https://ipnet.xyz/2010/01/cisco-small-escape-leading-to-non-functional-nat/