Can P334w behave as a NAT router supporting IPSec passthrough and an IPSec gateway simultaneously ?
No, current P334w can’t support them simultaneously. You need to choose either one. If P334w is to support IPSec passthrough, you have to disable the VPN function on P334w. To disable it, you can either deactivate each VPN rule or issue a CI command, “ipsec switch off” from SMT menu 24.8. You can get into SMT menu via either telnet or console connection. P334w may support both of them in the future, please refer to the release note.