Unless you have weird stuff, for example old Linksys phones or god forbid active SIP ALG’s anywhere, (poorly configured routers), all phones should register to your registration port, that’s what “registration” is all about. The connections generated and Asterisk’s SIP/NAT should sort it out,. Do you not do that right now for 5060 ?