add routes for ingress<->egress and set up NAT for egress and eth0