NAT port forwarding with additional interfaces



  • I am having an issue with NAT port forwarding and additional interfaces.  Perhaps it is something I am overlooking, so If anyone has any insights, please share.

    One Setup is as follows:

    pfsense 2.3.4 (amd64) with 4 intel interfaces.
    em0 is WAN (public IP)
    em1 is LAN1 (10.23.29.0/24)
    em2 is LAN2 (10.23.30.0/24)
    em3 is LAN3 (10.23.31.0/24)

    The firewall rules are pretty much default, except what I added for the IPsec.

    WAN:
    IPv4 ICMP any * * * * * none allow Pings
    IPv4 ESP * * * * * none Allow ESP for IPsec
    IPv4 UDP * * * 1194 * none Allow OpenVPN
    IPv4 TCP * * 10.23.30.18 37777 * none DVR
    IPv4 UDP * * 10.23.30.18 37778 * none DVR
    IPv4 TCP/UDP * * 10.23.30.18 554 * none DVR

    LAN1:

        • LAN1 Address 80 22 * * Anti-Lockout Rule
          IPv4* LAN1 net * * * * none Default allow LAN to any rule
          IPv6* LAN1 net * * * * none Default allow LAN IPv6 to any rule

    LAN2:
    IPv4* LAN2 net * * * * none Allow LAN to any rule
    IPv6* LAN2 net * * * * none Allow LAN IPv6 to any rule

    LAN3:
    IPv4* LAN3 net * * * * none Allow LAN to any rule
    IPv6* LAN3 net * * * * none Allow LAN IPv6 to any rule

    All the clients on all LANs can get on the internet just fine.

    I have some IPsec VPNs with 3 phase 2 entries for each of the LANs.  I have been able to ping clients on all LANS from both sides of the tunnel, so I am good here.

    The show stopper for me is a simple port forward.
    I basically want to forward TCP port 37777 to a device (DVR) on LAN2 (10.23.30.18)
    Another yet similar setup where the device is on LAN1 (10.23.29.18) seems to work just fine.

    A second setup is as follows:
    pfsense 2.3.4 (amd64) with 5 interfaces.
    Igb0 WAN1– Spectrum
    Igb1 WAN2 – AT&T
    Igb2 OPT2 – UNUSED
    Igb3 OPT3 – UNUSED
    Bge0 LAN - 10.105.15.0/24

    The firewall rules are pretty much default, except what I added for the IPsec.

    WAN1:
    IPv4 ESP * * * * * none Allow All ESP
    IPv4 UDP * * * 500 * none Allow UDP ISAKMP from All
    IPv4 UDP * * * 1194 * none Allow OpenVPN
    IPv4 TCP * * 10.105.15.18 37777 * none DVR
    IPv4 UDP * * 10.105.15.18 37778 * none DVR
    IPv4 TCP/UDP * * 10.105.15.28 554 * none DVR

    WAN2:
    IPv4 ESP * * * * * none Allow All ESP
    IPv4 UDP * * * 500 * none Allow UDP ISAKMP from All
    IPv4 UDP * * * 1194 * none Allow OpenVPN
    IPv4 TCP * * 10.105.15.18 37777 * none DVR
    IPv4 UDP * * 10.105.15.18 37778 * none DVR
    IPv4 TCP/UDP * * 10.105.15.28 554 * none DVR

    LAN
    *  * * LAN Address 80 * * Anti-Lockout Rule
    IPv4* LAN net * * * * none Default allow LAN to any rule
    IPv6* LAN net * * * * none Default allow LAN IPv6 to any rule

    I can port forward from WAN2 to LAN but not from WAN1 to LAN.  In other words, I can watch a DVR from an external site only using the IP Address from WAN2 but not WAN1.  The first original networks defined on this machine were WAN2 and LAN.

    In General, it seems that I am able to port forward always between the first original WAN and LAN that I define during the text console portion of setup.  After I enable the other interfaces and set them up as LANs or WANs via the web GUI, I am unable to port forward between them.

    Any Suggestions?


  • LAYER 8 Netgate

    Did you add the port forward to both WAN interfaces in Firewall > NAT, Port Forward or just duplicate the firewall rules?

    Delete the firewall rules you added, and duplicate the port forwards instead for the second WAN.

    (Those IPsec rules are almost certainly unnecessary)



  • Yes I added the rules under port forward twice for both setups.  I can login to both routers remotely via IPsec using their private IPs 10.23.29-31.1 and 10.105.15.1.

    Just out of curiosity I open up a telnet session using port 37777 to the DVRs.  The following are the results:

    Using the first Router (1 WAN , 3 LANs)
    From 10.4.12.119 to 10.23.30.18 (via IPsec tunnel)
    I echo some text for about a minuet.  It remains connected. (expected as I can view the DVR using this IP)

    From 10.4.12.119 to xxx.xxx.xxx.82 (WAN Public IP)
    I echo some text, after about 25 seconds it disconnects me.

    For the second Router
    From 10.4.12.119 to10.105.15.18 (via IPsec tunnel)
    I echoed some text and it remains connected. (expected as I can watch the DVR if I used it's private IP)

    From 10.4.12.119 to xxx.xxx.xxx.121 (WAN2 Public IP)
    I echoed some text and it remains connected. (also expected as I can see the DVR this way)

    From 10.4.12.119 to xxx.xxx.xxx.2 (WAN1 Public IP)
    I start to echo some text. After about 25 seconds it disconnects me.

    On the first router:
    I navigate to Status -> System Logs ->Firewall

    and I notice
    X DATE LAN2 10.23.30.18:37777 MYPUBLIC:53816  TCP:SA
    I click the X and I see the following:
    @5(1000000103) block drop in log inet all label "Default deny rule IPv4"

    It is as if the traffic can find its way in via the public interface, but then the devices are not allowed to reply back


  • LAYER 8 Netgate



  • I will read the link you sent me.  I thought I would paste the State Logs.

    For Setup 1:

    States while successfully Accessing DVR using Private IP within IPsec via DVR monitoring software
    Interface Protocol Source (Original Source) -> Destination (Original Destination) State Packets Bytes
    IPsec tcp 10.4.12.119:56348 -> 10.23.30.18:37777 ESTABLISHED:ESTABLISHED 108/47 8 KiB / 10 KiB
    LAN2 tcp 10.4.12.119:56348 -> 10.23.30.18:37777 ESTABLISHED:ESTABLISHED 155/47 11 KiB / 10 KiB
    LAN2 udp 10.23.30.18:52488 -> 255.255.255.255:5050 NO_TRAFFIC:SINGLE 1/0 60 B / 0 B
    LAN2 udp 10.23.30.18:46097 -> 255.255.255.255:5050 NO_TRAFFIC:SINGLE 1/0 60 B / 0 B

    States while trying to Accessing DVR using WAN Public IP via DVR monitoring software
    Interface Protocol Source (Original Source) -> Destination (Original Destination) State Packets Bytes
    WAN tcp my.public.ip.107:53590 -> 10.23.30.18:37777 (wan.public.ip.82:37777) SYN_SENT:ESTABLISHED 1/3 52 B / 156 B
    LAN2 tcp my.public.ip.107:53590 -> 10.23.30.18:37777 ESTABLISHED:SYN_SENT 1/3 52 B / 156 B
    WAN tcp my.public.ip.107:9429 -> 10.23.30.18:37777 (wan.public.ip.82:37777) SYN_SENT:ESTABLISHED 1/3 52 B / 156 B
    LAN2 tcp my.public.ip.107:9429 -> 10.23.30.18:37777 ESTABLISHED:SYN_SENT 1/3 52 B / 156 B
    WAN tcp my.public.ip.107:41905 -> 10.23.30.18:37777 (wan.public.ip.82:37777) SYN_SENT:ESTABLISHED 1/2 52 B / 104 B
    LAN2 tcp my.public.ip.107:41905 -> 10.23.30.18:37777 ESTABLISHED:SYN_SENT 1/2 52 B / 104 B
    WAN tcp my.public.ip.107:65404 -> 10.23.30.18:37777 (wan.public.ip.82:37777) SYN_SENT:ESTABLISHED 1/2 52 B / 104 B
    LAN2 tcp my.public.ip.107:65404 -> 10.23.30.18:37777 ESTABLISHED:SYN_SENT 1/2 52 B / 104 B
    WAN tcp my.public.ip.107:30858 -> 10.23.30.18:37777 (wan.public.ip.82:37777) SYN_SENT:ESTABLISHED 1/1 52 B / 52 B
    LAN2 tcp my.public.ip.107:30858 -> 10.23.30.18:37777 ESTABLISHED:SYN_SENT 1/1 52 B / 52 B

    For Setup2:

    States while trying to access DVR using WAN1 Public IP via DVR monitoring software
    Interface Protocol Source (Original Source) -> Destination (Original Destination) State Packets Bytes
    WAN1 tcp my.public.ip.107:58631 -> 10.105.15.18:37777 (wan1.public.ip.2:37777) SYN_SENT:ESTABLISHED 1/3 52 B / 156 B
    LAN tcp my.public.ip.107:58631 -> 10.105.15.18:37777 ESTABLISHED:SYN_SENT 1/3 52 B / 156 B
    LAN udp 10.105.15.18:50319 -> 54.165.39.206:8802 MULTIPLE:MULTIPLE 3/3 684 B / 366 B
    WAN1 udp wan1.public.ip.2:47926 (10.105.15.18:50319) -> 54.165.39.206:8802 MULTIPLE:MULTIPLE 3/3 684 B / 366 B
    LAN udp 10.105.15.18:55068 -> 54.165.39.206:8800 SINGLE:MULTIPLE 1/1 300 B / 239 B
    WAN1 udp wan1.public.ip.2:22011 (10.105.15.18:55068) -> 54.165.39.206:8800 MULTIPLE:SINGLE 1/1 300 B / 239 B
    LAN udp 10.105.15.18:51964 -> 54.165.39.206:8800 NO_TRAFFIC:SINGLE 1/0 300 B / 0 B
    WAN1 udp wan1.public.ip.2:6715 (10.105.15.18:51964) -> 54.165.39.206:8800 SINGLE:NO_TRAFFIC 1/0 300 B / 0 B
    LAN udp 10.105.15.18:35132 -> 54.165.39.206:8800 SINGLE:MULTIPLE 1/1 300 B / 143 B
    WAN1 udp wan1.public.ip.2:16551 (10.105.15.18:35132) -> 54.165.39.206:8800 MULTIPLE:SINGLE 1/1 300 B / 143 B

    States while Successfully Accessing DVR using WAN2 Public IP via DVR monitoring software
    Interface Protocol Source (Original Source) -> Destination (Original Destination) State Packets Bytes
    LAN udp 10.105.15.18:50319 -> 54.165.39.206:8802 MULTIPLE:MULTIPLE 3/3 684 B / 366 B
    WAN1 udp wan1.public.ip.2:23586 (10.105.15.18:50319) -> 54.165.39.206:8802 MULTIPLE:MULTIPLE 3/3 684 B / 366 B
    LAN udp 10.105.15.18:34603 -> 54.165.39.206:8800 SINGLE:MULTIPLE 2/1 602 B / 238 B
    WAN1 udp wan1.public.ip.2:31170 (10.105.15.18:34603) -> 54.165.39.206:8800 MULTIPLE:SINGLE 2/1 602 B / 238 B
    LAN udp 10.105.15.18:36106 -> 54.165.39.206:8800 NO_TRAFFIC:SINGLE 1/0 301 B / 0 B
    WAN1 udp wan1.public.ip.2:22646 (10.105.15.18:36106) -> 54.165.39.206:8800 SINGLE:NO_TRAFFIC 1/0 301 B / 0 B
    LAN udp 10.105.15.18:42065 -> 54.165.39.206:8800 SINGLE:MULTIPLE 1/1 301 B / 142 B
    WAN1 udp wan1.public.ip.2:27724 (10.105.15.18:42065) -> 54.165.39.206:8800 MULTIPLE:SINGLE 1/1 301 B / 142 B
    LAN udp 10.105.15.18:42187 -> 255.255.255.255:5050 NO_TRAFFIC:SINGLE 1/0 60 B / 0 B
    LAN udp 10.105.15.18:49863 -> 255.255.255.255:5050 NO_TRAFFIC:SINGLE 1/0 60 B / 0 B
    WAN1 tcp my.public.ip.107:63011 -> 10.105.15.18:37777 (wan1.public.ip.2:37777) SYN_SENT:ESTABLISHED 1/4 52 B / 208 B
    LAN tcp my.public.ip.107:63011 -> 10.105.15.18:37777 ESTABLISHED:SYN_SENT 1/4 52 B / 208 B
    WAN2 tcp my.public.ip.107:30218 -> 10.105.15.18:37777 (wan2.public.ip.121:37777) ESTABLISHED:ESTABLISHED 111/136 10 KiB / 16 KiB
    LAN tcp my.public.ip.107:30218 -> 10.105.15.18:37777 ESTABLISHED:ESTABLISHED 111/136 10 KiB / 16 KiB

    I am reading to find out what all this means.  Thanks for the replies Derelict.



  • So I read a little more on this.  What is pointed out as the culprit is asymmetric routing or clustering and load balancing.  Since I do not have the later, I thought I would read more on what asymmetric routing means.

    I found the following link:

    https://doc.pfsense.org/index.php/Asymmetric_Routing_and_Firewall_Rules

    and I tried the suggestions but they did not help.  In either case I do not have asymmetric routing on the first setup, as I only have one WAN.

    The second setup does appear to want to send data out via the WAN1, but I am still thinking it's not related to asymmetric routing as, when I do access the DVR successfully via WAN2, it does send some data over WAN1.

    Interestingly enough WAN1 is actually the default gateway for now.  I was going to setup fail over eventually but only after I got this issue resolved.

    I am still trying to figure this out.


  • LAYER 8 Netgate

    Please copy and paste the entire output of Status > Interfaces. PM if you like since it will contain lots of public addresses, etc. I'd rather see it without it being sanitized first.

    Thanks.


  • LAYER 8 Netgate

    Thanks. Was hoping you had somehow managed to create that WAN with no gateway set on it but that all looked fine.


  • LAYER 8 Netgate

    The next thing I would do is probably packet capture on the inside interface filtering on host my.public.ip.107 and attempting a connection.

    Then do the same thing capturing on WAN1 with the same filter.

    set level of detail to full and hit view capture. Feel free to PM those too.



  • I am actually connected to Site 2 remotely via an IPsec tunnel on the WAN_SPECTRUM interface, so there is probably some unnecessary info from my.public.ip in regards to esp.  But I am not certain what all this means.

    I PM'd a link for a longer and unsanitized text as well the individual capture files themselves.

    Packet Capture on WAN1 for an Unsucessfull Login via WAN_SPECTRUM
    21:48:01.573138 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 59362, offset 0, flags , proto ESP (50), length 192)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32bf), length 172
    21:48:01.607341 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 870: (tos 0x0, ttl 64, id 56377, offset 0, flags , proto ESP (50), length 856)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32c0), length 836
    21:48:01.624434 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 11063, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e46), length 76
    21:48:01.624505 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 5467, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e47), length 76
    21:48:01.902374 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
        SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.32393: Flags [S.], cksum 0x62c1 (correct), seq 4061187708, ack 868671390, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
    21:48:01.918075 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 12367, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e48), length 76
    21:48:01.918113 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 5445, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e49), length 76
    21:48:02.062160 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 1129, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e4a), length 500
    21:48:02.062209 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 40595, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e4b), length 500
    21:48:02.062271 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 17643, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32c1), length 76
    21:48:02.062297 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 32858, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32c2), length 76
    21:48:02.062914 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 44681, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e4c), length 500
    21:48:02.062960 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 41335, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32c3), length 76
    21:48:02.083563 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 63165, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32c4), length 748
    21:48:02.083744 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 2190, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32c5), length 748
    21:48:02.103987 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 3920, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32c6), length 748
    21:48:02.353930 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 49983, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e4d), length 76
    21:48:02.415826 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 14842, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e4e), length 76
    21:48:02.415891 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 11060, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e4f), length 76
    21:48:02.588850 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 18726, offset 0, flags , proto ESP (50), length 192)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32c7), length 172
    21:48:02.849218 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 43535, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e50), length 76
    21:48:02.933555 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 53125, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e51), length 500
    21:48:02.933637 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 33979, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32c8), length 76
    21:48:02.952636 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 60771, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e52), length 500
    21:48:02.952680 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 35784, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32c9), length 76
    21:48:02.954582 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 3244, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32ca), length 748
    21:48:02.974871 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 36488, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32cb), length 748
    21:48:02.975936 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 42486, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e53), length 500
    21:48:02.976013 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 8173, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32cc), length 76
    21:48:02.996443 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 24293, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32cd), length 748
    21:48:03.212866 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 24516, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e54), length 76
    21:48:03.240896 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 46698, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e55), length 76
    21:48:03.245666 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 17859, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e56), length 76
    21:48:03.588811 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 48578, offset 0, flags , proto ESP (50), length 192)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32ce), length 172
    21:48:03.695190 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 30879, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e57), length 76
    21:48:03.848473 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 50340, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e58), length 76
    21:48:03.902356 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
        SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.32393: Flags [S.], cksum 0x62c1 (correct), seq 4061187708, ack 868671390, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
    21:48:03.939479 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 116, id 29948, offset 0, flags , proto TCP (6), length 40)
        my.public.ip.107.32393 > SPECTRUM.WAN2.IP.2.37777: Flags [R.], cksum 0xdc77 (correct), seq 33, ack 1, win 0, length 0
    21:48:04.048163 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 4116, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e59), length 500
    21:48:04.048207 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 57764, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e5a), length 500
    21:48:04.048260 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 27186, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e5b), length 500
    21:48:04.048286 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 55162, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32cf), length 76
    21:48:04.048311 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 15264, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32d0), length 76
    21:48:04.048326 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 2134, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32d1), length 76
    21:48:04.069246 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 32303, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32d2), length 748
    21:48:04.089518 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 774: (tos 0x0, ttl 64, id 28301, offset 0, flags , proto ESP (50), length 760)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32d3), length 740
    21:48:04.102656 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
        SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.15111: Flags [S.], cksum 0x767c (correct), seq 315265685, ack 124081909, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
    21:48:04.102664 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
        SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.30465: Flags [S.], cksum 0x2ed2 (correct), seq 1094344914, ack 2207705542, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
    21:48:04.109813 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 3530, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32d4), length 748
    21:48:04.302344 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
        SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.10651: Flags [S.], cksum 0x1c10 (correct), seq 2309270649, ack 2765198498, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
    21:48:04.451786 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 58690, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e5c), length 76
    21:48:04.451851 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 50076, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e5d), length 76
    21:48:04.451918 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 10562, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e5e), length 76
    21:48:04.589509 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 116, id 29974, offset 0, flags , proto TCP (6), length 52)
        my.public.ip.107.18862 > SPECTRUM.WAN2.IP.2.37777: Flags , cksum 0xa374 (correct), seq 1861784227, win 65535, options [mss 1360,nop,wscale 2,nop,nop,sackOK], length 0
    21:48:04.598329 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
        SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.18862: Flags [S.], cksum 0xacb4 (correct), seq 2858095330, ack 1861784228, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
    21:48:04.604422 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 34589, offset 0, flags , proto ESP (50), length 192)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32d5), length 172
    21:48:04.874196 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 14171, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e5f), length 76
    21:48:05.017026 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 56861, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e60), length 500
    21:48:05.017066 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 56964, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e61), length 500
    21:48:05.017119 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 3827, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e62), length 500
    21:48:05.017138 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 1474, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32d6), length 76
    21:48:05.017155 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 41012, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32d7), length 76
    21:48:05.017172 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 7387, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32d8), length 76
    21:48:05.037843 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 61377, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32d9), length 748
    21:48:05.058494 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 41484, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32da), length 748
    21:48:05.078670 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 774: (tos 0x0, ttl 64, id 9913, offset 0, flags , proto ESP (50), length 760)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32db), length 740
    21:48:05.319178 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 42334, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e63), length 76
    21:48:05.344921 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 52335, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e64), length 76
    21:48:05.400953 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 41641, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e65), length 76
    21:48:05.604441 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 7314, offset 0, flags , proto ESP (50), length 192)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32dc), length 172
    21:48:05.902295 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
        SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.18862: Flags [S.], cksum 0xacb4 (correct), seq 2858095330, ack 1861784228, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
    21:48:05.925129 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 55265, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e66), length 76
    21:48:05.943879 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 36743, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e67), length 500
    21:48:05.943949 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 2848, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32dd), length 76
    21:48:05.964514 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 774: (tos 0x0, ttl 64, id 16873, offset 0, flags , proto ESP (50), length 760)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32de), length 740
    21:48:06.047883 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 37735, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e68), length 500
    21:48:06.047926 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 26141, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e69), length 500
    21:48:06.047981 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 57630, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32df), length 76
    21:48:06.047996 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 21489, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32e0), length 76
    21:48:06.068826 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 52487, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32e1), length 748
    21:48:06.089086 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 17202, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32e2), length 748
    21:48:06.224572 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 56305, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e6a), length 76
    21:48:06.334393 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 2127, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e6b), length 76
    21:48:06.352966 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 32537, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e6c), length 76
    21:48:06.604606 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 32978, offset 0, flags , proto ESP (50), length 192)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32e3), length 172
    21:48:06.868750 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 65326, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e6d), length 76
    21:48:06.939562 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 64749, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e6e), length 500
    21:48:06.939630 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 14906, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32e4), length 76
    21:48:06.949949 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 32458, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e6f), length 500
    21:48:06.949984 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 63458, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32e5), length 76
    21:48:06.960108 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 774: (tos 0x0, ttl 64, id 50780, offset 0, flags , proto ESP (50), length 760)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32e6), length 740
    21:48:06.973332 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 17862, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e70), length 500
    21:48:06.973371 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 5211, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32e7), length 76
    21:48:06.980463 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 31768, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32e8), length 748
    21:48:07.000910 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 46310, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32e9), length 748
    21:48:07.230656 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 1026, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e71), length 76
    21:48:07.238087 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 17207, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e72), length 76
    21:48:07.265137 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 46927, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e73), length 76
    21:48:07.620302 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 35834, offset 0, flags , proto ESP (50), length 192)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32ea), length 172
    21:48:07.881804 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 41899, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e74), length 76
    21:48:07.902307 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
        SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.18862: Flags [S.], cksum 0xacb4 (correct), seq 2858095330, ack 1861784228, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
    21:48:07.902322 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
        SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.32393: Flags [S.], cksum 0x62c1 (correct), seq 4061187708, ack 868671390, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
    21:48:07.902333 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
        SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.53054: Flags [S.], cksum 0xca96 (correct), seq 4131104112, ack 458515559, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
    21:48:07.928492 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 34523, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e75), length 500
    21:48:07.928560 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 63085, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32eb), length 76
    21:48:07.928620 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 116, id 30081, offset 0, flags , proto TCP (6), length 40)
        my.public.ip.107.18862 > SPECTRUM.WAN2.IP.2.37777: Flags [R.], cksum 0x266b (correct), seq 33, ack 1, win 0, length 0
    21:48:07.949045 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 47049, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32ec), length 748
    21:48:07.955502 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 16968, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e76), length 500
    21:48:07.955578 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 55006, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32ed), length 76
    21:48:07.964079 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 13401, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e77), length 500
    21:48:07.964113 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 53738, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32ee), length 76
    21:48:07.976025 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 19951, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32ef), length 748
    21:48:07.996370 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 21820, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32f0), length 748
    21:48:08.102305 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
        SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.61690: Flags [S.], cksum 0x883d (correct), seq 3079661535, ack 897148700, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
    21:48:08.300273 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 462: (tos 0x0, ttl 53, id 5058, offset 0, flags , proto ESP (50), length 448)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e78), length 428
    21:48:08.300355 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 42227, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32f1), length 76
    21:48:08.300982 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 39544, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e79), length 76
    21:48:08.301026 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 62708, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e7a), length 76
    21:48:08.588577 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 116, id 30110, offset 0, flags , proto TCP (6), length 52)
        my.public.ip.107.33861 > SPECTRUM.WAN2.IP.2.37777: Flags , cksum 0xc119 (correct), seq 3733899984, win 65535, options [mss 1360,nop,wscale 2,nop,nop,sackOK], length 0
    21:48:08.597402 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
        SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.33861: Flags [S.], cksum 0xfba2 (correct), seq 2172193403, ack 3733899985, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
    21:48:08.620198 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 7825, offset 0, flags , proto ESP (50), length 192)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32f2), length 172
    21:48:08.879996 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 1424, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e7b), length 76
    21:48:09.024080 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 41692, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e7c), length 500
    21:48:09.024127 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 54163, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e7d), length 500
    21:48:09.024177 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 64996, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e7e), length 500
    21:48:09.024196 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 52418, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32f3), length 76
    21:48:09.024214 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 7270, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32f4), length 76
    21:48:09.024231 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 30711, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32f5), length 76
    21:48:09.048622 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 42212, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32f6), length 748
    21:48:09.069110 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 50331, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32f7), length 748
    21:48:09.089807 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 774: (tos 0x0, ttl 64, id 6097, offset 0, flags , proto ESP (50), length 760)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32f8), length 740
    21:48:09.317553 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 34123, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e7f), length 76
    21:48:09.333496 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 35172, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e80), length 76
    21:48:09.346400 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 17610, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e81), length 76
    21:48:09.481787 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 870: (tos 0x0, ttl 64, id 52347, offset 0, flags , proto ESP (50), length 856)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32f9), length 836
    21:48:09.588976 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 48943, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32fa), length 76
    21:48:09.620244 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 16149, offset 0, flags , proto ESP (50), length 192)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32fb), length 172
    21:48:09.702186 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
        SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.33861: Flags [S.], cksum 0xfba2 (correct), seq 2172193403, ack 3733899985, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
    21:48:09.757907 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 11447, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e82), length 76
    21:48:09.773184 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 45400, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e83), length 76
    21:48:09.979312 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 38855, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e84), length 76
    21:48:09.979380 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 58601, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e85), length 500
    21:48:09.979432 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 9092, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e86), length 500
    21:48:09.979473 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 913, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32fc), length 76
    21:48:09.979494 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 37020, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32fd), length 76
    21:48:09.979528 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 60565, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e87), length 500
    21:48:09.979562 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 39074, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32fe), length 76
    21:48:10.000548 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 65225, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32ff), length 748
    21:48:10.020949 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 22139, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3300), length 748
    21:48:10.041310 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 13801, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3301), length 748
    21:48:10.258848 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 3446, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e88), length 76
    21:48:10.278817 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 53694, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e89), length 76
    21:48:10.284236 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 1131, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e8a), length 76
    21:48:10.467319 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 462: (tos 0x0, ttl 53, id 6548, offset 0, flags , proto ESP (50), length 448)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e8b), length 428
    21:48:10.467385 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 32209, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3302), length 76
    21:48:10.579946 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 462: (tos 0x0, ttl 53, id 1628, offset 0, flags , proto ESP (50), length 448)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e8c), length 428
    21:48:10.580029 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 37569, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3303), length 76
    21:48:10.636030 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 52015, offset 0, flags , proto ESP (50), length 192)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3304), length 172
    21:48:10.903408 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 34339, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e8d), length 76
    21:48:10.944470 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 759, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e8e), length 500
    21:48:10.944553 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 39576, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3305), length 76
    21:48:10.955645 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 34574, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e8f), length 500
    21:48:10.955713 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 698, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3306), length 76
    21:48:10.975971 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 118: (tos 0x0, ttl 53, id 24470, offset 0, flags , proto ESP (50), length 104)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e90), length 84
    21:48:10.976044 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 118: (tos 0x0, ttl 64, id 3944, offset 0, flags , proto ESP (50), length 104)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3307), length 84
    21:48:11.117586 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 27348, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e91), length 76
    21:48:11.117648 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 61755, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e92), length 500
    21:48:11.117694 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 53643, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3308), length 76
    21:48:11.339091 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 49027, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3309), length 76
    21:48:11.611107 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 33290, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x330a), length 748
    21:48:11.635899 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 34517, offset 0, flags , proto ESP (50), length 192)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x330b), length 172
    21:48:11.639759 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 878: (tos 0x0, ttl 64, id 2552, offset 0, flags , proto ESP (50), length 864)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x330c), length 844
    21:48:11.642272 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 14980, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x330d), length 748
    21:48:11.660617 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 50763, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x330e), length 748
    21:48:11.702116 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
        SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.33861: Flags [S.], cksum 0xfba2 (correct), seq 2172193403, ack 3733899985, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
    21:48:11.717696 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 878: (tos 0x0, ttl 64, id 58676, offset 0, flags , proto ESP (50), length 864)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x330f), length 844
    21:48:11.874805 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 12635, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e93), length 76
    21:48:11.893440 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 11862, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e94), length 76
    21:48:11.893487 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 56114, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e95), length 76
    21:48:11.895724 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 19146, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e96), length 76
    21:48:11.902075 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
        SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.18862: Flags [S.], cksum 0xacb4 (correct), seq 2858095330, ack 1861784228, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
    21:48:11.923456 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 136, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e97), length 76
    21:48:11.923566 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 116, id 30200, offset 0, flags , proto TCP (6), length 40)
        my.public.ip.107.33861 > SPECTRUM.WAN2.IP.2.37777: Flags [R.], cksum 0x7559 (correct), seq 33, ack 1, win 0, length 0
    21:48:11.939150 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 19069, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e98), length 500
    21:48:11.939218 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 51930, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3310), length 76
    21:48:11.960040 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 25949, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3311), length 748
    21:48:11.961153 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 11552, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e99), length 500
    21:48:11.961242 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 41334, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3312), length 76
    21:48:11.981644 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 3814, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3313), length 748
    21:48:12.044681 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 56281, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e9a), length 500
    21:48:12.044779 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 59962, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3314), length 76
    21:48:12.065219 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 2022, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3315), length 748
    21:48:12.102196 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
        SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.30465: Flags [S.], cksum 0x2ed2 (correct), seq 1094344914, ack 2207705542, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
    21:48:12.102211 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
        SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.26440: Flags [S.], cksum 0x3227 (correct), seq 243013139, ack 2774094309, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
    21:48:12.326283 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 57505, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e9b), length 76
    21:48:12.326365 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 11087, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e9c), length 76
    21:48:12.327835 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 53005, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e9d), length 76
    21:48:12.635879 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 46103, offset 0, flags , proto ESP (50), length 192)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3316), length 172
    21:48:12.774743 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 116, id 30226, offset 0, flags , proto TCP (6), length 52)
        my.public.ip.107.29126 > SPECTRUM.WAN2.IP.2.37777: Flags , cksum 0x0af7 (correct), seq 20017360, win 65535, options [mss 1360,nop,wscale 2,nop,nop,sackOK], length 0
    21:48:12.783555 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
        SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.29126: Flags [S.], cksum 0xcff7 (correct), seq 4239393996, ack 20017361, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
    21:48:12.930120 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 32147, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e9e), length 76
    21:48:12.935764 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 405, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e9f), length 500
    21:48:12.935838 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 57014, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3317), length 76
    21:48:12.955404 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 55279, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2ea0), length 500
    21:48:12.955455 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 46879, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3318), length 76
    21:48:12.956836 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 60685, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3319), length 748
    21:48:12.968938 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 4500, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2ea1), length 500
    21:48:12.968987 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 34403, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x331a), length 76
    21:48:12.976225 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 41656, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x331b), length 748
    21:48:12.989483 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 31076, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x331c), length 748
    21:48:13.222349 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 41230, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2ea2), length 76
    21:48:13.240758 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 24996, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2ea3), length 76
    21:48:13.256271 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 6140, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2ea4), length 76
    21:48:13.635929 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 15397, offset 0, flags , proto ESP (50), length 192)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x331d), length 172
    21:48:13.890693 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 29861, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2ea5), length 76
    21:48:13.943751 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 45368, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2ea6), length 500
    21:48:13.943827 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 25746, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x331e), length 76
    21:48:13.957049 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 64932, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2ea7), length 500
    21:48:13.957099 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 42449, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x331f), length 76
    21:48:13.964811 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 53407, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3320), length 748
    21:48:13.977005 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 3865, offset 0, flags , proto ESP (50), length 520)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2ea8), length 500
    21:48:13.977052 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 4605, offset 0, flags , proto ESP (50), length 96)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3321), length 76
    21:48:13.985269 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 47378, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3322), length 748
    21:48:14.005593 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 45714, offset 0, flags , proto ESP (50), length 768)
        SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3323), length 748
    21:48:14.101993 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
        SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.29126: Flags [S.], cksum 0xcff7 (correct), seq 4239393996, ack 20017361, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
    21:48:14.252037 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 1987, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2ea9), length 76
    21:48:14.252098 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 62225, offset 0, flags , proto ESP (50), length 96)
        my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2eaa), length 76
    21:48:14.265471 48:00:33:c0:74:08 > a0:36:9f:49:02


  • LAYER 8 Netgate

    I do not see that there is anything else to do. The failing pcap on WAN1 shows that everything that should be being done is being done.

    SYN received, port forwarded, SYN,ACK received on LAN, sent out WAN1, then nothing.

    This looks like something with the WAN1 circuit or upstream of it. Not sure what.

    Sorry.

    The money is in this packet capture: Packet Capture on WAN1 for an Unsucessfull Login via WAN_SPECTRUM.cap

    Wireshark filter: !(esp) && (tcp.port == 18862)

    Packet 54, 55, 71, 101, 106

    The SYN,ACK is being returned and then nothing is coming back. SYN,ACK retransmitted a couple times, then the stack gives up.

    Compare with this pcap: Packet Capture on WAN2 for a Sucessfull Login via WAN_ATT.cap

    Wireshark filter: !(esp) && (tcp.port == 60272)

    Note how the SYN and SYN,ACK are the same (that means the port forward is doing the same thing as on the other WAN), but it is immediately followed by an ACK, then the stream proceeds to transfer data….

    pfSense is doing everything it is supposed to be doing on WAN1. I really have nothing to recommend there except maybe going to Spectrum and asking whassup or looking upstream there to see what might be causing it to fail.

    ![Screen Shot 2017-07-18 at 1.59.01 AM.png](/public/imported_attachments/1/Screen Shot 2017-07-18 at 1.59.01 AM.png)
    ![Screen Shot 2017-07-18 at 1.59.01 AM.png_thumb](/public/imported_attachments/1/Screen Shot 2017-07-18 at 1.59.01 AM.png_thumb)
    ![Screen Shot 2017-07-18 at 2.02.01 AM.png](/public/imported_attachments/1/Screen Shot 2017-07-18 at 2.02.01 AM.png)
    ![Screen Shot 2017-07-18 at 2.02.01 AM.png_thumb](/public/imported_attachments/1/Screen Shot 2017-07-18 at 2.02.01 AM.png_thumb)



  • Derelict,

    I see exactly what you mean.

    I called Spectrum Business Internet (866-892-4249) and they denied there being any sort of firewall at first, but then they said the modem was not configured properly.  After a while the person whom I spoke with said he was re-configuring the modem (turning off the firewall on the modem) and restarting it.  After this it worked.  It turns out site one's WAN was also on Spectrum and the modem there was also "ill configured".  Anyways after they turned off the firewalls on those modems everything worked as expected.

    Thanks again for all your help and suggestions.  I certainly got some good troubleshooting experience.


  • LAYER 8 Netgate

    I received an email about Spectrum the other day. It was auto-corrected to Rectum.

    Glad you managed to complete the nearly-impossible task of getting an ISP to fix something.


Log in to reply