An important point was missing: IP forwarding should be enabled