If it is a proper VPN you don't need forwarded ports because all devices appear as if they are all on the same subnet.
Having the same problem how can I set this up using private Internet access and dyndns?
If it is a proper VPN you don't need forwarded ports because all devices appear as if they are all on the same subnet.