[Advanced Networking] Alternate ports used when utilizing UPnP?

My son has both an XBox360 and an XBoxOne. Our network consists of a gateway firewall that does not have UPnP support but that I control, and an internal router that does have UPnP support.

Both XBoxes are behind the router. The router has UPnP enabled.

What I need to know are the *extra* ports that the XBox UPnP will request on the internal router so that I can configure the Gateway Firewall to forward ALL possible XBox ports to the internal router.

For example, the first XBox powers on, tells the internal router it needs 3074/TCP. The internal router says "Sure, here is port 3074/TCP". The Gateway firewall is already configured to forward 3074/TCP to the internal router, so that traffic can make it
from the internet and to the first XBox.

The Second XBox then powers on, and tells the router via UPnP, "Hey I need 3074/TCP." The router responds with "Sorry, that's already being used." So the XBox comes back with "Ok, how about 3651/TCP instead?" and the router says "Sure, here is 3651/TCP."

At this point, I would need to make sure that the gateway firewall is also forwarding 3651/TCP to the internal router in order for this UPnP configuration to work for the second XBox.

I have heard that the XBox contains options to accommodate up to 10 XBoxes on the same UPnP network, so for 3074/TCP, 3074/UDP, 88/UDP, and any others there are up to 10 alternate ports that could potentially be requested. What I need is that list of alternate
ports. I can then configure my gateway to forward all of those ports, in use or not, to the internal router and let the internal router's UPnP deal with assigning which XBox can use what.

Note that I cannot set the Router as a DMZ host in my network as other devices exist and other port forwarding is occurring elsewhere to other systems in the network.

Thanks for any help that you can provide.

Russell

:)

 

Fortnite update does not complete and cannot be cancelled

Hi!

Usually deleting the cache solves this problem. Press and hold the power button for 10 secs and try again. NAT is related to communication with Live servers. It can be solved in different ways:

- Switching off the router for 30 secs;

- Opening the
ports on the router;

- Setting a static IP on the console (system settings->network->advanced setting->IP settings->Manual);

- Delete alternate MAC Address and restart the console (system settings->network->advanced settings->alternate MAC address->Clear).

 

Can't get an IP address on Xbox 1

Something that seems to help a lot with networking issues is to clear the alternate mac address. SETTINGS>ALL SETTINGS>NETWORK>NETWORK SETTINGS>ADVANCED SETTINGS>ALTERNATE MAC ADDRESS>CLEAR ALTERNATE MAC ADDRESS>RESTART

 

My xbox one is currently using port 49635 via UPnP

Although I've seen it using other port numbers in the past which makes me think it may be random.

You may be better off trying to get your gateway into bridge mode so that it acts as a modem only and doesn't have it's own NAT.

If you post the make and model of your gateway someone with knowledge of that gateway may be able to help you bridge it.

 

My gateway device is a Juniper Netscreen SSG-5 running ScreenOS Version: 6.3.0r16a.0

It is separate from my modem which is a Motorola SURFBoard SB6121.

The inside LAN network of the Netscreen FW is 172.22.0.0/16.

The XBoxes are in my son's room where we have a Linksys WRT54G router running DD-WRT build 14929. The 54G is running in router (not gateway) mode. The outside WAN IP of the 54G is 172.22.2.102, the inside LAN network of the 54G is 172.24.0.0/16. I have
made DHCP reservations in the 54G for the two XBoxes at 172.24.1.130 (for the 360) and 172.24.1.133 (for the One).

I have enabled UPnP on the 54G router. I have set up a static route on the Netscreen to use 172.22.2.102 as the gateway for any traffic directed to the 172.24.0.0/16 network. I have set up port forwards on the Netscreen for all of the known Live ports
to get forwarded to the router at 172.22.2.102.

I cannot set the Netscreen into "bridge mode" as it is my primary gateway for the entire house. The reason for the router in my son's room is because the Netscreen firewall does not have UPnP capabilities. The WRT54G does.

I just need *the rest* of the ports that Live might use via UPnP forwarded from the Netscreen to the 54G.

 

Wow that is a complicated setup.

Couldn't you just ditch the gateway and put the router in it's place?

I'm no expert but I'm not sure I see the point of having a gateway between a modem and a router.

But in any case so far the only port i'm seeing is 49635 and that could possibly be random.

 

Unfortunately, no. The Netscreen is a much more powerful device than the Wireless router, it just simply does not have UPnP capability. I use aspects of the gateway that the router just can't do, and the gateway can handle a lot more bandwidth for all
the other devices in the house.

If someone could tell me the range of ports Live might use via UPnP that would be most helpful. Obviously it is not sequential (3074, 3075, 3076, etc. 88, 89, 90, etc) as Malacath is seeing it use 49635.

Maybe if people could respond with what they are currently seeing the UPnP port forwards show up as in their router's UPnP table that could help. We could compile a list?

 

Not all UPnP supported routers are equal. Some claim to support it, and doesn't even work at all. The fact that the gateway doesn't support UPnP seems to be the end of the road for your NAT. I've read somewhere on UPnP problems with 2 Xbox One consoles,
but not 1 Xbox One, and 1 360. My son has an Xbox 360 (as do I), and I have an Xbox One, and we don't have port conflicts no matter what console is running. Perhaps you're dropping packets, or their being filtered to harshly by the firewall. Check your MTU
settings as well. If you're familiar with Wireshark, you can capture your network traffic to find out exactly whats going on, and where the breakdown is happening.