The LAN-side of the Teleworker router is assigned private IP address space (RFC1918), and the VPN topology is IPSec-only (no GRE protocol). When is it required to configure NAT/pNAT on the Teleworker router?（）

• A、when all access to the Internet is through the IPSec tunnel
• B、when there is direct Internet access via split-tunneling
• C、when there is no Internet access configured through the Teleworker router
• D、whenever you have IOS-Firewall (CBAC) configured