Allow WAN access to VPN Port

[SomebodySysop]

I just can't seem to figure out how to do this.  I have a Synology VPN server on my network, and I just want to open the port on the firewall to allow access to it.  I've created aliases for the server host and port, and created a WAN rule AND a port forward, but it's not working.

Someone went through the effort here to explain it step by step, I tried this as well but I guess I'm just not getting it.  Attached are the rules I have created.  When I try to access the VPN server from the WAN, I can see on the live report that it is blocked by the default deny rule.

How do I open that port on the WAN?

[SomebodySysop]

OK, I FINALLY figured it out.  I was not understanding "Destination".  It should be "WAN Address".  I kept trying to use the LAN address.  VPN server working like a charm!