What is full cone Nat and should I enable it?

[djshauny1]

Was just going through the settings of my router. Its a TP link W9980. I came accross an option for Full Cone Nat.

I've been having issues with connecting to private chat on Xbox 360 and getting into lobbys on BO3 on PS4 because of moderate or strict nat.

Will enabling Full Cone Nat help or should I just forward the ports needed? But the only issue with doing that is both consoles share a same port.

Any help is appreciated.

Thanks.

 

[Steveocee]

Try enabling UPnP and you should find your problems are sorted. Full cone NAT sticks a public address onto a LAN IP which would help for your individual device having problems but probably isn't the best thing to do from a security point of view.

 

[djshauny1]

Try enabling UPnP and you should find your problems are sorted. Full cone NAT sticks a public address onto a LAN IP which would help for your individual device having problems but probably isn't the best thing to do from a security point of view.

Yeah ive enabled Upnp but I still get the same issues

 

[djshauny1]

What sort of security issues would I be looking at if I enabled it?

 

[djshauny1]

Anyone?

 

[Uhtred]

You'd be exposing your console directly to the Internet. You shouldn't have to do that to get it working. Do you have more than one router? Who is your isp?

 

[Steveocee]

What sort of security issues would I be looking at if I enabled it?

You'd be exposing your console directly to the Internet.

This.

Your console would take on a public facing IP address, this means its open to all kinds of port scans and malicious traffic that your router normally stops for you. Generally sitting behind NAT does a lot of the "dirty" work but the firewall in your router stops a lot of other "rubbish" from getting at your network as well.

Please mention whom the ISP is and what router/routers you have.

 

[djshauny1]

This.

Your console would take on a public facing IP address, this means its open to all kinds of port scans and malicious traffic that your router normally stops for you. Generally sitting behind NAT does a lot of the "dirty" work but the firewall in your router stops a lot of other "rubbish" from getting at your network as well.

Please mention whom the ISP is and what router/routers you have.

Its a TP-LINK W9980. My ISP is BT. Fibre optic.

So I should leave this unchecked?

 

[Uhtred]

Ah, why do you have IGMP proxy enabled? If you don't know, disable it and try again.

Edit - make sure you still have upnp enabled

 

[djshauny1]

Ah, why do you have IGMP proxy enabled? If you don't know, disable it and try again.

Edit - make sure you still have upnp enabled

Will do that now. Ill report back

 

[djshauny1]

Ok BO3 has gone back to moderate NAT after disabling full cone nat and IGMP.

 

[Steveocee]

Try it without SPI as well.

 

[djshauny1]

Try it without SPI as well.

Ok ill try that aswell.

 

[joeyjojo]

Try it without SPI as well.

Surely he wants to keep that? Or maybe you're just trying to diagnose...

Might be a good idea OP to post other screenies of your config. And confirm all the networking hardware you've got and how it's connected up.

 

[Uhtred]

For consumer grade routers spi is a bit of a waste of time. Nat is sufficient.

 

[djshauny1]

For consumer grade routers spi is a bit of a waste of time. Nat is sufficient.

So I can turn it off? Its not enabled by default.

 

[Steveocee]

Try it without SPI as well.

Ok ill try that aswell.

So I can turn it off? Its not enabled by default.

As said, NAT should be enough for most networks, this may be the difference between moderate and open NAT.

 

[djshauny1]

As said, NAT should be enough for most networks, this may be the difference between moderate and open NAT.

Ok thanks. So far so good and I have open nat. Hope it stays that way