Strict Nat...even after opening ports. Help Please

My NAT often interchanges between Strict and Moderate NAT. I just opened my ports (at least tried, like 4 different times) and it still says “Your network is behind a port-symmetric NAT” even though I think I opened my ports correctly. I have followed the Port Forward guide, and many other guides and still cannot manage to get it working right.

I have a Belkin N450 router. I bought it earlier this year, so I really don’t want to buy another one if I don’t have to. I’m in college so money is tight. I live in an apartment complex that has a horrid 1.39 mbs download with a 0.24 upload. I can pay extra to upgrade it, but like everything else in life right now I want to spend the least amount of money as possible.

If anyone has any help, that would be greatly appreciated.

Thanks

Xbox one can automatically opens your ports, there is a hidden function for that.

> Select Test Multiplayer Connection. When your connection results are presented, before pushing A for Continue, press and hold LB + LT + RB + RT on your controller, and this will take you to the super secret Detailed Network Statistics screen with a Detailed NAT status. The Detailed NAT status will initially have “….” Wait 60-90 seconds, and it will update with one of NAT types mentioned above. The goal is to be behind a cone NAT, which should give an OPEN NAT type.

Give your xbox a static ip

> 2761135485837192;2:
> Xbox one can automatically opens your ports, there is a hidden function for that.
>
>
>
> > Select Test Multiplayer Connection. When your connection results are presented, before pushing A for Continue, press and hold LB + LT + RB + RT on your controller, and this will take you to the super secret Detailed Network Statistics screen with a Detailed NAT status. The Detailed NAT status will initially have “….” Wait 60-90 seconds, and it will update with one of NAT types mentioned above. The goal is to be behind a cone NAT, which should give an OPEN NAT type.

I have tried that, and did just again to make sure and for detailed NAT information, it says “Your network is behind a port-symmetric NAT.”

I just switched from Wired to Wireless, and now it’s at moderate. Now the detailed NAT information says “Behind a cone NAT”. Lol I get that message but not OPEN NAT.

When I first opened mine on my BT Home Hub 5, it still remained on Strict. After making sure that I had done it correctly (deleted my port forwarding) I did it again, and rebooted the router. Sometimes a reboot of the router maybe required for the effect to carry over I guess?

I use a DMZ on my Linksys router. First go to your network settings and take a picture for reference, because most of those strong will be reused. Then make up a static IP, like 192.168.1.107. It will be whatever your IP was before, but with a higher number at the end so nothing gets assigned that IP. When string the network settings on the console manually, this will be your ip address. Then go to a web browser, type in 192.168.1.1, user name and password is admin. Then go to applications and gaming, then go to the DMZ tab. Enter the Xbox one’s IP and save and exit. Restart Xbox one. Should be good.

DMZ means all ports are open. It’s something you wouldn’t want a PC on, but consoles are different.

Go to settings, power and startup, and change instant-on to power saving. Then, turn off your Xbox.

This is actually an issue that’s been omniously present in the Xbox One since 2013. Most NAT ports are managed by a service called UPnP, which automatically opens and closes certain ports based on the state of any device using it. The Xbox uses UPnP to handle NAT. Due to the nature of something like UPnP, security flaws exist. To combat these vulnerabilities, UPnP will automatically drop a device using it for a period of time and require it to reestablish it’s connection to the service.

The problem is, the Xbox One cannot reconnect itself to UPnP without rebooting. The solution? Completely power off your Xbox. Then, go to the settings app, select “Power and Startup,” and change “Instant-On” to “power saving.” These can be found in the right pane of the screen. The drawback is that you’ll lose the convenience that instant on provides, but one could argue that having a good connection is more important.

> 2533274806882789;7:
> I use a DMZ on my Linksys router. First go to your network settings and take a picture for reference, because most of those strong will be reused. Then make up a static IP, like 192.168.1.107. It will be whatever your IP was before, but with a higher number at the end so nothing gets assigned that IP. When string the network settings on the console manually, this will be your ip address. Then go to a web browser, type in 192.168.1.1, user name and password is admin. Then go to applications and gaming, then go to the DMZ tab. Enter the Xbox one’s IP and save and exit. Restart Xbox one. Should be good.
>
> DMZ means all ports are open. It’s something you wouldn’t want a PC on, but consoles are different.

Don’t do that. Please don’t do that. Consoles are in no way, shape, or form different when it comes to the atrocity that is DMZ. Never ever ever even consider DMZ as a solution to anything ever.

> 2533274829339976;9:
> > 2533274806882789;7:
> > I use a DMZ on my Linksys router. First go to your network settings and take a picture for reference, because most of those strong will be reused. Then make up a static IP, like 192.168.1.107. It will be whatever your IP was before, but with a higher number at the end so nothing gets assigned that IP. When string the network settings on the console manually, this will be your ip address. Then go to a web browser, type in 192.168.1.1, user name and password is admin. Then go to applications and gaming, then go to the DMZ tab. Enter the Xbox one’s IP and save and exit. Restart Xbox one. Should be good.
> >
> > DMZ means all ports are open. It’s something you wouldn’t want a PC on, but consoles are different.
>
>
>
> Don’t do that. Please don’t do that. Consoles are in no way, shape, or form different when it comes to the atrocity that is DMZ. Never ever ever even consider DMZ as a solution to anything ever.

You’re being dramatic. I’ve been running a DMZ fine for over 10 years. I set up DMZs on my friends networks and they have had no problem either. If you don’t know what you’re talking about, don’t talk about it. You’re just scaring people out of doing something that could help them.

> 2533274806882789;10:
> > 2533274829339976;9:
> > > 2533274806882789;7:
> > > I use a DMZ on my Linksys router. First go to your network settings and take a picture for reference, because most of those strong will be reused. Then make up a static IP, like 192.168.1.107. It will be whatever your IP was before, but with a higher number at the end so nothing gets assigned that IP. When string the network settings on the console manually, this will be your ip address. Then go to a web browser, type in 192.168.1.1, user name and password is admin. Then go to applications and gaming, then go to the DMZ tab. Enter the Xbox one’s IP and save and exit. Restart Xbox one. Should be good.
> > >
> > > DMZ means all ports are open. It’s something you wouldn’t want a PC on, but consoles are different.
> >
> >
> >
> > Don’t do that. Please don’t do that. Consoles are in no way, shape, or form different when it comes to the atrocity that is DMZ. Never ever ever even consider DMZ as a solution to anything ever.
>
>
> You’re being dramatic. I’ve been running a DMZ fine for over 10 years. I set up DMZs on my friends networks and they have had no problem either. If you don’t know what you’re talking about, don’t talk about it.

He’s actually right. Although consoles are not really susceptible to the usual suspects of worms, viruses, trojans and all the other flavors of the internet, setting your console up on a dmz can actually make it easier for someone to ddos you or otherwise.

> 2533274795749758;11:
> > 2533274806882789;10:
> > > 2533274829339976;9:
> > > > 2533274806882789;7:
> > > > I use a DMZ on my Linksys router. First go to your network settings and take a picture for reference, because most of those strong will be reused. Then make up a static IP, like 192.168.1.107. It will be whatever your IP was before, but with a higher number at the end so nothing gets assigned that IP. When string the network settings on the console manually, this will be your ip address. Then go to a web browser, type in 192.168.1.1, user name and password is admin. Then go to applications and gaming, then go to the DMZ tab. Enter the Xbox one’s IP and save and exit. Restart Xbox one. Should be good.
> > > >
> > > > DMZ means all ports are open. It’s something you wouldn’t want a PC on, but consoles are different.
> > >
> > >
> > >
> > >
> > > Don’t do that. Please don’t do that. Consoles are in no way, shape, or form different when it comes to the atrocity that is DMZ. Never ever ever even consider DMZ as a solution to anything ever.
> >
> >
> >
> > You’re being dramatic. I’ve been running a DMZ fine for over 10 years. I set up DMZs on my friends networks and they have had no problem either. If you don’t know what you’re talking about, don’t talk about it.
>
>
> He’s actually right. Although consoles are not really susceptible to the usual suspects of worms, viruses, trojans and all the other flavors of the internet, setting your console up on a dmz can actually make it easier for someone to ddos you or otherwise.

People on consoles already know which ports are open. Using a DMZ won’t make you any more susceptible to that. It has a small risk of getting a virus over other ports, but it’s never happened that I know of. It’s an Xbox running a proprietary OS and somewhat custom hardware. It’s just not worth it to try to hack Xbox One’s when you can hack PC’s. Go ahead and try to open all your ports with port forwarding/port range triggering or whatever. The risk of anything bad happening with DMZ that couldn’t happen otherwise on a video game console is like .0001%. With the network manipulation that exists on P2P, ddos doesn’t really pose a threat. People will just block your IP and lag you out regardless of your settings. Just do whatever you can that works for you, but DMZ works wonders for me.

> 2533274829339976;9:
> > 2533274806882789;7:
> > I use a DMZ on my Linksys router. First go to your network settings and take a picture for reference, because most of those strong will be reused. Then make up a static IP, like 192.168.1.107. It will be whatever your IP was before, but with a higher number at the end so nothing gets assigned that IP. When string the network settings on the console manually, this will be your ip address. Then go to a web browser, type in 192.168.1.1, user name and password is admin. Then go to applications and gaming, then go to the DMZ tab. Enter the Xbox one’s IP and save and exit. Restart Xbox one. Should be good.
> >
> > DMZ means all ports are open. It’s something you wouldn’t want a PC on, but consoles are different.
>
>
> Don’t do that. Please don’t do that. Consoles are in no way, shape, or form different when it comes to the atrocity that is DMZ. Never ever ever even consider DMZ as a solution to anything ever.

DMZ essentially puts your console outside of the routers fire wall. I would assume anybody who could find your console on the internet would be able to access it or harm it in some way. Just open the listed ports on our router.

Some modems have firewalls and your ISP most likely has a firewall. Your routers firewall does much less than you think it does.

Do you also have a xbox 360 or another xbox one in the house? if so then you got issues. Some modems can’t switch between two xbox consoles and the only way to fix it is manually port forward a strict ip back and forth between consoles when you wanna play on one.

Yeah it’s silly but apparently an issue with how xboxes work with nat or something. I have to do this if I want to maintain my open ports.

> 2533274808972171;15:
> Do you also have a xbox 360 or another xbox one in the house? if so then you got issues. Some modems can’t switch between two xbox consoles and the only way to fix it is manually port forward a strict ip back and forth between consoles when you wanna play on one.
>
> Yeah it’s silly but apparently an issue with how xboxes work with nat or something. I have to do this if I want to maintain my open ports.

Yes, that’s true. Same goes with any mix of consoles. I think some high-end gaming routers work around that, but a normal router can’t handle it. I think it has something to do the the MTU as well. It’s a pita.

I also wanted to say not to mix DMZ, port triggering, or port forwarding. Just pick one and be done with it. Doing more than one of those is counter-productive.

> 2533274806882789;16:
> > 2533274808972171;15:
> > Do you also have a xbox 360 or another xbox one in the house? if so then you got issues. Some modems can’t switch between two xbox consoles and the only way to fix it is manually port forward a strict ip back and forth between consoles when you wanna play on one.
> >
> > Yeah it’s silly but apparently an issue with how xboxes work with nat or something. I have to do this if I want to maintain my open ports.
>
>
> Yes, that’s true. Same goes with any mix of consoles. I think some high-end gaming routers work around that, but a normal router can’t handle it. I think it has something to do the the MTU as well. It’s a pita.
>
> I also wanted to say not to mix DMZ, port triggering, or port forwarding. Just pick one and be done with it. Doing more than one of those is counter-productive.

Now thats just not true. I’m IT. That’s just not true bro.

> 2533274795749758;11:
> > 2533274806882789;10:
> > > 2533274829339976;9:
> > > > 2533274806882789;7:
> > > > I use a DMZ on my Linksys router. First go to your network settings and take a picture for reference, because most of those strong will be reused. Then make up a static IP, like 192.168.1.107. It will be whatever your IP was before, but with a higher number at the end so nothing gets assigned that IP. When string the network settings on the console manually, this will be your ip address. Then go to a web browser, type in 192.168.1.1, user name and password is admin. Then go to applications and gaming, then go to the DMZ tab. Enter the Xbox one’s IP and save and exit. Restart Xbox one. Should be good.
> > > >
> > > > DMZ means all ports are open. It’s something you wouldn’t want a PC on, but consoles are different.
> > >
> > >
> > >
> > >
> > > Don’t do that. Please don’t do that. Consoles are in no way, shape, or form different when it comes to the atrocity that is DMZ. Never ever ever even consider DMZ as a solution to anything ever.
> >
> >
> >
> > You’re being dramatic. I’ve been running a DMZ fine for over 10 years. I set up DMZs on my friends networks and they have had no problem either. If you don’t know what you’re talking about, don’t talk about it.
>
>
> He’s actually right. Although consoles are not really susceptible to the usual suspects of worms, viruses, trojans and all the other flavors of the internet, setting your console up on a dmz can actually make it easier for someone to ddos you or otherwise.

Let them. I love when people do that. Brings me joy knowing the FCC just caught another idiot.

> 2776549591710208;18:
> > 2533274795749758;11:
> > > 2533274806882789;10:
> > > > 2533274829339976;9:
> > > > > 2533274806882789;7:
> > > > > I use a DMZ on my Linksys router. First go to your network settings and take a picture for reference, because most of those strong will be reused. Then make up a static IP, like 192.168.1.107. It will be whatever your IP was before, but with a higher number at the end so nothing gets assigned that IP. When string the network settings on the console manually, this will be your ip address. Then go to a web browser, type in 192.168.1.1, user name and password is admin. Then go to applications and gaming, then go to the DMZ tab. Enter the Xbox one’s IP and save and exit. Restart Xbox one. Should be good.
> > > > >
> > > > > DMZ means all ports are open. It’s something you wouldn’t want a PC on, but consoles are different.
> > > >
> > > >
> > > >
> > > >
> > > > Don’t do that. Please don’t do that. Consoles are in no way, shape, or form different when it comes to the atrocity that is DMZ. Never ever ever even consider DMZ as a solution to anything ever.
> > >
> > >
> > >
> > >
> > > You’re being dramatic. I’ve been running a DMZ fine for over 10 years. I set up DMZs on my friends networks and they have had no problem either. If you don’t know what you’re talking about, don’t talk about it.
> >
> >
> >
> >
> > He’s actually right. Although consoles are not really susceptible to the usual suspects of worms, viruses, trojans and all the other flavors of the internet, setting your console up on a dmz can actually make it easier for someone to ddos you or otherwise.
>
>
>
> Let them. I love when people do that. Brings me joy knowing the FCC just caught another idiot.

No reason to call anyone an idiot, we’re all adults here. We can have different ways of doing things. I have years if IT experience and a BS in IT that tell me my way has very little risk. In my OPINION, the benefit outweighs the risk. BTW, the FCC isn’t going to ddos you.

Op, just Google it and find out for yourself. Don’t listen to us bicker back and forth, it’s a matter of preference. IT people have tons of ways for doing things and some like to stick to the book religiously, where some are willing to try different things. In the end it’s up to you. You probably already figured it out or just don’t even care anymore.

You can of course put your Xbox within a dmz allowing it to basically be in front of your routers firewall. This allows for the ability to always have an open mat and not worry too much about having to Constantly add ports to forward.