Similar to DevTest Labs, and perhaps even more important, Classroom Labs should support Bastion Host or any other mechanism that gets around port restrictions. Students should be able to get to their virtual machines without having to ask an IT department to grant access through their firewall to non-standard ports (which gets denied more often than not anyway).