Fix a NAT that causes issues
We'll identify double NAT, enable UPnP or port forwarding, put a gaming console in DMZ when safe—or tell you when to call a pro.
What you'll need
- Access to the router admin (192.168.1.1 or 192.168.0.1)
- The ports the app or game needs (check the app or game documentation)
- Device IP for port forwarding or DMZ
Step-by-step diagnostic
Quick triage — pick your path
Get started
Choose the option that matches what you see. You can jump straight to that section.
- Follow this guide Work through the full procedure from symptom to port forwarding.
- Check for double NAT You suspect two routers in a row.
- Enable UPnP You want the router to auto-open ports for games or VoIP.
- Port forwarding UPnP did not work and you know the ports.
- When to call a pro You cannot fix double NAT or access the router.
Show full guide
Steps
Goal: Identify double NAT, enable UPnP or port forwarding, and resolve NAT-related connection issues.
- Confirm the symptom: gaming lag, VoIP dropouts, or an app that will not accept incoming connections. If the issue is general slowness, see fix-wifi-drops-or-is-slow.
- Good: You know the symptom. Proceed to Check for double NAT.
- Bad: Different problem—check the right guide.
Check for double NAT
Goal: Rule out double NAT before changing port rules.
- Log into the router at 192.168.1.1 or 192.168.0.1. Check the WAN IP in the status page.
- If the WAN IP starts with 10.x, 172.16–31.x, or 192.168.x, you likely have double NAT—two routers in a row.
- If double NAT: remove one router from the chain, or put the ISP modem-router in bridge mode so your router does NAT.
- Good: WAN IP is public (single NAT). Proceed to Enable UPnP.
- Bad: Double NAT and you cannot change the modem—call your ISP.
Enable UPnP
Goal: Let the app or game auto-open ports via UPnP.
- In the router admin, find UPnP (Universal Plug and Play) or NAT-PMP. Enable it.
- Retest the game or VoIP app. Many games and VoIP apps use UPnP to open ports automatically.
- Good: Connection works. You are done.
- Bad: Still failing. Proceed to Port forwarding.
Port forwarding
Goal: Manually open the ports the app or game needs.
- Find the ports the app or game requires (e.g. gaming: 3074 UDP for Xbox, 27015–27030 for Steam; VoIP: 5060, 10000–20000). Check the app or game documentation.
- Assign a static IP to the device (DHCP reservation in the router or static IP on the device).
- In the router, add a port forwarding rule: external port, internal IP, internal port, protocol (TCP/UDP).
- Retest.
- Good: Connection works.
- Bad: For a gaming console only, try DMZ as a last resort—use only for a trusted device.
When to get help
Call your ISP or a network technician if:
- The modem is in bridge mode and you still have double NAT.
- You cannot access the router admin.
- You need port forwarding for business or complex setups.
Provide the router model, WAN IP, and what you have tried.
Verification
- Gaming: NAT type shows Open or Moderate in-game.
- VoIP: Test call completes without dropouts.
- Remote access: App accepts incoming connections from outside the network.
- No double NAT: Router WAN IP is a public address.
Escalation ladder
Work from the device outward. Stop when the problem is fixed.
- Confirm symptom Identify gaming lag, VoIP dropout, or connection failure.
- Double NAT Check WAN IP; remove second router or use bridge mode.
- UPnP Enable UPnP on the router.
- Port forwarding Add manual port forwarding rules for the app or game.
- DMZ (gaming only) Put a trusted gaming console in DMZ as last resort.
- Call a pro ISP or network tech if router is locked or double NAT persists.
What to capture if you need help
Before calling support or posting for help, have these ready. It speeds everything up.
- Router model and WAN IP
- Whether double NAT is present
- Ports the app or game needs
- Steps already tried
Is gaming lagging, VoIP dropping, or an app failing to connect from outside?
NAT issues often affect gaming, VoIP, and remote access. Confirm the symptom before changing router settings.
You can change your answer later.
Does the router WAN IP start with 10.x, 172.16–31.x, or 192.168.x?
A private WAN IP usually means double NAT—another router behind the modem.
Yes (double NAT) No (single NAT)
You can change your answer later.
Remove second router or enable bridge mode
Is UPnP enabled on the router?
UPnP lets games and VoIP apps auto-open ports. Many routers have it off by default.
You can change your answer later.
Enable UPnP and retest
Does the game or app work after UPnP?
You can change your answer later.
Add port forwarding or DMZ (gaming console)
Assign a static IP first, then add rules or DMZ.
You can change your answer later.
Issue resolved
Issue may not be NAT-related
Call a pro
Reviewed by Blackbox Atlas
Frequently asked questions
- What is double NAT?
- Double NAT happens when two routers both perform NAT (e.g. ISP modem-router plus your own router). Incoming connections get lost because the second router does not know where to forward them. Remove one router or put the second in bridge mode.'
- Does UPnP fix NAT issues?
- UPnP lets apps and games automatically open ports on the router. If your router supports it and the app uses it, enabling UPnP often fixes connection issues. Some routers have UPnP off by default.'
- When should I use DMZ for gaming?
- DMZ forwards all incoming ports to one device. It can fix strict NAT but exposes that device to the internet. Use only for a gaming console you trust, and only if port forwarding did not work.'
Rate this guide
Was this helpful?
Thanks for your feedback.