Home \ FAQs \ Network Test Errors \ My Xbox Live NAT is Strict or Moderate

Latest Updates

FAQs

My Xbox Live NAT is Strict or Moderate

( 21 Votes )

Details: Parent Category: Frequently Asked Xbox Live Questions; Created on Monday, 10 May 2010 08:27; Last Updated on Monday, 13 May 2013 14:45; Written by Administrator

nat

A Guide to Opening Xbox Live NAT

Do you have Xbox NAT issues? If when running the Xbox 360 Xbox Live test it reports "Your NAT type is Strict (or Moderate). People on networks with this NAT type may not be able to join certain games or hear other people while playing online." Please read this section as it provides guidance on ways to resolve this and show you how to get your Xbox 360 NAT Open.

A Lamens guide to NAT for the Xbox

Your NAT setting is responsible for just how much you can get out of Xbox live. If incorrectly set it means you may not be able to host games, chat to friends or only be able to join a smaller amount of games on-line.

First of all. A bit about the NAT status and what each one means

Xbox Live Open NAT

The optimum setting, you can play/talk with all other Xbox Live gamers * If the Xbox Live test says nothing about NAT when tested your NAT is Open

*(However in some cases other factors can still impact your gaming even when your NAT status is reported as Open)

Xbox Live Moderate NAT

traffic-yellow

Good, but not ideal. You can play/talk to other Xbox live gamers that have a NAT Status of Open and Moderate and no-one else

Xbox Live Strict NAT

traffic-red

This is the worst possible setup. You can play/talk to other Xbox live gamers that have a NAT Status of Open and no-one else

First things first, understand your own set-up!

There is no point jumping in and making lots of changes unless you fully understand your own set-up first otherwise it could result in wasted effort. There are many ways to connect to the Internet and some of the ways mean you'll be more susceptible to NAT issues than others. Read through the list below before doing any changes:-

Are you using a Public IP Address or a Private IP Address?

Go to this website:- http://www.whatismyipaddress.com

It will tell you the ip address you are using on the Internet, if the IP Address shown on that site is between 10.0.0.0 and 10.255.255.255 or between 172.16.0.0 and 172.31.255.255 or between 192.168.0.0 and 192.168.255.255 then you are using a private ip address and that will be the main cause of your NAT issue. The world has run out of ipv4 ip addresses so some Internet Service Providers especially WiFI providers and mobile ISP's 3G/4G are using private ip addresses and NAT'ing the connection themsevles. So if you are using a private ip address you will have to ask your ISP whether they can provide you with a public one or look to use another ISP because your ISP is already NAT'ing your connection and you cannot change this yourself.

If your IP address does not fall into the ranges I've stated above, read on.

Are you connecting your Xbox to a PC/Laptop?

If you are connecting your Xbox to a PC/Laptop and get a NAT status of Moderate or Strict. It is probably because your PC is connected to a router using an Ethernet cable or Wireless. And you are using ICS (Internet Connection Sharing).

In this setup, ICS is not the best method to use, as you will not get a NAT Status better than Moderate.

The best method to use, which will get you a NAT status of Open, is to use bridging (please refer to our ICS/Bridging Guide/Videos)

If you are connecting your Xbox to a PC and the PC is using a Personal Firewall (Mcafee/Zonealarm/Norton etc) and your NAT status is Strict or Moderate you will need to open the Xbox Live ports in your firewall, please contact your firewall vendor for assistance.

Please note no configuration is needed for the built in Windows XP/Vista Firewall

Are you connecting your Xbox to a PC/Laptop that uses a 3G USB modem?

Some mobile phone companies are offering Internet access via a 3G USB modem that talks to your mobile phone, you can use this to connect your Xbox to Xbox Live (via your PC), but it has been found that some setups like 3 Broadband give you a strict NAT, to date there is nothing you can do about this and this is because of the way the service is provided. 3G broadband providers usually allocate you a private IP Address and use carrier grade NAT and do the translation (NAT) to a public IP Address themselves outside of your control, leaving you with a strict NAT. So we do not recommend using this method at the moment.

Are you using Wireless Internet Broadband?

Not to be confused with Satellite broadband some people receive their Internet connection via an aerial or dish mounted on their roof which sends and recevies a signal to and from a wireless mast in their area in a similar way to mobile phones.

Whilst these connections can work with Xbox Live some WISP's (Wireless Internet Service Provider) use private ip addresses and carrier grade NAT meaning that the connection has already been NAT'd before it gets to you, this could cause NAT issues for Xbox live especially if you connect your own router to whatever device the ISP has supplied as you will be double NAT'ing

Are you "double NAT'ing"

Do you have a router connected to a modem? Some ISP's supply their own modem with their service and some of these devices actually have more functionality than a standard modem, they are in fact routers. If your "modem" is actually a router it will be NAT'ing your connection and then the router you connect to it will be NAT'ing it again - a "double NAT" is bad news for your Xbox

To check to see if you are suffering from a double NAT setup you will need to access your routers webpage , this is the router you are connecting to the ISP modem, your Netgear, Dlink, Linksys router , the one that is connected to your Xbox via Ethernet or Wireless.

Access its webpage menu and look at the router status page, you are looking for the Internet IP Address sometimes call the WAN IP Address, this is the address your modem is supplying the router with, if that ip address is between 10.0.0.0 and 10.255.255.255 or between 172.16.0.0 and 172.31.255.255 or between 192.168.0.0 and 192.168.255.255 then your "modem" is actually a router and will need bridging (see further down this FAQ for advice on how to do this for certain devices or contact your ISP)

Here are a few screenshots of the ip address you are looking for from popular routers, click to enlarge

Is your NAT Open but changes to moderate/strict over time?

This can be quite common when you are using UPnP, I won't go into too much detail as to why this happens but basically because the Xbox doesn't tell the router when its shutting down and to close the Xbox Live ports some routers don't bother to close the ports as they should and when the Xbox starts up again it might have a different IP address meaning it gets confused and means your NAT status may change. A temporary fix is just to reboot the router - simple. But if you want a more permanent fix you can ensure your Xbox gets the same IP address each time using DHCP reservation (if your router supports it) this will stop the problem occurring.

The example below is for a Netgear DG834G, you should be able to adapt this guide to your router:-

1. Start up the 360, and find out your MAC Address
2. Browse to your router's setup page usually http://192.168.0.1 (This guide is for a Netgear DG834G, read your router manual and substitute your own routers IP Address).
3. Go into LAN IP Setup. Note the DHCP address range (e.g 192.168.0.10 - 192.168.0.254), because you will be reserving an address from that range. Click on Address Reservation.
4. Type in the address you have chosen to reserve from the range (e.g. 192.168.0.20).
5. Type in the MAC Address you wrote down earlier.
6. Type in a name of the device Xbox 360 for example
7. Click on Add
8. Save the changes on your router. Now reboot the Xbox/360 and check the dashboard and make sure it has the ip address you have reserved for it.

Carrying out the above instructions will ensure your Xbox gets the same IP Address each time and should avoid this "drifting" NAT situation.

Are you Connecting two or more Xboxes to the same router and having NAT issues or disconnects?

First Xbox is Open NAT but others strict or moderate, or the others disconnect? look here

How to get your Xbox Live NAT Status to Open

So if you have looked at the set-ups above and have got this far you should be using a fairly standard set-up, now to get that NAT Open.

There are different ways to overcome a Strict/Moderate NAT setting when using a router. Please be aware, all of the methods have pro's and cons it is up to you which method you prefer and what works best for you. I have listed them in the order of ease of configuration:-

Use Certified Firmware. If you have an Xbox Live Certified router, use the certified firmware for your router, which can be downloaded from your router manufacturers website or we may have it archived here
Get the very latest version of firmware for your router from your router manufacturers website. it could contain vital fixes related to NAT
Use UPnP. If your router supports this, turn it on (see warning below). The router will work out the ports it needs to open for Xbox live. If your router does not have this feature, check the manufacturers website for the latest firmware. (also make sure port forwarding and/or DMZ is turned off as they interfere with UPnP and crucially ensure your Xbox IP Address is set to Auto)
Use Port Forwarding. You can assign your Xbox a Static IP Address (or reserve via DHCP) and forward the Xbox Live Ports to your Xbox.
Use Port Triggering (only available on some routers). A cross between UPnP and Port Forwarding and allows specific ports that you define to be opened/closed on demand to any device on your own network, you don't need to define the ip address of the Xbox unlike port forwarding so it will work with multiple end devices
Use a DMZ (De-militarized Zone) *

* The DMZ (De-militarized Zone) is an area that sits outside of your routers firewall. Don't worry though your not at risk with your Xbox but ensure the DMZ is set-up correctly

VERY IMPORTANT

Do not mix and match port forwarding Xbox Live ports with UPnP and/or DMZ. Each of the methods should be used on their own. Do not turn on UPnP and also DMZ or port forward the Xbox Live ports to your Xbox or you will run into problems as the router will become confused as you are using multiple options to do the same job.

So.... now you know your options, how do you get the NAT to Open?

UPnP

Consult your router documentation to find out how to turn it on.

Please be aware that UPnP is not secure and using it could present a risk to your network and devices, I am not saying that you should not use it, personally I believe the risks are low but you need to be aware of this fact before using it, please Google up UPnP and its risks and use your own judgement.

Don't be afraid of trying this on your own! For most routers turning on UPnP is very simple and straightforward.

Ensure your Xbox IP address is set to "auto" (Important)
Turn your router over and look at the exact model number
Go to your router manufacturers website and download the manual for your router, its usually in the support/download section, look for the "User Guide" and download it, its usually in Adobe Acrobat format so you may also need the Adobe reader from www.adobe.com
The manual for your router will tell you how to access your router settings via your web browser
Ensure you have no Port forwarding or DMZ settings configured for Xbox Live (you should know if you have any as you will have setup them up and also know how to turn them off) this setup is important as these two methods can interfere with UPnP
Locate the section in the manual telling you how to enable UPnP (just do a search for it in the Adobe Reader)
Turn on UPnP, save the settings
Reboot the router and Xbox and run the Xbox Live Test again, hopefully you now have an Open NAT.

If your NAT is not Open, look at the rest of this FAQ and see if your router is listed below for a specific guide, if you still have issues you may need to Port forward instead.

Port forwarding

If UPnP is not an option for you, or you have tried it and it does not work or you just don't want to use UPnP. Look up your router here then follow the instructions for Xbox Live 360 (if you do not want to buy their software skip the ad). When you use port forwarding the ip address that you need to forward the Xbox Live ports to is the ip address of the Xbox.

It is crucial to use a static ip address when port forwarding or reserve the same ip address for your Xbox which is a feature on some routers, see this section for more details. Also rather than use the Xbox Live ports listed on Portforward.com use these Xbox Live ports instead.

Port Triggering

Consult your router documentation to find out how to configure Port Triggering, you will need to trigger the Xbox Live ports

DMZ

Consult your router documentation to find out how to put your Xbox IP Address in the DMZ of your router. It is crucial to use a static ip address when using a DMZ, see this section for more details.

Guides for Specific Routers for an Xbox Live Open NAT

Netgear DG834G

DG834G

Most new Netgear routers will have an Open NAT status of out the box as the have UPnP turned on by default. So you should not need to do any of the following, always ensure you have the latest version of firmware for your router from the Netgear website.

If you do still have problems, the first thing you need to do is make sure the Xbox gets the same ip address each time it boots up, as the configuration of the DMZ is just one IP address.

If you don't lock your Xbox/360 down to the same ip address it might work now, but not later if another device takes that ip address.

Locate your Xbox 360 Wired/Wireless MAC Address to learn how to do this look here

The MAC Address will look something like this:-

00-0D-61-53-E2-52

Browse to your router's setup page usually 192.168.0.1 (This guide is for a Netgear DG834G, read your router manual and substitute your own routers IP Address).

Go into LAN IP Setup. Note the DHCP address range (e.g 192.168.0.10 - 192.168.0.254), because you will be reserving an address from that range. Click on Address Reservation.
Type in the address you have chosen to reserve from the range (e.g. 192.168.0.20).
Type in the MAC Address you wrote down earlier.
Type in a name of the device Xbox 360 for example
Click on Add
Save the changes on your router. Now reboot the Xbox/360 and check the dashboard and make sure it has the ip address you have reserved for it.

Now you need to put that reserved address into the DMZ.

Turn off UPnP (important)
On the routers setup page, click on WAN Setup. Put the IP address in the Default DMZ Server field (you can only actually type in the last octet of the address).
Ensure that the Default DMZ Server tick box is ticked.
Click on Apply. Save the changes. Reboot the router and try the Xbox live test again. Your NAT settings should now be Open.

Netgear WGR614, WGT624, WGU624, WGT634U & WPN824

wgt624

Generally with Netgear routers you do not need to use port forwarding or DMZ. So if you have set them up, turn them off now.

If your only requirement is to use one Xbox on your router, simply download the latest version of firmware from the Netgear website.

Ensure UPnP is on and DMZ or Port forwarding is turned off, this is very important. UPnP needs to be left to do the work on its own, forwarding ports or using a DMZ will interfere and not give the desired results.

If you need to use two or more Xboxes on your router (or you've tried the latest firmware and its still not Open) Look up and download the Xbox Live certified version of firmware here

If your firmware is no longer listed on the Netgear site we also now host most of the certified versions here

Using the certified version of firmware with your Netgear means you do not need to change any settings. So ensure any DMZ or Port forwarding settings are turned off and UPnP is turned on (it is by default)

Please note that on certain firmware versions of this router, it has been known for the Xbox live test to report a NAT status of Strict even after putting the Xbox in a DMZ.

Do not worry, your gaming should be fine, the settings is not strict its just the router mis-reporting the status. This can be fixed by getting the latest version of firmware for the router.

It has also been found on some version of Netgears "Trend Micro" can interfere with your NAT status, try disabling this feature if it is present.

As stated above you are best using UPnP, get the latest version of firmware for the router. Do not enable a DMZ or Port forwarding. And see if the NAT Status is Open.

If it isnt, try turning off UPnP, follow the instructions to get your Xbox MAC Address look here. Then follow the instructions below to configure the router:-
Open up your web browser on the PC and type in this:-

http://www.routerlogin.net
Login with the username of admin and password of password
Click on the LAN IP Setup
Click on the Add button
In the IP Address box, type in 192.168.1.20
Type the MAC Address of the Xbox 360 that you got above
Click Apply to enter the reserved address into the table.
Click on the WAN Setup
Look for the default DMZ server setting, change the last digit to 20 and then put a tick in the box, click on Apply.
Reboot the router and the Xbox 360 and it should now be all setup so you can access everyone’s games

Netgear DG834Nv1

DG834N

As per this post on our forum it has been known for the DG834Nv1 to have issues when using UPnP therefore it is recommended to configure the router as follows to avoid issues. Please check and use the latest version of firmware before carrying out the changes as you made find that since this guide was produced a later version of firmware has been released that fixes the problem.

Follow the instructions on Portforward.com for the router http://portforward.com/english/routers/port_forwarding/Netgear/DG834N/Xbox_Live_360.htm but ensure you forward all of the Xbox Live ports on this page iand not just the ones listed on Portforward.com
Disable UPnP on the router
Reboot the router and try again

Netgear WNDR3300

Users of this router may find they still have NAT issues even after enabling UPnP. If you have this issue make the followin changes:-

Access your routers menu by typing in 192.168.1.1 or http://www.routerlogin.net into your browser
Enter admin for the router user name and your password (or the default, password).
On the manu choose Advanced/WAN Setup
Find NAT Filtering, if it is currently set to Secured, choose Open
Click Apply
Wait 1 min
Restart your Router and Xbox and try the Xbox Live test again, if no NAT issues are reported your NAT is Open

BT Voyager 2109 Router users

voyager205

First of all you need to ensure that you are using a static IP Address in your Xbox:-

Settings/System/Network Settings
Choose Wired or Wireless
Configure Network
Choose IP Settings
Select Manual IP Address

Enter the following:-

IP Address: 192.168.1.35
Subnet Mask: 255.255.255.0
Default Gateway: 192.168.1.1

For DNS enter:-

DNS Server 1: 192.168.1.1 (or the real DNS server for your ISP)
DNS Server 2: 192.168.1.1 (or the real DNS server for your ISP)

Next you need to access the router using a PC or Mac browser. The address is http://voyager.home/
Click on the "advanced" menu option on the left hand side. If you are asked to login use the default username "admin" the password is the same "admin" (this assumes you haven't changed these yourself)
Click on the "Virtual Server" option. This gives you the option to allow all internet traffic for the 360/Xbox 1.
Click on the option "Forwarded to the DMZ host" - then type in the IP address you assigned to the Xbox 360 in step 1 (192.168.1.35 in my example)
Click "Apply" and you are done. You 360's NATs are now open and you can enjoy Xbox Live to the full.

(Credit to shinesevens of the OXM Forums for supplying the information for the Voyager 2109)

BT HomeHub (all models) Router

homehub homehub2

Please see this section

Linksys (most models)

linksys

Some of the Wireless G range of Linksys routers have had NAT issues for sometime now, recently Linksys have released new firmware for some models that fix these issues, therefore I suggest you download and use the latest version of firmware and reset the router back to factory defaults and check the outcome of the NAT status

Also some Linksys routers have a feature called "Filter Anonymous Internet Requests" this has been known to cause NAT issues, if you have this feature enabled try turning it off

Linksys E1000/E2000 (all of the E range) WRT160N/WRT320N (all of the WRT range) and Cisco Valet M10 and others in the Valet range

Linksys-E1000

(Please check you are using the latest version of firmware before carrying out these steps as the issue may have been resolved in later firmware)

This fix works for all recent Linksys and Valet routers, use this guide if UPnP or Portforwarding does not work for you

Some users of this router experience issues with a NAT status of Moderate, whilst UPnP alone or Port Forwarding or Port Triggering should resolve this problem this is not the case on some versions of firmware, therefore you need to put your Xbox in the DMZ of the router in a particular way as follows:-

Find the Xbox MAC Address by following this FAQ and note it down
Access your router http://192.168.1.1 leave the username blank and enter admin for the password (unless you have changed it)
Access the Network Setup Menu, and look at the DHCP Reservation area, if the Xbox is already connected and powered up it will show in the list and you can click on reserve (you will know if its your Xbox by the mac address you noted above) to reserve an ip address for the Xbox. If the Xbox isn't shown you should manually enter a reservation by inputting the mac address of the Xbox and an IP Address.
Make a note of the ip address you have reserved (whichever way you reserved it)
Ensure your Xbox ip address is set to auto (Settings/System/Network SettingsWired or Wireless/Configure Network)
Reboot the Xbox and ensure it gets the same ip address you have reserved for it above (important)
On the router go into Applications and Gaming > DMZ
Choose Enable DMZ
Leave Source IP Address as "Any IP Address"
For the destination address click on the DHCP Client table and find your Xbox mac address on that list (you noted the Xbox mac address earlier).
You MUST ensure it is the Xbox you have chosen to DMZ
Click save settings
Access the Administration > Management menu and Disable UPnP
Click save settings
Access the Security > Firewall menu and look for Filter Anonymous Internet Requests, untick this option
Click save settings
Reboot the router and re-run the Xbox Live test, this time there should be no complaints about moderate/strict NAT

As an added bonus why not configure your Linksys/Cisco Valet to prioritise Xbox traffic over other users on your network don't let their downloads/videos/sharing impact your gaming!

Linksys WRT310N WRT320N and WRT610N

Linksys-E1000

It has been found that even when running certified firmware on the above routers you will still fail to get an Open NAT on multiple Xboxes, to resolve this:-

Ensure UPnP is Enabled under Administration Management
Ensure any DMZ's or Port Forwarding configuration is not enabled
Ensure the Xbox IP Addresses are set to Auto
Go to Security/Firewall and ensure Filter Anonymous Internet Requests is unticked (if ticked untick it and save the settings)
Go to Applications & Gaming / Port Range Triggering and set the rules in the screenshot below (click to enlarge it)
Reboot the router and test your NAT settings/Join the same hosted games

Cick to enlarge

As an added bonus why not configure your Linksys to prioritise Xbox traffic cover other users on your network don't let their downloads/videos/sharing impact your gaming!

Belkin G Routers (most models)

belkin-7633

Depending on the model of router the menus/setting may differ slightly.

http://192.168.2.1/
System Settings
Locate the UPnP advanced feature at the bottom of the page
Select Change setting in that section
Click the Enable UPnP On Radio Button
Click Apply changes
Power off the router, wait 10 secs, power it back up again
Ensure your Xbox IP Address is set to auto
Run the Xbox live test and NAT should be Open

Belkin N/N+ Routers (most models)

belkin-n

Depending on the model of router the menu/settings may differ slightly. If you have already tried using UPnP and you are still having problems, try the settings below

First configure your Xbox to have a static IP address as follows on the Xbox dashboard

Settings/System/Network Settings/Wired or Wireless/Configure Network/IP Settings
Enter these details:-
- IP Address: 192.168.2.120
- Mask: 255.255.255.0
- Gateway: 192.168.2.1
Leave DNS on auto or if it fails put in 192.168.2.1

Now configure the router

Access your router menu from your browser http://192.168.2.1/
Login to the router, leave the password blank unless you have changed it
IMPORTANT If you have used port forwarding for Xbox live already remove that config now
Locate the DMZ menu in the Firewall section of the router menu
In the section that reads "IP Address of Virtual DMZ Host" enter 120 so that the whole IP address reads 192.168.2.120
Tick the enable box followed by Apply Changes
Wait 10 seconds
Power off the router, wait 10 secs, power it back up again
Run the Xbox live test and NAT should be Open, if you are still experiencing issues like drop outs from games, check to see if UPnP is enabled on the router, if it is try disabling it, save the settings reboot and try again.

ZyXEL Prestige 600 Series (also 660..etc)

zyxel

You need to enable UPnP to ensure this router has an Open NAT, there are three options to use and you need to use them all as follows:-

http://192.168.1.1/
Find the "UPnP" settings.
Enable the Universal Plug and Play(UPnP) Service
Enable Allow users to make configuration changes through UPnP
Enable Allow UPnP to pass through Firewall
Ensure your Xbox IP Address is set to Auto
Save the settings, Reboot the router and try again

SmartAX MT882 (Version 2)

smartax

First of all you need to ensure that you are using a static IP Address in your Xbox:-

Settings/System/Network Settings
Choose Wired or Wireless
Configure Network
Choose IP Settings
Select Manual IP Address

Enter the following:-

IP: 192.168.1.10
Subnet: 255.255.255.0
Gateway: 192.168.1.2
DNS 1: 192.168.1.2
DNS 2: 192.168.1.2

(If you get issues with DNS after making these changes try these settings instead

Gateway: 192.168.1.1
DNS 1: 192.168.1.1
DNS 2: 192.168.1.1)

Access your router's config page by clicking on one of the links below
http://192.168.1.2 or http://192.168.1.1
Enter Username = admin, Password = admin
Goto Advanced, then, disable UPnP, click save all
Goto Basic, then, goto your NAT settings
On DMZ create delete any current entries and make a new one. The Local IP From and Local IP To should be the same. This will be the IP address of your Xbox 360 (as above)
On NAPT delete any entries that are there, and make a new series of entries. Under the new entry, use the IP range of ALL IP addresses connected to that modem/router. e.g if your last device uses the IP Address. .140 use 192.168.1.2 as the From and 192.168.1.140 as the To. ENSURE it covers the whole of the ip addresses in use otherwise not all devices will work correctly or be NAT'ed.
On redirect delete any entries
Click back onto DMZ
Now Goto Tools, Save and Reboot,
Click save, wait for refresh, Click reboot, wait for refresh and re-enter user and password details (admin admin)
Your NAT status should now be Open

You should now have open NAT when you test you XBL settings.

If you still do not have an Open NAT I would recommend that you choose the factory reset option and follow the guide again. Please ensure you note down or have a copy of your ISP username/password before doing this as all settings will be lost.

(Credit to Shorum of our forum for supplying the information for the SmartAX MT882)

(Further credit to Shahmizzle of our forum for supplying the amendments to make this work for all)

Thompson Speedtouch 576 (and other models)

speedtouch576

Before carrying out the instructions below ensure you have the very latest firnware as you may not need to do the instructions below at all with the latest firmware

Click on http://speedtouch.lan/ or http://192.168.1.254/ to open up the router config page in your browser
The default username=Administrator
The default password is blank so just press enter (unless of course you've changed these settings from the defaults)
Click on the "Game and Application Sharing" menu
Untick the UPnP option
Click Apply
Ensure your Xbox IP Address is set to Auto
In the Home Network menu, click Devices.
In the Pick a task list, click Assign the public IP address of a connection to a device.
Click the Edit link of your Internet connection.
In the Device list, select the device you want to assign the public address to (The Xbox). You MUST ensure you select the Xbox and no other device
Click Apply.
The SpeedTouch™ prompts you to make some adjustments as a result of the new configuration.
Click OK.
After that, restart the Xbox and the router and try again
After saving Applying/Saving all settings you have changed, power off the router and Xbox. Wait 20 seconds and power up the router then then Xbox and your NAT should be Open and able to host/join games

Cisco PIX Firewall

pix

For Cisco PIX Firewall users:

Understanding Cisco firewalls is a more complex than your standard consumer type Linksys router. In order to get your PIX to allow your XBox NAT to be recognized as OPEN, you will need the following configs added to your PIX (in the third section replace 'xboxStaticIP' with the actual IP of your Xbox):

!
access-list outside_access_in permit udp any interface outside eq 3074
access-list outside_access_in permit tcp any interface outside eq 3074
access-list outside_access_in permit udp any interface outside eq 88
!
access-group outside_access_in in interface outside
!
static (inside,outside) tcp interface 3074 xboxStaticIP 3074 netmask 255.255.255.255 0 0
static (inside,outside) udp interface 3074 xboxStaticIP 3074 netmask 255.255.255.255 0 0
static (inside,outside) udp interface 88 xboxStaticIP 88 netmask 255.255.255.255 0 0
!

Save those configs to memory and rerun your Xbox Network Tests, you should see your NAT definition change from Moderate to OPEN.

Full credit to SkidrowCowboy of Teamxbox forums for this information.

Dlink DIR-615/DIR-300 (usually only needed for Virgin Media customers)

smalldir615

The DIR-615 and DIR-300 are very capable routers and should give an Open NAT out of the box, even Open NAT to multiple Xboxes when running Xbox Live certified firmware so please try UPnP and different firmware before carrying out the instructions below as you probably don't need to do this, the instructions below are aimed at Virgin Media customers in the UK who are running custom firmware (1.00vg). But you may also find these instructions work for you on other firmware versions where UPnP alone does not.

First of all you need to ensure that you are using a static IP Address in your Xbox:-

Settings/System/Network Settings
Choose Wired or Wireless
Configure Network
Choose IP Settings
Select Manual IP Address

Enter the following:-

IP Address: 192.168.0.80
Subnet Mask: 255.255.255.0
Gateway: 192.168.0.1

For DNS enter:-

DNS Server 1: 192.168.0.1
DNS Server 2: 192.168.0.1

Now make changes to your router, there are a few different ways to do this depending on the firmware you are using so I've documented three varations with a screenshot for each, use whichever set of instructions that matches your port forwardinf menu.

Variation 1

Enter http://192.168.0.1 into your web browser
Enter the user name (admin) and your password. Leave the password blank by default.
On your router click on Advanced/Advanced Network
Untick "Enable UPnP" and click save settings
Click Advanced/Port Forwarding
You now need to create a set of rules for Xbox live.
In the name type in Xboxrule1 Public Port 80 80 (put 80 in both of the fields)
On the line below enter the IP Address 192.168.0.80
Tick the box to the left of that rule and that rule is now complete
In the name type of the next rule type in Xboxrule2 Public Port 88 88 (put 88 in both of the fields)
On the line below enter the IP Address 192.168.0.80
Tick the box to the left of that rule and that rule is now complete
In the name type of the next rule type in Xboxrule3 Public Port 3074 3074 (put 3074 in both of the fields)
On the line below enter the IP Address 192.168.0.80
Tick the box to the left of that rule and that rule is now complete
In the name type of the next rule type in Xboxrule4 Public Port 3330 3330 (put 3330 in both of the fields)
On the line below enter the IP Address 192.168.0.80
Tick the box to the left of that rule and that rule is now complete
In the name type of the next rule type in Xboxrule5 Public Port 53 53 (put 53 in both of the fields)
On the line below enter the IP Address 192.168.0.80
Tick the box to the left of that rule and that rule is now complete
Ensure all of your new rules are ticked and click Add/Apply/Save Settings, wait until it has saved its changes
Reboot the router, wait 2mins
Reboot the Xbox and run the Xbox Live test and ensure your NAT is Open (no complaints about NAT means its ok)

Click on the image below (thanks BUSTA LIVE) to see a screenshot of the port forwarding rules as they should be set-up

Variation 2

Enter http://192.168.0.1 into your web browser
Enter the user name (admin) and your password. Leave the password blank by default.
On your router click on Advanced/Advanced Network
Untick "Enable UPnP" and click save settings
Click Advanced/Port Forwarding
You now need to create a set of rules for Xbox live.
In the name type in Xboxrule1 TCP 80 (set Schedule to Always)
On the line below enter the IP Address 192.168.0.80 UDP 88 (set Inbound Filter Allow All)
Tick the box to the left of that rule and that rule is now complete
In the name type in Xboxrule2 TCP 3074 (set Schedule to Always)
On the line below enter the IP Address 192.168.0.80 UDP 3074 (set Inbound Filter Allow All)
Tick the box to the left of that rule and that rule is now complete
In the name type in Xboxrule3 TCP 53 (set Schedule to Always)
On the line below enter the IP Address 192.168.0.80 UDP 53 (set Inbound Filter Allow All)
Ensure all of your new rules are ticked and click Add/Apply/Save Settings, wait until it has saved its changes
Reboot the router, wait 2mins
Reboot the Xbox and run the Xbox Live test and ensure your NAT is Open (no complaints about NAT means its ok) if NAT still fails try setting up another rule as above but for UDP 3330

Click on the image below to see a screenshot of the port forwarding rules as they should be set-up for this variation

Variation 3

Enter http://192.168.0.1 into your web browser
Enter the user name (admin) and your password. Leave the password blank by default.
On your router click on Advanced/Advanced Network
Untick "Enable UPnP" and click save settings
Click Advanced/Port Forwarding
You now need to create a single rule for Xbox live.
In the name type in Xboxrule TCP 53,80,3074 (set Schedule to Always)
On the line below enter the IP Address 192.168.0.80 UDP 53,88,3074 (set Inbound Filter Allow All)
Tick the box to the left of that rule and that rule is now complete
Ensure all of your new rules are ticked and click Add/Apply/Save Settings, wait until it has saved its changes
Reboot the router, wait 2mins
Reboot the Xbox and run the Xbox Live test and ensure your NAT is Open (no complaints about NAT means its ok) if NAT still fails try adding UDP 3330 to the rule you have created

Click on the image below to see a screenshot of the port forwarding rules as they should be set-up for this variation

Dlink DI-624 and DI-604 (rev A, B, & C)

di624

Access your router by entering http://192.168.0.1 into your web browser
Click on the Tool/Misc Menu
Ensure UPnP is enabled (see screenshot below)
Ensure Gaming Mode is enabled (see screenshot below)
Ensure DMZ and/or Portforwarding are not configured
Set your Xbox IP Address to Auto
Reboot the router and Xbox and try the NAT test again

Cick to enlarge

If you still experience problems after applying the configuration above and are using Revision C of the DI-624 use a certified version of firmware listed here using version 2.76 of the DI-624 firmware causes issues with Xbox live, if you are using this version downgrade to a certified version.

o2 Wireless box II/III

o2-wireless-router

Enter http://192.168.1.254 into your web browser. If you are prompted for a login the username is "Administrator" and the password is the serial number of your router which printed underneath the, don't include the bit in brackets.
Click Toolbox > Game & Application Sharing > Configure
Tick the option "Use UPnP"
Click Apply
IMPORTANT - Ensure there are no Application/Gaming Rules setup for Xbox live on the router
Ensure your Xbox IP Address is set to "Auto" in Settings/System/Network Settings/Wired or Wireless/Configure Network/IP Settings on the Xbox Dashboard
Reboot the router and Xbox and run the Xbox Live test to test your NAT settings

Important: The procedure above does work, however if you are still having NAT issues after carrying out the above you should contact o2 support as you are more than likely missing a vital firmware update on your router which I believe only o2 can provide for you.

You can also try going into the device list on the router and deleting all of the known devices (Xbox, PC's , iPhone etc) that exist on your network so the router can clear them out and re-learn them, this has also been known to resolve NAT issues when using UPnP

Embarq / Centurylink Zyxel 660 Modem (+ Router)

Many users of the 660 Modem that connect a router to it are falling foul of the same issue, the 660 is not just a modem it also has routing functions which mean when you connect a router to it you suffer a "double NAT" meaning no matter what you change on the router connected to it, it will make no difference as both devices at NAT'ing which is causing the issue.

Just to be clear if you are using the 660 on its own (no router attached) you don't need to change anything else, but if you are using a router connected to the 660 you should put the 660 into Bridge Mode, you can contact you ISP and ask them how to do this or you can do it youself by following this eHow (I would recommend you print the instructions)

*** VERY IMPORTANT *** When you follow the bridging gude you MUST click on release under WAN IP before you change to bridge mode, if you don't you will end up with DNS failures.

Windstream SpeedStream 4200/5200 or Gigaset/Sagem 4300 modem

speedstream4200

Windstream supply both the Speedstream and Gigaset/Sagem end devices, these both have routing and NAT functionality meaning if you connect a router behind either of these devices (and then your Xbox to the router) you will get a strict or moderate NAT because you are "double NAT'ing". To resolve this you need to put the Speedstream or Gigaset/Sagem into "Bridge Mode" and also configure your router for PPPoE. - Remember this is ONLY needed if you are connecting a router to this device

stopsign

Ensure you know your PPPoE details for your ISP and how to configure your router with your PPPoE details BEFORE proceeding otherwise you may end up cutting yourself off from the Internet, so make sure you have everything you need first prepared and ready. If in any doubt contact your ISP.

To configure your Speedstream into Bridge Mode look here
To configure your Gigaset/Sagem into Bridge Mode look here
For an example of the PPPoE changes required for your router (based on Linksys) look here or here
For an example of the PPPoE changes required for your router (based on Dlink) look here
For an example of the PPPoE changes required for your router (based on Netgear) look here

It is possible you made need to make futher changes to your router to resolve your NAT issue but when connecting a router to either the Speedstream or Gigaset/Sagem you must put them into Bridge mode or you will not solve your problem.

Earthlink DSL Zyxel P-660R-D1

Earthlink supply the Zyxel P-660R-D1 for their DSL based service this is actually a modem/router and has routing and NAT functionality meaning if you connect a router behind the Zyxel device (and then your Xbox to the router) you will get a strict or moderate NAT because you are "double NAT'ing". To resolve this you need to put the Zyxel into "Bridge Mode" and also configure your router for PPPoE. - Remember this is ONLY needed if you are connecting a router to this device

stopsign

To configure your Zyxel into Bridge Mode look here
For an example of the PPPoE changes required for your router (based on Linksys) look here or here
For an example of the PPPoE changes required for your router (based on Dlink) look here
For an example of the PPPoE changes required for your router (based on Netgear) look here

It is possible you made need to make futher changes to your router to resolve your NAT issue but when connecting a router to the Zyxel you must put it into Bridge mode or you will not solve your problem.

Motorola 2210 / Netopia 2210 (Bellsouth AT&T and others)

Bellsouth AT&T supply the Motorola 2210 / Netopia 2210 for their DSL based service this is actually a modem/router and has routing and NAT functionality meaning if you connect a router behind this device (and then your Xbox to the router) you will get a strict or moderate NAT because you are "double NAT'ing".

There are two ways to resolve this issue:-

IP Passthrough (easy fix)

Access the 2210 configuration menu
Select Advanced->Connection Configuration.
At the bottom of the page select "yes, use public ip address"
Save the settings
Restart the modem and router this should ensure your router gets the public ip address and any remaining NAT issues are down to the router

(Thanks to ChimpZealot for that tip!)

Bridge Mode (more complex fix)

To resolve this using Bridge mode you need to put the modem/router into "Bridge Mode" and also configure your router for PPPoE. - Remember this is ONLY needed if you are connecting a router to this device

stopsign

To configure your Motorola 2210 / Netopia 2210 into Bridge Mode look here
For an example of the PPPoE changes required for your router (based on Linksys) look here or here
For an example of the PPPoE changes required for your router (based on Dlink) look here
For an example of the PPPoE changes required for your router (based on Netgear) look here

It is possible you made need to make futher changes to your router to resolve your NAT issue but when connecting a router to the Motorola 2210 / Netopia 2210 you must put it into Bridge mode or you will not solve your problem.

Westell 6100 (Verizon DSL and others)

Verizon supply the Westell 6100 for their DSL based service this is actually a modem/router and has routing and NAT functionality meaning if you connect a router behind this device (and then your Xbox to the router) you will get a strict or moderate NAT because you are "double NAT'ing". To resolve this you need to put the modem/router into "Bridge Mode" and also configure your router for PPPoE. - Remember this is ONLY needed if you are connecting a router to this device

stopsign

To configure your Westell 6100 into Bridge Mode look here
For an example of the PPPoE changes required for your router (based on Linksys) look here or here
For an example of the PPPoE changes required for your router (based on Dlink) look here
For an example of the PPPoE changes required for your router (based on Netgear) look here

It is possible you made need to make futher changes to your router to resolve your NAT issue but when connecting a router to the Westell 6100 you must put it into Bridge mode or you will not solve your problem.

Actiontec PK5000 Q1000 GT701WG M1000 (Qwest and others)

pic-modem-pk5000 pic-modem-q1000 pic-modem-gt701wg pic-modem-m1000

Qwest supply various the Actiontec modems for their DSL based service but they are actually a modem/routers and have routing and NAT functionality meaning if you connect a router behind this device (and then your Xbox to the router) you will get a strict or moderate NAT because you are "double NAT'ing". To resolve this you need to put the modem/router into "Bridge Mode" and also configure your router for PPPoE. - Remember this is ONLY needed if you are connecting a router to these devices

stopsign

Ensure you know your PPPoE details for your ISP (i.e. username=username @ qwest.net) and how to configure your router with your PPPoE details BEFORE proceeding otherwise you may end up cutting yourself off from the Internet, so make sure you have everything you need first prepared and ready. If in any doubt contact your ISP.

To configure your Actiontec PK5000 into Bridge Mode look here
To configure your Actiontec Q1000 into Bridge Mode look here
To configure your Actiontec GT710WG into Bridge Mode look here
To configure your Actiontec M1000 into Bridge Mode look here
For an example of the PPPoE changes required for your router (based on Linksys) look here or here
For an example of the PPPoE changes required for your router (based on Dlink) look here
For an example of the PPPoE changes required for your router (based on Netgear) look here

It is possible you made need to make futher changes to your router to resolve your NAT issue but when connecting a router to these Actiontec routers you must put it into Bridge mode or you will not solve your problem.

Zoom X6

You must assign a static IP address on the Xbox 360 that it is outside of the Zoom X6 router's DHCP pool. Also, the Xbox 360 must be in a DMZ. This will prevent the firewall of the router from blocking connections to the Xbox 360.

1. Assign a Static IP address on the Xbox 360 console:

Power on your Xbox 360 and go to Settings/System/Network Settings/Wired or Wireless/Configure Network
Select IP Settings. The Edit IP Settings screen opens.
Select Manual and then enter the following settings:
- IP Address: 10.0.0.150 (or any 10.0.0.x IP address, where x is between 100 and 250)
- Subnet Mask: 255.255.255.0
- Gateway: 10.0.0.2

Select Done, to go back to the Edit Settings screen.

Select DNS Settings. The Edit DNS Settings screen opens.
Select Manual and then enter the following setting:
- Primary DNS Server: 10.0.0.2
- It is not necessary to enter a Secondary DNS Server.
Select Done.
Power down your Xbox 360.

2. Access the Zoom Configuration Manager:

From a computer that is connected to the Zoom X6, open a web browser and type http://10.0.0.2 in the address line and then press Enter (or Return).
Enter the User Name and Password (in lowercase letters):
- User Name: admin
- Pasword: zoomadsl (where "l" is a lowercase letter L)

3. Create a Virtual Server rule to put the Xbox 360 on a DMZ:

In the Zoom Configuration Manager, click on the Advanced Setup icon at the top page.
Click on the Virtual Server/DMZ button.
On the Virtual Server/DMZ page, enter the following settings:
- Internal IP Address: 10.0.0.150 (or whichever Static IP address you selected per Step 1)
- Protcol: DMZ
- Start Port: 0
- End Port: 0
Click Save Changes
Click the Enable box, if you have this option.
Click Write Settings to Flash
Restart the router and your Xbox and re-run the Xbox Live Connection test, if there are no complaints about NAT your NAT is Open

Netcomm NB6Plus4W

Access the router menu via your web browser by entering 192.168.1.1 and go into the Advanced Configuration menu and look for "Local Network – DHCP Server"
Click on "Reserved IP Address List"
Click Add
In the first box enter the mac address of your Xbox to fnd your Xbox mac address look here
In the Assigned IP Address box enter 192.168.1.100
Click Apply/Close and then restart your Xbox and go into your Xbox network settings and confirm your ip address is now 192.168.1.100
On the router menu choose Advanced/Local Network/UPnP untick the "Enable UPnP" selection box (so it is disabled) and click Apply
At this stage you have a choice to use portforwarding or a DMZ. Only choose to configure one not both!
If you would like to configure portforwarding look here and forward to the ip address of 192.168.1.100 then power off the router and Xbox and power them both up again (router first) and then your NAT/connectivity issues should be resolved
If you would like to configure a DMZ on the router menu choose Advanced/Virtual Server/DMZ Host click on the radio button "Forwarded to the DMZ host radio button" and in the box enter 192.168.1.100 followed by Apply/Close then power off the router and Xbox and power them both up again (router first) and then your NAT/connectivity issues should be resolved

Sagem F@st 2804

Access your router by entering 192.168.1.1 into your browser
Go to Advanced Settings/UPnP turn off UPnP and click Appy/Save
Ensure there are no port forwarding rules set-up already for the Xbox live ports, if there are remove them now
Go to Advanced Settings/LAN change the DHCP Server End IP Address from 192.168.1.254 to 192.168.1.200 click Apply/Save
Go to Advanced Settings/NAT DMZ Host enter 192.168.1.210 into the DMZ Host IP Address click Apply/Save
Wait 20 secs
Power off the router
Wait 10 secs
Power on the router
Manually change the Xbox ip address to

IP Address: 192.168.1.210
Subnet Mask: 255.255.255.0
Gateway: 192.168.1.1
DNS: 192.168.1.1

Run the Xbox live connection test there should be no complaints about NAT anymore

MiFi 586 (3 and other Mobile Networks)

Full credit goes to ConnerWillis for this strange! but great guide nonetheless, as Conner says its not perfect but it does work. Please bear in mind it won't be possible to get an Open NAT if your Mobile ISP supplies you with a private ip address, but if yours is a public ip address like on the 3 network this should work fine

Reset your MIFI to default settings, ensure you have any important information noted down before doing this as you will loose any configurations you have made since you got the Mifi
Turn off Firewall (please ensure you have other protection for your PC and other devices on the network)
Go into"Special Applications" and open the ports like this, ensure you create them in this order:-
1. Xbox LIVE (Status On) 80 TCP TCP 80
2. Xbox LIVE 1 (Status On) 88 UDP UDP 88
3. Xbox LIVE 2 (Status On) 3074 TCP TCP 3074
4. Xbox LIVE 3 (Status On) 3074 UDP UDP 3074
5. Xbox LIVE 4 (Status On) 53 TCP TCP 53
6. Xbox LIVE 5 (Status On) 53 UDP UDP 53
Turn UPnP
Set your Xbox ip address and DNS settings to automatic.
Then turn the MIFI off wait 10 seconds and then back on again
When you have done that you need to do this "Everytime" you want a Open NAT.
Turn on the MIFI and then the Xbox, it will sign in as normal. ** IMPORTANT ** Leave it there for 1 minute (maybe longer). You then need to go to test connection and the NAT will come up as Strict, leave it at that screen for 1-2 minute and test again, it should come up as moderate, again leave it at that screen for another 1-2 minute and test again, it should come up as Open now. You will need to do this every time you want a Open NAT. Make sure that there is a 1-2 min gap between tests as it will come up as the same NAT.

Click to Zoom

Tried everything above and still have issues - Time for a clear out!

The information above does work but sometimes its worth clearing the decks and starting afresh, if you are still having issues try resetting your Xbox network settings back to factory defaults and then try the information above again.

Tried everything above and still have issues - Are you double NAT'ing?

One problem you could be experiencing is "double NAT". That's where two devices on the same network are carrying out NAT and your Xbox's NAT status ends up in a mess.

This usually applies to people who have a separate router and modem.

So in theory you could follow all of the instructions above to change your router to get a NAT of Open but it still ends up as moderate or strict.

If this is the case you need to check the modem that connects to your ISP. Until now many modems were just dumb devices so this wasn't an issue. Now some ISP's are providing modems with some routing functionality, including NAT. Which can mess things up for you.

If you have a separate modem from your router you need to look up details on the modem on the internet and find out if it has routing functionality. An easy way to check this is by doing this:-

Connect your Xbox directly to the modem (bypassing the router) via Ethernet
Power off the modem
Wait 1 min
Power on the modem
Wait 1 min
Power up the Xbox
On the Xbox go into Settings/System/Network Settings and look at the IP Address of the Xbox
If the IP Address the Xbox has been assigned starts with 192. or 10 then your modem is actually more than just a modem and is running NAT which when connected to a router (also running NAT) causes a problem, to resolve this you need to put the modem info bridge mode, contact your ISP for details or google up a guide on how to do this for your specifc modem, please ensure you know how to reverse the bridge in case you have issues
To put your set-up back to how it was before (whether you've bridged or not) ensure you power off the modem before reconnecting everything back up

Also some Linksys routers have a feature called "Filter Anonymous Internet Requests" this has been known to cause NAT issues, if you have this feature enabled try turning it off

Its just not happening I need one to one help with my router/setup to get my Xbox Live NAT Open

angry2

If your face looks like this join our forum and post your problem and we'll do our best to help. If your router is not listed above and you think we should create a step by step guide for it post your details on the forum.

Click here to access the forum

Does your router support Two Xboxes or more with Open NAT's? We'd love to know!

If your router supports two or more Xboxes with an Open NAT please let us know in this forum post, you will be helping the Xbox community by sharing this vital information

Does your router support One Xbox with an Open NAT using just UPnP alone? We'd love to know!

If your router does support one with an Open NAT by just using UPnP alone (no portforwarding or a DMZ) please let us know in this forum post, you will be helping the Xbox community by sharing this vital information