The Vigor3300 supports VPN pass through.

 

The VPN server will need to use ESP for IPSEC VPN security method.

The NAT mechanism in the Vigor3300 supports NAT-T when ESP is used.

The AH security method does not support NAT-T