nat on vtnet1 inet from ! (vtnet1) to any -> (vtnet1) round-robin endpoint-independent