CGN fixed/hashed nat question