Bob is absolutely right, static NAT will work and my error might well have been assuming that Sebastian's original request implied a random internal host. If it's a fixed host and you have an external address to can use for static NAT then IPSec will work.
-- Bill Stackpole, CISSP
