Forward TCP port 1723 on the NAT router to the VPN server's IP address.