What Is NAT Type? Open vs Moderate vs Strict Explained for Gamers

You queue up for a match. Matchmaking spins for two minutes, fails, and tells you to check your network. You try to join a friend's lobby — connection error. You finally get into a game, but nobody can hear you in voice chat. Your internet speed test shows 300 Mbps down and 15 ms ping. The connection is fast. So what is going on?

The answer, in almost every case, is your NAT type. It is the single most common reason gamers with perfectly good internet still cannot connect to multiplayer lobbies, use voice chat, or host games. The fix is usually a five-minute router setting change — but first you need to understand what NAT type actually is and why it matters.

What Is NAT?

NAT (Network Address Translation) is a system your router uses to let multiple devices share a single public IP address. Your ISP assigns one IP address to your home. But you have a phone, a laptop, a console, a smart TV, and a dozen other devices all connected at once. NAT keeps track of which device requested what, so when data comes back from the internet, the router knows where to send it.

For web browsing and streaming, NAT works invisibly. You make a request (load a webpage), the server responds, and your router forwards the response to the right device. Simple. The problem starts with peer-to-peer connections — the kind used by most online multiplayer games.

In a peer-to-peer game, your console needs to talk directly to another player's console. But both of you are behind routers. Both routers are blocking unsolicited incoming traffic by default. If neither router knows to let the other player's data through, the connection fails. How your router handles this situation determines your NAT type.

The Three NAT Types: Open, Moderate, and Strict

Game consoles simplify the technical reality into three labels. Here is what each one means in practice:

Open NAT (Best for Gaming)

An Open NAT means your router allows incoming connections from any external address once an outbound connection is established. Technically, this is a full-cone NAT — once a port mapping is created, any external host can send data to it.

• Can connect to all other players regardless of their NAT type
• Matchmaking is fast and finds the widest pool of players
• Voice chat works with everyone
• Can host game lobbies and private matches
• Lowest chance of connection errors or drops

Moderate NAT (Usually Fine)

Moderate NAT means your router only accepts replies from addresses and ports your device has already contacted. Technically, this is a port-restricted cone NAT. It is the most common type for home networks.

• Can connect to Open and other Moderate NAT players
• Cannot connect to Strict NAT players
• Matchmaking works but the player pool is slightly smaller
• Voice chat works with most players
• Can usually join lobbies but may have trouble hosting

Strict NAT (Causes Problems)

Strict NAT means your router creates a brand-new mapping for every single destination, and only that exact destination can reply. Technically, this is a symmetric NAT. Because the mapping changes every time, other players' devices cannot predict which port to send data to.

• Can only connect to Open NAT players
• Cannot connect to Moderate or other Strict NAT players
• Matchmaking is slow and often fails entirely
• Voice chat is broken with most players
• Cannot host any lobbies or games
• Highest chance of disconnects and failed connections

NAT Type Compatibility: Who Can Connect to Whom?

This is the key chart. Whether two players can connect depends on both of their NAT types:

NAT Type Labels by Platform

Every platform uses a slightly different naming scheme for the same three categories:

PlayStation's Type 1 means the console is connected directly to the internet with no router (rare). Type 2 means connected through a router with proper port configuration (the goal for most people). Type 3 is equivalent to Strict. On Nintendo Switch, Type A is fully open, B and C are degrees of moderate, and D and F are strict.

How to Check Your NAT Type

PlayStation 5

1. Go to Settings → Network → Connection Status
2. Select Test Internet Connection
3. Your NAT Type appears in the results (Type 1, 2, or 3)

Xbox Series X / S

1. Press the Xbox button → Profile & System → Settings
2. Go to General → Network Settings
3. Your NAT type is shown on the network status screen
4. Select Test NAT Type for a fresh check

Nintendo Switch

1. Go to System Settings → Internet
2. Select Test Connection
3. Your NAT type letter (A through F) appears in the results

PC (Windows)

Most PC games show NAT type in their network or connection settings. Call of Duty, for example, displays it on the multiplayer menu. You can also check in the Xbox app (Settings → Network) if you use Xbox Game Bar or Xbox Live services.

What Determines Your NAT Type?

Your NAT type is not determined by your internet speed or your ISP plan. It is determined by how your router handles incoming connections. Several factors are involved:

• Router firewall settings — Most routers default to blocking unsolicited incoming traffic, which produces Moderate or Strict NAT
• UPnP (Universal Plug and Play) — When enabled, the router automatically opens ports that games request. This usually results in Open or Moderate NAT
• Port forwarding rules — Manually opening specific ports used by gaming services forces the router to accept traffic on those ports
• Double NAT — If you have two routers (common with ISP-provided modem/router combos plus your own router), your traffic goes through NAT twice, almost always resulting in Strict NAT
• CGNAT (Carrier-Grade NAT) — Some ISPs, especially on mobile or budget plans, put your entire connection behind another layer of NAT at the ISP level. This is the hardest to fix
• DMZ settings — Placing your console in the router's DMZ (Demilitarized Zone) exposes it to all incoming traffic, resulting in Open NAT but reduced security

How to Change Your NAT Type to Open

Try these methods in order. Each one is progressively more involved but also more reliable.

Method 1: Enable UPnP (Easiest)

UPnP lets your console automatically request port openings from the router. Most modern routers support it, and it is the lowest-effort fix.

1. Open your router's admin page (usually 192.168.1.1 or 192.168.0.1 in a browser)
2. Log in (default credentials are often on a sticker on the router itself)
3. Find the UPnP setting — it is usually under Advanced, NAT, or Firewall settings
4. Enable UPnP and save
5. Restart your console and run the network test again

Method 2: Port Forwarding (More Reliable)

If UPnP does not work or you want more control, manually forward the specific ports your console and games need. This tells the router to always allow traffic on those ports to reach your device.

First, give your console a static IP address so the forwarding rules always point to the right device. You can do this in your router's DHCP settings (reserve an IP for your console's MAC address) or in the console's network settings.

Then forward these ports in your router's port forwarding section:

Method 3: DMZ Mode (Nuclear Option)

If port forwarding still results in Moderate NAT, you can place your console in the router's DMZ (Demilitarized Zone). This forwards all incoming traffic to your console, bypassing the firewall entirely for that device.

1. Assign a static IP to your console (as described above)
2. In your router's admin page, find the DMZ setting (usually under Security or Advanced)
3. Enter your console's static IP address
4. Enable DMZ and save
5. Restart your console and test

Method 4: Fix Double NAT

Double NAT happens when you have two devices performing NAT — typically an ISP-provided modem/router combo plus your own separate router. Traffic goes through NAT twice, which almost guarantees Strict NAT no matter what settings you change on your router.

To check: log into your router and look at the WAN (internet) IP address. If it starts with 10.x.x.x, 172.16-31.x.x, or 192.168.x.x, you have double NAT — your router is getting a private IP from another device upstream.

Fixes for double NAT:

• Bridge the ISP device — Call your ISP and ask them to put their modem/router into bridge mode. This disables NAT on their device and lets your router handle everything
• Use only one router — If you do not need your own router's features, plug your console directly into the ISP device and configure port forwarding there
• Forward ports on both devices — As a last resort, set up port forwarding on both the ISP device and your router. This is fragile and annoying to maintain

The CGNAT Problem: When Your ISP Is the Bottleneck

CGNAT (Carrier-Grade NAT) is when your ISP puts hundreds or thousands of customers behind a single public IP address. This adds an extra layer of NAT that you have zero control over. No router setting change can fix it because the NAT is happening at the ISP's infrastructure, not in your home.

CGNAT is common on mobile broadband (4G/5G home internet), some budget ISP plans, and in countries with limited IPv4 address availability. Signs you are behind CGNAT:

• Your router's WAN IP is in the 100.64.x.x to 100.127.x.x range (this is the CGNAT range defined by RFC 6598)
• Your public IP (checked at a site like whatsmyip) is different from the WAN IP shown in your router
• Port forwarding and UPnP changes have no effect on your NAT type

If you are behind CGNAT, your options are limited:

• Call your ISP and request a dedicated public IPv4 address. Some ISPs offer this for free; others charge a small monthly fee
• Switch to a plan with a public IP — Fiber and cable plans are less likely to use CGNAT than mobile broadband
• Use IPv6 — If your ISP and the game both support IPv6, peer-to-peer connections can bypass NAT entirely. This is becoming more common but is not universal yet

Does NAT Type Affect Ping or Speed?

No. NAT type does not directly affect your latency (ping), download speed, or upload speed. Those are determined by your ISP, distance to the server, and your local network quality. You can have Open NAT and 150 ms ping, or Strict NAT and 15 ms ping.

What NAT type affects is whether connections succeed at all. With Strict NAT, you might have a perfectly fast connection but be unable to join a lobby. With Open NAT, you can connect to anyone — but your actual in-game performance still depends on your ping, jitter, and packet loss.

Common Mistakes When Fixing NAT Type

• Forwarding ports without a static IP — Your console's IP changes every time it reconnects. The forwarded ports now point to nothing. Always assign a static IP first
• Enabling both UPnP and port forwarding — On some routers, these conflict. If you set up manual port forwarding, disable UPnP for that device
• Not restarting after changes — Router changes often require a full reboot of both the router and the console to take effect
• Forwarding ports on the wrong device — If you have double NAT, you need to forward ports on the device directly connected to the internet, not just your secondary router
• Using DMZ on a PC — Never put a Windows PC in the DMZ. It has far more services exposed than a console and becomes a target for attacks
• Ignoring CGNAT — If your ISP uses CGNAT, no amount of router configuration will help. Check for it first before spending hours on port forwarding

Quick Diagnostic: Why Is My NAT Strict?

Follow this decision tree to identify the cause:

1. Check for CGNAT first. Log into your router → look at the WAN IP. If it is in the 100.64-100.127 range, or different from your public IP, call your ISP. No router fix will help
2. Check for double NAT. If your WAN IP starts with 10.x, 172.16-31.x, or 192.168.x, you have two NAT devices. Bridge the ISP device or remove one router
3. Enable UPnP. If you have a single router with a real public IP, enable UPnP and retest. This fixes it for most people
4. Try port forwarding. If UPnP does not work, manually forward the ports for your platform. Assign a static IP first
5. Try DMZ. If port forwarding still shows Moderate or Strict (and you are on a console), place the console in the DMZ
6. Update router firmware. Outdated firmware can have buggy UPnP or NAT implementations. Check the manufacturer's site for updates

Frequently Asked Questions

Bottom Line

NAT type is a connectivity gate, not a speed issue. Open lets you connect to everyone. Moderate works for most situations. Strict causes real problems and should be fixed. The most common fix is enabling UPnP on your router. If that does not work, port forwarding or DMZ will. If nothing works, check for double NAT or CGNAT — those require different solutions entirely.

Once your NAT type is sorted, the next step is making sure your actual connection quality — speed, ping, jitter, and bufferbloat — is up to the task. Run a [free speed test on Pong.com](https://www.pong.com) to get the full picture.