A third connection may be established between network management system 10 and neighboring network device 14B (62). The third connection may not be a connection through seed network device 14A. In other words, the third connection may be a non-tunneled connection with respect to seed network device 14A. For example, the third connection may be through link 11 and link 13 and may be an ssh connection. The third connection is for management of neighboring network device 14B by network management system 10. In some examples, network management system 10 establishes the third connection. In other examples, neighboring network device 14B establishes the third connection using outbound-ssh. Network management device 10 then may discover additional network devices in enterprise network 6 from LLDP information stored in memory of neighboring network device 14B (52). Network management system 10 may continue this process between blocks (52) and (62) until all discoverable network devices 14A-14G are discovered. In some examples, network management system 10 may continue this process between blocks (52) and (62) until all discoverable network devices 14A-14G are discovered and configured.

In this manner, network management system 10 may discover all discoverable network devices behind NAT device 16 using only a single manually modeled seed network device. Network management system 10 may use tunneled ssh connections to connect with other network devices and committing automatically created activation configurations on those network devices. Those other devices may then request non-tunneled connections with network management system 10 as described above.