I tried simplifying the problem statement, it appears to be counter productive. So here is the full story. I have a server (A) behind NAT, in a country that blocks a lot of websites and performs DPI.
I am setting up ipv6 on a 2911 router running c2900-universalk9-mz.SPA.151-4.M.bin with a data license. Right now, until our provider gets their butt in gear, we're just tunneling through HE on an ...