ERAS with client behind firewall?

Isn't it possible to add clients to ERAS if they are NAT'ed behind a firewall? We've set up ERAS and ERAC, but the only client that shows up is the one running on the ERAS server.

Port 2222 is most certainly open to the client, and using a packet sniffer, I can see the client is communicating with the server over port 2222, but it never shows up in the servers console. The license info and file are all accurate ...

Does the server have to initiate connections directly back to the client? I don't see that it is trying to ...

 

The client connects to the server on TCP 2222 for management, no connections are directly initiated to the client except during a push installation. Hardware and software firewalls are usually the first place to check on your RAS to make sure TCP 2222 is open. Try doing a netstat from a client that is pointed at your RAS. If the connection is hanging in the SYN_SENT state then 90% of the time it's a firewall/network issue dropping the traffic between the client and server.

If it is establishing the connection, then make sure if you are setting a password for connection to management that it is correctly defined on the client configuration.