How to Fix a Strict NAT Type on PS5, Xbox, and PC

How to Fix a Strict NAT Type on PS5, Xbox, and PC

In gaming, a strict NAT type means your router is blocking the incoming connections your console or PC needs for party chat and matchmaking. The NAT type strict fix follows one order on every platform: restart your gear, run only one router, turn on UPnP, then forward ports. 

If none of that works, your internet provider is usually the cause. Here’s how to fix a strict NAT type, from simplest to last resort.

What does a strict NAT type mean on PS5, Xbox, and PC?

NAT (Network Address Translation) is how your router lets many devices share one public internet address. A strict NAT type means it blocks most unsolicited incoming traffic. Each platform labels the results differently:

The labels don’t match perfectly, so on PS5, aim for Type 2. Both blocked results can cause the same symptoms, including failed party invites, dropped voice chat, and slow matchmaking. Sony has said since the PS4 era that Type 3 may restrict online features [1]. Microsoft’s troubleshooting targets Open NAT when party chat or hosting fails, though Moderate often handles ordinary matchmaking [2].

“NAT type failed” is a different problem. It typically means the test couldn’t finish because the console is offline or can’t reach the network at all, not that ports are blocked. Fix the connection first, then retest.

How do you fix a strict NAT type, step-by-step?

Here’s how to change NAT type without loosening security needlessly. Retest after each step, since Microsoft says to follow its steps in order. 

• On PS5, go to Settings > Network > Connection Status > Test Internet Connection
• On Xbox, go to Settings > General > Network settings > Test NAT type
• On Windows, check Settings > Gaming > Xbox Networking

Then, follow these steps:

1. Restart everything. Power off the console, modem, and router, then restart the modem first.
2. Run one router. If your provider’s gateway and your own router both route traffic, you have double NAT (covered below).
3. Enable UPnP. This lets your console request the ports it needs automatically, and it’s safer than DMZ. Our router login guide shows you where you can find this setting.
4. Reserve a static IP and forward ports. Assign the console a fixed address in your router, then forward the ports listed on Sony’s and Xbox’s official support pages. Skip competitor lists, which disagree. Some games, like Call of Duty, publish extra ports.
5. Use DMZ last. It sends all traffic to one device and is the most likely to produce open NAT, but it exposes that device. Never turn off your router’s firewall entirely.

How do you fix double NAT?

Double NAT happens when two devices translate addresses, usually an ISP gateway plus your own router. To check, log in to your router and find its WAN (Internet) address. A private address, such as 192.168.x.x, 10.x.x.x, or 172.16 to 172.31.x.x, means another router sits upstream. The fix is bridge mode on the gateway or a single router. Menus vary by model:

• Xfinity: Open the Admin Tool at 10.0.0.1, go to Gateway > At a Glance, and enable Bridge Mode. Only one device can connect, and you lose some xFi features [3].
• AT&T: Use IP Passthrough under the Firewall tab at 192.168.1.254. It shares the gateway’s WAN address with one device and removes the gateway firewall for it [4].
• Spectrum: Connect your own router directly to Spectrum’s modem. All-in-one modem-routers don’t appear to be offered by Spectrum anymore [5].

Is CGNAT causing your strict NAT?

If UPnP and port forwarding change nothing, CGNAT may be the cause. CGNAT (carrier-grade NAT) means your provider shares one public IPv4 address across many customers, so your router can’t accept incoming connections.

The cause is documented. IANA issued its last IPv4 blocks on February 3, 2011, and ARIN’s free pool ran out on September 24, 2015 [6]. In April 2012, the IETF reserved 100.64.0.0/10 for provider use [7]. So, if your router’s WAN address falls between 100.64.0.0 and 100.127.255.255, you’re behind CGNAT. A WAN address that differs from what an IP-lookup site reports is another sign.

IPv6 is the long-term fix. Google measured IPv6 passing 50% of its traffic for the first time on March 28, 2026 [8], but many games still depend on IPv4.

CGNAT gaming problems hit wireless-style networks hardest. Customers of T-Mobile Home Internet, Verizon 5G Home, and AT&T Internet Air have reported CGNAT, though Verizon’s results vary by market, so test your own connection instead of assuming. 

Ask your provider whether you’re behind CGNAT, whether a public IPv4 address is available, and whether IPv6 is supported. In apartments with managed networks, you may have no control at all.

When should you switch internet providers?

Switch when your provider can’t remove CGNAT. Cable and fiber more often deliver a public address, while 5G and satellite more often don’t. Internet prices come into play, too. BroadbandNow’s April 16, 2026 report found a national average of $81.16 a month, ranging from $65.43 in New Jersey to $109.88 in Alaska [9].

Here’s a quick breakdown of ideal speeds based on your situation:

• Best for a public IP and low latency: fiber or cable
• Best for a tight budget: 5G home internet, if you accept possible CGNAT
• Best for renters: any plan that lets you use your own router

Check out our guide to the best internet in your area for gaming to find which of the best internet providers suit competitive play.

Then, use our internet comparison tool below to compare internet providers and compare internet plans by price, speed, and technology at your address.

Frequently Asked Questions

Is Moderate NAT good enough for gaming?

Yes, for most players. Moderate NAT usually allows matchmaking and party chat, though hosting games or joining some players can be harder. The goal is reliable party chat, not a perfect badge, so chase Open only if you hit those limits.

What does “NAT type failed" mean on PS5?

It generally means the connection test didn’t complete, often because the console is offline or can’t reach PlayStation Network. Check your Wi-Fi or Ethernet connection and restart your router before changing any NAT settings.

Is UPnP or DMZ safer?

UPnP is generally safer than DMZ because it opens only the ports a device requests, though any device on your network can make requests. DMZ exposes the entire console to the internet, so treat it as a last resort.

Can a new router fix CGNAT?

No. CGNAT happens inside your provider’s network, upstream of your router. A new router can help with Wi-Fi and double NAT, but only your provider, IPv6, or a different plan can fix CGNAT.

Sources

[1] PlayStation Blog. “Bloodborne Sells One Million, First 1.03 Details.” 

[2] Xbox Support. “Troubleshoot NAT errors and multiplayer game issues.” 

[3] Xfinity. “Use Bridge Mode on your wireless gateway.”

[4] AT&T. “Configuring IP Passthrough and DMZplus.” 

[5] Spectrum Community. “Advanced Wireless Gateway.” 

[6] ARIN. “IPv4 Depletion FAQ.” 

[7] IETF. “RFC 6598: IANA-Reserved IPv4 Prefix for Shared Address Space.” 

[8] Internet Society Pulse. “18 years later, IPv6 reaches majority.” 

[9] BroadbandNow. “The Cost of Staying Connected in 2026.”