Just some update: checked remotely and turn out the Virgin Media router in modem-mode does not allow any port open to the down stream router. It could be bug or intentially, which is still not sure.