Or seperate the end system identifer from the routing goop. This
solves lots of problems (while introducing others).
even if you do this the end system identifier needs to be globally
scoped, and you need to be able to use the end system identifier
from anywhere in the net, as a means to reach that end system.
otherwise you're in about the same shape as with a NATted network.
Keith