network: prepare bridge for NAT