This process is basically the same as DualShield Configuration in RRAS integration as shown below (replace references to RRAS with RDG):