BTW, is the access bidirectional when using egress gateway? I assume the DO could reach the egressed "node" on it's LAN IP, but can that device reach the DO node?