1.) Have to change the to-port to the appropriate service, port 80 for http, 443 for https.
2.) Does your firewall filter allow connections from the outside world into the network? If not create the appropriate rule, be as specific with the rule as you can be for security reasons.
Not knowing how the TPLink is configured / connected makes every suggestion a guess, any firewall settings on the TPLink possibly blocking?
Input or forward chain for the rules? Screen shots do not really tell enough information, your best course of action would be to provide an ‘/ip firewall export’ and paste it here. That way all relevant rules can be reviewed.
Your forward chain is kinda OK. There is no default drop all, so basically it’s permitting everything to be forwarded. That is not very secure, it would be better to lock it down, but that is outside the scope of your question.
Your last NAT rule that is doing the forwarding needs to be different:
add action=dst-nat chain=dstnat comment="Enable Remote Desktop to Router" disabled=no dst-port=81 protocol=tcp to-addresses=192.168.123.252 to-port=80
And in order to access it from the outside world you need to specify the port.
http://:81
Note that port 81 is a reserved port, it would be better to use a port that is higher than 1024. Your previous rule may of fired, but would forward port 81 to port 81. The modified rule will forward port 81 to port 80. HTTP is defined to run on port 80, and you also had the rule disabled. Also since I’m assuming that you have the MikroTik listening on port 80 for it’s web interface, it will not forward port 80 traffic, as it is processing it for itself.
I would like to access my access UBNT Ap on Lan remotely my wan has a public ip 196.227.213.16 and my lan has dhcp 192.168.1.0 how do i config so that i can connect to ap 192.168.1.20?