You can simply use winbox, see this thread:
http://forum.mikrotik.com/t/remote-access-from-the-internet-wan-side/55293/1