nsh NAT

!
interface enc0
 group enc
 shutdown
!
interface pflog0
 group pflog
 no shutdown
!
!
ip forwarding
ip ifq-maxlen 8192
no ddb panic
!
pf rules
 set skip on lo
 match out from 172.31.3.0/24 to any nat-to (vr0)
 pass in quick on vr2 inet proto tcp from !172.31.3.10 to port 80 route-to (vr2 172.31.3.10)
!
pf enable
pf reload
!