NAT is normally transparent but the user is asked for
simple input in complex configurations. The user simply indicates
which conflicting NAT ranges have priority. ISCS ensures that the NAT
rules are consistent with all other subsystems. No misplaced rules or
accidental denials of service.