separate natneg punch port from command port