H323 Remote Phone LAN2 Question

[Hovus]

Is it supported to have LAN2 plugged directly into one of the ISPs LAN ports and assign the LAN2 one of the 5 static public IPs on that ISP?

We've set up a few IPOs on R8+ behind a firewall and port forwarded RAS, STUN, and RTP ports to the LAN1 IP, but STUN always reports as "Blocking Firewall". We've also tried setting up a 1 to 1 NAT, still same thing. All the H323 and SIP ALG helpers have been disabled on the firewall. The direct connection to ISP is the only way we've been able to get this feature working.

The firewall we've been working with is a FortiGate 50B, 60C, and 80C.

 

[Hovus]

I have a customer reporting no audio on their 9620L remote phone. I booted a 9650 up in my office off their IPO, and Monitor is showing RTP streams using 49152. I can grab 2nd call appearence, RTP Session Monitor shows it uses RTP port 49154 and is getting 2-way audio.

I changed the RTP Port Number Range (Remote Extn) to be outside the normal RTP Port Number Range (53248-55000), but RTP Session Monitor still shows my 9650 uses 49152 and is getting no audio. My assumption is that because another IP phone is on a call using 49152, my remote phone using the same port isn't able to get audio, but why isn't my remote phone now using the new port range I specified??