What is required to support policy-based NAT when using route-based VPNs?

What is required to support policy-based NAT when using route-based VPNs?

A.
Tunnel interface

B.
Tunnel interface must have an IP address.

C.
Tunnel interface must have an unnumbered IP.

D.
Tunnel interface must have an unnumbered IP address.