hello, I'd like to use a ER605 in a remote site to terminate a site-2-site ipsec VPN. is it possible to install a ER605 in one-leg configuration and to do source ip nat on the internal network ip addr