Strict Nat problems

Hey Bimnog, the double nat was my initial issue. I contacted my ISP and they have me setup with my own public IP. So now, the IP I google and the WAN IP are the same number. I haven't tried plugging it straight into the Xbox from the Antenna. However,
I did hook it up only going through a couple of switches. It didn't change anything about the Xbox's Nat. I did have my first minor victory in this whole networking struggle. I managed to find a slightly different way to port forward than what is popular
on YouTube. I found a website that has you go into the LAN, to DHCP, and then assign a static IP to your Xbox(using it's IP and Mac address). Once that is complete, you just port forward like you normally would, while leaving the Xbox in automatic IP and
dns. This opened the Nat for the Xbox that I used this on. I also cleared it out and did the same process for the other one and it worked as well. The problem is that you have to pick which one you want open, as the other will still be strict. I'm still
not sure why UPnP isn't working for me. I've seen several different post where guys are recommending the Asus RT - N66U for use with multiple Xbox Ones.

 

That is a good gaming router , if you have reset it , and upnp is enabled , then nothing else should be needed , no port forwarding or dmz or any of that...the fact that its not tells me its on their end , ive read many posts now on WISP's and have yet to
see one that is positive for gaming and nat issues...but at least your halfway there ...

 

I have found from personal experience that upgrading to a higher caliber router and a faster internet connection can sometimes offset the STRICT nat settings especially if I have a router placed somewhere in my home and a wireless connection set up and a
wired connection directly into my xbox.

 

@MVP493 - Can you visit Asus website and make sure your RT N66U is up-to-date with the latest version of firmware.

How is the RT N66U currently configured, regarding Port Forwarding, UPnP and DMZ? If you have manually configured Port Forwarding, be sure to tell us which console are being reserved.

Please keep in mind that if you manually configured Port Forwarding to one of your Xbox consoles, to make it exclusive, the second console will then always be diagnosed with Moderate, or a Strict NAT behaviour.

Can you also tell us if your Xbox One's Power mode are currently set to, Energy-saving- or Instant-On Power mode.

 

What Country/State/Province do you live in? Virginia, Prince William County

Modem brand & model number: Verizon Quantum Gateway

Router brand & model number: Model Fios G1100

Wired or wireless:both

Things you have tried:

Is UPnP Enabled? Yes

Do you have a NAT error? If so, what is your NAT type?

Any Error Codes you encounter: 0x40000000000

Who is your ISP?(Internet Service Provider): Verizon, troubleshot with them, the router checks out fine.

I recently replaced my Xbox One with a new unit (old one had NAT of OPEN). I noticed the new unit had a

network NAT setting of moderate, I retested doing the advanced NAT test and it went to strict. The error

msg I got was 0x40000000000, "Your network is behind a port preserving port sysmetric NAT". When I click

on the Network Settings tile, I now only get the description screen stating the Strict NAT, not the base

menu that lets you test your settings etc., so I can't actually re-test of view any of the Network

settings details anymore. I am stuck on the output of the NAT test, I can't get back to the main Network

Settings screen and re-run the tests or view anything etc., I've tried rebooting my X1 serveral times.

I went into my router and deleted the port forwarding rules for the old Xbox One and re-entered them for

the new Xbox One (new IP address). I verified UPnP was enabled on the router. The Xbox One network screen

is still stuck at the Strick NAT setting screen, I can't do anything else on it. I did load COD: Advanced

Warfare and it verified my NAT setting is OPEN so I think I may be good, just wondering why the Network

setting screen is stuck on the NAT output subscreen vs the normal screen.

Note: I have only one router.

 

Sorry about the double spaced lines, I copied over from Notepad. I just reset the cache on the X1 (clear local saved games option) and that fixed the Network Settings screen. It now works as normal and shows NAT=OPEN. So it appears my router and unit are
now good to go. I will post back if issue reoccurs (I believe replacing the X1 caused it, deleting the old port forwarding info in the router and re-entering it for the new X1 IP and then clearing the local cache worked - although all this wasn't obvious 2
hours ago when I started down this rabbit hole).

 

Hey Taidara, there is a place that updates firmware when you log into the router. Updating the firmware was one of first things that I did. Ok, so this is the what I did today to try and fix this problem. To start off, I had both consoles with static
IP's inside the router by using their IP's and Mac addresses. I also had one of them port forwarded as shown on YouTube. I ran the multiplayer test and did the bumper trigger thing four or five times. It was on the fourth or fifth time running the test
and doing the nat check that the port forward setup finally opened. I then proceeded to shut off that whole setup(tv, console and receiver) and turn on the other console's setup(tv,console and receiver). I ran the same multiplayer test with Nat check. It
came up as strict which was not much of a surprise, I then turned off that console while leaving the TV and receiver on. I just thought this would save time not having to turn them on and off for every test. I'm glad I did because when I turned on the first
setup to check it's Nat, it had returned to strict. I was puzzled by this at first but then decided to do the Nat test another 4 or 5 times, which almost always opens the Nat on the port forwarded setup. It opened it again, so I shut it down and proceeded
to test the other one. It came back strict so I turned off the console as well as the TV this time. When I turned on the first setup to retest it was still open, eureka. I repeated the test, this time shutting off the console and reciever while leaving
the TV on. This time it was strict again which proved the other TV was somehow turning my Nat strict on my port forward setup. Any time before if I had the port forward setup with an open Nat, it would turn to stict on the next Nat test if the other console
was also on. I unplugged the ethernet cable from both TV's and it fixed that problem. Now, my open one would stay open if I turned on the other console.

The next funny thing that happened was after I got the port forward setup open, I managed to get the Nat open on the other one as well. Both screens said Open at the same time, however the first setup closed to strict after the first Nat test. Essentially,
they just traded places. This got thinking about how this was even possible because I had the ports forwarded for the IP of the first setup. I then decided to get rid of port forwarding in the main router and retest with just the static IP's of the consoles
in the router. This seemed to test the same as before, so I got rid of static IP's as well. I didn't get the second setup opened that time so I did some more research and found something online. This guy was having trouble and the tech for linksys told
him to put the ports into port triggering and enable UPnP. I did the same as far as the triggering part, I already had UPnP enabled.

This setup has allowed me to Nat test(bumpers and triggers) 4 or 5 times and get an open for that respective console. Sometimes you have to restart your console and do it another 3 or 4 times but it never fails to open the Nat. I did this on both setups
while they were running at the same time and it opened them both. I then ran the two tests again(everything but the Nat test) as well as toggling the offline/online selection on the side while maintaining an Open Nat. I tried restarting both consoles and
they were open when they came back online. I tried playing some Halo with the first setup and the matchmaking was much faster than with the strict Nat. I've tried cycling them both off and on several times and they stay open every time. Once they are both
open, the only way to mess it up is to go back into multiplayer test and do a Nat test afterwords(bumpers and triggers). This always sends that one back to strict. Then you have to repeat the multiple Nat test thing until it opens back up.

I haven't read about anything like this in forum as of yet. Does anyone know what it's doing? It feels like I found a cheat code. I still would like to be able to Nat test anytime and not lose my open Nat. What do you guys think? Thanks to everyone
who has already posted, it is very appreciated.

 

[quote user="MVP493"]Hey , there is a place that updates firmware when you log into the router.[/quote]I always recommend that you visit the manufactures website to ensure it is the latest version of firmware.

[quote user="MVP493"]To start off, I had both consoles with static IP's inside the router by using their IP's and Mac addresses.[/quote]Just to clarify, do you refer "static IP's inside the router" as DHCP/IP reservation?

[quote user="MVP493"]I also had one of them port forwarded as shown on YouTube.[/quote]This configuration is fine as long as you connect
one Xbox console to the same router Internet Connection, but not multiple (as mentioned per my previous post).

[quote user="MVP493"]The next funny thing that happened was after I got the port forward setup open, I managed to get the Nat open on the other one as well[/quote]Make sence if you have UPnP (automatic Port Forwarding) enabled at the same time as you have
manually configured network ports for Xbox Live, to allow inbound Xbox traffic. These two features should never be operating at the same time, as UPnP tend to overwrite any existing static NAT for inbound traffic.

[quote user="MVP493"]I haven't read about anything like this in forum as of yet. Does anyone know what it's doing? It feels like I found a cheat code.[/quote]If you refer to the
LT/RT/LB/RB combination for detailed statistics, under Multiplayer test, this causes the Xbox One to delete any existing port mapping in your routers NAT table, and in more particular, port 3074/UDP.

If you were to run a debug for UPnP, and depending of the version your router is running miniupnpd, it would look something like this when you use the combination for detailed statistics (Xbox One):

DeletePortMapping: external port: 3074, protocol: UDP

removing redirect rule port 3074 UDP

It then request port 3074/UDP for itself where UPnP-IGD add a new portmapping, where a well behaved UPnP suite would first check for ports in use and then assign a fallback port if port 3074/UDP is in use.

However, most routers that use UPnP as an implemantion method for automatically forwarding network ports to an endpoint, comes with certain security measures, which causes the fallback port to not function as they were ment to function.

The Xbox One don't play very nice with fallback ports, since it tend to force a request regarding port 3074, in contrast to the Xbox 360, where the 360 is
more generous regarding this request. This is one of the reasons I asked you about which Power mode you have enabled for your Xbox One.

With UPnP enabled, and two running Xbox, where one of these is an Xbox One, I would recommend Energy-saving Power mode as the option to use.

Have you tried to reset your Asus router and reconfigure wireless settings on this device.

Only use UPnP and reserve both your console's MAC address, along with a unique IP address, under DHCP reservation. Be sure to assign the correct interface for your Xbox One, since it has one physical address for each interface (Ethernet, wireless).

Also make sure your Asus router allow IPsec, and no IPv6 enabled settings in your routers UI.

Keep us posted!

 

May I ask why you have so many routers, where two of these are configured as accesspoints. Have you ever considered a wireless bridge, instead of accesspoint?

 

"I always recommend that you visit the manufactures website to ensure it is the latest version of firmware."

I checked their website and it's the latest version of firmware. Although they have a beta version that was released on 06/03 the fixed the following:

Security fixes

- Enhanced the login authentication strength and fixed CSRF related issues.

- Forced administrator to change the default password "admin" in internet setup wizard.

- Added protection mechanism for GUI login brute-force attack for login username and password.

- Administrator can assign a specified IP to login GUI in Administration > System > "Allow only specified IP.

New feature

- Added client list view button on network map and help administrator easily monitor all client connection status.

Bug fixes

- Fixed lease time and lease expires time

- Fixed ethernet connection fail in IPv6 when WAN hwaddr is cloned.

- Fixed allowed and blocked incoming icmp firewall rules.

- Fixed dnsmasq buffer overflow issue.

- Fixed redirect issue when using https only.

- Fixed USB related issues when connected to USB hub.

3G/LTE dongle related fixes

- Fixed executed time issue when using auto-APN.

- Modified auto-APN nvram.

- Fixed lockpin function.

- Fixed send_sms function.

- Updated the SPN data from Android.

- Fixed web redirected fail after setting PPPoE in internet setup wizard.

Does this sound like it would help?

 

"Just to clarify, do you refer "static IP's inside the router" as DHCP/IP reservation?"

Yes, that is correct.

"Can you also tell us if your Xbox One's Power mode are currently set to, Energy-saving- or Instant-On Power mode."

I have them both on energy-saving mode. They have been this way during the whole testing process.

"May I ask why you have so many routers, where two of these are configured as accesspoints. Have you ever considered a wireless bridge, instead of accesspoint?"

We have 24' tower on top of a 30' metal building that holds the internet antenna. This was necessary to gain a clear shot to the main tower. The cable is then run into the power supply box before linking into the first router(the one set up as a router).
From there, the next cable goes out the Lan and into plastic pvc pipe which travels underground to the next building. That is were both Xbox setups reside. They are linked to it's LAN port by switches and a cat6 cable. Another cable is hooked to that router
and once again run underground in PVC to the house(the last access point). I have cables run off of that going to PC's and other switches throughout the house. I originally tried one router in the middle building but the signal didn't make to into the other
two buildings. I decided to move the main router to the metal building and then program access points for the other two structures. I like the access point idea because it links them all with cables as well as extending the wifi. As you can probably tell,
I'm a big fan of the wired connection. Every console, tv, pc, etc. I have is wired direct. The only reason I have WIFI is for laptops and smartphones. I just don't want to have to rely on WIFI for any of my main connections.

"Have you ever considered a wireless bridge, instead of accesspoint?"

I have not, I thought that access points would be better because the whole network is cable connected.

"Have you tried to reset your Asus router and reconfigure wireless settings on this device."

I did a factory reset on everything last weekend. I reset my passwords and usernames during this process. I also gave the access points their own names so you can pick your WIFI based on what building you are in.

"Also make sure your Asus router allow IPsec, and no IPv6 enabled settings in your routers UI."

I'm not sure where to find IPsec in my router's software. However, it shows that IPv6 is not enabled.

Only use UPnP and reserve both your console's MAC address, along with a unique IP address, under DHCP reservation. Be sure to assign the correct interface for your Xbox One, since it has one physical address for each interface (Ethernet, wireless).

I will try turning off port triggering tonight and set them as DHCP reservations. I think I have that way now so I will just need to turn off the triggering. On a side note, I hopped on one of the Xbox one's yesterday morning. It went back to strict and
I used my LT/RT/LB/RB combination for the Nat test, under Multiplayer test to open it back up. It took 4 tests, then a restart with two more test to open it. Sometimes it will open in 3 or 4 tests, but if it doesn't I always restart it. It has never failed
to open on the second round of testing. Do you think this is my problem or should I contact my ISP again? I'm not opposed to buying a new router if it will fix all of this. It's just kind of frustrating because I thought I already bought 3 good routers.
I'll let you know what happens later tonight, thanks again.

 

Ok, I gave both consoles DHCP reservations using their IP's and wired Nat mac addresses. After testing, it looks to be exactly the same as before. If you do the Nat test after the multiplayer test multilple times, it will open. Then you can do the same
thing to the other one and it will open as well. However, if you run the Nat test again on either console it will set that particular console back to strict. Then you'll have to start the whole process over. Also, I always restart if it doesn't open in
4 multiplayer/Nat tests and then repeat the process. How do I know if it's my problem, my ISP, or Xbox Live?

 

I don't Think it's your ISP, as long as your ASUS router's WAN interface (WAN/Internet IP address) obtains a public IP address. The very same IP address as if you would go here to check:
What Is My IP? Shows your real IP - IPv4 - IPv6 - WhatIsMyIP.com®

As important as for your main router's WAN interface to obtain a public IP, as important is it that your own network is not being NAT'd twice. But as long as your additional routers are truly operating as accesspoints, or layer 2 devices, they can be omitted
from the equation as the culprit.

The very essence of your problem is more related to your ASUS router/NAT, and to be more specific, the way UPnP is operating through your router/NAT, especially since you connect multiple xboxes to the same router Internet Connection, where each console
will be competing over port 3074 for Xbox traffic.

You will have to keep in mind that NATs, and especially the implementation of UPnP, differ from one NAT, to another in quite fundamental ways. What works seamlessly across one NAT, and the implementation of UPnP, may not work at all for another class of
NAT. NATs differ not only on a vendor-by-vendor basis, but even on a model-by-model basis within a single vendor's range of NAT units. There have also been occasions, rare though, where a different version of firmware have been proven to work.

Can you tell me what version of firmware your router is currently running.

Can you turn off the firewall option on your router.

[quote user="MVP493"]I'm not opposed to buying a new router if it will fix all of this.[/quote]If this is truly an option, you may consider to use an OpenSource firmware for your router. For example, dd-wrt, or Tomato. This however, is always presented
with a significant risk that may brick your router.

[quote user="MVP493"]It's just kind of frustrating because I thought I already bought 3 good routers[/quote]You really only need
one good router and not three, where you configure two of these to be operating as accesspoints, to extend your WLAN. There would have been more feasible options to consider.

 

Hey everyone, I'm still trying to fix my strict nat issue from 3-4 months ago. Nothing has changed from the last post, I just didn't have any time to deal with it. Last week, I bought a new router(Asus rt-ac3200) with the hope the it would fix my problems.
So far, it did not. I just tried the last suggestion from Taidara which was to give both consoles DHCP reservations using their IP's and wired Nat mac addresses in the router while leaving UPnP enabled. I then ran the multiplayer test on both consoles and
and used the LT/RT/LB/RB combination at the end of the test. Both consoles opened and I retested both consoles again with the same procedure. They stayed open again, I thought that I had finally won. However, I did a restart on both consoles(energy saving
mode) and one stayed open while the other went back to strict. Now it acts exactly the same as before with the RT-N66u. You have to use the multiplayer test with the LT/RT/LB/RB combination to get it to open(only one console). Sometimes it opens on the
first test, but I've had it take a many as 25 trys. What are my options? I'm thinking return my router for a Netgear router(the R-7000 or even the Nighthawk X8 if that would work). Does this sound like it would work. I need to find a router with an exceptional
UPnP.

 

Hey MVP493,

I would like to apologise for any inconvenience caused

Can you please try these steps:

1, Turn On

2, Settings

3, Disc & Blu-ray

4, Persistent Storage

5, Clear Persistent Storage

6, Back To Settings

7, Network

8, Advanced Settings

9, Alternative MAC Address

10, Clear

11, Restart

12, Once rebooted hold finger on the power button for 15 seconds

13, unplug the Xbox Power Supply (please leave unplug until the rest of the steps are complete)

14, Unplug the Router for 5 Minutes

15, Make sure all Ports are open and all ports are forwarding, for more information >>>

support.xbox.com/.../network-ports-used-xbox-live you should be able to log into your Router Settings on the website of your Provider to check the status and change them, if you can't find how or know how then please proceed to contact your Provider to
check and change them for you

16, Once all sorted leave your Router unplug for 24Hours and your Xbox for 48Hours

17, please Follow Steps 1, 2, 7, 8, 9, 10 & 11 again

18, Once Rebooted go to settings, Network and your NAT Type should now be Open

19, Load Game

20, Sit back and enjoy your Xbox One Gaming Experience Once Again

Hope this helps B-)

FIZZY LP