I'm far from a VPN expert but it sounds a little awkward to have a VPN server on anything else than on the gateway. At least it complicates things (and probably reduce security).
I suggest a router with vpn feature or taking advantage of SME server capability's and use it as the gateway (and VPN server, router, firewall, etc).