Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Multiple Xbox Ones - Open NAT using pfSense

    Scheduled Pinned Locked Moved NAT
    5 Posts 5 Posters 4.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      Raproductions
      last edited by

      Hi Everybody,

      I am newer to pfSense and I am still working on learning the Interface and pfSense configuration since I have more experience as a Windows Admin and little experience with Linux. We all have to start somewhere. I replaced my SonicWALL Router that I was using the pfSense. My pfSense is a VM on a vmware esxi Host with 6 Physical Connection. Currently I am using 2 connections for my Setup WAN & LAN.
      My Network looks like this

      WAN Setup
      Comcast Modem with 5 Static IP's (Inside House) –-> Cat 6 Ethernet to Outside 4 Port Office Switch --> Cat 6 Patch Cable to ESXI Host in Rack NIC labeled as WAN Network

      LAN Setup
      ESXi Host with Physical NIC Labeled LAN --> Cat 6 Cable to 48 Port Switch --> Cat 6 Cable to House with inside 12 Port Switch

      My Objective/Goal is to setup an Open Nat on all 3 Xbox Ones for being able to connect to Xbox Live Servers and play with Friends & Family. I have tried several configurations in this forum & on the Web to get an Open NAT and can successfully see OPEN NAT on all Xboxes however when a single Xbox Joins a Server lets say Rainbow Six Siege they can play just fine but whenever the Second or Third Xbox Attempts to Join the Rainbow Six Siege we receive a Connection Error. Here is my current Config:

      Static DHCP mapping for All xboxes 10.5.65.97-10.5.65.99 for the XBox One
      Firewall: NAT: Outbound and select Manual Outbound NAT and hit save.  This should at default create two entries a LAN mapping and a Localhost mapping.
      Outbound NAT has 3 Rules created for each Xbox One IP Address with a /32 mask bit in the Source section.  In the Translation section of this mapping, select the "Static Port" checkbox. These Rules are at the very top of the page

      Services: UPnP & NAT-PMP: upnp and nat-pmp is enabled, allow upnp port mapping is checked, external interface, WAN, interfaces, LAN, user specified permissions
      1, allow 88-65535 10.5.65.97/32 88-65535 
      2, allow 88-65535 10.5.65.98/32 88-65535   
      3, allow 88-65535 10.5.65.99/32 88-65535

      Again this allows all Xboxes to have Open NAT'S but they are unable to join the same Game Servers together so that they can play together I think this is because of the Static Port Checkbox.

      I would appreciate any help to resolve this issue. Thanks.

      1 Reply Last reply Reply Quote 0
      • T
        toddos
        last edited by

        The Static Port option just prevents pfsense from randomizing the source port, which apparently doesn't work well with gaming.  It's not what's preventing your three consoles from joining the same game.  More likely it's NAT reflection, where console A is trying to talk to console B via your WAN IP, but because console A is inside your network trying to talk to your network it doesn't go out and back in through the port forwarding rules.  You can enable in System -> Advanced -> Firewall / NAT -> "NAT Reflection mode for port forwards".  Set it to "Enable (Pure NAT)".

        Also, you don't need to allow privileged ports below 1024 for your UPnP rules.  1024-65535 would be sufficient.

        1 Reply Last reply Reply Quote 0
        • U
          unwired
          last edited by

          @Raproductions:

          Hi Everybody,

          I am newer to pfSense and I am still working on learning the Interface and pfSense configuration since I have more experience as a Windows Admin and little experience with Linux. We all have to start somewhere. I replaced my SonicWALL Router that I was using the pfSense. My pfSense is a VM on a vmware esxi Host with 6 Physical Connection. Currently I am using 2 connections for my Setup WAN & LAN.
          My Network looks like this

          WAN Setup
          Comcast Modem with 5 Static IP's (Inside House) –-> Cat 6 Ethernet to Outside 4 Port Office Switch --> Cat 6 Patch Cable to ESXI Host in Rack NIC labeled as WAN Network

          LAN Setup
          ESXi Host with Physical NIC Labeled LAN --> Cat 6 Cable to 48 Port Switch --> Cat 6 Cable to House with inside 12 Port Switch

          My Objective/Goal is to setup an Open Nat on all 3 Xbox Ones for being able to connect to Xbox Live Servers and play with Friends & Family. I have tried several configurations in this forum & on the Web to get an Open NAT and can successfully see OPEN NAT on all Xboxes however when a single Xbox Joins a Server lets say Rainbow Six Siege they can play just fine but whenever the Second or Third Xbox Attempts to Join the Rainbow Six Siege we receive a Connection Error. Here is my current Config:

          Static DHCP mapping for All xboxes 10.5.65.97-10.5.65.99 for the XBox One
          Firewall: NAT: Outbound and select Manual Outbound NAT and hit save.  This should at default create two entries a LAN mapping and a Localhost mapping.
          Outbound NAT has 3 Rules created for each Xbox One IP Address with a /32 mask bit in the Source section.  In the Translation section of this mapping, select the "Static Port" checkbox. These Rules are at the very top of the page

          Services: UPnP & NAT-PMP: upnp and nat-pmp is enabled, allow upnp port mapping is checked, external interface, WAN, interfaces, LAN, user specified permissions
          1, allow 88-65535 10.5.65.97/32 88-65535 
          2, allow 88-65535 10.5.65.98/32 88-65535   
          3, allow 88-65535 10.5.65.99/32 88-65535

          Again this allows all Xboxes to have Open NAT'S but they are unable to join the same Game Servers together so that they can play together I think this is because of the Static Port Checkbox.

          I would appreciate any help to resolve this issue. Thanks.

          Were you able to figure this out? I'm running into the same situation where only the 1st console can connect the the game server, but console 2 or 3 can't connect. I noticed once I uncheck static port they all can connect, but they lose the Open NAT and go into Strict NAT which causes other issues.

          1 Reply Last reply Reply Quote 0
          • 7
            74kumi
            last edited by

            I have a friend i was trying to help out with a very similar issue but it was involving 2 ps3s connecting to the same server at the same time. If there is a solution for this that works i would like to know as well.

            1 Reply Last reply Reply Quote 0
            • C
              crashtest
              last edited by

              I am attempting somewhat of the same thing with setting up a subset for my 3 xbox ones with upnp enabled.  Not much luck.

              This look related, but I am not sure on all the details.

              https://forum.pfsense.org/index.php?topic=103901.0

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.