I'm trying to find a defiitive answer as to whether I can use the BM 3.8 VPN
without static NAT. Both sites have only a single IP address and are using
third-party routers to provide dynamic NAT. I can configure port forwarding,
but not full static NAT.

The BM docs seem to assume the BM is also my router, which is not common in
most cases I've seen BM being used. I've checked a bunch of app notes but
have yet to find an explanation for this scenario (or I was too dense to
recognize it).

So, my questions are:

1. Can I have the BM3.8 servers behind dynamic NAT with port forwarding for
the VPN packets?
2. Anyone know what those ports/packet types would be? Standard IPSec ports?