Well it could be set-up so that where the Stratum Proxy was running was on a different part of the network than the Cube was on.  But it's not an ideal configuration for a beginner setting it up for the first time.  

What you said it true.  Get everything on the same internal network first.

Crawl before running as they say.