policy_distribution_point, general_permit, nat