PIX 506E VNC portforward

[hpjotr]

Hi all!
I would like to ask your help in configuring PIX 506.

The situation:

I must separate a little laboratory (LAB)network from bigger office network.(OFF)
The LAB network consists 3-4 PC-s, with fix IPs,like 192.168.0.10, 11, 12, 13 and so on.

I could assign a fix ip from OFFICE network 10.242.2.17 (255.255.254.0) to the inside interface of PIX.

The only requirement in the separation process,that some user from office wants to access LAB PC-s behind the firewall via VNC.

My view is that LAB network should be on outside interface, because for my office network it means security issues.

I would like to set VNC portforwarding with different PORT rules. PC1 : 5901, PC2: 5902, PC3: 5903, PC4: 5904 etc.

What ACL and PAT/NAT rules shall I set?

Thanks in advance!