NAT, idle timers, and split tunnels · Visual

One-way audioSymptomThe agent hears thecaller. The caller hearsPhoneNATCount the NAT layers.Two is too many.FirewallUDPThe idle timer iscompared with 30FirewallSplitFive9 names are notexcluded.VPNRFC1918Private addresses aretranslated.VPNRTPSIP and RTP are bothallowed between theAdmin

Each hop has to pass media, not just the invite.

Sources and go deeper