Adding the ip to the relay list of the client should be enough. If you have https self signed certificate that could be problematic i have noticed