So two way SNAT/DNAT is nastier than using a public IP block that you don't own? Pretty bad practice if you ask me. At the very most you should use a block that

So two way SNAT/DNAT is nastier than using a public IP block that you don't own? Pretty bad practice if you ask me. At the very most you should use a block that you own. Also I've never had any issues setting up IPSEC VPNs or Tunnels with two way NAT, if you have your configuration setup correctly.