I am new to Cisco and have a simple but difficult problem for me.

I have a basic VPN between two clients:

192.168.1.1 and 192.168.2.1

I needed to do port forwarding for port 5401 for 192.168.1.1. At the application layer I can access the public IP address for the PC at 192.168.1.1 with port 5401 with no problems. However, I can no longer access 5401 inside the VPN from 192.168.2.1.

After doing some reading I discovered that the problem may have to do with NAT ordering. However, I don't know how to resolve the issue.

I am using a 871 router.

Thanks!