@AhnHEL:

| NAT type 1 means your PS3 is connected directly to a modem.

NAT type 2 means you are using a router and everything is running fine.

NAT type 3 means you are using a router, but something is wrong with the connection. |

NAT Type 2 is what you want while using pfSense.  You're good.

Great! Everything is working great!

I've done everything described in this thread but I'm only getting my Xbox One to go from "Strict" to "Moderate" and not "Open". This is quite fuzzy as I was successful at getting it "Open" before I just had to replace a hard drive in my pfSense server and ever since I did a re-install I have not been able to get it open again.

I believe I've managed to resolve the issue.
My network setup involves a virtual bridge on a Debian host. The multicast traffic is being received by the bridge but not forwarded so none of the messages are being received.
By following this guide: http://en.onoclea.com/bits/linux-kvm-dlna-upnp-smcroute.html I was able to resolve the issue. It's now been 2 hours and UPnP is still available.

I basically did the following:

apt-get install smcroute smcroute -j xenbr1 239.255.255.250 smcroute -a xenbr1 0.0.0.0 239.255.255.250 xenbr1 echo 0 > /sys/devices/virtual/net/xenbr1/bridge/multicast_snooping

It looks out for UPnP broadcasts on xenbr1 and forwards it on to all connected hosts on the same bridge.

Hey, this is what I am trying to do. I can not get it to work for the life of me. I have tried your option here, I have tried all options in the sticky at the top of the forum. Its very possible I may have done something wrong. Those pictures seem to be from a older version of pfsense.

First it started out with NAT type strict on living room xbox. Bedroom box had yet been turned on. I enabled upnp and it solved the problem for a day. Then the living room xbox starts complaining about Strict NAT.  I go into the bedroom and that Box is working Just fine.

I rebooted the living room box a few times, disabled and re enabled upnp….Nothing worked. The living room xbox just would not work with upnp and the bedroom box worked 100% of the time.

I ended up Disabling upnp, shutting both boxes off and then clearing all firewall states....rebooted pfsense, re enabled upnp and WALA...Both XBoxes work just fine with UPNP, NAT type "open"..... this lasted 2 days.

Always the living room Xbox is having an issue. The bedroom one works 100% of the time.

Could this issue be pfsense itself? Im running the latest 2.1

@Dexterryu:

Hello guys, I'm a new PFSense user so I'm very new to the interface. I just set up my first PFSense router/firewall and so far everything is working with 1 exception. The Xbox 360.

I've read the sticky and attempted those steps without luck (I've attempted static, and also UPnP settings suggested). However, my base problem is a little different. Since setting up the PFSense router, my Xbox doesn't even detect that a cable is plugged in. From what I can see in the logs it doesn't even attempt to pick up an address, and when it is set to a static never even shows online.

The Xbox 360 device thinks that there is no cable plugged in. I have a spare bridge that I used to test the port on the 360 and when it's plugged into the bridge it detects the cable and allows me to set a static address. However, once I switch the cable back it does not ever connect to the network.

I would greatly appreciate any advice here.

are they different cables you're using to test on the network vs on the bridge? are you sure the port on the switch isn't shut?

Yes.  I had already done that.

I finally got it working but not with uPnP.  It's seems like it isn't opening all the necessary ports or something.  If I do a manual port forward on TCP/UDP for 9295-9304 then it works.

http://manuals.playstation.net/document/en/psvita/ps4link/viainternet.html

i was having upnp issues with xb1 and had to do port forwarding for open nat.

i tried static ports on my outbound rule for my xb1, i tried adding xb1 to upnp user specified list, basically everything and it didn't work before.

saw this thread and figured if its working for ps4 it has to be working for xb1 too so went at it again and it seems what made the difference was hard reboot of the console. before i was just clearing firewall states and testing again.

so again above details ended up working, but it seems on xb1 a hard reboot is necessary.

@marvosa:

Sorry for the delay, I was on vacation.  Do you still need help?

Yup been busy here to but I want to still setup can you help with easy steps?

A simple way to accomplish this would be to add two rules (one for 80 and one for 443) on your LAN that routes all traffic destined for the web through the ADSL gateway.  This would be placed above your default LANnet/Any rule of course.  i.e. The rules on your LAN tab would look like this:

As rules are parsed top down, anything destined for the web will be routed out your ADSL while everything else will use the default gateway and go out your SHDSL.  Just add a 2nd line for port 443 (if needed) and you're done.

I tested it and it works.

You need to enable Manual Outbound NAT and add a static port rule for destination port 3074. You can duplicate and modify the built-in static port rule for this. It needs to be placed above the other rules.

And it is not as straight forward as these documents seem.  I have done this successfully by:

1. Installing a windows server running DHCP / DNS due to limitations of using PFSense
2. Install Ubuntu and nginx on a seperate server.
3. Setup a DNS zone for *.cs.steampowered.com on the Windows DNS server - do not do anything else otherwise Steam wont work.
4. Make sure your nginx config file has the right user to run the process. I just used root as it made permissions easier
5. Make sure you have the applicable directories created as well for nginx.

I tested and it does cache the games.  I do notice that when one person starts it gives them whatever bandwidth you allocated then when another starts caching it gives them about half of that bandwidth.  This is for the 1st time caching.  When doing a local cache to a system it will give it 15mbit to 40mbit of bandwidth when coming from the server.

I have an HP DL 360 G5 with 8G RAM , Xenon Quad Core CPU , bonded gigabit NIC's , SmartArry 4200 256MB cace with a 250G RAID 5 Array on SAS drives (10K RPM) for my Nginx.

I am going to be testing at a LAN party this weekend.

@Roots0:

@fragged:

Your local network has pretty much 0 affect on your ping times assuming you are not using wireless at any point, which might cause higher latencies. I get sub 1 ms latency up to 4 hops from my PC (pfsense,ISP gateway, .., ..).

I don't agree with this at all. Quality of drivers and makeup of all network hardware from every hop affect your latency.

Only for high bandwidth applications. Games use a few kbps. The latency will not increase beyond 1ms. The worst increase will be from the PC's NIC & drivers. Even then, only high bandwidth will aggravate the latency increase.

Unfortunately its not my network to start switching around components around. The whole reason I set up a pfSense box was to play around with it and get familiar with it so when I get out of here and have my own house I am used to it.  I've already learned a ton and I am enjoying playing with around with it.

Do you think the Asus router is what is causing the issues?  I know having double NAT is asking for problems so I wouldn't be surprised.  Im thinking I might just pop a spare NIC in and mess with having a DMZ just for fun. Like I said I'm open to any suggestions.