Hi,

Working with Frontier NVG468MQ router (local IP is 192.168.254.254) with a Mikrotik Hex (VPN server configured) cascaded. I need the NVG as it provides phone service. I've already configured the NVG to put Hex in DMZ and all is well except that VPN access from outside is failing. I'm thinking that the Hex is blocking the VPN connection due to local address of NVG is private and coming from WAN. If I put the NVG on bridge mode, I can VPN to my mikrotik but I loose phone service.

Can I make a rule that will allow (incoming and outgoing) communication to/from WAN port from a certain private address (192.168.254.54)?

Any other suggestions highly appreciated.

Being behind an ISP router is not an issue provided the required channels are free to be used.

Which VPN protocol do you plan to use ?
Is the required port opened in your Miktrotik firewall ? Are you sure ? Did you test ?
If not, you can not pass a closed door ...

It could help to export your config:
/export hide-sensitive file=anythingyouwish

Post it here between Code quotes.