Finally found a working combination, lessons learned:

- Each connection requires its own port allocator
- Do not share ufrag/passwd