Swarm nodes behind NAT?

Is it possible to set up swarm nodes that are behind a NAT, i.e. they have no public IP that the swarm manager can directly access?