My apologies if this has been asked before. I found one relevant posting, but the OP chickened out before things got exciting 
RUT360 with cellular data bridged to a Sonicwall router/firewall. Static IP. All WAN traffic hits the Sonicwall directly. This is what we want; however, it would be nice to have some kind of backchannel to the RUT360 for maintenance purposes. Only way to access the web management console right now is through the private IP on the LAN interface.
I set up a simple static-key OpenVPN server on the RUT360, but WAN traffic doesn’t appear to be hitting port 1194. I guess that’s to be expected, given it’s in bridge mode.
Is there any way short of reverting to pass-trough mode to make this work? Maybe some kind of NAT’ed solution?
Any pointers greatly appreciated.
Mike