Yeah that should be doable with "source NAT" rules (not port forwarding which is destination NAT), e.g., create a source NAT rule with "masquerade" translation, outbound interface set to the LAN interface, and destination address set to the particular device's (private) IP address (and possibly other match criteria if needed).
↧