Incoming Connection to VPN-Router over Main-Router

This should be possible, although you may need to set up VPN-PBR.