Add masquerade rule for undercloud