Any node could be assigned to be a registration server (do not change it afterwards!).

If you assign the "target" node to process registrations, then firewall will not be an issue.

Also, use the auto.registration=true parameter