What is full cone Nat and should I enable it?

djshauny1 · 11 Jan 2016 at 00:42

Was just going through the settings of my router. Its a TP link W9980. I came accross an option for Full Cone Nat.

I've been having issues with connecting to private chat on Xbox 360 and getting into lobbys on BO3 on PS4 because of moderate or strict nat.

Will enabling Full Cone Nat help or should I just forward the ports needed? But the only issue with doing that is both consoles share a same port.

Any help is appreciated.

Thanks.

djshauny1 · 11 Jan 2016 at 15:34

Steveocee said:
Try enabling UPnP and you should find your problems are sorted. Full cone NAT sticks a public address onto a LAN IP which would help for your individual device having problems but probably isn't the best thing to do from a security point of view.

Yeah ive enabled Upnp but I still get the same issues

djshauny1 · 11 Jan 2016 at 17:08

What sort of security issues would I be looking at if I enabled it?

djshauny1 · 11 Jan 2016 at 19:32

Anyone?

djshauny1 · 11 Jan 2016 at 20:55

Steveocee said:
This.

Your console would take on a public facing IP address, this means its open to all kinds of port scans and malicious traffic that your router normally stops for you. Generally sitting behind NAT does a lot of the "dirty" work but the firewall in your router stops a lot of other "rubbish" from getting at your network as well.

Please mention whom the ISP is and what router/routers you have.

Its a TP-LINK W9980. My ISP is BT. Fibre optic.

So I should leave this unchecked?

djshauny1 · 11 Jan 2016 at 21:28

Uhtred said:
Ah, why do you have IGMP proxy enabled? If you don't know, disable it and try again.

Edit - make sure you still have upnp enabled

Will do that now. Ill report back

djshauny1 · 11 Jan 2016 at 21:33

Ok BO3 has gone back to moderate NAT after disabling full cone nat and IGMP.

djshauny1 · 12 Jan 2016 at 15:56

Steveocee said:
Try it without SPI as well.

Ok ill try that aswell.

djshauny1 · 12 Jan 2016 at 19:05

Uhtred said:
For consumer grade routers spi is a bit of a waste of time. Nat is sufficient.

So I can turn it off? Its not enabled by default.

djshauny1 · 12 Jan 2016 at 21:21

Steveocee said:
As said, NAT should be enough for most networks, this may be the difference between moderate and open NAT.

Ok thanks. So far so good and I have open nat. Hope it stays that way