Binds ports from external interfaces to the container's virtual subnet