NAT-T
RFC 3715: IPsec-Network Address Translation (NAT) Compatibility Requirements
RFC 3947: Negotiation of NAT-Traversal in IKE
RFC 3948: UDP Encapsulation of IPsec ESP Packets
↑ http://support.microsoft.com/kb/818043/en-us