IPSec VPN into MP70

I want to create an IPSec VPN connection between my laptop and MP70. MP70 has a dyndns address. I have several devices behind the MP70 on its LAN that I want to control remotely.

When I try to configure an IPSec VPN tunnel on MP70, it seems as if my only option is for the MP70 to IPSec tunnel out to a VPN gateway.

Incoming Out of Band is enabled.

How do I configure the MP70 ] to receive VPN client connections?