Bulk discovery of devices behind a network address translation device

A method comprising:

• connecting through a first connection, from a network management system, to a first network device, the first network device being behind a network address translation device or a firewall relative to the network management system;
• discovering through the first connection, by the network management system, one or more second network devices, the one or more second network devices being behind the network address translation device or the firewall relative to the network management system;
• initiating, by the network management system, one or more tunneled second connections from the network management system to the one or more second network devices through the first network device;
• sending through the one or more tunneled second connections, by the network management system, an activation configuration to each of the one or more second network devices, each activation configuration being unique to one of the one or more second network devices;
• and
• establishing, by the network management system, a non-tunneled connection to each of the one or more second network devices.

A non-transitory computer readable medium comprising instructions that when executed by one or more processors cause the one or more processors of a system to:

• connect from the system to a first network device through a first connection, the first network device being behind a network address translation device or a firewall relative to the system;
• discover, through the first connection, one or more second network devices, the one or more second network devices being behind the network address translation device or the firewall relative to the system;
• initiate one or more tunneled second connections from the system to the one or more second network devices through the first network device;
• send, through the one or more tunneled second connections, an activation configuration to each of the one or more second network devices, each activation configuration being unique to one of the one or more second network devices;
• and
• establish a non-tunneled connection to each of the one or more second network devices.