Add/remove nat rules in vcloud

Builds on (and thus supersedes) https://github.com/brooklyncentral/advanced-networking/pull/15.