Fix “Strict NAT Type” on PS5 and Xbox Series X

Quick answer

A “Strict” or “Type 3” NAT on your console causes the classic multiplayer headaches: trouble joining friends, party-chat issues, and being matched poorly. Here’s what NAT type means and how to open it up.

What NAT type actually measures

NAT type describes how freely your console can accept incoming connections from other players through your router. Open (Type 1/2) connects to anyone easily; Moderate works but with some limits; Strict (Type 3) restricts inbound connections, causing the join and chat problems. The goal is to move from Strict to Open or Moderate.

Why is your NAT type Strict?

Strict NAT usually means your router isn’t allowing the inbound connections games need — because the right ports aren’t forwarded, UPnP is off, or (the hard case) you’re behind carrier-grade NAT where your ISP shares your public IP and you can’t accept inbound connections at all.

Fix 1: Enable UPnP (easiest)

The simplest fix is turning on UPnP in your router settings, which lets the console open the ports it needs automatically. For many people this alone moves NAT from Strict to Open. Reboot the console after enabling it and re-check the NAT type in network settings.

Fix 2: Port forwarding (manual)

If UPnP isn’t available or doesn’t help, forward the console’s ports manually. First give the console a fixed local IP (so the forward always targets it), then forward the platform’s required ports to that address — PlayStation and Xbox each publish their port lists. This explicitly tells the router to allow those inbound connections.

Fix 3: DMZ (last resort)

Placing the console in your router’s DMZ forwards all inbound traffic to it, which reliably opens NAT but reduces the console’s firewall protection — use it only if forwarding fails, and only for the console with a fixed local IP. Never DMZ a PC.

If nothing works: CGNAT

If UPnP and forwarding both fail to improve NAT, you’re likely behind CGNAT — no router setting can fix that, because the limitation is upstream at your ISP. The remedy is to ask your ISP for a public IP (sometimes free on request), which restores your ability to accept inbound connections. The same CGNAT wall blocks self-hosting game servers.