrough then you don't need NAT-T, though you   
   may prefer to use it depending on the quality of the IPsec passthrough   
   support in the NAT box.   
      
   If you have multiple users behind the same NAT box all wanting to use   
   IPsec then most (all?) NAT IPsec passthrough implementations will   
   result in one or more of the IPsec connections failing unless the   
   client turns on NAT-T.   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)