token and symmetric nat