SSH is on port 22 and that is typically firewalled on WAN.

Curious, is there a reason you seem to be set up for double NAT, rather than connecting to the LAN bridge?