Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Fixed: Nintendo Switch - double NAT causing strict NAT type error

    Scheduled Pinned Locked Moved Gaming
    5 Posts 3 Posters 1.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      JohnKap
      last edited by JohnKap

      My setup is as follows.

      a0625cc8-47c9-4588-88a8-e6674ebe0a8f-image.png

      I've followed the instructions here and can't seem to get it to work. I think it root cause might be that the traffic is being double NAT'ed.

      I have the option of setting the ISP modem into bridge mode - this resolves the issue, however I lose the functionality of the 4g backup that the ISP modem provides. I need to keep this functionality as the wired connection fails on a regular basis (thanks NBN).

      I've enabled all the UPnP options on the ISP modem with no luck.

      Any thoughts / suggestions.

      Bob.DigB 1 Reply Last reply Reply Quote 0
      • Bob.DigB
        Bob.Dig LAYER 8 @JohnKap
        last edited by Bob.Dig

        @JohnKap

        UPnP is broken in double-NAT setups in pfsense. Static ports should work though.

        1 Reply Last reply Reply Quote 0
        • jimpJ
          jimp Rebel Alliance Developer Netgate
          last edited by

          If your modem has a 1:1 NAT or DMZ type setting, point it at the pfSense WAN. That might help.

          Also look for a setting which might force the modem to do static port on outbound NAT

          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

          Need help fast? Netgate Global Support!

          Do not Chat/PM for help!

          1 Reply Last reply Reply Quote 0
          • J
            JohnKap
            last edited by

            Following screen dumps from ISP modem/router:

            3f16f168-371d-45e6-abc7-028efaa30a22-image.png

            d18e2b34-1b62-4a99-b095-05ba3733879c-image.png
            No idea what Datamodel Verion means, options are 1 & 2 - don't see a difference.

            Being an ISP modem / router, pretty basic with not much advanced configuration. There is a firewall option which I've put to the lowest level - no option to disable.

            1 Reply Last reply Reply Quote 0
            • J
              JohnKap
              last edited by

              Sorted - didn't reboot the switch and it was running on its DHCP address instead of its fixed IP. All good, I'll see if I can close this topic.

              1 Reply Last reply Reply Quote 1
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.