pipeline: add NAT action