Add a boolean to allow NAT from LAN or not, default to nat LAN (#2535)