if you're looking to just access the two private networks remotely, I would put a netclient on the two routers, make an egress gateway out of each netclient pointing to the private network, and put an ingress gateway on the nemaker server