Yes can make and recieve calls from external numbers with firewall on sr520 off. Turn it on and makes connection but no voice

.

uc520 15.0(1)XA  SR520 12.4(20)T3

Connections from and to external lines are sip with a fall back ISDN if sip doesnt work.

Andrew

OK, so we need to understand the topology.   Is the SR520 in front of the UC520 with the WAN interconnect and acting as the FW, NAT & SIP ALG? 

In this case, the UC520 FW should be off as well as NAT disabled.

Or is the tolology different?

Hello

Yes Correct and the nat and firewall are off on the uc500

I love the CCA topology view :-)   Nice!

So I dont think you have a problem.  The SIP INVITE will include the SDP message, and in it will be the negotiated of RTP ports, which the SIP ALG (on the SR520) needs to open.   The UC500 is not in play here, and shouldnt, as double NATs will do exactly what you say usually (no voice path).

SO you initial post is correct.  UC500 FW is off when you use a router/FW in front of it.

So sounds like you are working OK.  Correct?

But, if you are saying that the Call forwarding to a remote number (a mobile for example) is not working for SIP, then there may be something we can do there.

Who is the SIP Trunk Service Provider?

I dont think so

Shouldnt the firewall be switched on on the sr520 as that is directly connected to the internet.

When I turn it on thats when there is no voice ?

The firewall and nat are off on the uc 500

OK.   I understand better.

Check this out, this one shows ports to let throught the SR520

https://www.myciscocommunity.com/servlet/JiveServlet/previewBody/1519-102-1-1770/UC500_Firewall_v4.pdf

And this one describes your exact topology, but perhaps misses the ALG and ports

http://www.cisco.com/en/US/docs/net_mgmt/cisco_configuration_assistant/version1_8/quick/guide/English/UC500SR500.html

Ive tried opening the ports as detailed in your previous link but still get no voice

Attached couple of screen shots that may shed some light on whats wrong

Andrew