config ipsec_config setup option nat_traversal yes