Add a NAT mode to the sandbox