The next experiment is probably having the NAT to take place in the Cisco routers and no longer depends on the Linksys or any other devices. In other words, the Cisco routers terminate IPSec VPN and GRE tunnels, and NAT traffic to go through the tunnels