You manage a Standard SKU public Azure Load Balancer that distributes HTTP traffic across three VMs in a backend pool. The support team needs to RDP directly to one specific VM (VM2) in the pool using the load balancer's public IP address on port 50002, forwarding to port 3389 on that VM. Each VM has no public IP of its own. What should you configure on the load balancer?