How to Change NAT Type on Your Router
Fix Strict NAT with UPnP or port forwarding, then check for Double NAT or CGNAT if router changes do nothing. Use a VPN workaround when you cannot change the network.
Hi there! If someone in the house keeps getting kicked from lobbies while everyone else plays fine, the fix usually lives in your router — and you’re clearly the one brave enough to open its settings page. I wrote this guide after going through the same process on my own router: enabling UPnP, forwarding only the ports that matter, and hunting down Double NAT and CGNAT along the way. Follow the steps in order and retest after each change, so you know exactly what fixed it.
What Should You Do for Your NAT Type?
Match your NAT Checker result to the next action. If games, rooms, invitations, and voice chat already work, do not change the router just to chase a different NAT type.
| NAT type | What to do next | Why |
|---|---|---|
| Open Internet | Make no changes | Your device has a public internet address instead of being translated by a router. Keep its firewall enabled. |
| Full Cone NAT | Make no changes | This NAT type provides the easiest incoming reachability for direct peer-to-peer connections. |
| Restricted Cone NAT | Make no changes if everything works | Most games and calls work, but incoming traffic is limited to internet addresses your device contacted first. |
| Port-Restricted Cone NAT | Use Method 1 first; use Method 2 if Method 1 doesn’t help. | Incoming traffic must come from the same address and port your device contacted, which can block some peer-to-peer sessions. |
| Symmetric NAT | Use Method 1 first; use Method 2 if Method 1 fails. | The public port mapping changes between destinations, making direct peer-to-peer connections harder. |
| Blocked | Check connectivity first, then use Method 1; use Method 2 if Method 1 fails. | NAT Checker received no usable UDP response. A firewall, upstream NAT, or network policy may be blocking it. |
Method 1 is free if you can change your router settings. Method 2 uses a paid VPN, but it is simpler and more convenient if you cannot—or do not want to—change the router.
Method 1: Fix the Router or ISP Path
Use this free method when you can change the home router or ask your internet provider for help. Change one setting at a time and test again, so you know what solved the problem.
Test the feature that actually fails
Use the console or game's own network test for its platform label. Use NAT Checker on another device connected to the same network to check the home network's NAT. If multiplayer already works, stop here.
Open the main router's settings
While connected to your home network, open the router app or enter its gateway address in a browser. Use the admin details on the router label or from your provider. Make sure you are changing the main router, not a Wi-Fi extender or access point.
Enable UPnP on the main router
On a trusted home network, turn on UPnP, save the change, and restart the router and gaming device. UPnP lets games and consoles request temporary ports automatically.
Reserve one local IP for the gaming device
Use DHCP Reservation, Address Reservation, or Static Lease in the router. This does not change NAT by itself; it keeps later port rules pointed at the same device.
Forward only the ports the game or platform lists
Send the documented TCP and UDP ports to the reserved device IP. Do not copy a random port list, and do not forward the same outside port to two devices.
Remove a second router layer
If an ISP modem-router and your own router both handle the connection, put the ISP device in bridge mode or the second router in access point mode, so only one device performs NAT.
Check for Double NATAsk your ISP about CGNAT or public IPv4
If the router's WAN IP is private, shared, or different from your public IPv4, home port rules may be blocked upstream. Ask the provider for a public IPv4 address or removal from CGNAT.
Check for CGNATDMZ is a short test, not the default fix
Where are these settings in my router?
The exact path depends on the router brand and model. These are the most common menu names to look for:
UPnP
Advanced, Network, NAT Forwarding, or UPnP
Reserved device IP
LAN, DHCP Server, Address Reservation, or Static Lease
Port forwarding
NAT, Port Forwarding, Virtual Server, or NAT Rules
Bridge or access point mode
Operation Mode, Internet, WAN, Bridge Mode, or AP Mode
Method 2: Use a VPN When Router or ISP Fixes Are Unavailable
Use this paid workaround when you cannot change the router, your provider will not remove CGNAT, or you want a simpler setup. Install the VPN app on a gaming PC. For a console, share the VPN from a compatible computer or set it up on a compatible VPN router. The VPN changes the connection path, not the locked router itself.
Choose a VPN with a documented NAT feature
Proton VPN
- Moderate NAT helps games connect directly to other players.
- Use the app on a gaming PC; consoles can share it from a compatible computer or use a VPN router.
- Proton's ecosystem has more than 100 million users.
- 30-day money-back guarantee.
PureVPN
- Paid All-Port Forwarding helps other players reach rooms or servers you host.
- Use the app on a gaming PC; consoles can share the VPN from a computer, while All-Port Forwarding needs a compatible VPN router.
- PureVPN has more than 3 million users.
- 31-day money-back guarantee.
Which Router NAT Fix Fits Your Situation?
| Your situation | Best choice | Why |
|---|---|---|
| Games, rooms, and voice chat already work | Make no changes | Opening more ports adds risk without solving a real problem. |
| Everyday gaming or several consoles at home | UPnP | Each device can request the temporary ports it needs automatically. |
| A game or server lists exact required ports | Manual port forwarding | It sends only the listed TCP or UDP ports to one reserved device IP. |
| Two devices need the same game port | UPnP or different game ports | One outside port normally cannot be forwarded manually to two devices at once. |
| An ISP gateway and your router both perform NAT | Bridge or access point mode | Removing the extra router layer lets UPnP and port rules reach the internet. |
| No router access, shared Wi-Fi, or CGNAT remains | Method 2 | A VPN provides another connection path without changing the locked network. |
| You mainly join multiplayer games, parties, or voice chat | Proton VPN Moderate NAT | The simpler paid option for everyday peer-to-peer multiplayer. |
| You create rooms, host matches, or run a game server | PureVPN All-Port Forwarding | Its paid add-on opens incoming ports through supported VPN locations, so you do not need to enter them one by one. |
Router NAT Type FAQ
Test Again After Every Change
Restart the game or device, repeat its own network test, and retry the feature that failed. Use NAT Checker from the same home network to see whether the home network's NAT result changed.
Check NAT Type Now →