Hello, it seems like my other thread disapeared, so I will try again...

I set up port forwarding on my Deco which is running it's own NAT, but none of those ports are open on the Deco's network.
 

Here is a simplified view of my setup, I will use a machine I am trying to RDP to as an example:


 

My AT&T gateway network is 192.168.1.1/24, Deco has it's own NAT Network 10.0.0.1/24.
 

If I am connected to Deco's NAT Network, I can RDP to the machine just fine:


 

My Deco's internal IP is 192.168.1.86, confirmed by Deco app and my Gateway's config page:
 

 - 
 

The VM I am attempting to RDP to is on Deco's NAT Network with IP: 10.0.0.19, confirmed by the app:


 

I opened port 3389 on Deco's app, and directed it to the VM - IP 10.0.0.19:
 

 - 

I connected to my Gateway's 192.168.1.1/24 network outside of the Deco's NAT Network, and attempted to connect to Deco's internal IP (to be forwarded to the VM on the Deco's NAT Network).  It will not connect:


 

I ran an Open Port scan on Deco's internal IP from the 192.168.1.1/24 network, none of the ports are open:


 

I am just using the RDP as an example, but none of the 4 ports I am attempting to forward work.

The setup looks really straight forward to me, what am I missing? 
 

Thank you