Patch Limitations
Any two or more channels in the ICE system can be patched together. Active telephone calls can be included in a patch as well. There are two primary limitations that a user should be aware of when creating a patch:

Channels participating in a patch must be be configured to use the same duplex mode: half-duplex channels may only be patched with other half-duplex channels; full-duplex channels must be patched with other full-duplex channels. Telephone calls are treated as full-duplex channels.

A channel (or telephone call) cannot participate in multiple
active patches simultaneously. This restriction exists to assure that audio loops cannot occur in the network. Note that a channel may, however, participate in multiple inactive patches (enabling a patch administrator to stage various patch configurations ahead of their needed use and activate them only once necessary).
Aside from these limitations, there are no restrictions on which channels can be patched together. In particular, it's worth noting that channels do not have to be configured to use the same codec, nor do they have to use the same encryption mode or key. Be aware, however, that patching an encrypted channel with an unencrypted channel has the effect of making encrypted audio available 'in the clear' as its delivered on channels configured without encryption.