that's pretty much the only way you can do that right now, unless the machines within the lan are also running clients