Could you point me to a guide for setting up the VPN client w/a dynamic IP address (sometimes behind NAT, other times not) with an RF860?

The Ipsec client will not work well if the remote client is traveling all over to different places. It is best you use PPTP on the remote client to access the RF860.