I followed documentation and enabled zones. I have port 4700 open on agent machine. I added agent node manually with external IP address to default zone. I added other nodes to different zone and first node as proxy.

Remote network subnet object appeared twice in both default zone and remote network zone. There are other remote networks that will be added later and they will overlap.