add action=dst-nat chain=dstnat dst-port=4001 in-interface=WAN protocol=tcp to-addresses=192.168.2.205 to-ports=3389
add action=src-nat chain=srcnat dst-address=192.168.2.205 dst-port=3389 protocol=tcp to-addresses=192.168.2.1

Thank you!!!