diff --git a/config/iptables_rules.json b/config/iptables_rules.json
index 0e6618ec..df2b126b 100644
--- a/config/iptables_rules.json
+++ b/config/iptables_rules.json
@@ -81,6 +81,13 @@
                     "-A OUTPUT -o $INTERFACE$ -j ACCEPT"
             ]
         },
+        {
+            "name": "NAT for access point",
+            "comment": "Masquerading needed for access point",
+            "rules": [
+                "-t nat -A POSTROUTING -j MASQUERADE"
+            ]
+        },
         {
             "name": "clients",
             "fw-state": true,