Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Nintendo Switch connection issue Error code

    Scheduled Pinned Locked Moved Gaming
    nintendoupnpstatic mappingaclnat
    55 Posts 5 Posters 11.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JonathanLeeJ
      JonathanLee
      last edited by

      Also does Nintendo switch normally use cURL out of the box new?

      Screenshot_20231004-201534.png
      If so I will whitelist it.

      Make sure to upvote

      1 Reply Last reply Reply Quote 0
      • JonathanLeeJ
        JonathanLee
        last edited by JonathanLee

        Can anyone please help me with getting a Nintendo switch to work with online games. My Xbox works with UpNp but my Nintendo will not. It testers to NAT type B and after shows good download speed. It fails right at upload. I have static ports set up also.

        It runs some games but the connection test fails on upload test

        Make sure to upvote

        1 Reply Last reply Reply Quote 1
        • JonathanLeeJ
          JonathanLee
          last edited by

          I am thinking it requires stun . . .

          I am starting to see this inside of SNORT

          Screenshot 2023-10-09 at 9.02.45 AM.png

          Make sure to upvote

          M 1 Reply Last reply Reply Quote 1
          • M
            michmoor LAYER 8 Rebel Alliance @JonathanLee
            last edited by

            @JonathanLee You sure?
            I got a switch and i log ALL connectivity be it inbound or outbound and pulling up a report for my switch over the last 7 days i dont see STUN.
            Lots of 443 and 53

            04817baf-7274-4eb6-a33c-744c00ffdd5d-image.png

            Firewall: NetGate,Palo Alto-VM,Juniper SRX
            Routing: Juniper, Arista, Cisco
            Switching: Juniper, Arista, Cisco
            Wireless: Unifi, Aruba IAP
            JNCIP,CCNP Enterprise

            M 1 Reply Last reply Reply Quote 0
            • M
              mcury @michmoor
              last edited by

              @michmoor perhaps you are using portfoward and disabled uPnP in the nintendo Switch ?

              What I found problematic is the range ports that Switch needs.. UDP from 1024 to 65535 ??

              https://en-americas-support.nintendo.com/app/answers/detail/a_id/22272/~/how-to-set-up-a-routers-port-forwarding-for-a-nintendo-switch-console

              dead on arrival, nowhere to be found.

              M 1 Reply Last reply Reply Quote 0
              • M
                michmoor LAYER 8 Rebel Alliance @mcury
                last edited by

                @mcury no port forward here although i do not have UPnP turned on for that vlan.
                But i do have a permit any/any for outbound internet access so i wouldve seen the attempt.

                Firewall: NetGate,Palo Alto-VM,Juniper SRX
                Routing: Juniper, Arista, Cisco
                Switching: Juniper, Arista, Cisco
                Wireless: Unifi, Aruba IAP
                JNCIP,CCNP Enterprise

                M 1 Reply Last reply Reply Quote 0
                • M
                  mcury @michmoor
                  last edited by mcury

                  @michmoor said in Nintendo Switch connection issue Error code:

                  no port forward here although i do not have UPnP turned on for that vlan.
                  But i do have a permit any/any for outbound internet access so i wouldve seen the attempt.

                  NAT shows open for you with those settings ? I don't think it will and perhaps voice in game for some games wouldn't work..

                  And what about static outbound NAT, is that enabled for the Switch IP address ?

                  dead on arrival, nowhere to be found.

                  M 1 Reply Last reply Reply Quote 0
                  • M
                    michmoor LAYER 8 Rebel Alliance @mcury
                    last edited by

                    @mcury @JonathanLee I think the questions are for you.

                    Firewall: NetGate,Palo Alto-VM,Juniper SRX
                    Routing: Juniper, Arista, Cisco
                    Switching: Juniper, Arista, Cisco
                    Wireless: Unifi, Aruba IAP
                    JNCIP,CCNP Enterprise

                    1 Reply Last reply Reply Quote 0
                    • JonathanLeeJ
                      JonathanLee
                      last edited by

                      I have NAT B with these settings.

                      I use DNS Unbound forwarder

                      Screenshot 2023-10-09 at 9.33.37 AM.png
                      (UPnP)
                      Screenshot 2023-10-09 at 9.34.23 AM.png
                      (STATIC PORT)

                      My son can play many online games except Disney Speedster

                      This is the weird result of the test

                      Screenshot 2023-10-09 at 9.39.46 AM.jpg
                      (NAT B)

                      Screenshot 2023-10-09 at 9.39.29 AM.jpg
                      (FAILS ON UPLOAD SPEED)

                      Lots of games are playable

                      Does use of google stun.l.google.com require a port forward configured from 3478 to 19302? Or if that is configured inside of UPnP is it already set up to do that?

                      Screenshot 2023-10-09 at 9.43.50 AM.png

                      Screenshot 2023-10-09 at 9.44.28 AM.png

                      Make sure to upvote

                      1 Reply Last reply Reply Quote 1
                      • JonathanLeeJ
                        JonathanLee
                        last edited by JonathanLee

                        @mcury @michmoor UPnP only works for my XBOX shows NAT open on it

                        Screenshot 2023-10-09 at 9.46.54 AM.png
                        (UPnP RUNNING Xbox shows open nat)

                        Screenshot 2023-10-09 at 9.48.09 AM.png
                        (ACL)
                        Screenshot 2023-10-09 at 9.48.15 AM.png
                        (ACL)

                        I do have a proxy the only way the xbox works using both transparent + custom

                        Does Squid need ACLs? If it does why does xbox still run with out it?
                        Screenshot 2023-10-09 at 9.59.38 AM.jpg
                        (XBOX NAT OPEN)

                        Screenshot 2023-10-09 at 9.50.02 AM.png
                        (SQUID ACLs)

                        Screenshot 2023-10-09 at 9.53.06 AM.png
                        (FIREWALL NAT)

                        Make sure to upvote

                        M 1 Reply Last reply Reply Quote 1
                        • M
                          mcury @JonathanLee
                          last edited by

                          @JonathanLee said in Nintendo Switch connection issue Error code:

                          Does Squid need ACLs? If it does why does xbox still run with out it?

                          If squid is showing connection attempts in port 80 or 443 for the Nintendo Switch, you should bypass it from the transparent proxy setting in Squid.

                          By the way, I would create an IOT network and put these things there.
                          Disable Squid and Snort in this network, allow everything but not to the internal networks, enable uPnP or enable portforward, latter is preferred.

                          Note that Snort will listen in the parent interface, so this IOT network should be a separate network and not a VLAN, this will help to avoid the waste of CPU cycles in Snort/pfSense.

                          dead on arrival, nowhere to be found.

                          JonathanLeeJ 1 Reply Last reply Reply Quote 2
                          • JonathanLeeJ
                            JonathanLee @mcury
                            last edited by

                            @mcury The switch allows Proxy use, it has options for it where as the Xbox does not. That is what's weird I have no issues with anything in Games except the new Disney racing game. Nintendo does allow you to use a proxy in the LAN settings.

                            Make sure to upvote

                            M 1 Reply Last reply Reply Quote 1
                            • M
                              mcury @JonathanLee
                              last edited by

                              @JonathanLee I see, but is there a reason to use proxy in the nintendo switch ?
                              I don't have one here so I really can't say, perhaps it has a browser that kids could use that you don't want them to use ?

                              dead on arrival, nowhere to be found.

                              JonathanLeeJ 1 Reply Last reply Reply Quote 1
                              • JonathanLeeJ
                                JonathanLee @mcury
                                last edited by

                                @mcury Yes I protect the web browser from specific sites. Child Safe system.

                                Screenshot 2023-10-09 at 10.06.40 AM.jpg

                                (It works great with many games like this)
                                (F-ZERO X Online 99 players Racing game)
                                Screenshot 2023-10-09 at 10.07.56 AM.jpg
                                (Proxy use is approved of for Nintendo Switch)

                                Nintendo Does not block proxy use, they approve of it. But this connection test may check for a proxy right? That is why it has NAT B over NAT A but it should still do a upload test ok right?

                                Make sure to upvote

                                M 1 Reply Last reply Reply Quote 1
                                • M
                                  mcury @JonathanLee
                                  last edited by

                                  @JonathanLee When you get the error code: 2160-8055 (upload test fails), what shows up in Squid ?

                                  Since you are using transparent proxy, you won't be able to bypass that specific domain, but you can check their network IP range in https://whois.domaintools.com/.

                                  After getting their network range, can you try to bypass that network in Squid settings and test again ?

                                  dead on arrival, nowhere to be found.

                                  JonathanLeeJ 1 Reply Last reply Reply Quote 0
                                  • JonathanLeeJ
                                    JonathanLee @mcury
                                    last edited by JonathanLee

                                    @mcury a simple connection test thats shows good https response

                                    Screenshot 2023-10-09 at 10.16.48 AM.png

                                    ctest-ul-lp1.cdn.nintendo.net//upload
                                    ctest-dl-lp1.cdn.nintendo.net//download

                                    both show ok in proxy too

                                    Maybe . . .

                                    Screenshot 2023-10-09 at 10.13.08 AM.png stun port forward???

                                    Make sure to upvote

                                    M 1 Reply Last reply Reply Quote 0
                                    • M
                                      mcury @JonathanLee
                                      last edited by

                                      @JonathanLee I can see that Squid is intercepting SSL connections.
                                      Can you do a quick test ? Disable SSL interception for one second, test again and confirm the results..

                                      Then enable it again.

                                      If the test passes, you would need to bypass that network completely from Squid.

                                      I mean, better to bypass the entire network than a single IP address because they usually change.

                                      dead on arrival, nowhere to be found.

                                      JonathanLeeJ 1 Reply Last reply Reply Quote 0
                                      • JonathanLeeJ
                                        JonathanLee @mcury
                                        last edited by JonathanLee

                                        @mcury it is splice always for Nintendo already so it is transparent for this device

                                        Screenshot 2023-10-09 at 10.20.59 AM.png

                                        Make sure to upvote

                                        M M 2 Replies Last reply Reply Quote 0
                                        • M
                                          michmoor LAYER 8 Rebel Alliance @JonathanLee
                                          last edited by

                                          @JonathanLee Its sitll passing through the proxy.
                                          Can you set this up so it doesnt use the proxy at all. Have it hit a firewall rule instead.?

                                          Firewall: NetGate,Palo Alto-VM,Juniper SRX
                                          Routing: Juniper, Arista, Cisco
                                          Switching: Juniper, Arista, Cisco
                                          Wireless: Unifi, Aruba IAP
                                          JNCIP,CCNP Enterprise

                                          JonathanLeeJ 1 Reply Last reply Reply Quote 0
                                          • JonathanLeeJ
                                            JonathanLee @michmoor
                                            last edited by JonathanLee

                                            @michmoor That would defeat the URL blocker/child safe features without the proxy. It has a web browser on it.

                                            Make sure to upvote

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.