No Ring

[chpalmer]

In my commercial routers I never port forward anything. Simply open firewall rules to allow incoming traffic.. But yes.

SIP can be 5078-5079 from Voipo usually. Mine are all 5060 as that is what Ive asked.

RTP depends on device. Grandsteam by default starts at 5004. My firewall rules are 5004-5059 (Grandsteam)

Linksys devices by default are 16384-16482 way overkill. When I have a Linksys/Cisco i mirror these in the firewall.

In normal operation, a gateway/access point is not in bridge mode. Hence my correct statement.

If the public IP is on the Calix device then anything behind it is behind NAT. If the Gargoyle device is in standard router mode then it is also a NAT device. Anything behind it is double NAT'd.

Not sure what I am missing?

If you look at your Voipo dashboard there is a page that shows connected devices.. https://account.voipo.com/features/devices

In my case-

3455551212

Username:3455551212

Received:sip:9x.1xx.1xx.1xx:5060

Contact:sip:3455551212@172.25.125.20:5060;user=pho ne

Expires:2017-12-31 18:04:04
User Agent:Grandstream HT-502 V1.2A 1.0.3.10
Connected To:VOIPo Central



Notice the Recieved IP address (which Ive obfuscated) is my public IP address. Received however contains my private space IP address. This is in the return SIP header. This is how the Voipo servers know where I am and where my device is behind NAT and why I do not need to port forward to get to them. This is also why I can run more than one ATA on port 5060 on my system. If I port forward 5060 to one ATA I cannot port it to another.

The reason Voipo and other companies tell you to port forward on a SOHO router is because this also opens up the corresponding firewall rule on that router as there is no way to do it separately. Im not sure if your running into the problem of trying to use more than one ATA or not but figured Id mention it. I do here. Only one of my customers also do.

When your double NAT'd your device and their servers can get very confused.

Based on your comment- "The Calix Access Point is the only device on a public IP" Im still assuming that your ATA(s) are double NAT'd.

[VOIPuser]

Double NAT increases security.?.

[GreenLantern]

Double NAT increases security.?.

No, not really. NAT was created to artificially add more IP addresses, since IPv4 is running out quickly.

One can argue that NAT adds a layer of "obfuscation" (difficulty by complexity), but NAT is only a trivial obstacle for any hacker that has already penetrated a network to that point.