os-upnp plugin not working?

[AlpAne]

Have anyone actually verified that this solution works for multiple PC/Xbox clients connecting through UPnP at the same time.

Like I said before in this topic : Forget OPEN NAT and keep things simple at a nice and comfortable Moderate NAT level with STRICT-PORT Enabled for your Gaming Clients :)

Could you please write a simple step by step guide how to do this?

Thank you in advance!

[bamf]

It should be sufficient to enable Endpoint-Independent NAT for your gaming client.

[nero355]

Have anyone actually verified that this solution works for multiple PC/Xbox clients connecting through UPnP at the same time.

Like I said before in this topic : Forget OPEN NAT and keep things simple at a nice and comfortable Moderate NAT level with STRICT-PORT Enabled for your Gaming Clients :)

Could you please write a simple step by step guide how to do this?

Thank you in advance!

See Post #1 => https://forum.opnsense.org/index.php?topic=52419.msg270603#msg270603 ;)

[bamf]

See Post #1 => https://forum.opnsense.org/index.php?topic=52419.msg270603#msg270603 ;)

Why? What's the benefit of Static Port over Endpoint-Independent NAT?

[nero355]

See Post #1 => https://forum.opnsense.org/index.php?topic=52419.msg270603#msg270603 ;)

Why? What's the benefit of Static Port over Endpoint-Independent NAT?

I can't tell you that yet, but to solve Strict NAT issues and moving to Moderate NAT that is the way to go :)

So far it seems you can't combine both so I am not sure if Endpoint-Independent NAT will solve that issue too...

[bamf]

So far it seems you can't combine both so I am not sure if Endpoint-Independent NAT will solve that issue too...

It does resolve this issue in a more secure way than Static Port. EIM-NAT is a fairly recent addition to OPNsense, and I migrated my rules for online gaming away from static port as soon as it became available. You might still need static ports for specific scenarios like SIP, but for gaming clients, EIM-NAT is definitely the more secure route now.

There's a good explanation of the details in the Netgate documentation here: https://docs.netgate.com/pfsense/en/latest/nat/outbound.html#endpoint-independent-port-restricted-cone-nat

[nero355]

So far it seems you can't combine both so I am not sure if Endpoint-Independent NAT will solve that issue too...

It does resolve this issue in a more secure way than Static Port.

Can you give me some "real world" examples ?

I have read some stuff about it already like :

There's a good explanation of the details in the Netgate documentation here: https://docs.netgate.com/pfsense/en/latest/nat/outbound.html#endpoint-independent-port-restricted-cone-nat

But I am not yet sure what to do with it to be honest...