We'll use a combination of ssh remote and local port forwarding in order to expose the laptop's ssh port outside the NAT. The laptop must initiate the forwarding.