AudioCodes Mediant 800B MSBR User Manual page 154

The figure below illustrates a typical network architecture where the remote UA is located
behind NAT:
16.8.2.2.1 First Incoming Packet Mechanism
In scenarios where the remote user agent (UA) resides behind a NAT server, it's possible
that the device, if not configured for NAT traversal, will send the media (RTP, RTCP and
T.38) streams to an invalid IP address / UDP port (i.e., private IP address:port of UA and
not the public address). When the UA is located behind a NAT, although the UA sends its
private IP address:port in the original SIP message (INVITE), the device receives the
subsequent media packets with a source address of a public IP address:port (i.e., allocated
by the NAT server). Therefore, to ensure that the media reaches the UA, the device must
send it to the public address.
The device identifies whether the UA is located behind NAT, by comparing the source IP
address of the first received media packet, with the IP address and UDP port of the first
received SIP message (INVITE) when the SIP session was started. This is done for each
media type--RTP, RTCP and T.38--and therefore, they can have different destination IP
addresses and UDP ports than one another.
You can configure the device's NAT feature to operate in one of the following modes:

Auto-Detect: NAT is performed only if necessary. If the UA is identified as being
located behind NAT, the device sends the media packets to the public IP address:port
obtained from the source address of the first media packet received from the UA.
Otherwise, the packets are sent using the IP address:port obtained from the first
received SIP message. Note also that if the SIP session is established (ACK) and the
device (not the UA) sends the first packet, it sends it to the address obtained from the
SIP message and only after the device receives the first packet from the UA, does it
determine whether the UA is behind NAT.

NAT Is Not Used: (Default) NAT feature is disabled. The device considers the UA as
not located behind NAT and always sends the media packets to the UA using the IP
address:port obtained from the first received SIP message.

NAT Is Used: NAT is always performed. The device considers the UA as located
behind NAT and always sends the media packets to the UA using the source address
obtained from the first media packet received from the UA. In this mode, the device
does not send any packets until it receives the first packet from the UA (in order to
obtain the IP address).
User's Manual
Figure 16-13: Remote UA behind NAT
154
Mediant 800B MSBR
Document #: LTRT-12813