IPSec using AH cannot be NATed because it will fail the auth check on the packet headers.

If you can't hit your hosts, you more than likely have a routing problem or a protocol issue with your VPN setup within the router. These are the more common issues with SOHO router VPN tunnels.

Happy Trails.

--TH13