@tomayac It's true that for outgoing traffic double-NAT is not a problem (except conceptually annoying ;-). But if you have it, then incoming you'd need two forwarding rules, one from the Huawei to the Nest, and another one from the Nest to HA, because you can't reach HA directly from the router.