NAT type strict: how to fix it on Xbox, PlayStation and Switch
What strict NAT means, the four usual causes, and the fixes in the order to try them.
Strict NAT usually means your router is blocking the connections your console needs. Turn on UPnP first. If that doesn't fix it, remove double NAT by putting your provider's gateway in bridge mode, then forward the console's ports. On 5G home internet or Starlink, carrier-grade NAT may block port forwarding entirely; ask your provider about a public IP.
Some links are affiliate links. Port numbers come from Microsoft, Sony and Nintendo support pages.
NAT types explained
Why NAT turns strict
- UPnP is off: the router won't let the console open the ports it asks for
- Double NAT: your provider's gateway and your own router both act as routers
- Carrier-grade NAT: common on 5G home internet and satellite; you don't get your own public IP
- Firewall settings: strict security settings on the router block incoming game traffic
How to fix it, step by step
- Restart everything. Power off the console, router and modem for a minute, then start the modem first.
- Turn on UPnP in your router's app or admin page (often under Advanced or NAT settings), then retest NAT on the console.
- Remove double NAT. If you have your own router or mesh behind a provider gateway, put the gateway in bridge mode (see Xfinity bridge mode), or replace it with a modem you own.
- Give the console a reserved IP address in the router, so port rules always point to it.
- Forward the console's ports to that address (list below).
- Use DMZ as a last resort for the console only.
- Still strict? You are probably behind carrier-grade NAT. Ask your provider about a public or static IP, or turn on IPv6 if both router and console support it.
Check whether you have double NAT before changing settings: if the WAN address on your router starts with 192.168, 10. or 172.16 to 172.31, another device in front of it is also doing NAT.
Ports to forward
Game-specific ports vary; check the game publisher's support page if one game still fails.
NAT on 5G home internet and Starlink
T-Mobile, Verizon 5G Home and Starlink commonly use carrier-grade NAT, so port forwarding on your own router won't help. Read whether 5G home internet is good for gaming for what to expect. Some players get better results with a game routing service; GearUP Booster has a free trial, and our GearUP review explains when it helps.
If you still have lag after fixing NAT
An open NAT fixes connections, not ping. For lag, see how to lower ping and the best gaming routers.
Questions
What does NAT type strict mean?
Your console can only connect to players with an open NAT, so you may not be able to join parties, host games or hear voice chat. It usually means the router is blocking incoming connections the game needs.
How do I change my NAT type to open?
Turn on UPnP in your router first. If that doesn't work, remove double NAT by putting your provider's gateway in bridge mode, then forward your console's ports.
Why is my NAT strict on 5G home internet or Starlink?
Many 5G and satellite services use carrier-grade NAT (CGNAT), which shares one public address among many customers. You can't forward ports through it. Ask your provider about a public IP option, or use IPv6 if your console supports it.
Is DMZ safe for a console?
It is safer than for a PC, but it exposes the console to the internet. Use UPnP or port forwarding first, and DMZ only as a last resort.
- Microsoft Xbox support, network ports for Xbox; Sony PlayStation support, PSN ports
- Nintendo support, port forwarding for Nintendo Switch
- Router maker UPnP and bridge mode documentation, checked Oct 18, 2026
Prices and offers change often; confirm at your address before you order. How we research
Jean founded ShopHighSpeed after trying to find one straight answer about business internet in his own town. He has been a Comcast and Verizon Fios customer, and ranks providers on what they actually deliver, not on what they advertise.