Xbox One and Teredo (UDP port 3544)

jasonm 0

Hi,

I just thought I'd share my findings regarding a huge problem I had with obtaining an IP for Teredo on my Xbox One. I had forwarded the port for Teredo and even added a static outbound NAT rule for my Xbox but I just couldn't get it working. So here are my findings:

Teredo is used to give IPV6 connectivity on an IPV4 network so allowing IPV6 traffic (under Advanced -> Networking) may be necessary.
Teredo requires a static outbound NAT rule (NAT -> Outbound). Specifically on destination port 3544 but you can make the outbound rule to that applies to all ports.
Your router's domain search list (e.g. pfsense.localhost) can interfere with Teredo, so it's best to give the Xbox a static DHCP lease and set the Domain Search List to NULL (DHCP Server -> Add/Edit DHCP Static Mappings).

I hope this helps someone. Please feel free to correct me if I'm wrong.

Sources:
https://forum.pfsense.org/index.php?topic=37778.0 — Teredo post on pfSense forum
https://forums.xbox.com/xbox_support/xbox_one_support/f/4267/t/1636892.aspx — Teredo on Xbox support website

Other useful sources:
https://support.xbox.com/en-US/xbox-one/networking/network-ports-used-xbox-live — Ports required to use Xbox Live on Xbox support website
https://forum.pfsense.org/index.php?topic=73012.0 — HOWTO: XBOX One and Open NAT on pfSense forum
https://forum.pfsense.org/index.php?topic=103901.0 — HOW-TO: Multiple XBox One's with Open NAT on pfSense forum

comet424

@jasonm-0 did you ever have your pfsense with a VPN i having this issue
i have Xbox one if i disable toe VPN i get Xbox to Open ... but when i enable the VPN i get double natted i cant solve it i have a guy helping but he doesnt have xbox so hes trying his best i just wondered if you had it
i want the vpn to work on part of the network and the xbox to bypass the vpn
go directly to the wan but when i do it it goes to the wan and the vpn

ikifar

I found this command on reddit it seems to work if on PC with Xbox App:
netsh int ipv6 set teredo enterpriseclient
https://www.reddit.com/r/killerinstinct/comments/4cklwu/fix_for_teredo_error_client_on_managed_network/