Well, the brute force way is to use CPAN::Mini to build your own CPAN mirror, and then run that to the media of your choice. When you get to the client site, insert it into a machine and point your CPAN client to it.

This has the advantage that you do not need to build something architecture-specific. The disadvantage is that you bring along all of CPAN, but if you configure the minicpan client correctly this is "only" about 2.7 Gig.

Of course, CPAN clients can be configured to deal with firewalls. See settings http_proxy and/or ftp_proxy, and the environment variable documentation in LWP. The ActivePerl installer can do this too, but it has been a long time since I did this and I do not now remember how.