Question : cisco 2514 nat and vpn ?

I have been trying to config a 2514 with v 12.2(7) with nat to allow a windows host from the internet to vpn to an internal win 2000 rras server. The nat is working and the internal can access the internet but I can't get the vpn to work.  From all the reading I have found I have tried pat but not sure if it is correct but it doesn't work.  Layout is win host--internet--cable modem--2514--switch--2000 win DC.  I have changes the legit ip's but my current config is:

ip subnet-zero
ip name-server 24.25.35.64
ip name-server 24.25.35.65
!
!
!
!
interface Ethernet0
 ip address 32.32.32.210 255.255.255.252
 ip nat outside

!
interface Ethernet1
 ip address 192.168.150.1 255.255.255.0
 ip helper-address 192.168.1.200
 ip nat inside
!
interface Serial0
 no ip address
 shutdown
 no fair-queue
!
interface Serial1
 no ip address
 shutdown
!
ip default-gateway 32.32.32.209
ip nat inside source list 55 interface Ethernet0 overload
ip nat inside source static esp 192.168.150.11 interface Ethernet0
ip nat inside source static udp 192.168.150.11 500 interface Ethernet0 500
ip nat inside source static udp 32.32.32.210 500 192.168.150.11 500 extendable
ip classless
ip route 0.0.0.0 0.0.0.0 32.32.32.209
ip http server
ip pim bidir-enable    

ip pim bidir-enable
!
access-list 55 permit 192.168.150.0 0.0.0.255
access-list 55 deny   any
!
The win 2000 DC has 2 nics
VPN nic is 192.168.150.11
and 192.168.150.10 is the other
I have read a bunch on this but am missing something and am sure some of this config needs to be deleted.
Any help is greatly apreciated.

Answer : cisco 2514 nat and vpn ?

I dont know if this will help, but I have a Cisco SOHO router, and have gotten Win2k VPN to work with 2 simple rules.

First, you will have to NAT port 1723 to the Win 2k machine, and then you will have to change an access list (i use 100) to allow the GRE protocol to work through the router.

access-list 100 permit gre any host xxx.xxx.xxx.xxx  (Where xxx is the IP of the internal Win2k server)

Dont know if this will help you, but it made the VPN work for me. :-)