Yeah that’s fine. The steps were so simple I figured they could work without router config changes if they made some kind of connection handshake in a third part service’s server.

But given all that, I wonder if it makes sense to look into if your router has its own vpn server (or flash the firmware with one that does.)