> After all, if we don't do s-nat, nat 1:1, why not just configure the gateway > of the vm to use the external router directly Because there is no route to the external router? Please can you elaborate on that?