it depends...more restrictive cgnat requires a rel...
# client
j
it depends...more restrictive cgnat requires a relay