Forward VPN to Synology NAS

Hello i have a mikrotik router with RouterOS v6.42.2
and i want to forward the VPN Ports to access my Synology VPN Server (L2TP)

My Network config looks like this:
Provider Router - 192.168.8.1
Mikrotik Router - 192.168.0.1
Synology NAS - 192.168.0.3

So on my old Router i only had to forward the ports 500,1701 and 4500 and VPN worked for me.
But i have no idea how to do this with mikrotik.

I hope someone can explain this to me.
Thanks in advance for your help.

Hi,

What kind of firewall have you configured on the MikroTik? If it is not the default (https://wiki.mikrotik.com/wiki/Manual:Securing_Your_Router) you might need additional access rules to allow the traffic. These rules should then be placed in the forward chains.

For the port forwarding part you’ll need the following config. Paste it in the Terminal, it can be found both in Webfig and WinBox (or by accessing your router by SSH)?

/ip firewall nat
add action=dst-nat chain=dstnat in-interface=WAN protocol=udp src-port=1701 to-addresses=192.168.0.3
add action=dst-nat chain=dstnat in-interface=WAN protocol=udp src-port=500 to-addresses=192.168.0.3
add action=dst-nat chain=dstnat in-interface=WAN protocol=udp src-port=4500 to-addresses=192.168.0.3

Ps.: I assume you have already forwarded all traffic from the ISP router towards the MikroTik. Else you need some configuration the provider router as well