Its the old double nat pitfall...


I would set up the 502 so that it hands out addresses in its new lan subnet also so that getting into its lan port is not a problem.