Ignoring your NAT questions completely even if you had a connection that didn't require credentials using a switch as a router would be a bad idea, switches do not have any type of intrusion prevention.
Meraki CMNO, Ruckus WISE, Sonicwall CSSA, Allied Telesis CASE & CAI