Home FAQs My Xbox Live NAT is Strict or Moderate

Choose Your Language

Please visit our donation page

pp_donate2
mod_vvisit_countermod_vvisit_countermod_vvisit_countermod_vvisit_countermod_vvisit_countermod_vvisit_countermod_vvisit_countermod_vvisit_countermod_vvisit_counter
mod_vvisit_counterToday1159
mod_vvisit_counterYesterday1404
mod_vvisit_counterThis week2563
mod_vvisit_counterLast week11297
mod_vvisit_counterThis month10783
mod_vvisit_counterLast month51043
mod_vvisit_counterAll days433822

We have: 14 guests, 5 bots online
 
My Xbox Live NAT is Strict or Moderate
( 31 Votes )
Monday, 10 May 2010 08:27

nat


If when running the Xbox 360 Xbox Live test it reports "Your NAT type is Strict (or Moderate). People on networks with this NAT type may not be able to join certain games or hear other people while playing online." Please read this section as it provides guidance on ways to resolve this and show you how to get your Xbox 360 NAT Open.

 

A Lamens guide to NAT for the Xbox


Your NAT setting is responsible for just how much you can get out of Xbox live. If incorrectly set it means you may not be able to host games, chat to friends or only be able to join a smaller amount of games on-line.

First of all. A bit about the NAT status and what each one means

Open

 

traffic-green


The optimum setting, you can play/talk with all other Xbox Live gamers * If the Xbox Live test says nothing about NAT when tested your NAT is Open

*(However in some cases other factors can still impact your gaming even when your NAT status is reported as Open)

Moderate

traffic-yellow


Good, but not ideal. You can play/talk to other Xbox live gamers that have a NAT Status of Open and Moderate and no-one else

Strict

traffic-red


This is the worst possible setup. You can play/talk to other Xbox live gamers that have a NAT Status of Open and no-one else

 

Does your router support Two Xboxes or more with Open NAT's? We'd love to know!

If your router supports two or more Xboxes with an Open NAT please let us know in this forum post, you will be helping the Xbox community by sharing this vital information

 

Does your router support One Xbox with an Open NAT using just UPnP alone? We'd love to know!

If your router does support one with an Open NAT by just using UPnP alone (no portforwarding or a DMZ) please let us know in this forum post, you will be helping the Xbox community by sharing this vital information



 



Are you connecting your Xbox to a PC/Laptop?

ics


If you are connecting your Xbox to a PC/Laptop and get a NAT status of Moderate or Strict. It is probably because your PC is connected to a router using an Ethernet cable or Wireless. And you are using ICS (Internet Connection Sharing).

In this setup, ICS is not the best method to use, as you will not get a NAT Status better than Moderate.

The best method to use, which will get you a NAT status of Open, is to use bridging

If you are connecting your Xbox to a PC and the PC is using a Personal Firewall (Mcafee/Zonealarm/Norton etc) and your NAT status is Strict or Moderate you will need to open the Xbox Live ports in your firewall, please contact your firewall vendor for assistance.

Please note no configuration is needed for the built in Windows XP/Vista Firewall

Are you connecting your Xbox to a PC/Laptop that uses a 3G USB modem?

3g


Some mobile phone companies are offering Internet access via a 3G USB modem that talks to your mobile phone, you can use this to connect your Xbox to Xbox Live (via your PC), but it has been found that some setups like 3 Broadband give you a strict NAT, to date there is nothing you can do about this and  this is because of the way the service is provided. 3G broadband providers usually allocate you a private IP Address and use carrier grade NAT and do the translation (NAT) to a public IP Address themselves outside of your control, leaving you with a strict NAT. So we do not recommend using this method at the moment.

Are you using Wireless Internet Broadband?

wireless-broadband

 

Not to be confused with Satellite broadband some people receive their Internet connection via an aerial or dish mounted on their roof which sends and recevies a signal to and from a wireless mast in their area in a similar way to mobile phones.

 

Whilst these connections can work with Xbox Live some WISP's (Wireless Internet Service Provider) use private ip addresses and carrier grade NAT meaning that the connection has already been NAT'd before it gets to you, this could cause NAT issues for Xbox live especially if you connect your own router to whatever device the ISP has supplied as you will be double NAT'ing

 

Is your NAT Open but changes to moderate/strict over time?

This can be quite common when you are using UPnP, I won't go into too much detail as to why this happens but basically because the Xbox doesn't tell the router when its shutting down and to close the Xbox Live ports some routers don't bother to close the ports as they should and when the Xbox starts up again it might have a different IP address meaning it gets confused and means your NAT status may change. A temporary fix is just to reboot the router - simple. But if you want a more permanent fix you can ensure your Xbox gets the same IP address each time using DHCP reservation (if your router supports it) this will stop the problem occurring.

 

The example below is for a Netgear DG834G, you should be able to adapt this guide to your router:-

 

  1. Start up the 360, and find out your MAC Address by following this FAQ
  2. Browse to your router's setup page usually http://192.168.0.1 (This guide is for a Netgear DG834G, read your router manual and substitute your own routers IP Address).
  3. Go into LAN IP Setup. Note the DHCP address range (e.g 192.168.0.10 - 192.168.0.254), because you will be reserving an address from that range. Click on Address Reservation.
  4. Type in the address you have chosen to reserve from the range (e.g. 192.168.0.20).
  5. Type in the MAC Address you wrote down earlier.
  6. Type in a name of the device Xbox 360 for example
  7. Click on Add
  8. Save the changes on your router. Now reboot the Xbox/360 and check the dashboard and make sure it has the ip address you have reserved for it.
Carrying out the above instructions will ensure your Xbox gets the same IP Address each time and should avoid this "drifting" NAT situation.

Are you Connecting two or more Xboxes to the same router and having NAT issues or disconnects?

2xbox


First Xbox is Open NAT but others strict or moderate, or the others disconnect? look here

General options for getting your NAT Status to Open


There are different ways to overcome a Strict/Moderate NAT setting when using a router. Please be aware, all of the methods have pro's and cons it is up to you which method you prefer and what works best for you. I have listed them in the order of ease of configuration:-

  1. Use Certified Firmware. If you have an Xbox Live Certified router, use the certified firmware for your router, which can be downloaded from your router manufacturers website or we may have it archived here
  2. Get the very latest version of firmware for your router from your router manufacturers website. it could contain vital fixes related to NAT
  3. Use UPnP. If your router supports this, turn it on (see warning below). The router will work out the ports it needs to open for Xbox live. If your router does not have this feature, check the manufacturers website for the latest firmware. (also make sure port forwarding and/or DMZ is turned off as they interfere with UPnP and crucially ensure your Xbox IP Address is set to Auto)
  4. Use Port Forwarding. You can assign your Xbox a Static IP Address (or reserve via DHCP) and forward the Xbox Live Ports to your Xbox.
  5. Use Port Triggering (only available on some routers). A cross between UPnP and Port Forwarding and allows specific ports that you define to be opened/closed on demand to any device on your own network, you don't need to define the ip address of the Xbox unlike port forwarding so it will work with multiple end devices
  6. Use a DMZ (De-militarized Zone) *

 

* The DMZ (De-militarized Zone) is an area that sits outside of your routers firewall. Don't worry though your not at risk with your Xbox but ensure the DMZ is set-up correctly



VERY IMPORTANT

 

Do not mix and match port forwarding Xbox Live ports with UPnP and/or DMZ. Each of the methods should be used on their own. Do not turn on UPnP and also DMZ or port forward the Xbox Live ports to your Xbox or you will run into problems as the router will become confused as you are using multiple options to do the same job.

So.... now you know your options, how do you get the NAT to Open?

UPnP


Consult your router documentation to find out how to turn it on.

Please be aware that UPnP is not secure and using it could present a risk to your network and devices, I am not saying that you should not use it, personally I believe the risks are low but you need to be aware of this fact before using it, please Google up UPnP and its risks and use your own judgement.

Don't be afraid of trying this on your own! For most routers turning on UPnP is very simple and straightforward.

  1. Ensure your Xbox IP address is set to "auto" (Important)
  2. Turn your router over and look at the exact model number
  3. Go to your router manufacturers website and download the manual for your router, its usually in the support/download section, look for the "User Guide" and download it, its usually in Adobe Acrobat format so you may also need the Adobe reader from www.adobe.com
  4. The manual for your router will tell you how to access your router settings via your web browser
  5. Ensure you have no Port forwarding or DMZ settings configured for Xbox Live (you should know if you have any as you will have setup them up and also know how to turn them off) this setup is important as these two methods can interfere with UPnP
  6. Locate the section in the manual telling you how to enable UPnP (just do a search for it in the Adobe Reader)
  7. Turn on UPnP, save the settings
  8. Reboot the router and Xbox and run the Xbox Live Test again, hopefully you now have an Open NAT.


If your NAT is not Open, look at the rest of this FAQ and see if your router is listed below for a specific guide, if you still have issues you may need to Port forward instead.

Port forwarding


If UPnP is not an option for you, or you have tried it and it does not work or you just don't want to use UPnP. Look up your router here then follow the instructions for Xbox Live 360 (if you do not want to buy their software skip the ad). When you use port forwarding the ip address that you need to forward the Xbox Live ports to is the ip address of the Xbox.

It is crucial to use a static ip address when port forwarding or reserve the same ip address for your Xbox which is a feature on some routers, see this section for more details. Also rather than use the Xbox Live ports listed on Portforward.com use these Xbox Live ports instead.

Port Triggering


Consult your router documentation to find out how to configure Port Triggering, you will need to trigger the Xbox Live ports

 

DMZ


Consult your router documentation to find out how to put your Xbox IP Address in the DMZ of your router. It is crucial to use a static ip address when using a DMZ, see this section for more details.

Guides for Specific Routers


Netgear DG834G

DG834G

Most new Netgear routers will have an Open NAT status of out the box as the have UPnP turned on by default. So you should not need to do any of the following, always ensure you have the latest version of firmware for your router from the Netgear website.

If you do still have problems, the first thing you need to do is make sure the Xbox gets the same ip address each time it boots up, as the configuration of the DMZ is just one IP address.

If you don't lock your Xbox/360 down to the same ip address it might work now, but not later if another device takes that ip address.

Locate your Xbox 360 Wired/Wireless MAC Address to learn how to do this look here

The MAC Address will look something like this:-

00-0D-61-53-E2-52

Browse to your router's setup page usually 192.168.0.1 (This guide is for a Netgear DG834G, read your router manual and substitute your own routers IP Address).

  1. Go into LAN IP Setup. Note the DHCP address range (e.g 192.168.0.10 - 192.168.0.254), because you will be reserving an address from that range. Click on Address Reservation.
  2. Type in the address you have chosen to reserve from the range (e.g. 192.168.0.20).
  3. Type in the MAC Address you wrote down earlier.
  4. Type in a name of the device Xbox 360 for example
  5. Click on Add
  6. Save the changes on your router. Now reboot the Xbox/360 and check the dashboard and make sure it has the ip address you have reserved for it.


Now you need to put that reserved address into the DMZ.

  1. On the routers setup page, click on WAN Setup. Put the IP address in the Default DMZ Server field (you can only actually type in the last octet of the address).
  2. Ensure that the Default DMZ Server tick box is ticked.
  3. Click on Apply. Save the changes. Reboot the router and try the Xbox live test again. Your NAT settings should now be Open.


Netgear WGR614, WGT624, WGU624, WGT634U & WPN824


wgt624

 

Generally with Netgear routers you do not need to use port forwarding or DMZ. So if you have set them up, turn them off now.

If your only requirement is to use one Xbox on your router, simply download the latest version of firmware from the Netgear website.

Ensure UPnP is on and DMZ or Port forwarding is turned off, this is very important. UPnP needs to be left to do the work on its own, forwarding ports or using a DMZ will interfere and not give the desired results.

If you need to use two or more Xboxes on your router (or you've tried the latest firmware and its still not Open) Look up and download the Xbox Live certified version of firmware here

If your firmware is no longer listed on the Netgear site we also now host most of the certified versions here

Using the certified version of firmware with your Netgear means you do not need to change any settings. So ensure any DMZ or Port forwarding settings are turned off and UPnP is turned on (it is by default)

Please note that on certain firmware versions of this router, it has been known for the Xbox live test to report a NAT status of Strict even after putting the Xbox in a DMZ.

Do not worry, your gaming should be fine, the settings is not strict its just the router mis-reporting the status. This can be fixed by getting the latest version of firmware for the router.

It has also been found on some version of Netgears "Trend Micro" can interfere with your NAT status, try disabling this feature if it is present.

As stated above you are best using UPnP, get the latest version of firmware for the router. Do not enable a DMZ or Port forwarding. And see if the NAT Status is Open.

If it isnt, try turning off UPnP, follow the instructions to get your Xbox MAC Address as above. Then follow the instructions below to configure the router:-
Open up your web browser on the PC and type in this:-

  1. http://www.routerlogin.net
  2. Login with the username of admin and password of password
  3. Click on the LAN IP Setup
  4. Click on the Add button
  5. In the IP Address box, type in 192.168.1.20
  6. Type the MAC Address of the Xbox 360 that you got above
  7. Click Apply to enter the reserved address into the table.
  8. Click on the WAN Setup
  9. Look for the default DMZ server setting, change the last digit to 20 and then put a tick in the box, click on Apply.
  10. Reboot the router and the Xbox 360 and it should now be all setup so you can access everyone’s games

 

Netgear DG834Nv1


DG834N

 

As per this post on our forum it has been known for the DG834Nv1 to have issues when using UPnP therefore it is recommended to configure the router as follows to avoid issues. Please check and use the latest version of firmware before carrying out the changes as you made find that since this guide was produced a later version of firmware has been released that fixes the problem.

 

 

Netgear WNDR3300

 

Netgear-WNDR3300v2

 

Users of this router may find they still have NAT issues even after enabling UPnP. If you have this issue make the followin changes:-

 

  • Access your routers menu by typing in 192.168.1.1 or http://www.routerlogin.net into your browser
  • Enter admin for the router user name and your password (or the default, password).
  • On the manu choose Advanced/WAN Setup
  • Find NAT Filtering, if it is currently set to Secured, choose Open
  • Click Apply
  • Wait 1 min
  • Restart your Router and Xbox and try the Xbox Live test again, if no NAT issues are reported your NAT is Open

 

 


BT Voyager 2109 Router users



voyager205

 

First of all you need to ensure that you are using a static IP Address in your Xbox:-

  • Settings/System/Network Settings
  • Choose Wired or Wireless
  • Configure Network
  • Choose IP Settings
  • Select Manual IP Address

Enter the following:-

 

IP Address: 192.168.1.35
Subnet Mask: 255.255.255.0
Default Gateway: 192.168.1.1

 

For DNS enter:-


DNS Server 1: 192.168.1.1 (or the real DNS server for your ISP)
DNS Server 2: 192.168.1.1 (or the real DNS server for your ISP)

  1. Next you need to access the router using a PC or Mac browser. The address is http://voyager.home/
  2. Click on the "advanced" menu option on the left hand side. If you are asked to login use the default username "admin" the password is the same "admin" (this assumes you haven't changed these yourself)
  3. Click on the "Virtual Server" option. This gives you the option to allow all internet traffic for the 360/Xbox 1.
  4. Click on the option "Forwarded to the DMZ host" - then type in the IP address you assigned to the Xbox 360 in step 1 (192.168.1.35 in my example)
  5. Click "Apply" and you are done. You 360's NATs are now open and you can enjoy Xbox Live to the full.


(Credit to shinesevens of the OXM Forums for supplying the information for the Voyager 2109)



BT HomeHub (all models) Router

homehub homehub2

 

Please see this section



Linksys (most models)


linksys


Some of the Wireless G range of Linksys routers have had NAT issues for sometime now, recently Linksys have released new firmware for some models that fix these issues, therefore I suggest you download and use the latest version of firmware and reset the router back to factory defaults and check the outcome of the NAT status

Also some Linksys routers have a feature called "Filter Anonymous Internet Requests" this has been known to cause NAT issues, if you have this feature enabled try turning it off

 

Linksys E1000/E2000 (all of the E range) WRT160N/WRT320N (all of the WRT range) and Cisco Valet M10 and others in the Valet range


Linksys-E1000

(Please check you are using the latest version of firmware before carrying out these steps as the issue may have been resolved in later firmware)

 

This fix works for all recent Linksys and Valet routers, use this guide if UPnP or Portforwarding does not work for you

 

Some users of this router experience issues with a NAT status of Moderate, whilst UPnP alone or Port Forwarding or Port Triggering should resolve this problem this is not  the case on some versions of firmware, therefore you need to put your Xbox in the DMZ of the router in a particular way as follows:-

 

  1. Find the Xbox MAC Address and note it down
  2. Access your router http://192.168.1.1 leave the username blank and enter admin for the password (unless you have changed it)
  3. Access the Network Setup Menu, and look at the DHCP Reservation area, if the Xbox is already connected and powered up it will show in the list and you can click on reserve (you will know if its your Xbox by the mac address you noted above) to reserve an ip address for the Xbox. If the Xbox isn't shown you should manually enter a reservation by inputting the mac address of the Xbox and an IP Address.
  4. Make a note of the ip address you have reserved (whichever way you reserved it)
  5. Ensure your Xbox ip address is set to auto (Settings/System/Network SettingsWired or Wireless/Configure Network)
  6. Reboot the Xbox and ensure it gets the same ip address you have reserved for it above (important)
  7. On the router go into Applications and Gaming > DMZ
  8. Choose Enable DMZ
  9. Leave Source IP Address as "Any IP Address"
  10. For the destination address click on the DHCP Client table and find your Xbox mac address on that list (you noted the Xbox mac address earlier).
  11. You MUST ensure it is the Xbox you have chosen to DMZ 
  12. Click save settings
  13. Access the Administration >  Management menu and Disable UPnP
  14. Click save settings
  15. Access the Security > Firewall menu and look for Filter Anonymous Internet Requests, untick this option
  16. Click save settings
  17. Reboot the router and re-run the Xbox Live test, this time there should be no complaints about moderate/strict NAT

 

As an added bonus why not configure your Linksys/Cisco Valet to prioritise Xbox traffic over other users on your network don't let their downloads/videos/sharing impact your gaming!

 

Linksys WRT310N WRT320N and WRT610N

 

Linksys-E1000

It has been found that even when running certified firmware on  the above routers you will still fail to get an Open NAT on multiple Xboxes, to resolve this:-

 

  1. Ensure UPnP is Enabled under Administration Management
  2. Ensure any DMZ's or Port Forwarding configuration is not enabled
  3. Ensure the Xbox IP Addresses are set to Auto
  4. Go to Security/Firewall and ensure Filter Anonymous Internet Requests is unticked (if ticked untick it and save the settings)
  5. Go to Applications & Gaming / Port Range Triggering and set the rules in the screenshot below (click to enlarge it)
  6. Reboot the router and test your NAT settings/Join the same hosted games

 

Linksysrules small

Cick to enlarge

 

As an added bonus why not configure your Linksys to prioritise Xbox traffic over other users on your network don't let their downloads/videos/sharing impact your gaming!

 

Belkin G Routers (most models)

 

belkin-7633

 

Depending on the model of router the menus/setting may differ slightly.

  1. http://192.168.2.1/
  2. System Settings
  3. Locate the UPnP advanced feature at the bottom of the page
  4. Select Change setting in that section
  5. Click the Enable UPnP On Radio Button
  6. Click Apply changes
  7. Power off the router, wait 10 secs, power it back up again
  8. Ensure your Xbox IP Address is set to auto
  9. Run the Xbox live test and NAT should be Open


Belkin N/N+ Routers (most models)

 

belkin-n

Depending on the model of router the menu/settings may differ slightly. If you have already tried using UPnP and you are still having problems, try the settings below

First configure your Xbox to have a static IP address as follows on the Xbox dashboard

  • Settings/System/Network Settings/Wired or Wireless/Configure Network/IP Settings
  • Enter these details:-
    • IP Address: 192.168.2.120
    • Mask: 255.255.255.0
    • Gateway: 192.168.2.1
  • Leave DNS on auto or if it fails put in 192.168.2.1


Now configure the router

  1. Access your router menu from your browser http://192.168.2.1/
  2. Login to the router, leave the password blank unless you have changed it
  3. IMPORTANT If you have used port forwarding for Xbox live already remove that config now
  4. Locate the DMZ menu in the Firewall section of the router menu
  5. In the section that reads "IP Address of Virtual DMZ Host" enter 120 so that the whole IP address reads 192.168.2.120
  6. Tick the enable box followed by Apply Changes
  7. Wait 10 seconds
  8. Power off the router, wait 10 secs, power it back up again
  9. Run the Xbox live test and NAT should be Open, if you are still experiencing issues like drop outs from games, check to see if UPnP is enabled on the router, if it is try disabling it, save the settings reboot and try again.



ZyXEL Prestige 600 Series (also 660..etc)

zyxel

 

You need to enable UPnP to ensure this router has an Open NAT, there are three options to use and you need to use them all as follows:-

  1. http://192.168.1.1/
  2. Find the "UPnP" settings.
  3. Enable the Universal Plug and Play(UPnP) Service
  4. Enable Allow users to make configuration changes through UPnP
  5. Enable Allow UPnP to pass through Firewall
  6. Ensure your Xbox IP Address is set to Auto
  7. Save the settings, Reboot the router and try again


SmartAX MT882 (Version 2)

 

smartax

 

First of all you need to ensure that you are using a static IP Address in your Xbox:-

  • Settings/System/Network Settings
  • Choose Wired or Wireless
  • Configure Network
  • Choose IP Settings
  • Select Manual IP Address

Enter the following:-


IP: 192.168.1.10
Subnet: 255.255.255.0
Gateway: 192.168.1.2
DNS 1: 192.168.1.2
DNS 2: 192.168.1.2

(If you get issues with DNS after making these changes try these settings instead

Gateway: 192.168.1.1
DNS 1: 192.168.1.1
DNS 2: 192.168.1.1)

  1. Access your router's config page by clicking on one of the links below
  2. http://192.168.1.2 or http://192.168.1.1
  3. Enter Username = admin, Password = admin
  4. Goto Advanced, then, disable UPnP, click save all
  5. Goto Basic, then, goto your NAT settings
  6. On DMZ create delete any current entries and make a new one. The Local IP From and Local IP To should be the same. This will be the IP address of your Xbox 360 (as above)
  7. On NAPT delete any entries that are there, and make a new series of entries. Under the new entry, use the IP range of ALL IP addresses connected to that modem/router. e.g if your last device uses the IP Address. .140 use 192.168.1.2 as the From and 192.168.1.140 as the To. ENSURE it covers the whole of the ip addresses in use otherwise not all devices will work correctly or be NAT'ed.
  8. On redirect delete any entries
  9. Click back onto DMZ
  10. Now Goto Tools, Save and Reboot,
  11. Click save, wait for refresh, Click reboot, wait for refresh and re-enter user and password details (admin admin)
  12. Your NAT status should now be Open

 


You should now have open NAT when you test you XBL settings.

If you still do not have an Open NAT I would recommend that you choose the factory reset option and follow the guide again. Please ensure you note down or have a copy of your ISP username/password before doing this as all settings will be lost.

(Credit to Shorum of our forum for supplying the information for the SmartAX MT882)

(Further credit to Shahmizzle of our forum for supplying the amendments to make this work for all)


Thompson Speedtouch 576 (and other models)


speedtouch576

 

Before carrying out the instructions below ensure you have the very latest firnware as you may not need to do the instructions below at all with the latest firmware

 

  1. Click on http://speedtouch.lan/ or http://192.168.1.254/ to open up the router config page in your browser
  2. The default username=Administrator
  3. The default password is blank so just press enter (unless of course you've changed these settings from the defaults)
  4. Click on the "Game and Application Sharing" menu
  5. Untick the UPnP option
  6. Click Apply
  7. Ensure your Xbox IP Address is set to Auto
  8. In the Home Network menu, click Devices.
  9. In the Pick a task list, click Assign the public IP address of a connection to a device.
  10. Click the Edit link of your Internet connection.
  11. In the Device list, select the device you want to assign the public address to (The Xbox). You MUST ensure you select the Xbox and no other device
  12. Click Apply.
  13. The SpeedTouch™ prompts you to make some adjustments as a result of the new configuration.
  14. Click OK.
  15. After that, restart the Xbox and the router and try again
  16. After saving Applying/Saving all settings you have changed, power off the router and Xbox. Wait 20 seconds and power up the router then then Xbox and your NAT should be Open and able to host/join games



Cisco PIX Firewall

 

pix

 

For Cisco PIX Firewall users:

Understanding Cisco firewalls is a more complex than your standard consumer type Linksys router. In order to get your PIX to allow your XBox NAT to be recognized as OPEN, you will need the following configs added to your PIX (in the third section replace 'xboxStaticIP' with the actual IP of your Xbox):

!
access-list outside_access_in permit udp any interface outside eq 3074
access-list outside_access_in permit tcp any interface outside eq 3074
access-list outside_access_in permit udp any interface outside eq 88
!
access-group outside_access_in in interface outside
!
static (inside,outside) tcp interface 3074 xboxStaticIP 3074 netmask 255.255.255.255 0 0
static (inside,outside) udp interface 3074 xboxStaticIP 3074 netmask 255.255.255.255 0 0
static (inside,outside) udp interface 88 xboxStaticIP 88 netmask 255.255.255.255 0 0
!

Save those configs to memory and rerun your Xbox Network Tests, you should see your NAT definition change from Moderate to OPEN.

Full credit to SkidrowCowboy of Teamxbox forums for this information.



Dlink DIR-615/DIR-300 (usually only needed for Virgin Media customers)

smalldir615


The DIR-615 and DIR-300 are very capable routers and should give an Open NAT out of the box, even Open NAT to multiple Xboxes when running Xbox Live certified firmware so please try UPnP and different firmware before carrying out the instructions below as you probably don't need to do this, the instructions below are aimed at Virgin Media customers in the UK who are running custom firmware (1.00vg). But you may also find these instructions work for you on other firmware versions where UPnP alone does not.

First of all you need to ensure that you are using a static IP Address in your Xbox:-

  • Settings/System/Network Settings
  • Choose Wired or Wireless
  • Configure Network
  • Choose IP Settings
  • Select Manual IP Address

Enter the following:-


IP Address: 192.168.0.80
Subnet Mask: 255.255.255.0
Gateway: 192.168.0.1

 

For DNS enter:-

 

DNS Server 1: 192.168.0.1
DNS Server 2: 192.168.0.1

Now make changes to your router, there are a few different ways to do this depending on the firmware you are using so I've documented three varations with a screenshot for each, use whichever set of instructions that matches your port forwardinf menu.

 

Variation 1

  1. Enter http://192.168.0.1 into your web browser
  2. Enter the user name (admin) and your password. Leave the password blank by default.
  3. On your router click on Advanced/Advanced Network
  4. Untick "Enable UPnP" and click save settings
  5. Click Advanced/Port Forwarding
  6. You now need to create a set of rules for Xbox live.
  7. In the name type in Xboxrule1 Public Port 80 80 (put 80 in both of the fields)
  8. On the line below enter the IP Address 192.168.0.80
  9. Tick the box to the left of that rule and that rule is now complete
  10. In the name type of the next rule type in Xboxrule2 Public Port 88 88 (put 88 in both of the fields)
  11. On the line below enter the IP Address 192.168.0.80
  12. Tick the box to the left of that rule and that rule is now complete
  13. In the name type of the next rule type in Xboxrule3 Public Port 3074 3074 (put 3074 in both of the fields)
  14. On the line below enter the IP Address 192.168.0.80
  15. Tick the box to the left of that rule and that rule is now complete
  16.  In the name type of the next rule type in Xboxrule4 Public Port 3330 3330 (put 3330 in both of the fields)
  17. On the line below enter the IP Address 192.168.0.80
  18. Tick the box to the left of that rule and that rule is now complete
  19. In the name type of the next rule type in Xboxrule5 Public Port 53 53 (put 53 in both of the fields)
  20. On the line below enter the IP Address 192.168.0.80
  21. Tick the box to the left of that rule and that rule is now complete
  22. Ensure all of your new rules are ticked and click Add/Apply/Save Settings, wait until it has saved its changes
  23. Reboot the router, wait 2mins
  24. Reboot the Xbox and run the Xbox Live test and ensure your NAT is Open (no complaints about NAT means its ok)


Click on the image below (thanks BUSTA LIVE) to see a screenshot of the port forwarding rules as they should be set-up

 

dir615bigrules

 

Variation 2

  1. Enter http://192.168.0.1 into your web browser
  2. Enter the user name (admin) and your password. Leave the password blank by default.
  3. On your router click on Advanced/Advanced Network
  4. Untick "Enable UPnP" and click save settings
  5. Click Advanced/Port Forwarding
  6. You now need to create a set of rules for Xbox live.
  7. In the name type in Xboxrule1 TCP 80 (set Schedule to Always)
  8. On the line below enter the IP Address 192.168.0.80 UDP 88 (set Inbound Filter Allow All)
  9. Tick the box to the left of that rule and that rule is now complete
  10. In the name type in Xboxrule2 TCP 3074 (set Schedule to Always)
  11. On the line below enter the IP Address 192.168.0.80 UDP 3074 (set Inbound Filter Allow All)
  12. Tick the box to the left of that rule and that rule is now complete
  13. In the name type in Xboxrule3 TCP 53 (set Schedule to Always)
  14. On the line below enter the IP Address 192.168.0.80 UDP 53 (set Inbound Filter Allow All)
  15. Ensure all of your new rules are ticked and click Add/Apply/Save Settings, wait until it has saved its changes
  16. Reboot the router, wait 2mins
  17. Reboot the Xbox and run the Xbox Live test and ensure your NAT is Open (no complaints about NAT means its ok) if NAT still fails try setting up another rule as above but for UDP 3330

Click on the image below to see a screenshot of the port forwarding rules as they should be set-up for this variation

dir615bigrules2

 

Variation 3

  1. Enter http://192.168.0.1 into your web browser
  2. Enter the user name (admin) and your password. Leave the password blank by default.
  3. On your router click on Advanced/Advanced Network
  4. Untick "Enable UPnP" and click save settings
  5. Click Advanced/Port Forwarding
  6. You now need to create a single rule for Xbox live.
  7. In the name type in Xboxrule TCP 53,80,3074 (set Schedule to Always)
  8. On the line below enter the IP Address 192.168.0.80 UDP 53,88,3074 (set Inbound Filter Allow All)
  9. Tick the box to the left of that rule and that rule is now complete
  10. Ensure all of your new rules are ticked and click Add/Apply/Save Settings, wait until it has saved its changes
  11. Reboot the router, wait 2mins
  12. Reboot the Xbox and run the Xbox Live test and ensure your NAT is Open (no complaints about NAT means its ok) if NAT still fails try adding UDP 3330 to the rule you have created

Click on the image below to see a screenshot of the port forwarding rules as they should be set-up for this variation

dir615bigrules2

 

 

Dlink DI-624 and DI-604 (rev A, B, & C)

di624


  1. Access your router by entering http://192.168.0.1 into your web browser
  2. Click on the Tool/Misc Menu
  3. Ensure UPnP is enabled (see screenshot below)
  4. Ensure Gaming Mode is enabled (see screenshot below)
  5. Ensure DMZ and/or Portforwarding are not configured
  6. Set your Xbox IP Address to Auto
  7. Reboot the router and Xbox and try the NAT test again

 

DI-624small

Cick to enlarge

 

If you still experience problems after applying the configuration above and are using Revision C of the DI-624 use a certified version of firmware listed here using version 2.76 of the DI-624 firmware causes issues with Xbox live, if you are using this version downgrade to a certified version.

 

o2 Wireless box II/III


o2-wireless-router


  1. Enter http://192.168.1.254 into your web browser. If you are prompted for a login the username is "Administrator" and the password is the serial number of your router which printed underneath the, don't include the bit in brackets.
  2. Click Toolbox > Game & Application Sharing > Configure
  3. Tick the option "Use UPnP"
  4. Click Apply
  5. IMPORTANT - Ensure there are no Application/Gaming Rules setup for Xbox live on the router
  6. Ensure your Xbox IP Address is set to "Auto" in Settings/System/Network Settings/Wired or Wireless/Configure Network/IP Settings on the Xbox Dashboard
  7. Reboot the router and Xbox and run the Xbox Live test to test your NAT settings

Important: The procedure above does work, however if you are still having NAT issues after carrying out the above you should contact o2 support as you are more than likely missing a vital firmware update on your router which I believe only o2 can provide for you.

 

You can also try going into the device list on the router and deleting all of the known devices (Xbox, PC's , iPhone etc) that exist on your network so the router can clear them out and re-learn them, this has also been known to resolve NAT issues when using UPnP

 

Embarq / Centurylink Zyxel 660 Modem (+ Router)

 

embarq660-2

 

Many users of the 660 Modem that connect a router to it are falling foul of the same issue, the 660 is not just a modem it also has routing functions which mean when you connect a router to it you suffer a "double NAT" meaning no matter what you change on the router connected to it, it will make no difference as both devices at NAT'ing which is causing the issue.

 

Just to be clear if you are using the 660 on its own (no router attached) you don't need to change anything else, but if you are using a router connected to the 660 you should put the 660 into Bridge Mode, you can contact you ISP and ask them how to do this or you can do it youself by following this eHow (I would recommend you print the instructions)

*** VERY IMPORTANT *** When you follow the bridging gude you MUST click on release under WAN IP before you change to bridge mode, if you don't you will end up with DNS failures.

 

Windstream SpeedStream 4200/5200 or Gigaset/Sagem 4300 modem

speedstream4200

 

Windstream supply both the Speedstream and Gigaset/Sagem end devices, these both have routing and NAT functionality meaning if you connect a router behind either of these devices (and then your Xbox to the router) you will get a strict or moderate NAT because you are "double NAT'ing". To resolve this you need to put the Speedstream or Gigaset/Sagem into "Bridge Mode" and also configure your router for PPPoE. - Remember this is ONLY needed if you are connecting a router to this device

 

stopsign

Ensure you know your PPPoE details for your ISP and how to configure your router with your PPPoE details BEFORE proceeding otherwise you may end up cutting yourself off from the Internet, so make sure you have everything you need first prepared and ready. If in any doubt contact  your ISP.

 

  • To configure your Speedstream into Bridge Mode look here
  • To configure your Gigaset/Sagem into Bridge Mode look here
  • For an example of the PPPoE changes required for your router (based on Linksys) look here or here
  • For an example of the PPPoE changes required for your router (based on Dlink) look here
  • For an example of the PPPoE changes required for your router (based on Netgear) look here

 

It is possible you made need to make futher changes to your router to resolve your NAT issue but when connecting a router to either the Speedstream or Gigaset/Sagem you must put them into Bridge mode or you will not solve your problem.

 

Earthlink DSL Zyxel P-660R-D1


embarq660-2

 

Earthlink supply the Zyxel P-660R-D1 for their DSL based service this is actually a modem/router and has routing and NAT functionality meaning if you connect a router behind the Zyxel device (and then your Xbox to the router) you will get a strict or moderate NAT because you are "double NAT'ing". To resolve this you need to put the Zyxel into "Bridge Mode" and also configure your router for PPPoE. - Remember this is ONLY needed if you are connecting a router to this device

 

stopsign

Ensure you know your PPPoE details for your ISP and how to configure your router with your PPPoE details BEFORE proceeding otherwise you may end up cutting yourself off from the Internet, so make sure you have everything you need first prepared and ready. If in any doubt contact  your ISP.

 

  • To configure your Zyxel into Bridge Mode look here
  • For an example of the PPPoE changes required for your router (based on Linksys) look here  or here
  • For an example of the PPPoE changes required for your router (based on Dlink) look here
  • For an example of the PPPoE changes required for your router (based on Netgear) look here

 

It is possible you made need to make futher changes to your router to resolve your NAT issue but when connecting a router to the Zyxel you must put it into Bridge mode or you will not solve your problem.

 

Motorola 2210 / Netopia 2210  (Bellsouth AT&T and others)


motorola2210

 

Bellsouth AT&T supply the Motorola 2210 / Netopia 2210 for their DSL based service this is actually a modem/router and has routing and NAT functionality meaning if you connect a router behind this  device (and then your Xbox to the router) you will get a strict or moderate NAT because you are "double NAT'ing".

 

There are two ways to resolve this issue:-

 

IP Passthrough (easy fix)

 

  • Access the 2210 configuration menu
  • Select Advanced->Connection Configuration.
  • At the bottom of the page select "yes, use public ip address"
  • Save the settings
  • Restart the modem and router this should ensure your router gets the public ip address and any remaining NAT issues are down to the router

(Thanks to ChimpZealot for that tip!)


Bridge Mode (more complex fix)

 

To resolve this using Bridge mode you need to put the modem/router into "Bridge Mode" and also configure your router for PPPoE. - Remember this is ONLY needed if you are connecting a router to this device

 

stopsign

Ensure you know your PPPoE details for your ISP and how to configure your router with your PPPoE details BEFORE proceeding otherwise you may end up cutting yourself off from the Internet, so make sure you have everything you need first prepared and ready. If in any doubt contact  your ISP.

 

  • To configure your Motorola 2210 / Netopia 2210 into Bridge Mode look here
  • For an example of the PPPoE changes required for your router (based on Linksys) look here
  • For an example of the PPPoE changes required for your router (based on Dlink) look here
  • For an example of the PPPoE changes required for your router (based on Netgear) look here

 

It is possible you made need to make futher changes to your router to resolve your NAT issue but when connecting a router to the Motorola 2210 / Netopia 2210 you must put it into Bridge mode or you will not solve your problem.

 

Westell 6100 (Verizon DSL and others)

 

Westell-6100

 

Verizon supply the Westell 6100 for their DSL based service this is actually a modem/router and has routing and NAT functionality meaning if you connect a router behind this device (and then your Xbox to the router) you will get a strict or moderate NAT because you are "double NAT'ing". To resolve this you need to put the modem/router into "Bridge Mode" and also configure your router for PPPoE. - Remember this is ONLY needed if you are connecting a router to this device

 

stopsign

Ensure you know your PPPoE details for your ISP and how to configure your router with your PPPoE details BEFORE proceeding otherwise you may end up cutting yourself off from the Internet, so make sure you have everything you need first prepared and ready. If in any doubt contact  your ISP.

 

  • To configure your Westell 6100 into Bridge Mode look here
  • For an example of the PPPoE changes required for your router (based on Linksys) look here
  • For an example of the PPPoE changes required for your router (based on Dlink) look here
  • For an example of the PPPoE changes required for your router (based on Netgear) look here

It is possible you made need to make futher changes to your router to resolve your NAT issue but when connecting a router to the Westell 6100 you must put it into Bridge mode or you will not solve your problem.

 

Actiontec PK5000 Q1000 GT701WG M1000 (Qwest and others)

 

pic-modem-pk5000pic-modem-q1000pic-modem-gt701wgpic-modem-m1000

 

Qwest supply various the Actiontec modems for their DSL based service but they are actually a modem/routers and have routing and NAT functionality meaning if you connect a router behind this device (and then your Xbox to the router) you will get a strict or moderate NAT because you are "double NAT'ing". To resolve this you need to put the modem/router into "Bridge Mode" and also configure your router for PPPoE. - Remember this is ONLY needed if you are connecting a router to these devices

 

stopsign

Ensure you know your PPPoE details for your ISP (i.e. username=username @ qwest.net) and how to configure your router with your PPPoE details BEFORE proceeding otherwise you may end up cutting yourself off from the Internet, so make sure you have everything you need first prepared and ready. If in any doubt contact  your ISP.

 

  • To configure your Actiontec PK5000 into Bridge Mode look here
  • To configure your Actiontec Q1000 into Bridge Mode look here
  • To configure your Actiontec GT710WG into Bridge Mode look here
  • To configure your Actiontec M1000 into Bridge Mode look here
  • For an example of the PPPoE changes required for your router (based on Linksys) look here
  • For an example of the PPPoE changes required for your router (based on Dlink) look here
  • For an example of the PPPoE changes required for your router (based on Netgear) look here

 

 

It is possible you made need to make futher changes to your router to resolve your NAT issue but when connecting a router to these Actiontec routers you must put it into Bridge mode or you will not solve your problem.

 

 

 

Zoom X6

Zoomx6

 

You must assign a static IP address on the Xbox 360 that it is outside of the Zoom X6 router's DHCP pool.  Also, the Xbox 360 must be in a DMZ.  This will prevent the firewall of the router from blocking connections to the Xbox 360.

1. Assign a Static IP address on the Xbox 360 console:

  • Power on your Xbox 360 and go to Settings/System/Network Settings/Wired or Wireless/Configure Network
  • Select IP Settings. The Edit IP Settings screen opens.
  • Select Manual and then enter the following settings:
    • IP Address: 10.0.0.150 (or any 10.0.0.x IP address, where x is between 100 and 250)
    • Subnet Mask: 255.255.255.0
    • Gateway:  10.0.0.2
  • Select Done, to go back to the Edit Settings screen.
  • Select DNS Settings. The Edit DNS Settings screen opens.
  • Select Manual and then enter the following setting:
    • Primary DNS Server: 10.0.0.2
    • It is not necessary to enter a Secondary DNS Server.  
  • Select Done.
  • Power down your Xbox 360.
2. Access the Zoom Configuration Manager:
  • From a computer that is connected to the Zoom X6, open a web browser and type http://10.0.0.2 in the address line and then press Enter (or Return).
  • Enter the User Name and Password (in lowercase letters):
    • User Name: admin
    • Pasword: zoomadsl  (where "l" is a lowercase letter L)
3. Create a Virtual Server rule to put the Xbox 360 on a DMZ:
  • In the Zoom Configuration Manager, click on the Advanced Setup icon at the top page.
  • Click on the Virtual Server/DMZ button.
  • On the Virtual Server/DMZ page, enter the following settings:
    • Internal IP Address: 10.0.0.150 (or whichever Static IP address you selected per Step 1)
    • Protcol: DMZ
    • Start Port: 0
    • End Port: 0
  • Click Save Changes
  • Click the Enable box, if you have this option.
  • Click Write Settings to Flash
  • Restart the router and your Xbox and re-run the Xbox Live Connection test, if there are no complaints about NAT your NAT is Open

 

Netcomm NB6Plus4W

NetcommNB6PlusW

 

  1. Access the router menu via your web browser by entering 192.168.1.1 and go into the Advanced Configuration menu and look for "Local Network – DHCP Server"
  2. Click on "Reserved IP Address List"
  3. Click Add
  4. In the first box enter the mac address of your Xbox to fnd your Xbox mac address look here
  5. In the Assigned IP Address box enter 192.168.1.100
  6. Click Apply/Close and then restart your Xbox and go into your Xbox network settings and confirm your ip address is now 192.168.1.100
  7. On the router menu choose Advanced/Local Network/UPnP untick the "Enable UPnP" selection box (so it is disabled) and click Apply
  8. At this stage you have a choice to use portforwarding or a DMZ. Only choose to configure one not both!
  9. If you would like to configure portforwarding look here and forward to the ip address of 192.168.1.100 then power off the router and Xbox and power them both up again (router first) and then your NAT/connectivity issues should be resolved
  10. If you would like to configure a DMZ on the router menu choose Advanced/Virtual Server/DMZ Host click on the radio button "Forwarded to the DMZ host radio button" and in the box enter 192.168.1.100 followed by Apply/Close then power off the router and Xbox and power them both up again (router first) and then your NAT/connectivity issues should be resolved

 

Sagem F@st 2804

SagemFast2804

 

  1. Access your router by entering 192.168.1.1 into your browser
  2. Go to Advanced Settings/UPnP turn off UPnP and click Appy/Save
  3. Ensure there are no port forwarding rules set-up already for the Xbox live ports, if there are remove them now
  4. Go to Advanced Settings/LAN change the DHCP Server End IP Address from 192.168.1.254 to 192.168.1.200 click Apply/Save
  5. Go to Advanced Settings/NAT DMZ Host enter 192.168.1.210 into the DMZ Host IP Address click Apply/Save
  6. Wait 20 secs
  7. Power off the router
  8. Wait 10 secs
  9. Power on the router
  10. Manually change the Xbox ip address to

    IP Address: 192.168.1.210
    Subnet Mask: 255.255.255.0
    Gateway: 192.168.1.1
    DNS: 192.168.1.1

    Run the Xbox live connection test there should be no complaints about NAT anymore

MiFi 586 (3 and other Mobile Networks)

3-three-e586-mifi

Full credit goes to ConnerWillis for this strange! but great guide nonetheless, as Conner says its not perfect but it does work. Please bear in mind it won't be possible to get an Open NAT if your Mobile ISP supplies you with a private ip address, but if yours is a public ip address like on the 3 network this should work fine

  1. Reset your MIFI to default settings, ensure you have any important information noted down before doing this as you will loose any configurations you have made since you got the Mifi
  2. Turn off Firewall (please ensure you have other protection for your PC and other devices on the network)
  3. Go into"Special Applications" and open the ports like this, ensure you create them in this order:-
    1. Xbox LIVE (Status On) 80 TCP TCP
    2. Xbox LIVE 1 (Status On) 88 UDP UDP 88
    3. Xbox LIVE 2 (Status On) 3074 TCP TCP 3074
    4. Xbox LIVE 3 (Status On) 3074 UDP UDP 3074
    5. Xbox LIVE 4 (Status On) 53 TCP TCP 53
    6. Xbox LIVE 5 (Status On) 53 UDP UDP 53
  4. Turn UPnP
  5. Set your Xbox ip address and DNS settings to automatic.
  6. Then turn the MIFI off wait 10 seconds and then back on again
  7. When you have done that you need to do this "Everytime" you want a Open NAT.
  8. Turn on the MIFI and then the Xbox, it will sign in as normal. ** IMPORTANT ** Leave it there for 1 minute (maybe longer). You then need to go to test connection and the NAT will come up as Strict, leave it at that screen for 1-2 minute and test again, it should come up as moderate, again leave it at that screen for another 1-2 minute and test again, it should come up as Open now. You will need to do this every time you want a Open NAT. Make sure that there is a 1-2 min gap between tests as it will come up as the same NAT.

Mifi Special App

Click to Zoom


Tried everything above and still have issues - Time for a clear out!

The information above does work but sometimes its worth clearing the decks and starting afresh, if you are still having issues try resetting your Xbox network settings back to factory defaults and then try the information above again.

 

 

Tried everything above and still have issues - Are you double NAT'ing?


One problem you could be experiencing is "double NAT". That's where two devices on the same network are carrying out NAT and your Xbox's NAT status ends up in a mess.

This usually applies to people who have a separate router and modem.

So in theory you could follow all of the instructions above to change your router to get a NAT of Open but it still ends up as moderate or strict.

If this is the case you need to check the modem that connects to your ISP. Until now many modems were just dumb devices so this wasn't an issue. Now some ISP's are providing modems with some routing functionality, including NAT. Which can mess things up for you.

If you have a separate modem from your router you need to look up details on the modem on the internet and find out if it has routing functionality. An easy way to check this is by doing this:-

 

  • Connect your Xbox directly to the modem (bypassing the router) via Ethernet
  • Power off the modem
  • Wait 1 min
  • Power on the modem
  • Wait 1 min
  • Power up the Xbox
  • On the Xbox go into Settings/System/Network Settings and look at the IP Address of the Xbox
  • If the IP Address the Xbox has been assigned starts with 192. or 10 then your modem is actually more than just a modem and is running NAT which when connected to a router (also running NAT) causes a problem, to resolve this you need to put the modem info bridge mode, contact your ISP for details or google up a guide on how to do this for your specifc modem, please ensure you know how to reverse the bridge in case you have issues
  • To put your set-up back to how it was before (whether you've bridged or not) ensure you power off the modem before reconnecting everything back up

 

Also some Linksys routers have a feature called "Filter Anonymous Internet Requests" this has been known to cause NAT issues, if you have this feature enabled try turning it off

 

 

Its just not happening I need one to one help with my router/setup

 

angry2


If your face looks like this join our forum and post your problem and we'll do our best to help. If your router is not listed above and you think we should create a step by step guide for it post your details on the forum.

 

forum

 

Click here to access the forum

 

Are you Connecting two or more Xboxes to the same router and having NAT issues or disconnects?

Last Updated on Tuesday, 27 December 2011 15:18
 

Your Ad Here

Copyright © 2012 The Unofficial Guide To Xbox Live. All Rights Reserved. Xbox, Xbox Live, the Live Logo, and the Xbox logos are registered trademarks or trademarks of Microsoft Corp. The Unofficial Guide to Live is in no way connected or affiliated with Microsoft Corp.


Joomla! is Free Software released under the GNU/GPL License.
Although every effort has been made to ensure the accuracy of the information within this website, The Unofficial Guide to Live cannot be held responsible for any errors it may contain.
No reproduction of any part of this website, in any form or by any means, is permitted without written consent from GS Networks Ltd © 2012. All Rights Reserved. Advertising prices are available on request.
DMCA.com

 

Google +1

Share this page

Facebook MySpace Twitter Digg Delicious Stumbleupon Google Bookmarks RSS Feed