so, basically DMZ mode but with a custom network config to likely bypass the f/w for inside traffic going to the mbg (or you're using a 2 port f/w without a proper dmz).. Then you do want to change the setside streaming address, as I think you were going to do.
if you have no TW sets, no need to do the resiliency thing.
if you using sip clients, or UCA, on smartphones, they normally are configured with DNS names, so make sure those are updated in your DNS servers when you make the change.
nothing needs to change on mas as nothing from the internet is connecting to it.