For NAT port forwarding and client VPN to work the MX has to have a public I address directly on its WAN interface. You mentioned that one of the sites is behind Starlink - so you wont be able to use this approach for that site. AutoVPN is your best bet. and having the two NAS units connect to each other directly using their private IP addresses.
... View more
