Making the NAT translation ignore traffic destined for the VPN fixed the problem... I should have seen that. Thanks for the second set of eyes. =) ~Seth