Configure port forwarding on the router instead of an unmanaged switch, which lacks Layer 3 capabilities.