Your Xbox Series X|S shows NAT type “Moderate,” “Strict,” or “Unavailable,” and multiplayer or party chat isn’t working properly. Start with a fresh network test and restart; UPnP is the router setting that usually fixes it.
What Is Xbox NAT?
Network Address Translation, or NAT, lets several devices share one internet connection through a router. Your Xbox reports how easily it can connect to Xbox network services and other consoles:
- Open: Your Xbox can connect to players using any NAT type.
- Moderate: Multiplayer usually works, but hosting or joining certain players may fail.
- Strict: Your Xbox may connect only to players with Open NAT. Matchmaking and party chat can become unreliable.
- Unavailable: Your Xbox couldn’t finish the NAT test. Check the basic internet connection before changing any ports.
You can’t switch from Strict to Open with a single console setting. Your router and ISP connection control the result.
Changing NAT type doesn’t require a paid Xbox subscription. Individual multiplayer games may still require Game Pass Core or Ultimate.
Prerequisites
Before changing anything, make sure you have:
- An Xbox Series X or Xbox Series S
- A working home internet connection
- Access to the router or ISP gateway
- The router administrator credentials
- A Windows PC or Mac connected to the same router
- Permission from the network owner to change router-wide settings
- About 15 minutes when nobody else needs the internet
That last point matters. Restarting or reconfiguring the router can briefly disconnect every device in the home.
Privacy note: Don’t share screenshots containing Wi-Fi passwords, public IP addresses, MAC addresses, serial numbers, or router credentials.
Step-by-Step Guide
Fix #1: Check the Current NAT Result
- Press the Xbox button on the controller.
- Open Profile & system > Settings > General > Network settings.
- Read the NAT line under Current network status. Note whether it says Open, Moderate, Strict, or Unavailable.
- Select Test network connection. Continue only after the console reports that it’s connected.
- Select Test NAT type to get a fresh result.
Expected result: The internet test succeeds, and your Xbox displays a current NAT result. If it says Open but multiplayer still fails, NAT probably isn’t causing the problem.
Fix #2: Restart the Console and Network
A restart clears old network mappings that can leave a working setup stuck on Moderate or Strict. This simple fix is worth trying before opening your router settings.
- Hold the Xbox button on the controller.
- Select Restart console > Restart.
- Unplug the modem and router from power after the Xbox shuts down.
- Wait 30 seconds.
- Reconnect the modem first.
- Wait until the modem’s internet indicator becomes stable.
- Reconnect the router if it’s a separate device.
- Wait for Wi-Fi or Ethernet service to return.
- Open Settings > General > Network settings on the Xbox.
- Select Test network connection, followed by Test NAT type.
Expected result: The restart clears a stale router mapping and may change Moderate or Strict NAT to Open. If that happens, you’re done.
Fix #3: Find the Router Address
Use a computer connected to the same home router as the Xbox. You don’t need to install an Xbox NAT utility.
Windows
- Open Settings > Network & internet.
- Select the active Wi-Fi or Ethernet connection.
- Open its properties and find IPv4 default gateway.
You can also open Terminal or Command Prompt and run:
ipconfig
Find Default Gateway under the active adapter.
macOS
- Open System Settings > Network.
- Select the active Wi-Fi or Ethernet connection.
- Click Details > TCP/IP.
- Find the value beside Router.
You can also open Terminal and run:
route -n get default
Read the address beside gateway.
Web Router Interface
- Enter the gateway or router address in your browser’s address bar.
- Sign in with the router administrator credentials. These may differ from your Wi-Fi password and Microsoft account details.
- Look for sections named Advanced, WAN, NAT, LAN, Gaming, or Network. Every router arranges these controls a little differently.
Expected result: The router’s local administration page opens and gives you access to its NAT settings.
Fix #4: Enable UPnP on the Router
UPnP lets your Xbox ask the router for temporary port mappings. It’s the first router change to try and usually the cleanest solution.
- Find UPnP in the router interface. It may appear under Advanced, WAN, NAT, or Network settings.
- Turn UPnP on.
- Click Save or Apply.
- Restart the router.
- Restart the Xbox.
- Run Settings > General > Network settings > Test NAT type.
Expected result: Your Xbox reports Open NAT after the router rebuilds its mappings.
Don’t combine UPnP with manual port forwarding by default. Duplicate rules can conflict, and some routers handle that mix poorly. Pick one method unless your router manufacturer specifically supports both.
Fix #5: Reserve the Xbox Local IP Address
Manual port forwarding needs a fixed destination. Without a DHCP reservation, your router may give the Xbox a new local IP address later and break every forwarding rule.
DHCP is the router service that assigns local addresses to devices. A reservation tells it to keep giving your Xbox the same one.
- On the Xbox, open Settings > General > Network settings > Advanced settings.
- Note the console’s local IP address for your own use. Don’t publish it with the displayed MAC address.
- In the router interface, open Connected devices, LAN, DHCP, Address reservation, or Static lease.
- Identify the Xbox in the device list. Check carefully if the household has several consoles.
- Choose Reserve, Add reservation, or the matching control.
- Keep the currently assigned local IP unless the router requires another address.
- Save the reservation.
- Restart the Xbox.
- Return to Advanced settings and confirm that the local IP matches the reservation.
Expected result: The router assigns the same private IP address to your Xbox after each restart. That gives the port rules in the next fix a dependable target.
Fix #6: Forward the Xbox Network Ports
Use manual forwarding only when UPnP doesn’t work. Disable UPnP first unless your router’s documentation specifically supports using both methods.
This section takes patience because router forms vary. Enter each protocol and port exactly as shown.
- Open Port Forwarding, Virtual Server, NAT Rules, or Gaming in the router interface.
- Create rules that point to the Xbox’s reserved local IP.
- Enter the following ports identified by current Xbox networking references:
| Protocol | Port |
|---|---|
| UDP | 88 |
| TCP and UDP | 3074 |
| UDP | 500 |
| UDP | 3544 |
| UDP | 4500 |
Some current router guides also list TCP and UDP port 53. Add it only when current Xbox or router-manufacturer guidance for your setup calls for it.
- If the form asks for internal and external ports, use the same listed number in both fields.
- If a combined protocol option isn’t available, create separate TCP and UDP rules where both are required.
- Enable each rule.
- Save or apply the configuration.
- Restart the router and Xbox.
- Run Test network connection, followed by Test NAT type.
Expected result: The router sends the required traffic to your reserved Xbox address, which should produce a less restrictive NAT. Open NAT can’t be guaranteed when another router or ISP-controlled NAT layer sits upstream.
Fix #7: Select an Alternate Port for Multiple Consoles
Two Xbox consoles can compete for the same mapping because one external port usually can’t forward to two local IP addresses. Working UPnP is generally the better choice for a home with multiple consoles.
- On the first console, open Settings > General > Network settings > Advanced settings > Alternate port selection.
- Leave the selection on Automatic first.
- If both consoles remain Moderate or Strict, choose Manual and select an available port.
- Repeat the path on the second console.
- Select a different available port if manual selection is needed.
- Remove overlapping manual router rules unless the router supports separate mappings for the selected ports.
- Restart both consoles.
- Run Test NAT type on each console separately.
Expected result: Each Xbox uses its own mapping instead of competing for the same forwarded port.
Fix #8: Clear an Alternate MAC Address
Use this fix when NAT shows Unavailable or a saved alternate address may be getting in the way. A MAC address identifies the console’s network adapter on your local network.
- Open Settings > General > Network settings > Advanced settings > Alternate MAC address.
- Select Clear.
- Select Restart when prompted.
- Run Test network connection after the console restarts.
- Run Test NAT type.
Expected result: Your Xbox reconnects with its normal network identity and completes the NAT test.
Fix #9: Resolve Double NAT
Double NAT means two devices are working as routers. This often happens when an ISP modem-router feeds a separate Wi-Fi router and both devices translate network traffic.
Changing the operating mode can disconnect the whole home, so get the network owner’s permission first. Keep the ISP’s support details handy too.
- Trace the Ethernet cable from the internet connection.
- Check whether an ISP gateway connects to the WAN or internet port of another router.
- Confirm that both devices are operating in router mode.
- Choose one supported design with help from the ISP or router manufacturer:
– Put the ISP gateway in Bridge mode so the separate router handles NAT. – Use IP passthrough if the gateway offers it instead of bridge mode. – Put the second router in Access point mode so the ISP gateway handles NAT.
- Save the selected operating mode.
- Restart the gateway.
- Restart the remaining router or access point.
- Restart the Xbox.
- Run Test network connection and Test NAT type.
Expected result: Only one home device performs NAT. Don’t change the gateway mode without permission, since a wrong setting can disconnect every household device.
Fix #10: Ask the ISP About CGNAT
Carrier-grade NAT, or CGNAT, puts your home behind another NAT layer controlled by the ISP. UPnP, port forwarding, and DMZ settings inside your home can’t remove that layer.
- Open the router’s Internet, WAN, or Connection status page.
- Locate the WAN address without sharing or screenshotting it.
- Contact the ISP and ask: “Does this connection use carrier-grade NAT?”
- Ask whether the ISP can provide a public IPv4 address or another supported option for inbound multiplayer connections.
- Restart the network if the ISP changes the service.
- Run Test NAT type again.
Expected result: If CGNAT caused the restriction, an ISP-provided public address may let your router create usable mappings. The ISP may charge for this option, but Xbox doesn’t charge you to change NAT type.
Fix #11: Test a Router DMZ as a Last Resort
A DMZ exposes one local device more broadly than individual forwarding rules. Use it only for the Xbox. Never choose a Windows PC, Mac, or the whole network.
I’d skip this step unless every safer fix has failed. It can confirm whether router filtering is involved, but it shouldn’t be your first permanent setup.
- Confirm that the Xbox still has its reserved local IP.
- Disable UPnP and remove overlapping forwarding rules unless the router documentation says they can remain.
- Open the router’s DMZ section.
- Select only the Xbox or enter only its reserved local IP.
- Enable the DMZ setting.
- Save the change.
- Restart the router and Xbox.
- Run Test NAT type.
- Disable DMZ again if the result doesn’t improve.
Expected result: Your Xbox may report a less restrictive NAT. If nothing changes, double NAT, CGNAT, or a separate service fault is more likely.
Configuration
| Setting | Recommended pattern | Best use |
|---|---|---|
| UPnP | Enable first; avoid duplicate manual rules | Most single- and multi-console homes |
| DHCP reservation | Reserve the Xbox before forwarding | Keeps rules aimed at the correct device |
| Port forwarding | Use exact protocol and port pairs | When UPnP fails on one console |
| Alternate port selection | Start with Automatic | Homes with two or more Xbox consoles |
| Bridge or passthrough | Use only with ISP or manufacturer guidance | ISP gateway plus separate router |
| Access point mode | Lets the primary gateway perform NAT | Reusing a second router for Wi-Fi |
| DMZ | Limit to the reserved Xbox IP | Last-resort test after safer fixes |
Retest NAT after each material change. Save the setting, restart the affected devices, wait for internet service to return, and run one fresh test. Changing several settings at once makes the cause harder to spot.
Tips and Troubleshooting
NAT Type: Unavailable
Run Test network connection before changing router ports. If that test fails, fix the basic Wi-Fi or Ethernet connection first. Port rules can’t repair an offline console.
Microsoft’s NAT Type: Unavailable support page has current checks for Xbox network services.
UPnP Is Enabled but NAT Stays Strict
Remove stale or duplicate forwarding rules. Then restart the modem, router, and Xbox before testing again.
Check for double NAT before blaming the UPnP control. A second router can block the mapping even when UPnP works correctly on the nearest device.
Port Forwarding Stops Working Later
Your Xbox probably received a different local IP address. Check its DHCP reservation, update every forwarding rule to the reserved address, and restart the network.
If the address keeps changing, delete and recreate the reservation. Make sure you selected the correct Xbox when several consoles appear in the router’s device list.
Open NAT Does Not Fix Multiplayer
Open NAT doesn’t fix every multiplayer problem. Check Xbox service status, the game’s servers, packet loss, and download latency.
Microsoft’s multiplayer connection troubleshooting can help separate NAT trouble from a wider connection fault.
Wrapping Up
| Step | Action | Applies To |
|---|---|---|
| 1 | Test the current connection and NAT | Every setup |
| 2–4 | Restart and enable UPnP | Most home routers |
| 5–7 | Reserve an IP, forward ports, or select another port | Persistent or multi-console problems |
| 8–11 | Clear the MAC setting, remove double NAT, contact the ISP, or test DMZ | Advanced cases |
Fix #4, enabling UPnP, is the best stopping point for most homes because it avoids a pile of manual rules. When every router change leaves NAT Strict or Unavailable, double NAT or CGNAT is the likely blocker.
If your ISP confirms that you have a public connection and NAT still won’t open, contact Xbox Support and your router manufacturer. Give them the exact NAT result and the fixes you’ve already tried.