How to organize access to one external IP on one port to the local server?

Question

Cisco

Good afternoon and Happy New Year!
There is a CISCO ISR 4331 router (suppose the provider's address is 212.212.212.55/30)
There is a local RDP server (suppose 10.1.1.10/24)
There is an external user with static IP 222.222.222.168

Please tell me how to organize forwarding to an external user (and only his IP address) to the local server (port 3389)?

Answer 1

The answer is simple - don't ever do that. if you succeed, your server will not live very long :(
it will be correct to raise an L2TP or IKE2 or SSL VPN server and connect via RDP from it after authorization