Masquerade issue

Check VRF and hidden interfaces. I was under impression that it’s already fixed/handled, but maybe not everywhere? I think I didn’t test NAT myself.