"The wireless router currently uses a private WAN IP address (192.168.x.x, 10,x,x,x, or 172.16.x.x)."
Well there's your problem. Dynamic DNS aside, you're not going to get a VPN server to work behind double NAT without more work, if at all. You need your router directly on the Internet, not...