I don't think a gatekeeper and/or proxy will help you.
Your problem is that:
1) If a call is made towards the device behind NAT, and you can't open any ports to it, the call won't succeed.
2) If a call goes the other way (from behind the nat to a device outside the nat) then the call may set up, but the RTP stream will be sent to a dynamically assigned port on the device inside the NAT. This will be sent to the address inside the NAT, which won't be reachable from outside even if the port was open. So you'll get one way audio at best.
Regardless of where you put the proxy/GK you will haave the same problem if the ATA is behind NAT and has no ports open inbound.
Aaron
Aaron
Please remember to rate helpful posts to identify useful responses, and mark 'Answered' if appropriate!