only switch to port 4500 if we are on 500: fixed reauthentication in NAT