IPtables is basic firewall interface. It can be used to extend firewalld possibilities.
Network access translation is mechanism which allows hide local machines from outside and grant to local machines access to otside resources.
To start NAT on vibr1 interface use commands:
iptables -A FORWARD -i vibr1 -o primary -j ACCEPT iptables -t nat -A POSTROUTING -o primary -j MASQUERADE