This is one of the cases where forwarding the RTP port range is often required, as I’ve described in detail here: