3 ms·

I did it few weeks ago - Windows still doesn't like having either IPSec endpoint behind NAT by default.