nat on vtnet1 inet from ! (vtnet1) to any -> (vtnet1) endpoint-independent