i have the following archetcture of my small office network
i can access Mikrotik RB2011 through its Cloud DDNS ,but i can’t access web interface of the access point even i’ve opened port in ZTE router and making port forwarding on Mikrotik RB .
Sounds like a mistake on your config…
like what?
check if your DST-NAT rule counters show hits when you try to connect when if you are affirmative with that check your firewall rules
PD
You were Kindly enough to provide a network diagram that is good, very good
but
is hard for us to formulate a solution without knowing the specifics of your config
anonymize your config and post it please
Wait, my crystal ball is due to be delivered by amazon later.
UPS has my tarot cards in tomorrow.
@ anav
Wait, my crystal ball is due to be delivered by amazon later.
you buy another one?? 
does the old one in your fish aquarium no longer work? 