MBG is the best solution, and it's not really that expensive either. For mine you are better to spend the little bit of money and have the solution just work and up and running in an hour, rather than spending 10 hours trying to get a soft phone working over a VPN!
Either way make sure that you put the external hand set in a different zone so that it uses G.729 rather than G.711.