introduce NAT instance