Asterisk behind NAT, no audio both two ways, nightmare @@

Hi guys. i’m newbie so please help me solve this problem.
I’m using AsteriskNOW v3.0 on Esxi 5.0 (it doesn’t matter)
Asterisk is behind NAT like this:

Asterisk =========> Vigor 2910G (public IP: 115.78.x.x)
10.0.0.235/25----------10.0.0.1/25

On Asterisk:
I’ve already set NAT yes, External IP & localnet as well in SIP Seting using freepbx web gui.
On 2910G:
I open port range 0 - 65000 for 10.0.0.235
also set address mapping all protocol to 10.0.0.235

Problem is that internal call is ok. but if one phone (i use softphone, Zoiper Free) is from local, and one is from the internet or both from the internet, the call is established, but no sound at all.

I’ve tried to debug RTP and got this:

  1. when 2 phones in local:
    Got RTP packet from 10.0.0.115:33000 (type 00, seq 038648, ts 3632297283, len 000160)
    Sent RTP packet to 10.0.0.107:10000 (type 00, seq 059309, ts 3632297280, len 000160)
    Got RTP packet from 10.0.0.115:33000 (type 00, seq 038649, ts 3632297443, len 000160)
    Sent RTP packet to 10.0.0.107:10000 (type 00, seq 059310, ts 3632297440, len 000160)
    Got RTP packet from 10.0.0.107:10000 (type 00, seq 026745, ts 1503481586, len 000160)
    Sent RTP packet to 10.0.0.115:33000 (type 00, seq 036400, ts 1503481584, len 000160)
  2. When 1 from local, 1 from internet:
    (10.0.0.115 is from local. 10.0.0.52 from the internet with public IP: 113.161.x.x, i dont know why it didn’t use 113.161.x.x instead of 10.0.0.52)
    Sent RTP packet to 10.0.0.52:5048 (type 00, seq 015462, ts 246202352, len 000160)
    Got RTP packet from 10.0.0.115:33000 (type 00, seq 053395, ts 246202512, len 000160)
    Sent RTP packet to 10.0.0.52:5048 (type 00, seq 015463, ts 246202512, len 000160)
    Got RTP packet from 10.0.0.115:33000 (type 00, seq 053396, ts 246202672, len 000160)
    Sent RTP packet to 10.0.0.52:5048 (type 00, seq 015464, ts 246202672, len 000160)

Any ideas?
thanks guys for reading.

anyone helps me !!!

10.0.0.235/25 and 10.0.0.1/25 are not in the same network.

what do you mean? why not?

i’m sorry, i’m mistaken, subnetmask /24 not /25

I am sure you have some type of ALG or SIP gateway turned on in the Vigor.

No, there’s only my asterisk using this Vigor and of course I nat all for my asterisk

You sure the Vigor does not have a SIP ALG in it?
http://support.draytek.net.au/index.php?/Knowledgebase/Article/View/409/9/do-vigor-routers-support-sip-alg

I turned it of, but it didn’t change anything, what should i do?