Trying to combine IPSEC, dynamic NAT, & static NAT on a Cisco router? Check out Cisco's article on how to do it first. If that doesn't work and you're ready to drop kick the router out of the datacenter like I was, put away your black belt for a few minutes, and read about how I worked around a couple of bugs.