Quote Originally Posted by VOIPuser View Post
The Calix Access Point is the only device on a public IP on the outside, as one would expect. All other devices are on private IPs.
That is actually not what everyone would expect. Many of my customers have gateway devices which have been put into bridge mode.

But this means your double NAT'd.

VOIP was not originally designed to be behind NAT in the first place let alone behind two NAT devices. Later implementations of the SIP standard added NAT capabilities and not very well in many cases.

If I were in your shoes I would either figure out how to put the Calix device in bridge mode if your not using any of its other features and let the Gargoyle router handle the firewall stuff..

or-

By a simple 5 port switch and put it in between the Calix device and the Gargoyle router and plug your ATA's into it as well. That takes out the second NAT.

https://www.amazon.com/s/ref=nb_sb_s...=2XN0I5ZI6G2IO