In some examples, network management system 10 may discover a plurality of network devices through the LLDP information on seed network device 14A. For ease of explanation, the example discussed herein focuses on a single network device, network device 14B. Network management system 10 may attempt to create a second connection to a neighboring network device (e.g., network device 14B) that neighbors seed network device 14A, for example by tunneling through the first connection to seed network device 14A. For example, network management system 10 may attempt to establish an ssh connection over links 11, 17 and 19. While not showing the path through links 11, 17 and 19, the second connection is also represented by connection 2. With the tunneled ssh connection, network device 14A would not be able to read the message traffic meant for network device 14B. If the second connection is successfully established, network management system 10 may automatically model that neighboring network device (e.g., network device 14B) on to network management system 10, generate a second activation configuration and commit the second activation configuration on neighboring network device 14B. Neighboring network device 14B may request a third connection with network management system 10, for example, an outbound ssh connection through links 13 and 11. This third connection would not be through seed network device 14A. In other words, the third connection would be a non-tunneled connection with respect to seed network device 14A as it would not pass through seed network device 14A. While not showing the path through links 13 and 11, the third connection is also represented by connection 3. The third connection may be established between network management system 10 and neighboring network device 14B. In some examples network management system 10 may establish the third connection. In other examples, the neighboring network device 14B may establish the third connection. Network management system 10 may then discover other network devices behind NAT device 16 through LLDP information on neighboring network device 14B, leveraging the third connection between network management system 10 and neighboring network device 14B. Network management system 10 may continue similarly with network devices of enterprise network 6 (e.g., network devices 14C-14G) until network management system 10 discovers all discoverable network devices in enterprise network 6. In some examples, network management system 10 may continue similarly with network devices of enterprise network 6 (e.g., network devices 14C-14G) until network management system 10 both discovers and configures all discoverable network devices of enterprise network 6.