Example: subnet 10.1.1.0/24 behind the MX gets natted to 192.168.5.0/24 where the fourth octect remains unchanged in the NAT translation. The hosts on the far side of the tunnel address, for example, 192.168.5.3, and the MX translates this and sends it to 10.1.1.3. Possible?