What must also be enabled when using source NAT if the address pool is in the same subnet as the interface?