Thanks anav, really appreciate the reply.
Ether1 is connected directly to the VDSL router which is at 192.168.1.1
As for the forward to 69, that is typo and should have read 6690 for VPN. I have moved on a little now, or backwards and have gone back to a clean but probably vulnerable config.
Sorry for the double post the moderation didn’t appear to have taken affect, it has now.
To save duplicate posting and threads off topic here is the link http://forum.mikrotik.com/t/help-needed-with-config/131277/1