Modem → Main eero → Switch → Second eero (actually, I have 3 switches around the network – it doesn’t matter).
I opened the port in the modem pointing to the main eero IP address. Then I opened the same port in the eero mesh network toward the Mac’s IP address running the Roon Core.
It works as expected. Basically, with double NATs, you have to open twice the wanted port because you have two network “layers”.
Thanks for writing in, and my apologies for the delay in following up. After digging into your specific router, the Salt Fiber Box, it looks like you may have an IPv6 address.