Network Address Translation Problem

[Lee Payne_1]

I am throwing this out there one more time for you 3Com super-techies.  I have a HiPath 4000 Communication Server that we need to allow a contractor to access.  The problem is we were going to set up a VPN and point it to an address using NAT on a 3Com 5500G-EI 24-port Core Switch Stack but that particular model does not support NAT.  Unfortunately we were not informed of this prior to spending the bucks.  Regardless, we still need to give the contractor access to specific servers supported by the private 10. voice vlan on the switch and keep the data vlan side of the house secure.  Is there a firmware upgrade to this switch that would allow NAT?  Between the 5500G and the VPN access point is a Cisco 2800 series router, which also does not support NAT.  Do we just need to spring for another router or is there some other way to funnel specific incoming traffic to a few IPs? I am quite new at this so please excuse the less than informed questions.

Thanks

Lee