Monitor non-agent hosts behind NAT

you can trigger them as MRPE checks from your check_mk agent on the remote location or as mentioned before via check_by_ssh and/or check_multi via classic active check from your CheckMK Server. check_by_ssh is a default plugin which comes with CheckMK and can be used as classic active check. You should also install the monitoring-plugins packages on the remote RaspberryPis to have a first set of check plugins.