add specs for NAT