Router with NAT <-> SW-Firewall <-> HW-Firewall