When setting up a SCIONLab AS, it is possible to define a bind address that is different from the public address to support NATed setups.

However, this is only possible for the upstream link to the parent. When making the AS an attachment point, setting a separate bind address for child links is not possible, thus prohibiting setting up NATed attachment points.

This affects both the topology file and the VPN server configuration.