each nat box should have its own eip