The Aspire VoIP phones do not support NAT. Therefore you must have a VPN tunnel so you can gain access to your local LAN without using NAT. It is possible to not use VPN if you exposed the Aspire KSU and IP telephone to the world with external static addresses. I would highly recommend you DO NOT attempt this because anyone could connect to the KSU, make phone calls and your voice packets would no longer be secure.