You have to specify ports in chain and in action too like below:
ip firewall nat add chain=dstnat dst-address=XXX.XXX.XXX.XXX dst-port=81 action=dst-nat to-addresses=172.xxx.xxx.xxx to-ports=81
XXX.XXX.XXX.XXX your router public IP
Retype this for all ports.
Don't forget that ports should be open on customer CPE too
Thanks for your response, yes I made a mistake I do have the dst-port made for each port,
ip firewall nat add chain=dstnat dst-address= XXX.XXX.XXX.72 dst-port=80 action=dst-nat to-addresses=172..x.x.x to ports=80
ip firewall nat add chain=dstnat dst-address= XXX.XXX.XXX.72 dst-port=81 action=dst-nat to-addresses=172..x.x.x to ports=81
ip firewall nat add chain=dstnat dst-address= XXX.XXX.XXX.72 dst-port=8000 action=dst-nat to-addresses=172..x.x.x to ports=8000
ip firewall nat add chain=dstnat dst-address= XXX.XXX.XXX.72 dst-port=10554 action=dst-nat to-addresses=172..x.x.x to ports=10554
I tried this for all the ports 80, 81, 8000, and 10554. I notice when I have the port 80 configured, I can hit the customers DVR Login screen with my public routers IP address. However, when I do that, I loose the ability to access the mikrotiks routers webfig with the browser typing in the routers public IP address, any time I type in my routers IP it will always bring me to the Customers DVR.
What i have heard is that the mikrotik webfig, uses port 80! and maybe thats why, I read you could change the mikrotiks webfig port to a different port! but, I am uncertain how to do that, I look at the IP > Services > and see the ports for that port but thats pointing to the ( www - for port 80) which port 80 is for http,
Atm I am uncertain, I think I need call the DVR people and tell them to change that port 80 to something else, unless someone else can think of something, I truly appreciate everyone's responses and hope to see more. Thanks again.