BR500 Security and Port Forwarding

I am installing 2 BR500 to replace some old equipment.

The VPN was easy but need some other advise.

I need to open seveal ports and forward the traffic to a server.

I can do that but cannot find anyway to restrict, either by public IP or MAC address, who can get in. I have been able to specify this in the past on other Netgear products.

Don't know what I am missing.

Tech support was of no help. Appriciate any suggestions.