Don't forget to add "option GATEWAY" to the kernel config file or NAT will not work.