NAT type Strict or Moderate on Xbox, PlayStation or Switch: how to get Open
The console says NAT type: Strict, and now party chat drops, you can't join a friend's game, or matchmaking takes ages. The internet itself works fine. The problem is whether other players can start a connection <i>to</i> you.
What the NAT type names mean
| Xbox | PlayStation | Nintendo Switch | What it means |
|---|---|---|---|
| Open | Type 1 (no router) or Type 2 with UPnP or forwarding working | A or B | Others can reach you; you can play with anyone and host |
| Moderate | Type 2 with problems | C | You can play with Open and some Moderate players; hosting is limited |
| Strict | Type 3 | D | You can only connect to Open players; party chat and joining often fail |
| Unavailable / Teredo can't qualify | Test fails | F | The console couldn't get a connection through at all |
On PlayStation, Type 2 is normal and good for a console behind a router. Type 1 only appears when it is plugged directly into the modem with no router, which you shouldn't do.
Why it happens
Your home shares one public internet address between every device. The router writes a note for each conversation a device starts, so replies find their way back; that is NAT. When another player's console knocks first, there is no note, and the router has no idea which device to hand it to, so it drops it. Wirebook's hands-on lesson How does the router know which device asked? lets you play the router and watch exactly that unasked-for game connection get dropped, then delivered once a forwarding rule exists.
Fixes, easiest first
- Restart the router, wait two minutes, then restart the console and run its network test again. Stale entries after a router reboot are a common cause of a temporary Strict result.
- Turn on UPnP in the router's admin page (often under Advanced, NAT or Gaming), restart the console and test again. UPnP lets the console ask the router for its own forwarding rule. It is convenient but lets any program on your network open ports, so if you'd rather not leave it on, use manual forwarding (step 4). Can't find the admin page? See how to log in to your router.
- Fix double NAT. If you plugged your own router or mesh system into the provider's router, both are doing NAT and the console usually reports Strict. Put the provider's box into modem mode or bridge mode, or set your own router or mesh to access point or bridge mode so only one device does NAT. How to spot it: double NAT and CGNAT explained.
- Port forwarding. Give the console a fixed address (a DHCP reservation using its MAC address), then forward the ports listed on the console maker's support page to that address. Xbox, for example, uses UDP port 3074 for game traffic; use the official list for your console rather than a random one from a forum.
- Two consoles in one home: only one can usually own a given forwarded port. Leave UPnP to handle both, or set a different port on the second Xbox in its advanced network settings.
- DMZ sends every unasked-for connection to one device. It works, but it removes the router's protection for that console, so use it only as a quick test.
When nothing works: CGNAT
Many mobile, 4G/5G home broadband and some fibre providers put whole neighbourhoods behind one shared address (carrier-grade NAT). Your router can't forward anything because the blocking happens at the provider. Check: compare the WAN or internet IP on the router's status page with what a what is my IP check shows. If they differ, or the router's one starts with 100.64 to 100.127, it is CGNAT. Ask the provider for a public IPv4 address (some charge a small fee) or whether IPv6 is available; modern consoles can use IPv6, which needs no NAT at all.
Related
Lag that is not the network: controller and TV · Console downloads slow? What really helps · Ethernet cable: Cat5e vs Cat6 vs Cat6a vs Cat8 · How much upload speed do video calls need? · Internet lags when someone downloads (bufferbloat) · Double NAT and CGNAT: port forwarding not working · Mbps vs MB/s: internet speed explained
Questions
What does NAT type Strict mean?
Your router blocks connections other players start, so you can only connect to players whose NAT type is Open. Party chat, hosting and joining friends often fail.
Is NAT Type 2 good on PlayStation?
Yes. Type 2 is the normal, healthy result for a PlayStation behind a router. Type 3 is the problem one.
Does UPnP fix NAT type?
Usually, yes. UPnP lets the console create its own forwarding rule. Turn it on in the router, restart the console and test again.
Why is my NAT type Strict with two routers?
That is double NAT: both routers translate addresses, and the console can't get through both. Put one of them in modem, bridge or access-point mode.
Can I get Open NAT behind CGNAT?
Not by changing router settings. Ask your provider for a public IPv4 address, or use IPv6 if your provider and console support it.
Published · updated .