Thanks for the great info, I was attempting all sorts of complexity to push through a unique IP via a VPN just for the switch with all ports forwarded. It looks as if just changing the NAT mode to apply static ports against that single host, worked perfectly in PFSense. Previously I always had...
