
protected LAN. STUN will not work for all NATs and not for really
secure firewalls and may have some scalability and security issues.
The SIP client has to implement STUN and integrate it in the SIP
stack to make it work.
There are also various tunneling approaches, creating a tunnel
through the firewall and then having an ALG in a central place at the
SIP operator to cope with the separate address space of the private
LANs and their individual users. Special equipment is, therefore,
required at the SIP operator, and sometimes special equipment and
software are required on the LAN or in the SIP clients. With this
approach, the users get locked into a ...