Port Forwardind to VLAN

RouterOS General
1

I have a Mikrotik Router, configured as follows in a High School:
Configuracion Basica.JPG
I have 5 subnets associated with a VLAN:
0. 192.168.100.9/24 -------- Internet - Bridge WAN - Public IP: 186.x.x.7

  1. 192.168.88.1/24 --------- Local - Bridge Local
  2. 172.168.1.1/24 --------- VLAN ID 1 - General - Bridge VLAN 1
  3. 172.168.3.1/24 --------- VLAN ID 3 - Administration - Bridge VLAN 2
  4. 172.168.4.1/24 --------- VLAN ID 4 - Teachers - Bridge VLAN 3
  5. 172.168.5.1/24 --------- VLAN ID 5 - Security - Bridge VLAN 4

What I want to do is to open ports 2000, 2001, 2002 and 8000, 8001, 8002 for a DVR brand HIKVISION, to IPs that correspond to VLAN ID 5:

  1. 172.168.5.20 - Ports 2000 and 8000
  2. 172.168.5.21 - Ports 2001 and 8001
  3. 172.168.5.22 - Ports 2002 and 8002

The configuration of the Firewall is as follows:
Firewall 01.JPG
I added a test NAT by opening port 2000 in TCP, with action to IP 172.168.5.20, but I do not have access from another place:
Firewall 02.JPG
How can I do to have remote access to the devices.

2

Just write in English only.

3

My post was corrected.

Maybe, you can help me with the requirement of my post.

4

Use action=dst-nat instead of netmap.

5

And use export function instead of pictures