get router + NAT working as single-port NAT