I use a ton of older VVX410 on 5.9.8 firmware, and I don't do any STUN. Some clients have static IPs, and some have Dynamic IPs. There was an issue with SIP ALG with some routers and modems some time ago, before I implemented TLS. Since then, it's been pretty much plug-and-play in any office...