Strict NAT. Already forwarded appropriate ports. Still nothing

I've been seeing a Strict NAT on my XB1 so I wanted to correct that. I have a Juniper SRX 210 at home I forwarded the following ports per MS recommendation Port 88 (UDP) Port 3074 (UDP and TCP) Port 53 (UDP and TCP) Port 80 (TCP) Port 500 (UDP) Port 3544 (UDP) Port 4500 (UDP)
Still saw a Strict NAT configuration. Researched a bit more and one person suggested doing both TCP & UDP for each port number so I forwarded both so 14 ports forwarded in total
Still strict NAT
I double and triple checked everything. I applied firewall filters and I can see the packets traversing my NAT and the security policy
Finally I said screw it and installed something called PFPortchecker on my PC. I disconnected my XBOX from my network and put the IP address that I have assigned to it on my home PC
I tested all 14 ports. 2 of which failed but not because forwarding isn't working but because they are already in use on my PC UDP 500 & 4500 are bound to svchost per a netstat check. Since they are setup the exact same as the other 12 ports I know it's forwarded correctly
So now what. Both my home PC and my XB1 are on the same network. Behind the same firewall. Yet the XB1 shows a strict NAT. I've done a cold boot of the xbox even going as far as pulling the Ethernet and power.
I am at a complete loss I've ruled everything out but the XB1

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.

Its not you, its xbox live and the xbox one. Mine has been fine for a full year, suddenly I cant connect to anything and cant get an IP address. Something is wrong with the service and they refuse to let us know what the deal is. I am about 2 second from dumping this console altogether and going with a ps4. I am currently unable to use a service I pay for.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

And dont tell me its not the console - my ps4 is online right now with no trouble.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Not getting an IP address has nothing to do with NAT.  I'd bring that up in a different thread as it has nothing to do with what I posted.  Thanks,

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Do you have any other modem/router in the network otherwise they may need to be configured aswell

If however you don't have any other modem or router in the network you can try and add your Xbox One to DMZ after giving it a static IP portforward.com/.../static-ip-xbox-one

Please consult your manual on how to add a device to DMZ

If DMZ doesn't work you might have a carrier grade NAT and you'll have to call your ISP asking for a public IP

en.wikipedia.org/.../Carrier-grade_NAT

1 person found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Can't do a DMZ I only have the one public IP.  As stated I know the forwarding works because when I moved the Xbox IP to my PC I was able to successfully test to it remotely.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Dr Risk 2006, hey hey.

You have a good device, but not for home unfortunately, as I can see in documentation for it, it's lack of UPnP support. Because of that when two devices use the same ports, this mean, port forwarding will always be broken. in case of UPnP console can automatically change ports to higher list, like 5000 and so on.

So my suggestion is to change this nice, Enterprise class router to some SOHO router, with UPnP.

If You wants to try to fix this with Your router, we can try, but Enterprise class routers are can be limited in some areas, needed for home use, so please lets me know what Your decide.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Only port forwarding to one device so no UPnP necessary.  

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Dr Risk 2006, ok, UPnP needed not only because of this, but because by using UPnP it can set some timeouts that can't be set by hands, at least in SOHO devices.

I think, You like to try to fix this with Your router. Then I need to download manual for it first, because I don't remember Juniper cli.

So please tell me this, what type of IP address You got form Your ISP? It's public, routable IP Address or Private? If do not know how to check this, just copy first two octets of it to Your answer, it would be something like this: 67.137.xxx.xxx

1 person found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Dr Risk 2006, can You please tell me, what JunOS version You have?

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Yes it is a public address 104.54.xxx.xxx   As for the JunOS version it's 10. something.  I'll have to check tonight when I get home.  

The destination nat is set to forward the appropriate ports to my xbox and I have turned source NAT on with no port translation for my xbox out.

I got an email from AT&T last night and they are sending me a new router (gigapower upgrades).  If this router can allow me to do the parental controls and scheduling I do with the Juniper then I could retire the juniper all together.  I no longer VPN into my home network so in truth I could move away from the juniper ( I just hate the idea of replacing something enterprise quality with something you can buy at walmart).  

I have a couple of last things I'm going to try tonight and then I go on vacation so when I get back I should have the new router in hand.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.

 
 

Question Info


Last updated February 12, 2022 Views 1,603 Applies to: