Virtual Server Networking Advice

Hi - hope you can give me some advice

I am currently installing a single server (W2K3 64 bit, 2 NICs) hosting 2 virtual servers (W2K3 32 bit) in order migrate from an existing underpowered single tier server environment to host some dev tools

The network environment I am installing in is basically a stand alone network with nothing in it (No domain controllers, DNS, or DHCP) and is connected to by the outside world via a VPN connection. So one of the physical server nics will be confgured to receive VPN traffic, the other to be able to function in the stand alone network (see the other servers that are in there).

The virtual machines will host a DB on VS2 and the app/presentation layer on VS1.

This is a very security concious environment - firewalls are closed by default and getting them opened up is a pain.

I have a number of questions....

How should I best configure the virtual NICs on the virtual servers to enable users to access the applications (via VPN)?

What are the firewall considerations that I should think about? The current firewall rules are for the IP address of the physical NIC. Is there a way of getting at the tools that will enable me to also administer the host without opening up another bunch of ports for a different IP?

Hope you can help