Back to Blog
Guide
10 min readAug 20, 2026

How to Change NAT Type on Xbox: Fix Strict NAT and Double NAT

Fix Strict or Moderate NAT on Xbox Series X/S and Xbox One. Learn when to change the home network and when a VPN is the simpler workaround.

Hi there! Few things kill the mood faster than your Xbox flagging Strict NAT right when you’re about to play online. I’ve hit the same wall on my own console — multiplayer blocked, parties that won’t connect, and a Double NAT warning for good measure. I built NAT Checker while learning my way around these problems, and this guide collects the steps that actually worked. Let’s read your test result and fix things from there.

What Your Xbox Network Result Means

Do not treat every Xbox network message as the same NAT problem. Match your result to the next action before changing router settings.

Xbox resultWhat it meansWhat to do next
Open NATYour Xbox can connect to players using any NAT type and can host player-run matches.Make no changes unless one specific game still has a problem.
Moderate NATMost multiplayer, parties, and invites work, but hosting or connecting to Strict players can be limited.If everything you need works, stop. Otherwise, use Method 1; use Method 2 if Method 1 fails.
Strict NATYour Xbox can usually connect only to players with Open NAT and cannot reliably host.Use Method 1 first. Use Method 2 if Method 1 fails.
UPnP not successfulThe router did not create the automatic port mapping the Xbox requested.Enable UPnP, remove conflicting manual rules, and restart the router and Xbox. Use Method 2 if UPnP still fails.
Double NAT detectedTwo routers are translating the Xbox connection.Remove the extra router layer before changing ports. Use Method 2 if you cannot remove it.
NAT Type UnavailableXbox could not complete its NAT or Teredo test.Restart and check Xbox Network, Teredo, and firewall access first; do not start with port forwarding.

Method 1 is free if you can change your router settings. Method 2 uses a paid VPN, but it is simpler and more convenient if you cannot—or do not want to—change the router.

Method 1: Get Open NAT Through Your Home Network

Use this method when Xbox shows Moderate or Strict NAT and you can change the router or contact your internet provider. Follow the steps in order and run Test NAT type after each change.

Test NAT type on the Xbox

Go to Settings > General > Network settings and run Test NAT type. Write down whether the console shows Open, Moderate, Strict, UPnP not successful, Double NAT detected, or NAT Type Unavailable.

Enable UPnP on the router

UPnP is usually the first router-side fix for a trusted home network because the Xbox can request the mappings it needs automatically.

Try Alternate Port Selection

If you have more than one Xbox on the same network, choose a different alternate port on each console to avoid port conflicts. There is no single best port for every network.

Reserve a stable Xbox IP

Use DHCP reservation on the router so UPnP leases or manual forwarding rules keep pointing to the same console.

Forward Xbox ports only if needed

If UPnP does not work, forward TCP 3074 and UDP 88, 500, 3074, 3544, and 4500 to the Xbox IP. Do not mix broad DMZ exposure with random forwarding rules.

TCP

3074

UDP

88, 500, 3074, 3544, 4500

If Router Changes Do Nothing, Look Upstream

An extra router at home or a shared address from your provider can block the changes you made. Remove the extra routing layer, or ask your provider for a public IPv4 address or removal from CGNAT.

Fix Double NAT before adding rules

If Xbox reports Double NAT detected, fix the extra router layer first by using bridge mode, AP mode, or a single main router.

Check for Double NAT

Check for CGNAT

If your router WAN IP is private or shared, local port forwarding may never reach the public internet. Ask the ISP for public IPv4 or use a workaround.

Check for CGNAT

Method 2: Use a VPN When Router or ISP Fixes Are Unavailable

Use this method when Strict NAT remains after Method 1, or when CGNAT, a locked router, hotspot, hotel, dorm, campus, or another network prevents the required changes. A suitable VPN gives your Xbox another way to connect with other players.

Proton VPN

Best for Xbox players who mainly join multiplayer games and want the simpler VPN option.
  • Moderate NAT feature (Xbox Moderate NAT).
  • Share it from a Windows or Linux PC, or set it up on a compatible VPN router.
  • Proton's ecosystem has more than 100 million users.
  • 30-day money-back guarantee.

PureVPN

Best for Xbox players who create game lobbies, host player-to-player matches, or have trouble letting friends join.
  • Paid All-Port Forwarding opens the Xbox ports used for incoming game connections.
  • Share it from a PC, or use a compatible VPN router for All-Port Forwarding.
  • PureVPN has more than 3 million users.
  • 31-day money-back guarantee.

Which Fix Fits Your Xbox?

Your result or situationBest methodWhy
Open or Moderate NAT and everything worksMake no changesNAT settings do not fix ping or server outages. Stop when the Xbox features you use already work.
Strict NAT and you can change the home routerMethod 1UPnP or targeted port rules change how your own router handles Xbox connections.
Xbox says UPnP not successfulMethod 1: Fix UPnPThe router did not create the automatic mapping the Xbox requested.
Double NAT detected, or router changes have no effectMethod 1: Fix Double NAT or CGNATAn extra router or your internet provider controls the connection before it reaches your router.
Xbox says NAT Type UnavailableFix Xbox Network or Teredo firstThis is a failed connectivity test, so opening ports at random is not the right first step.
You mainly join games hosted by other playersProton VPN Moderate NATIt is the simpler VPN option for everyday Xbox multiplayer.
You create lobbies or host player-run matchesPureVPN All-Port ForwardingIts paid add-on lets incoming Xbox game traffic pass without entering ports one by one. A compatible VPN router is required.

Why does a game show Moderate NAT when Xbox shows Open NAT?

The Xbox network screen and an individual game may test different servers, ports, voice systems, or peer-hosting behavior. Treat Open NAT on Xbox as a good platform result, then troubleshoot that game's own network requirements if only one title reports Moderate or Strict NAT.

  • Confirm that the Xbox Network screen still shows Open NAT.
  • Restart the affected game after changing network settings.
  • Check that game's own crossplay, voice-chat, and privacy settings.
  • Ask the friend you cannot join to check their NAT type too.
  • If every other game works, troubleshoot that title instead of rebuilding the whole home network.

FAQ

If you control the home router, use Method 1: test NAT, enable UPnP, use an alternate port when needed, reserve the Xbox IP, and forward ports only if UPnP fails. If router changes have no effect, check Double NAT or CGNAT. Use Method 2 when the router or provider cannot be changed.

Test Again and Stop When Xbox Works

After each change, run Test NAT type on the Xbox. Stop when it shows Open, or when Moderate NAT still lets you use the games, parties, invites, and hosting features you need. NATChecker can help locate router, Double NAT, or ISP restrictions from another device on the same network, but it cannot show the Xbox console's own Open, Moderate, or Strict label.

Check NAT Type Now →

Sources checked

Share this article