Years ago when I set up something similar I used port forwarding, but I only had one router and it was connected directly to the Internet and wasn't running VPN software on the router. I read elsewhere on this forum that port forwarding isn't very secure, so figured I'd ask for pointers in case...