Yes that is correct. Just depends if the firewall/router can actually handle that sort of nat addressing.