script2: optionally NAT also A2 network