SSH is on port 22 and that is typically firewalled on WAN.
Curious, is there a reason you seem to be set up for double NAT, rather than connecting to the LAN bridge?