Forcing rport in appropriate sofia profile will usually do it ... uncomment NDLB-force-rport and restart the profile. In a certain rare situation I had to fill out the phone's <nat/> tag dynamically when it provisioned. For small environments you could manually assign each phone a signal port .... yay polycom? x_X