Back to Blog
Guide
6 min readOct 31, 2026

Mobile Hotspot NAT Type: Fix Strict NAT, NAT Type 3 and NAT D on PS5, Xbox and Switch

Why consoles get NAT Type 3, Strict or NAT D on a phone hotspot, what it breaks on PS5, Xbox and Switch, why phone and console settings cannot fix it, and how a VPN on a travel router or laptop gets Moderate or Open NAT.

Quick Answer

On a phone hotspot, consoles usually show NAT Type 3 or “Failed” on PS5, Strict on Xbox and D or F on Switch, because most mobile carriers use carrier-grade NAT (CGNAT). Phones offer no UPnP or port forwarding for hotspot devices, and console settings cannot change the carrier’s NAT. To fix it, put a VPN with Moderate NAT (Proton) or port forwarding (PureVPN) on a travel router or laptop between the hotspot and the console.

On a mobile hotspot your console usually gets a strict NAT: NAT Type 3 or “Failed” on PS5, Strict on Xbox, D or F on Switch. Most mobile carriers put phones behind carrier-grade NAT (CGNAT), so no one can connect in to you, and party chat, invites and hosting break.

Nothing on the phone or console changes that. Phones do not offer UPnP or port forwarding for hotspot devices, and EA says that on 4G/5G CGNAT, port forwarding won’t work. The fix is to move the NAT somewhere you control: a VPN with Moderate NAT or open ports, running on a travel router or laptop between the hotspot and the console.

Quick Check: Is the Hotspot the Cause?

  1. Run the NAT test on the console while on the hotspot.
  2. Run it again on a home or friend’s Wi-Fi with UPnP on.
  3. Strict only on the hotspot: the carrier’s CGNAT is the cause.
  4. Strict everywhere: check the console’s own network settings first.

From a laptop on the hotspot, the NAT type test shows the NAT your carrier gives you.

By console

Hotspot NAT Type on PS5, Xbox and Switch

DeviceWhat you see on a hotspotWhat it means
PS5 / PS4NAT Type 3, or “NAT type: Failed” in the connection testParty chat and joining friends fail; some games refuse to matchmake
Xbox Series X|S / OneStrict NAT, “UPnP not successful”, Teredo unable to qualifyParty chat, invites and many multiplayer games fail
Nintendo Switch / Switch 2NAT Type D or F, or the NAT test failsYou can only match with some players, or none
Gaming PC or laptopStrict NAT in games that report itVoice, lobbies and peer-to-peer connections fail

Free Fixes People Try, and Why They Fall Short

Settings on the phone

Phones have no UPnP or port forwarding for hotspot devices, so there is nothing to switch on.

Changing DNS or MTU on the console

Sometimes helps a “Failed” test pass, but it does not change the NAT type: the carrier’s NAT stays in the way.

Another phone on the same carrier

Same carrier network, same CGNAT. A different carrier sometimes gives a better NAT type, but there is no guarantee.

If you will be back on home Wi-Fi soon, waiting is free. If the hotspot is your only internet, in a dorm, on the road, or on a 5G plan, these fixes will not get you past Strict NAT.

The fix that works

Fix Hotspot NAT Type With a VPN

A VPN tunnels your games through the carrier’s CGNAT, and the VPN server does the NAT instead. Choose a VPN that sets that NAT to Moderate or opens ports on it; a standard VPN stays Strict.

Travel router (best for consoles)

Connect a travel router to the hotspot or by USB tethering, run the VPN on the router, and plug the console into the router. Every device behind it shares the VPN’s NAT.

Laptop sharing its VPN

Connect the laptop to the hotspot, connect the VPN app, then share the laptop’s connection to the console over Ethernet (Windows Internet Connection Sharing or macOS Internet Sharing).

PC games only

Playing on the PC itself? Just run the VPN app on it. No extra hardware needed.
Strict → Moderate on a hotspot

Proton VPN

Paid plans include Moderate NAT in the apps and in manual WireGuard or OpenVPN configs, so it runs on a travel router for a console or directly on a gaming laptop.
  • Moderate NAT (Type 2) in one setting
  • Manual WireGuard/OpenVPN for travel routers
  • Cannot be combined with Proton port forwarding
  • 30-day money-back guarantee
−75%
Black Friday

2-year plan

Open NAT: all ports

PureVPN

The port forwarding add-on opens every port on the VPN address, or chosen ones, for hosting and peer-to-peer games that need Open NAT.
  • Open all ports, or forward specific ports
  • Works over OpenVPN on a travel router
  • 31-day money-back guarantee
−87%
Black Friday

5-year plan·$1.69/mo $12.95/mo

This page contains affiliate links. If you sign up through them, NAT Checker may earn a commission at no extra cost to you.

A VPN app on the phone may not cover devices connected to its hotspot, so put the VPN on the router or laptop. VPN data counts against your mobile allowance, and every VPN adds a little latency: pick the nearest server. Some publishers, such as EA, do not support VPNs officially.

Related Guides

Sources (checked October 31, 2026):

Mobile Hotspot NAT Type FAQ

Most mobile carriers put phones behind carrier-grade NAT, which shares one public IP between many users and blocks incoming connections. Your console sees that as Strict NAT, NAT Type 3 or NAT D.

Not from the phone or console. Run a VPN with Moderate NAT or port forwarding on a travel router or laptop, connect it to the hotspot, and connect the console to that router or laptop.

Share this article