Not necessarily you need an Ip-to-IP gateway.
The reccomandation is to use one so that you CM will not have internet-exposed interface and other general security and design issues, like authentication.
If you can work around that and are willing to try, it can be done even without IP-to-IP, but remember things like NAT, authentication, registration can be problems that the IP-to-IP would solve.
Please rate post if it helps!
