Thanks for the clue,
I just tested using Wireshark and doesn't works at the first until I found out that I have to use HUB instead of switch.
From the VOIP Call and RTP Stream capture, I found few interesting result on my IPX Office box.
1. Call MGCP(T207M) to MGCP(T207M) will take TCP 3932 and UDP 16400 (RTP)
2. MGCP to SIP(ATA186) will take TCP 5932 and UDP 16400
3. SIP to MGCP will take TCP 5932 and UDP 16400-16700, this UDP will keep change and going up until 16700 and back start from 16400 for any new SIP to MGCP call.
4. SIP to external call will forward to UGW(IPX Office second IP) and UDP 16400-16700(dynamicaly change)
5. Incoming call (from external) to SIP it will take TCP 5932 and 2 UDP ports between 16400-16700

I haven't check with my branch office, but at now I know what's going on during SIP call.

Thanks
Dendiko