Multiple Xbox's encountering issues

[walkerx]

Hi all,

I've setup my outbound nat for use with multiple xbox's, but having a few issues with the nat status.

I did perform a search for the configuration on the forum, but its been removed https://forum.opnsense.org/index.php?topic=3521.0

So I've used a pfsense configuration to see if that works, and think i have set this correctly, but unsure

I know there are issues with the nat status on xbox one due to a bug, but i rarely saw problems with pfsense, so would be grateful if anyone has multiple xbox's setup and working could they share their configuration so I can see if mine matches

thanks

[unipacket]

Hi walkerx,

I haven't messed with outbound nat but using a recent pfsense guide for multiple xboxes I would think should work since both opnsense and pfsense use freeBSD at the core.  Hopefully someone who has done outbound nat can give more info about it.

Also, I don't know if this will help or not, but if you're using upnp, adding a rule under the user permissions to block 3074 seems to help, it forces xboxs to use a random port instead of all fighting for 3074.  Something along the lines of

block 3074 192.168.1.0/24 3074

Also MS earlier this year added a setting in the xbox menu to specify the port it will use as an alternative to 3074 or a random port.  If you specify the port in the xbox, you can then add a port forward for that port directly to the xbox and not have to rely on upnp. 

[walkerx]

Hi,

I managed to get it all working

I cloned the settings then removed the old settings, re-applied everything

I then checked 1st xbox and noticed it was having trouble detecting ipv6, so fully rebooted opensense and the 1st xbox and then powered on 2nd xbox and seems to be working now.

i've not blocked 3074 yet, but instead added the other settings to allow the ports

would be good if could add more acl entries than the maximum 4

I'm going to take screengrabs off the setup I've got working and will post online so others can see

[unipacket]

Glad to hear you got it working.  I agree, having the ability to add more than 4 acl rules would be nice.