Abstract: Systems and methods for in-band remote management of a network asset are disclosed. Embodiments include a router, configured to provide Network Address Translation (NAT) to a private network. Communications originating outside the private network are controlled by the router. At least one network server asset is in communication with the private network and configured to run a Secure Socket Shell (SSH) protocol. The network server asset and the router initiate an SSH tunnel with remote port mapping to enable communication with another network asset.