I don't have a PAP2T, unfortunately (am I the last person to not have a spare one?)

I have flashed DD-WRT, opened up the required ports, turned off SIP ALG, and turned on IPSec Pasthrough. Let's see if that makes any difference...