nat vm + external switch