diff --git a/src/confd/src/cni.c b/src/confd/src/cni.c
index 701b1a4c..436a43fc 100644
--- a/src/confd/src/cni.c
+++ b/src/confd/src/cni.c
@@ -250,12 +250,15 @@ static int cni_bridge(struct lyd_node *net, const char *ifname)
 		"    },\n"	/* /bridge */
 		"    {\n"
 		"      \"type\": \"portmap\",\n"
+		"      \"backend\": \"iptables\",\n"
+		"      \"snat\": true,\n"
 		"      \"capabilities\": {\n"
 		"        \"portMappings\": true\n"
 		"      }\n"
 		"    },\n"	/* /portmap */
 		"    {\n"
-		"      \"type\": \"firewall\"\n"
+		"      \"type\": \"firewall\",\n"
+		"      \"backend\": \"iptables\"\n"
 		"    },\n"	/* /firewall */
 		"    {\n"
 		"      \"type\": \"tuning\"\n"