So this is for a single user (the doctor) or even a couple of users that will travel but not all the time. Again, why do you need this for everything? Are you also going to just leave your firewall and NAT rules in place for those times they travel? Thus leaving you exposed when you don’t need to be?
If this is for a single or even small amount of users that travel and when they do travel it’s a thing (like being overseas for a month). At that point you look at a solution to implement when they travel and make adjustments to their extension to support their extended travel and then set your firewall/NAT rules only when needed.
Since this is a medical facility you’ll appreciate this, stop using a shot gun when you need scalpel. Making global configurations like this based on 1 or 2 users just opens you up more to issues and makes it harder to track.