Ed12,
{(2901xxxx1|2901xxxx2)>(xx.):LI},{(2901xxxx1|2901xxxx2):aa},{ph}
The first rule means if a number is dialled in from either of those 290 Caller IDs, then route it directly to line. Second rule means a call from either of 290 Caller IDs with no digits send it to aa. Third rule means all other Caller IDs should ring the phone attached to the Obi.
To achieve the routing that you wish you must take charge of your
Voice Services -> OBiTALK Service -> InboundCallRoute. To do this in Expert Configuration uncheck both boxes to the right of the exisiting value, delete that value and replace as follows:
Choice 1 – If your Phone Port Primary Line is Service Provider 1:
Voice Services -> OBiTALK Service -> InboundCallRoute:
{(Mcot)>(Msp1):sp1},{(Mcot)>(<**1:>(Msp1)):sp1},{(Mcot)>(<**2:>(Msp2)):sp2},
{(Mcot)>(<**8:>(Mli)):li},{(Mcot)>(<**9:>(Mpp)):pp},{(Mcot):aa},{ph}
Choice 2 – If your Phone Port Primary Line is PSTN:
{(Mcot)>(Mli):li},{(Mcot)>(<**1:>(Msp1)):sp1},{(Mcot)>(<**2:>(Msp2)):sp2},
{(Mcot)>(<**8:>(Mli)):li},{(Mcot)>(<**9:>(Mpp)):pp},{(Mcot):aa},{ph}
In both cases set up a list of "Circle of Trust" and "Trusted Callers" like so:
User Settings -> User Defined Digit Maps -> User Defined Digit MapX:
Label : cot
DigitMap : (290123002|290123003|290123004)
Then you only have to change "cot" if you add or delete trusted Caller IDs.
You mention Voice Gateways. For example, if you have maybe a Voice Gateway 3 accessed by **3, then add a rule {(Mcot)>(<**3:>(Mvg3)):vg3} to the above.
If you do the above, then dialling from OBiON should be the same as dialling from the phone attached to the Obi. Given the unreliability of OBiON over 3G, it may be best to do any testing using a wifi connection.