Static Nat and VPN Issue

Hello,

I setup an 1800 router at a client's site. I've configured a remote- access VPN for both remote administration and for hotel employees to do remote work. Our company also likes to forward port 3389 on the public IP to a the client's private Win2k3 server IP for remote administration in case we're having problems with the VPN.

However, when I add the static NAT translation for 3389, problems occur. When port forwarding is enforced, I can only connect to the Win2k3 server if the VPN is disconnected. If the remote-access VPN is enabled, I cannot access the Win2k3 server by the public IP or the private IP.

Any suggestions?

Thanks, KB