Basic port forwarding configuration - nat + filter? - SOLVED

Mikrotik newbie and network novice… Never had this problem on “home routers”. I know I am missing a step, but I don’t know what. I feel like I might need to open a filter to allow portforwarding, but I don’t want to do something stupid and open the router to the world.

I used the default confguration for HomeAP at setup, with normal 1 router with computers behind it.
Changed the default 192… network to 10… changed dhcp.
Works fine. Clients can access the internet fine. Router webconf is accessible from by ip provided by isp.
Firewall rules were configured by mikrotik default.

So I want to port forward to a camera on 10.10.5.200 port 1800.
Computers behind the router CAN reach the camera, so that the camera is accepting connections fine and it worked fine with old router.

So I set a filter—>nat to:
dstnat, protocol tcp, distport 1800, ether-1-gateway, action dst-nat, to 10.10.5.200, port 1800

A port scan of the router from ISP IP does not show port 1800 is open.

What am I doing wrong?

I have figured out the issue. I was going to delete the thread, but instead I will leave it here. My guess this is a common newbie issue.
I could not access the site from behind the mikrotik, when I was troubleshooting it from behind the router, by using the isp ip. I think this has something to do with “hairpin nat” maybe (but I don’t have any idea).
I also could not access from outside the site, but I think this was because the network I was testing it with blocks ports.
When I went to an outside network that I know doesn’t block ports, the port was forwarded properly by the above.
Hope this helps somebody.