Each EXT client has an IP of the network's subnet so Id like the external clients not to be NATed. Its better if each ext-client can be identified by their IP....