I do this all the time. I can access the router via the public IP via either Winbox or GUI.
But, reaching a device on a VLAN behind the thing is shrugging me off.
Thanks for replying kickoleg
No go on adding the dst. address. I used my current IP and 0.0.0.0/0
Ive never had to populate that field before for other accessible LAN devices.
I have disabled filter rules to test but no go.
I am accessing a group of phones on a VLAN tied to a different subnet. Thing is I have an ATA on the native subnet that is also not accessible. No difference their either.