I set up 2 nest-pucks behind my firewall (ipfire), which work in
nat-mode (a bit of a pain here, because things like port-forwarding are
a 2-step-action here...). IpFire has 2 networks (green and blue, where
blue has only one direct client: the nest)...