What is your NAT type?
Find out whether your connection is Open, Moderate or Strict, and what it means for online play on PS5, Xbox, Switch and PC.
NAT types compared
The six possible cases, their equivalent on each platform and what they allow.
| NAT type | This test | PlayStation | Xbox | Switch | Online games | Voice chat | P2P / hosting |
|---|---|---|---|---|---|---|---|
| No NATPublic IP, open internet | ✓ Open | ✓ NAT 1 | ✓ Open | ✓ A | ✓ All | ✓ Yes | ✓ Yes |
| Full coneFull cone NAT | ! Moderate* | ✓ NAT 2 | ✓ Open | ✓ A | ✓ All | ✓ Yes | ✓ Yes |
| Restricted coneAddress-restricted cone | ! Moderate* | ✓ NAT 2 | ! Moderate | ! B | ✓ Almost all | ✓ Yes | ! Partial |
| Port-restricted conePort-restricted cone | ! Moderate* | ! NAT 2 | ! Moderate | ! B | ! Most | ✓ Yes | ! Partial |
| SymmetricSymmetric NAT | ✕ Strict | ✕ NAT 3 | ✕ Strict | ✕ C / D | ! Limited | ! Unstable | ✕ No |
| UDP blockedFirewall, VPN, filtered network | ✕ UDP blocked | ✕ Failed | ✕ Teredo ✕ | ✕ F | ✕ No | ✕ No | ✕ No |
* A browser cannot tell the three cone variants apart: that would need a test server able to answer from another address. They therefore all show as “Moderate”. Console equivalents are indicative: UPnP or port forwarding can improve what the console shows.
How to open your NAT
Try these fixes in order, running the test again after each one.
Restart the router, then the console. If you can, use Ethernet: Wi-Fi extenders and powerline adapters sometimes add a second NAT.
In the router’s settings page (often 192.168.1.1), turn on UPnP. The console then opens the ports it needs by itself. It is the simplest fix.
Give the console a fixed local address (static DHCP lease), then forward the ports listed below to it.
Putting the console in the DMZ sends it all incoming traffic. It works, but use it for consoles only: never for a computer.
Two routers in a row (ISP router + gaming router, or two ISP boxes) often cause Strict NAT. Put one of them in “bridge” mode.
Behind CGNAT (shared IP), nothing on your router helps: ask your provider for a “full stack” or static IPv4, often free from your customer account.
Ports to forward
Official ports published by the manufacturers. Forward them to your console’s local address.
PlayStation 5 / 4
- TCP
- 80, 443, 3478, 3479, 3480
- UDP
- 3478, 3479
Xbox Series / One
- UDP
- 88, 500, 3074, 3544, 4500
- TCP
- 3074
- TCP/UDP
- 53, 80
Nintendo Switch
- UDP
- 1–65535 (Nintendo’s recommendation)
PC · Steam
- UDP
- 27000–27100, 3478, 4379, 4380
- TCP
- 27015–27050
FAQ
Everything you need to know about NAT, ping and online play.
How does this test work?
Your browser contacts several public STUN servers (Google, Cloudflare) through WebRTC. Each server reports the public address and port it sees you from. If the port is the same for all servers, your NAT is a “cone” type (Moderate); if it changes, it is “symmetric” (Strict). If nobody answers, UDP is blocked.
How are ping, jitter and speed measured?
Latency is measured with very light HTTP requests to AWS data centres around the world (median of 8 tries); jitter is the average variation between two tries, and losses are requests that got no answer. Speed is measured by downloading and then uploading data to Cloudflare for about 6 seconds, over several parallel connections. The values are close to an in-game ping, but a given game server may give a different result.
Why does my console show a different result?
The console tests its own connection, with its own rules: UPnP, port forwarding or a DMZ for the console can make it NAT 1 while your computer stays NAT 2. A console on Wi-Fi and a wired PC may also go through different networks (extender, second router).
Why doesn’t the test tell the different “cone” NATs apart?
Telling full cone, restricted cone and port-restricted cone apart needs a server that answers you from a different address or port than the one you contacted. The public STUN servers a browser can use don’t allow that, so all three show as “Moderate”. We would rather say so than display an invented result.
Is the test safe?
Yes. It installs nothing, opens no ports and sends no personal data: only small network requests go to the STUN and measurement servers (AWS, Cloudflare). The result is not stored. The speed test can use up to about 200 MB on a very fast connection; on a mobile connection it only starts if you ask.
What is NAT?
NAT (network address translation) lets every device in your home share a single public IP address. Your router rewrites the addresses and ports of each connection. How it does so decides whether other players can reach you directly.
What is the difference between NAT 1, NAT 2 and NAT 3?
This is PlayStation wording. NAT 1: the console is connected straight to the internet, without a router. NAT 2: it sits behind a properly set up router, the normal case, fine for almost everything. NAT 3: the router blocks incoming connections, which hurts voice chat, matchmaking and hosting.
What is a symmetric NAT?
A router with symmetric NAT assigns a different public port for each destination. Another player cannot guess which port to reach you on, so direct connections fail. It is common on office networks, on 4G/5G and behind CGNAT.
What is jitter?
Jitter measures how steady your ping is. A 30 ms ping that swings between 20 and 80 ms is worse than a steady 50 ms: rubber-banding, missed shots, choppy voice. Below 10 ms the connection is stable; above 20 ms the cause is often Wi-Fi or a download in progress.
What is CGNAT?
Some providers (fibre, 4G/5G, IPv6-only routers) share one IPv4 address between several customers. You are then behind two NATs, often Strict, and port forwarding on your router is not enough. The fix: ask your provider for a “full stack” or static IPv4 (often free), or use IPv6.
How do I get an Open NAT?
In order: restart the router, plug the console in with Ethernet, turn on UPnP in the router, then if needed give the console a fixed local IP and forward your platform’s ports to it. DMZ is the last resort, and for consoles only.
Is UPnP dangerous?
UPnP lets a device on your network open ports by itself. The risk comes from a device that is already infected or poorly made (old camera, cheap smart device). On an up-to-date home network, turning it on for gaming is a reasonable trade-off; otherwise, prefer forwarding only the ports you need by hand.
How can I lower my ping?
Use Ethernet (Wi-Fi adds jitter), pause downloads and streaming on other devices while you play, pick the closest server or region in the game, and turn on QoS or “gaming” priority in your router if it has one. A VPN almost always raises ping.
How do I know if I’m behind double NAT?
Open your router’s settings and look at its “WAN” or “Internet” address. If it starts with 192.168., 10. or 172.16–31., it sits behind another router: put the ISP box in “bridge” mode or switch your router to access-point mode. If the ISP box itself has an address in 100.64–127., that is the provider’s CGNAT.
Does a VPN change my NAT type?
Yes. The test then measures the VPN server’s NAT, often Strict. Turn the VPN off to see your router’s NAT, or choose a VPN that offers port forwarding.
PS5: where do I see my NAT type?
Settings › Network › Connection Status › Test Internet Connection. The NAT type appears at the end of the test. NAT 2 is the normal result behind a router.
Xbox: what does “Teredo is unable to qualify” mean?
Xbox uses Teredo (UDP 3544) for matches and party chat. This message means UDP is being filtered: turn on UPnP, check there is no double NAT, then restart the router and the console. The NAT type is shown under Settings › General › Network settings.
Switch: what do types A, B, C, D and F mean?
A: no restrictions. B: good, fine for almost every game. C: some online games won’t work. D: you can only join type A players. F: some online services are unavailable. Run the test from System Settings › Internet › Test Connection.
Does NAT type matter on PC?
Less than on consoles: many games use dedicated servers or Steam’s relays. It still matters for hosting a server or a match with friends, for peer-to-peer games and some launchers. Never put a computer in the DMZ.
Does cloud gaming depend on NAT?
Very little: the connection goes from your home to the service’s server. What matters is a low, steady ping and enough bandwidth, about 25 Mbps for 1080p and 45 Mbps for 4K depending on the service. The gaming score shown after the test takes this into account.