Wounder if both of you understand each other. I have no issue with my setup, Router (vpn server ikev2/ipsec) -> nat device. So I don't think is vpn server is "behind nat" it's infront. Unless It's...