You should always keep the NAT and VPN on separate machines.
Before configuring the VPN services on the Novell BorderManager 3.8 machine, ensure that Static NAT is working.
Configure the VPN services on the Novell BorderManager 3.8 machine with the public IP address on which the VPN service is to run.
After configuring the Static NAT, ensure the traffic from the NAT to the VPN server is flowing properly.