Xbox nat issue

I have an xbox hard wired to my bt home hub 3 each and everytime i switch on my xbox my nat type is moderate so i have to switch off xbox reset the home hub to get an open nat . I have followed the online help in resetting but nothing changes i still have same problem when i conect the next time.

Hi, even with a static IP address, or an IP address that's permanently allocated to the XBox from the hub's DHCP range, and with the appropriate ports forwarded, I still get the Moderate NAT warning very frequently but have a guaranteed solution for a wired connection:
Make sure that the XBox is set to 'always use this IP address' as mentioned in earlier replies.
Make sure that the XBox Live ports are forwarded to the XBox.
When you switch your console on, the first thing you should do is run the Network Test.  If it gives you the moderate NAT warning, run the test again and repeat until you stop getting the warning which should be in 5 tests or less.
I've found that if the hub hasn't seen any traffic for about 20 minutes then the first test is clear, so am presuming that like the Hub 1, the later hubs aren't clearing down connections fast enough and given the sheer volume of connections being established by some software (P2P...?), things are getting a little backed up.
The way I see it is that the XBox is looking for a cone shaped (multiple incoming connections to one destination) so pushes out a request on port 3074 and in doing so establishes a single available line of response (incoming connection) across the firewall after clearing the oldest existing connection from the maxed-out table.  Repeating the test pushes further old entries off the table in favour of new XBox ones until it is able to meet the crieria for Open NAT.
The blame for this problem could be attributed in two ways: the hub's aren't clearing down unnecessary connections fast enough, or, and I think this is what it comes down to - the XBox IS requesting multiple incoming connections when establishing NAT status as part of the network test or the NAT status check when it signs into XBox Live and this should, in theory, open multiple connections inwards.  However, I think the XBox is sending multiple requests to a single server at Microsoft and the hub logically opens one connection for one source because connection resources are tight.  Run the test again and you might hit a different server and open an additional connection, and so on...
If Microsoft could change the way the XBox establishes NAT status by getting it to hit a spread of servers with requests, that might solve the problem.

Similar Messages

  • WRT160Nv2 And Xbox NAT Issues

    MY xbox runs on the 192.168.0.0 network while my internet connection runs off of the 192.168.1.0 network. So when I open my ports they're being opened for my computer connection. But even doing this doesn't open my NAT. I've tried to put my xbox on the 192.168.1.0 network too and this only causes me to lose my internet connection as a whole. What should I do?

    You connected the xbox to your computer?? With ICS (internet connection sharing)? In that case you have two routers between the xbox and the internet: the WRT and your computer. You have to forward the necessary ports from the internet to the computer on the WRT and then on the computer to the xbox. I kind of doubt that will work very well.
    You should try to bridge the wireless connection and ethernet connection on the computer instead of using ICS. Then your xbox connects directly to the WRT LAN and needs a 192.168.1.* address then. Port forwarding is only necessary on the WRT then.
    Of course, I would recommend to get a wireless adapter for your xbox to connect directly to your WRT instead of going through the computer. Going through the computer only makes the connection quality worse...

  • NAT issues with 5 XBOX consoles on network

    I have my other XBOXs connected to a 24 port switch but the one connected to the ea6500 directly gives me this moderate NAT issue. I thought this new router would be an upgrade to my old dlink but so far I get a new problem every day.
    I have reserved dhcp addresses for all the boxes and set up port triggering for the ports listed in several guides. But what else do I need to do? Is it likely I got a bad router?

    If your xbox is directly connected to the modem, do you have an open nat for your xbox? Have you tried forwarding the ports? If it did not work using port trigerring, try forwarding the ports then. One thing that you have to make sure if you do port forwarding is that you should be getting a public IP address on your router page. If you're not getting a public IP, there might be a need for your modem to be set to bridge mode. You may refer to this link for more info: http://www6.nohold.net/Cisco2/ukp.aspx?pid=80&vw=1&articleid=22385 (Resolving NAT type issues with gaming consoles through a Linksys router).
    Btw, are you using the cloud firmware or classic?

  • PS3 & Xbox NAT EA4500

    Hello, I'd like to get some assistance with an NAT issue my family is having. I'm sorry if this is in the wrong section. 
    We recently upgraded to the linksys ea4500 router. My brother plays call of duty on the PS3 and I play call of duty on the Xbox. The issue is we cannot figure out how to have open NAT on both consoles at the same time. I've read multiple support guides, but they don't seem to help. I'm pretty sure it's possible since i've gotten both to be open after reseting the router. The problem is it doesn't stay open on both for very long. We can get one to be open, while the other is stuck on moderate.
    We've tried port range forwarding and port range triggering. By default, the PS3 is open. To get the Xbox to open, i disable 'filter anonymous requests' in the security settings, and disable UPnP. (With UPnP enabled, the is ps3 is open & xbox is moderate, with it off, xbox is open and ps3 is moderate) Is there a way around this? A simple explaintion would be best, since I'm not familiar with proper internet terms. Both consoles are wired and have static IPs This is the guide I followed for xbox - http://www6.nohold.net/Cisco2/ukp.aspx?pid=80&app=vw&vw=1&login=1&json=1&docid=417986e6f9184b728cfa3...

    Hi,
          I wanted to know what firmware are you using for your router (EA4500),is it the Classic Cisco Firmware or It's the Linksys SMART Wifi firmware? I would advised you to use the Linskys Smart Wifi firmware & make sure it is the latest version. Click this link to download it: http://homesupport.cisco.com/en-us/support/routers/EA4500

  • NAT issue - WRT54G Version 1.1 with Vista Home Premium

    Router = WRT54G Version 1.1
    I am trying to figure out the cause of my problems, this router or Vista?
    I have 2 PC’s (just want to use my Vista 1) connected to the same router that is connected to a cable modem – the Windows XP machine has no problems bar its age and spec. I have a brand new PC with Vista Home Premium installed on it, now it is this new PC that I am having NAT problems with and port blocking.
    I have installed Windows Live Messenger and when setting it up I went into Tools/Options/Connections and I get an error message:- "You are connected to the internet through a UPnP port restricted NAT. The Windows Firewall is enabled. (User)"
    I have no option to run the trouble shooter (greyed out)…….
    If I turn off Windows Vista Firewall I get:- "You are connected to the internet through a UPnP port restricted NAT. (User)”
    Since this I have installed Media server software and have to reset the port it uses every time as it is always stating that it is blocked.
    I have downloaded OpenOffice via a torrent client which also stated that I had NAT problems.
    I have no NAT issues at all on my older XP PC and as a result I believe it is safe to rule out my router and modem……..I have only disabled Windows Firewall and this had made no difference, but I have not tried uninstalling it (no idea if that would make a difference)
    Oh, I do not have UPnP enabled (router setting) – does this matter (I have tried turning it on but made no difference to this issue so I turned it off again)?
    Message Edited by jomuir on 08-23-2007 02:50 AM

    user11241256 wrote:
    Documentation states that Oracle is supported on Vista business and Ultra. unfortuntatly Ihave Home Premium 64 and was curious if anyone had experience imstalling on this OS. I did attempt to install the 11g and I got one warning below that I could not find in the documentation for errors. You have answered your query yourself.
    You might be able to get the things running on an unsupported combination but there is no guarantee about the stability.

  • Console Gaming - NAT Issues - Workaround and Solut...

    I've already used the BT Broadband Contact Us, to raise this issue. They said it was beyond them and that they'd forward me an address for a technical forum. They've not managed to do so yet, so I'm trying here.
    Problem:
    NAT hole punching regularly fails between peers/players, manifests as "Cannot chat to player due to NAT Issues" on many different broadband routers.
    TL/DR:
    The BT Home Hub iptables INPUT chain should have a default action of DROP and not REJECT.
    Long Version:
    I'm a network engineer and programmer analyst and have been for approaching two decades. I'm also a gamer. I'm regularly frustrated by NAT Issue errors while trying to play online games with my friends.
    Frustrated for so long, we decided to start analysing the problem. Using packet captures and simulations, we have reproduced the problem and identified dubious logic in the netfilter conntrack module in the Linux kernel.
    When it works:
    When using a Playstation 4 to play Destiny, using either in-game or PS Party chat, each console uses a NAT discovery service to find it's external IP address and make an educated guess as to whether there is port translation.
    At the end of this process, each Player Console receives IP/Port pairs for the other players, they then emit UDP from their desired port to the IP/Port pair of each of the other Players. These UDP packets pass through their NATing routers and establish conntrack entries for the source ip/port, destination ip/port and protocol (here on referred to as five-tuple) with NAT associations with the console's LAN ip address and port; this is the hole-punching.
    All being well, each players console has created an association for each of the other players packets to come back through and then they are able to send each other data on these ports.
    When it doesn't work:
    However, here's the race condition: if player B's packet reaches player A's router before player A has sent theirs, there is no NAT association, no conntrack entry for the 5-tuple. The incoming packet instead considered as intended for the router.
    The iptables configuration on the router says that the packet is not allowed and REJECTs it, sending an ICMP destination unreachable packet in response. This reply is then inspected by conntrack, which decapsulates is and erroneously creates a conntrack entry for the 5-tuple.
    Now when Player A's console does manage to send it's own hole punching UDP packet, the 5-tuple for the desire hole is associated with the router's ICMP destination-unreachable. So Player A's packet can't have the desired port number and is renumbered to the first available port (e.g. 1025). Player B's subsequent packets to A follow the conntrack entry started by the ICMP destination-unreachable and are sent to the router which continues to reject them.
    How to fix this mess
    Linux conntrack
    Arguably the decapsulation of the ICMP payload and the usage of it to create a conntrack entry is erroneous. The ICMP unreach should not stop the port from being used by a NAT client.
    This will take a long time to fix and when fixed may never be back-ported to home routers which may never see new firmware again anyway.
    Modify the routers configuration
    If the router dropped instead of rejecting the traffic (relatively simple administrative task given appropriate access), the ICMP destination-unreachable wouldn't be generated, conntrack wouldn't create the erroneous entry and then even if Player B's packets arrived before Player A had sent theirs, it would still work.
    Disable the "firewall" and put your console in the "DMZ"
    These are terms borrowed from the Home Hub 3 admin interface. If you set your console as the "DMZ", it will receive any internet traffic that isn't associated with an already established flow. Actually at this point I'm not certain whether or not you *have* to set the "firewall" to disabled. It depends on how the "firewall" is implemented.
    On my console disabling the firewall and setting the console to be the DMZ works around the problem. However, you can only have one default NAT target. So any other device suffering from this problem would be out of luck without you reconfiguring your router each time. Also I'm not thrilled by my console receiving unfiltered internet traffic.
    In closing
    Race-conditions depend on timings. This one is exacerbated by low latency between players. In this case the difference between server<->PlayerA and server<->PlayerB latencies has to be lower than the PlayerA<->PlayerB latency. If PlayerA and PlayerB have low latency between each other they are more likely to suffer from this problem.
    Please, please, please bring this to the attention of someone who is responsible for the configuration of your routers. A simple configuration change on the HomeHub would prevent this problem from happening and remove the need for customers to add special configuration to their router and lowering their security.
    Thanks for reading.
    Matt

    Welcome to this forum.
    This is a customer to customer forum only,
    This is where customers help each other get the most out of BT products & services.
    Anything you post here does not go to BT. Although the forum is moderated by BT, not all posts are read.
    This is a public forum which can be viewed worldwide, so please do not post any personal information, especially phone numbers, account numbers, fault numbers, address information or email addresses, as this could be used to impersonate you.
    I would suggest that maybe you try using a different router?
    There are some useful help pages here, for BT Broadband customers only, on my personal website.
    BT Broadband customers - help with broadband, WiFi, networking, e-mail and phones.

  • Port Forwarding to change xbox nat type

    I have wasted the last 2 hours of my life, trying to figure this out. Ill try to make it short, but bear with me.
    xbox nat type is strict. Im fed up with this. Xbox is connected wirelessly to apple base station.
    Ive heard you cant get the NAT type to open, but that you can get it to moderate, and thats what im trying to do.
    I have successfully given my xbox a static ip address, and then I have gone in and opened up ports to that ip address. A guide i was following said this would work. It made it worse, now i get kicked out randomly, which didnt happen before.
    Can ANYBODY give me or find me a step by step guide on how to get my xbox nat type from strict to moderate using leopard and an apple base station.
    a fustrated,
    -Clay

    It is probably your modem that is doubling your NAT. I would set the modem to Bridge mode. That way only the router handles network address translation.

  • Asymmetric NAT rules matched for forward and reverse flows - NAT Issue

    Having a problem with a VPN site trying to communicate to a subnet off my ASA 5505.   The network is simple, VPN IPSEC remote site is 192.168.6.0/24 and I can ping and access hosts on 192.168.10.0/24 (called InfraNet).   I am now trying to allow communications between 192.168.6.0/24 (called FD_net) to 192.168.9.0/24 (called Inside)
    The Error:
    5          Nov 12 2012          13:52:50                    192.168.9.19                                        Asymmetric NAT rules matched for forward and reverse flows; Connection for icmp src outside:192.168.6.11 dst inside:192.168.9.19 (type 8, code 0) denied due to NAT reverse path failure
    I understand this is a NAT issue; but I not seeing the error and could use a second set of eyes.   Here's my current running configuration.
    : Saved
    ASA Version 8.3(2)
    hostname fw1
    domain-name xxxxxxxx.xxx
    enable password <removed>
    passwd <removed>
    names
    interface Vlan1
    description Town Internal Network
    nameif inside
    security-level 100
    ip address 192.168.9.1 255.255.255.0
    interface Vlan2
    description Public Internet
    nameif outside
    security-level 0
    ip address 173.xxx.xxx.xxx 255.255.255.248
    interface Vlan3
    description DMZ (CaTV)
    nameif dmz
    security-level 50
    ip address 192.168.2.1 255.255.255.0
    interface Vlan10
    description Infrastructure Network
    nameif InfraNet
    security-level 100
    ip address 192.168.10.1 255.255.255.0
    interface Vlan13
    description Guest Wireless
    nameif Wireless-Guest
    security-level 25
    ip address 192.168.1.1 255.255.255.0
    interface Vlan23
    nameif StateNet
    security-level 75
    ip address 10.63.198.2 255.255.255.0
    interface Vlan33
    description Police Subnet
    shutdown
    nameif PDNet
    security-level 90
    ip address 192.168.0.1 255.255.255.0
    interface Ethernet0/0
    switchport access vlan 2
    interface Ethernet0/1
    switchport trunk allowed vlan 1,5,10,13
    switchport trunk native vlan 1
    switchport mode trunk
    speed 100
    duplex full
    interface Ethernet0/2
    switchport access vlan 3
    interface Ethernet0/3
    interface Ethernet0/4
    switchport trunk allowed vlan 1,10,13
    switchport trunk native vlan 1
    switchport mode trunk
    interface Ethernet0/5
    switchport access vlan 23
    interface Ethernet0/6
    shutdown
    interface Ethernet0/7
    switchport trunk allowed vlan 1
    switchport trunk native vlan 1
    switchport mode trunk
    shutdown
    banner exec                     Access Restricted to Personnel Only
    banner login                     Access Restricted to Personnel Only
    ftp mode passive
    clock timezone EST -5
    clock summer-time EDT recurring
    dns server-group DefaultDNS
    domain-name xxxxxxx.xxx
    same-security-traffic permit inter-interface
    object network obj_any
    subnet 0.0.0.0 0.0.0.0
    object service IMAPoverSSL
    service tcp destination eq 993
    description IMAP over SSL     
    object service POPoverSSL
    service tcp destination eq 995
    description POP3 over SSL     
    object service SMTPwTLS
    service tcp destination eq 465
    description SMTP with TLS     
    object network obj-192.168.9.20
    host 192.168.9.20
    object network obj-claggett-https
    host 192.168.9.20
    object network obj-claggett-imap4
    host 192.168.9.20
    object network obj-claggett-pop3
    host 192.168.9.20
    object network obj-claggett-smtp
    host 192.168.9.20
    object network obj-claggett-imapoverssl
    host 192.168.9.20
    object network obj-claggett-popoverssl
    host 192.168.9.20
    object network obj-claggett-smtpwTLS
    host 192.168.9.20
    object network obj-192.168.9.120
    host 192.168.9.120
    object network obj-192.168.9.119
    host 192.168.9.119
    object network obj-192.168.9.121
    host 192.168.9.121
    object network obj-wirelessnet
    subnet 192.168.1.0 255.255.255.0
    object network WirelessClients
    subnet 192.168.1.0 255.255.255.0
    object network obj-dmznetwork
    subnet 192.168.2.0 255.255.255.0
    object network FD_Firewall
    host 74.94.142.229
    object network FD_Net
    subnet 192.168.6.0 255.255.255.0
    object network NETWORK_OBJ_192.168.10.0_24
    subnet 192.168.10.0 255.255.255.0
    object network obj-TownHallNet
    subnet 192.168.9.0 255.255.255.0
    object network obj_InfraNet
    subnet 192.168.10.0 255.255.255.0
    object-group service EmailServices
    description Normal Email/Exchange Services
    service-object object IMAPoverSSL
    service-object object POPoverSSL
    service-object object SMTPwTLS
    service-object tcp destination eq https
    service-object tcp destination eq imap4
    service-object tcp destination eq pop3
    service-object tcp destination eq smtp
    object-group service DM_INLINE_SERVICE_1
    service-object object IMAPoverSSL
    service-object object POPoverSSL
    service-object object SMTPwTLS
    service-object tcp destination eq pop3
    service-object tcp destination eq https
    service-object tcp destination eq smtp
    object-group service DM_INLINE_SERVICE_2
    service-object object IMAPoverSSL
    service-object object POPoverSSL
    service-object object SMTPwTLS
    service-object tcp destination eq https
    service-object tcp destination eq pop3
    service-object tcp destination eq smtp
    object-group network obj_clerkpc
    description Clerk's PCs
    network-object object obj-192.168.9.119
    network-object object obj-192.168.9.120
    network-object object obj-192.168.9.121
    object-group network TownHall_Nets
    network-object 192.168.10.0 255.255.255.0
    network-object object obj-TownHallNet
    object-group network DM_INLINE_NETWORK_1
    network-object 192.168.10.0 255.255.255.0
    network-object 192.168.9.0 255.255.255.0
    access-list outside_access_in extended permit object-group DM_INLINE_SERVICE_2 any interface outside
    access-list outside_access_in extended permit object-group DM_INLINE_SERVICE_1 any host 192.168.9.20
    access-list StateNet_access_in extended permit ip object-group obj_clerkpc any
    access-list outside_2_cryptomap extended permit ip object-group DM_INLINE_NETWORK_1 object FD_Net
    pager lines 24
    logging enable
    logging asdm debugging
    logging mail errors
    logging from-address hostmaster@xxxxxxxxx
    logging recipient-address john@xxxxxxxxx level errors
    mtu inside 1500
    mtu outside 1500
    mtu dmz 1500
    mtu Wireless-Guest 1500
    mtu StateNet 1500
    mtu InfraNet 1500
    mtu PDNet 1500
    no failover
    icmp unreachable rate-limit 1 burst-size 1
    asdm image disk0:/asdm-635.bin
    no asdm history enable
    arp timeout 14400
    nat (InfraNet,outside) source static TownHall_Nets TownHall_Nets destination static FD_Net FD_Net
    nat (inside,outside) source static TownHall_Nets TownHall_Nets destination static FD_Net FD_Net
    object network obj_any
    nat (inside,outside) static interface
    object network obj-claggett-https
    nat (inside,outside) static interface service tcp https https
    object network obj-claggett-imap4
    nat (inside,outside) static interface service tcp imap4 imap4
    object network obj-claggett-pop3
    nat (inside,outside) static interface service tcp pop3 pop3
    object network obj-claggett-smtp
    nat (inside,outside) static interface service tcp smtp smtp
    object network obj-claggett-imapoverssl
    nat (inside,outside) static interface service tcp 993 993
    object network obj-claggett-popoverssl
    nat (inside,outside) static interface service tcp 995 995
    object network obj-claggett-smtpwTLS
    nat (inside,outside) static interface service tcp 465 465
    object network obj-192.168.9.120
    nat (inside,StateNet) static 10.63.198.12
    object network obj-192.168.9.119
    nat (any,StateNet) static 10.63.198.10
    object network obj-192.168.9.121
    nat (any,StateNet) static 10.63.198.11
    object network obj-wirelessnet
    nat (Wireless-Guest,outside) static interface
    object network obj-dmznetwork
    nat (any,outside) static interface
    object network obj_InfraNet
    nat (InfraNet,outside) static interface
    access-group outside_access_in in interface outside
    access-group StateNet_access_in in interface StateNet
    route outside 0.0.0.0 0.0.0.0 173.166.117.190 1
    route StateNet 10.0.0.0 255.0.0.0 10.63.198.1 1
    timeout xlate 3:00:00
    timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
    timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
    timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
    timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
    timeout tcp-proxy-reassembly 0:01:00
    dynamic-access-policy-record DfltAccessPolicy
    http server enable 5443
    http 192.168.9.0 255.255.255.0 inside
    http 74.xxx.xxx.xxx 255.255.255.255 outside
    no snmp-server location
    no snmp-server contact
    snmp-server enable traps snmp authentication linkup linkdown coldstart
    crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
    crypto ipsec security-association lifetime seconds 28800
    crypto ipsec security-association lifetime kilobytes 4608000
    crypto map outside_map 2 match address outside_2_cryptomap
    crypto map outside_map 2 set pfs
    crypto map outside_map 2 set peer 173.xxx.xxx.xxx
    crypto map outside_map 2 set transform-set ESP-3DES-SHA
    crypto map outside_map interface outside
    crypto isakmp enable outside
    crypto isakmp policy 10
    authentication pre-share
    encryption 3des
    hash sha
    group 2
    lifetime 86400
    telnet 192.168.9.0 255.255.255.0 inside
    telnet timeout 5
    ssh 192.168.9.0 255.255.255.0 inside
    ssh timeout 5
    console timeout 0
    dhcpd dns 208.67.222.222 208.67.220.220
    dhcpd lease 10800
    dhcpd auto_config outside
    dhcpd address 192.168.2.100-192.168.2.254 dmz
    dhcpd dns 8.8.8.8 8.8.4.4 interface dmz
    dhcpd enable dmz
    dhcpd address 192.168.1.100-192.168.1.254 Wireless-Guest
    dhcpd enable Wireless-Guest
    threat-detection basic-threat
    threat-detection statistics host number-of-rate 2
    threat-detection statistics port
    threat-detection statistics protocol
    threat-detection statistics access-list
    no threat-detection statistics tcp-intercept
    ntp server 63.240.161.99 source outside prefer
    ntp server 207.171.30.106 source outside prefer
    ntp server 70.86.250.6 source outside prefer
    webvpn
    group-policy FDIPSECTunnel internal
    group-policy FDIPSECTunnel attributes
    vpn-idle-timeout none
    vpn-tunnel-protocol IPSec l2tp-ipsec
    username support password <removed> privilege 15
    tunnel-group 173.xxx.xxx.xxx type ipsec-l2l
    tunnel-group 173.xxx.xxx.xxx general-attributes
    default-group-policy FDIPSECTunnel
    tunnel-group 173.xxx.xxx.xxx ipsec-attributes
    pre-shared-key *****
    smtp-server 192.168.9.20
    prompt hostname context
    call-home
    profile CiscoTAC-1
      no active
      destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
      destination address email [email protected]
      destination transport-method http
      subscribe-to-alert-group diagnostic
      subscribe-to-alert-group environment
      subscribe-to-alert-group inventory periodic monthly
      subscribe-to-alert-group configuration periodic monthly
      subscribe-to-alert-group telemetry periodic daily
    Cryptochecksum:e4dc3cef0de15123f11439822880a2c7
    : end
    Any ideas would be appreciated.
    John

    I don't see any inspection-commands in your config. Is there a reason for not using any of them?
    If your problem is only with ICMP, then you should enable at least icmp-inspection. You can do that easiely with the legacy command " fixup protocol icmp"
    Sent from Cisco Technical Support iPad App

  • New nat issue

    Never had this happen before. Installed Border in a lab setting..nw6.5
    sp1a overlay cd, then border 3.8, then sp2 then tcp645j...
    The first thing I always try to do is get dynamic NAT working then I
    worry about the proxy services and so on. Opened icmp all the way so I
    could test ping.
    Server can ping both it's public and private interface, and can ping
    points beyond on both sides of those two interfaces.
    Workstation can ping border's private and public IP's but nothing beyond
    the public IP. Traceroute never returns anything. Seems like Nat just
    isn't working. Turned it off and back on...no help there.
    I've set this up many times in outerlying offices and in my lab...for
    some reason this time it won't work. I've even blown it out and redone
    my set up from the beginning...same thing....Yes, dynamic nat passtru is
    set on....
    Tried to do the tcpip debug = 1 thing...the packets rolled off logger
    such that I could not get an F2 to save a darn thing....You woulnd't
    think a brand new box would have all the much traffic just yet...
    Version of NAT is 7.00.07, trying very hard to understand what's going
    on here. Ideas on why nat won't work?

    Jim Michael wrote:
    > jim fixit wrote:
    >
    >
    >>nw65 sp1a as indicated, bm 3.8sp2 not happy together....
    >
    >
    > I'm running that combo here (sanem NAT.NLM too), and don't have the NAT
    > issue you describe.
    >
    > --
    > Jim
    > NSC SYsop
    hmm yes...I'm running a similar set up in a number of branch offices so
    I'm really hard pressed to understand what is with NAT or if it is even
    NAT at all that is having the issue.....

  • Could DirectTv server be causing my Double Nat Issues?

         Could DirectTv server be causing my Double Nat Issues? I am using an older Motorola Modem, then my Airport Extreme, then my airport express in bridge mode.  The DirectTv server seems to be plugged in before the Airportr Express so I am pretty sure it is no getting any info from the Airport Extreme but I am not sure.   
         The modem is model Motorola SurfBoard 5101U.  I do not beleive it has router capabilities. 
         The problem seems to only come up when I am using my Mac Book Pro (Mavericks).  Usually only when trying to download large files.  It does not effect my ipads or iphones.  Very strange.
        I've been racking my brain on this for a year. 
    Thanks,
    Stephen

    So, I run into some similar problems. I used to have the HD-DVR pre-Genie, which is when I started seeing some of the problems that my AirPort Utility was reporting. I hardwire every connection where possible. I currently run out of my AirPort TC into a switch. From the switch I go out to the rest of the house including an Apple TV and the new Genie. Along with multiple other wall ports, etc.
    It seems to me that whenever I have my Genie hardwired in - for extended period of times my network will "crash" and I will receive an error of Double NAT. Once I unplug the DirecTV from the network, everything goes back to working fine. This ocurred on the old HD-DVR as well as the Genie.
    I would welcome any ideas or suggestions.
    I am running a Motorola SURFboard S86141, New AirPort Extreme TC, and a Netgear 8-Port Switch.
    Thank you in advance for your help!!
    Billy Trimble

  • Time Capsule, hardwired to TWO xbox 360's, and NAT issues.

    Hello All,
    I currently have an older Linksys WRT54G (version 1.0 LOL) which has been working fine for years. I recently bought my son an XBOX 360 for Christmas and we went through the issues of NAT and Call of Duty, and basically I have become quite knowledgeable on this topic. I recently added a SECOND XBOX 360, as it became apparent that one would not do with three boys in the house (Plus COD is a blast on line).
    So I created a second Live Account and got the two xbox's running online stably with NAT wide open on both. This required abandoning the Linksys Firmware and installing "Tomato" on the WRT54G. That works GREAT. No modifications were required for the rest of the network including...
    Macbook by Wifi, Minimac Hardwired (ya ya wifi works but hardwire is better), Airport Express (used only to stream music to stereo in family room - from ANY PC/MAC running Itunes...Itunes is VERY NICE), HP printer with network adapter, 5 other PC's including a mix of VISTA, XP, XP Pro, and multiple IPHONES, A Palm Tungsten C, WII, DS and of course the two hard wired XBOXs. NO Problems. The Tomato configuration only required the modifications for the XBOXs specifically as the rest of the network settings were not change after the firmware update.
    What am I interested in? I'd like to upgrade to a Time Capsule for several reasons. One Newer wifi, faster, two frequencies, backup space for growing Mac branch of our network, and as the internet sharing router. AND to be able to access the TC from the internet for file access anywhere! LOVE THAT FEATURE. This requires the TC to be the first device after the cable modem as far as I can tell at this point. (any input on this specific feature would be great).
    So I want to configure the TC with the input from the Cable modem as the main distribution of the internet. Then from the other NETWORK ports connect to my 20 port router for the rest of the house, as well as to the other items currently connected at the site of the current LinkSys Router (Mac Mini, Sony TV).
    Also I need to maintain the current XBOX set up with (as well as Wii) with full open NAT on both XBOXs.
    My question: Anyone here currently using the TC for hardwired connectivity for an XBOX with XBOX live running with open NAT for TWO XBOXs?
    The issues with NAT and TWO XBOXs is that you cannot simply use PORT FORWARDing or PORT Triggering to make sure that the traffic goes to the correct xbox. The XBOX uses specific communication ports and the ROUTER needs to keep the traffic flowing properly or you get disconnected or never get open NAT (must have for XBOX live and internet gaming). There are many write ups on using Port Forwarding for one XBOX and setting the second one in the DMZ, but this does not work all the time.
    The "Tomato" firmware on the LINKSYS allows fooling the router into giving a 'pseudo static' ip address to the XBOX's by doing MAC address based reservation of an IP number and then letting the DHCP give the xbox an IP address. The MAC address based reservation makes sure that the XBOX always gets the same IP address which for some GD reason must be in order for the traffic to be routed to the correct device. (you can of course use the same MAC address reservation for any device on the network).
    Second Question: For those using the TC AND a second WiFi Router to do WIRELESS connection to the XBOX - which device do you have configured as the main INTERNET sharing router? I have read hear what appears to state that the TC is the main router and the other WiFi the secondary. Thus the ROUTING is still being done by the TC and the other wifi device is being used simply as a WiFi Access point/switch. If this is the case would the firmware on the TC allow the proper routing for TWO XBOXs on the network?
    Thank you,
    Mike

    The ports are 53, 80, 88, and 3074. Since you are trying to make two Xbox consoles use those ports and you are trying to connect to a server, what you need to do is to use Port Range Triggering. You can't use Port Range Forwarding since it will only set those ports into listening mode to the IP address you set it. So if you use Port Range Forwarding it will only be open/available to one console(the one using the IP address).
    You need to use PORT RANGE TRIGGERING. Disable Port Range Forwarding and DMZ. You need to enable UPnP as well if your Linksys router have this option (other model doesn't have this option but it is said to be enabled in default settings according to their tech support).
    To solve the lag problem set your MTU size to 1364. This settings will work even if you have one or multiple consoles running behind the router.

  • PS3 and XBox 360 problems. NAT issue.

    I don't know if anyone is having this issue. I own an XBox 360 and a PS3, both connected wirelessly to my WRT54GS router. If I play the XBox 360 (which requires an open NAT) it's fine. As soon as I download something (not play something) on my PS3, it turns the NAT into Moderate rather than Open. When I again turn on my XBox 360 I have problems with Live. So I must reset my router every time I download content on my PS3.
    Does anyone know why this happens or how to keep it from happening again?
    Thanks,
    Ryan

    check out the hardware version on the unit...and then go to www.linksys.com/download and look for the firmware of the appropriate version number of WRT54GS...
    access the router interface using http://192.168.1.1 . Logon using the password "admin"..ensure that the router has the same firmware as available on the website...if not , upgrade it first..
    after the firmware upgrade , reset the router and reconfigure ...
    on the router ui , change the MTU settings to 1364 ...assign static ip add and dns on the x-box and PS3....the ip add should be out of the range of the router's DHCP ( i.e out of 192.168.1.100 to 192.168.1.149 )
    on the router ui , go to "Applications and gaming" tab and forward ports 88 and 3074 for the ip add of the x-box and 10070 - 10080 , 6000 - 6999 for the PS3..

  • WRT320N. Port forwarding help. Xbox and ps3 playing at same time. NAT issues

    Hi
    I'm trying to have both my xbox and ps3 play with open NAT's for online gaming. I have had success utilizing info from 'portforward.com'. But the solutions will unlock OPEN NAT for either the ps3 or the xbox .. one at a time. Is there a way to get both to be open?
    It seems like one main conflict is the success depends on both utilizing port 3074. But I can't have both use it? ( obviously).
    I tried port forwarding the xbox per specs off of this forum and that works great.. And DMZ ing the PS3. But like i said before. Most solutions
    leave one console with OPEN and one with Moderate.
    Is there a solution that allows both NAT OPEN's on both consoles? 

    First of all XBOX works on a different port number and PS3 works on a different port numbers. Follow the steps below to open the ports on your router for XBOX and PS3. 
    Open an Internet Explorer browser page on your wired computer(desktop).In the address bar type - 192.168.1.1 and press Enter...Leave Username blank & in Password use admin in lower case...
     This settings are for your XBOX.
    On the set-up tab change the MTU Size to 1365 and click Save Settings...
    Click on "Administration" tab and disable the option UPnP and click Save Settings...
    Click on "Applications and Gaming" tab and then click on "Port Range Forwarding" subtab...
    1) On the first line in Application box type in ABC, in the start box type in 53 and End box type in 3074, leave the protocol as both and under ip address type in 192.168.1.20 and check the enable box, click Save Settings once done...
    2) Once you return to the set up page click on the Security tab and uncheck Block Anonymous Internet Requests and click on Save Settings...
    3)Click on the Status tab and take note of DNS1 and DNS2 Addresses...
    4) Goto the XBox Network Settings and IP Address Settings and select manual IP Settings and assign the following on your Xbox IP Address :- 192.168.1.20, Subnet Mask :- 255.255.255.0, Default Gateway :- 192.168.1.1...
    5) Also assign the DNS Addresses on the Xbox Use DNS1 and DNS2 Addresses you took note off of the router status tab as Primary DNS & Secondary DNS for the xbox...
    6) Turn off your modem, router, and Xbox...Wait for a minute...
    7) Plug the modem power first, wait for another minute and plug the router power cable, wait another minute and turn on the Xbox and test it...it will connect...
    For PS3 Follow the steps below
    Click on "Administration" tab and disable the option UPnP and click Save Settings...
    Once you return to the set up page click on the Security tab and uncheck Block Anonymous Internet Requests and click on Save Settings...
    Click on "Applications and Gaming" tab and then click on "Port Range Forwarding" subtab...
    1) On the first line in Application box type in ABC, in the start box type in 80 and End box type in 80, leave the protocol as both and under ip address type in 192.168.1.20 and check the enable box...
    2) On the second line in Application box type in DEF, in the start box type in 443 and End box type in 443, leave the protocol as both and under ip address type in 192.168.1.20 and check the enable box...
    3) On the third line in Application box type in GHI, in the start box type in 5223 and End box type in 5223, leave the protocol as both and under ip address type in 192.168.1.20 and check the enable box...
    4) On the fourth line in Application box type in JKL, in the start box type in 3478 and End box type in 3479, leave the protocol as both and under ip address type in 192.168.1.20 and check the enable box...
    5) On the fifth line in Application box type in MNO, in the start box type in 3658 and End box type in 3658, leave the protocol as both and under ip address type in 192.168.1.20 and check the enable box...
    6) On the sixth line in Application box type in PQR, in the start box type in 10070 and End box type in 10080, leave the protocol as both and under ip address type in 192.168.1.20 and check the enable box and click on Save Settings
    7) Now assign the given ip address on your PlayStation ip address :- 192.168.1.20, subnet mask :- 255.255.255.0, default gateway :- 192.168.1.1...
    8) Also assign the dns addresses on the PlayStation Primary dns :- 4.2.2.2...Secondary dns :- 192.168.1.1
    9) Turn off your modem, router, and PlayStation...Wait for a minute...
    10) Plug the modem power first, wait for another minute and plug the router power cable, wait another minute and turn on the PlayStation and test it...

  • EA3500 2 Xbox 360s NAT issues

    I have the Linksys EA3500 and 2 xboxes.  When i just had one i had no problems.  Now that I have two Xbox 360s one or both have moderate NAT.
    I have done the following and not fixed a thing!!
    Security- Apps and Gaming- Single port forwarding 
    Port 88 (UDP)   Port 3074 (UDP and TCP)   Port 53 (UDP and TCP)  Port 80 (TCP)  all set to true (check) and used my Xboxes given IP. Also tired with an manual IP set outside DHCP range, bad ip it says wont let me.
    Conectivity- Local Network- DHCP server (disabled), couldn't connect at all.  Enabled, DHCP Reservation, added Xboxes, didnt work, removed both added one, didn't help.  I've done this with the ports opened and after removing the port forward information.  It doesn't help.
    I also tried manually setting my xbox IP to an IP outside of my DHCP list of 1.100 to 1.149, it wont let me, says invalid IP address.  I tried rebooting my xbox with the invalid address and the router still tells me its and invalid address and doesn't add the new address to the "devices connected"
    I've tried with UpNP enabled, as it originally is and also disabled.  Doesn't matter.  I did the obvious and restored the router to factory as well as the router.  That didnt help.  
    Connectivity- Advanced routing- tried setting it to dynamic routing instead of NAT, it didnt help either.
    I'm not an IT guy, I don't even understand why I should need to do any of this stuff, but none of it works.  The only thing that works is turn on the xbox, reboot the router, reload xbox live and it will stay Open untill I restart my Xbox.  I haven't even tried checking the second xbox threw all these steps but the few times i have its been moderate.
    Routers up to date, aparently it has never recieved an update or the factory restore didnt remove one if there was one.
    REally need some help.  Thanks in advance.

    I’ve run into a post which is quite similar to your experience and it is not recommended to play two Xbox 360 units on the same network connected to the same game server since the modem will only generate a single WAN IP address. However, you may secure another WAN IP address from your ISP to connect the two Xbox 360. You might find the steps on this link helpful.

  • E4200 Xbox One NAT Issues (2 Xboxes)

    On Xbox One in the network settings you can check whether your xbox has an open NAT type.  I cannot get both xboxes open, plain and simple.  Are there any special techniques that will allow both xboxes to be open. I reset the royer to default to see if there were any settings that I fudged up, but that didn't help.
    I rebooted my router yesterday are turning of spi settings, and turned on the strict xbox, and after the reboot that one is now open.  I turned on the other xbox and now that one is strict.
    If anyone has found out how to get more than one xbox open please let me know how you did it, thanks.

    It really all depends on the IP Address you get from your ISP. The IP Address your router gets from the ISP's modem.
    Please remember to Kudo those that help you.
    Linksys
    Communities Technical Support

Maybe you are looking for

  • Lock/Freeze when in browser

    When saving sessions or files, equal parts in both, my Audition 3 keeps freezing/locking up. I can't figure out one reason why... It's such a basic Windows call... and no this has nothing to do with previewing audio, during saving files and sessions

  • Manual Backup Details

    Hello, I got some problems with Windows and Bootcamp, and now I want to manual backup my Macintosh HD hard drive. My question: What exactly files should I copy/paste for these fonctions: 1.Safari bookmarks 2.Stickies That's it, I hope I am not forget

  • Business area not Flowing for GL

    Dear Guru's As per Our Client Requirment We Have activated Document Splitting And New GL Concept Based On Business Area  (Plant and Division) Concept In FB03 We are Able to See Entry View and General Ledger View with respect to  Business Area. Howeve

  • Best way to perform the same task wih arrays of different Objects

    Hello all. This isn't an XPath question, it's a much lower-level Java Object question, but it involves XPath. I hope that doesn't distract from the question, or confuse anything. I have 4-5 different types of Objects (call them A, B, C, etc.) that ea

  • Date stamp on photos galaxy s3

    My droid allowed the date on photos and I can't seem to find that option on the samsung galaxy s3.  Am I overlooking something or is this option not on the samsung.