Strict NAT Type: What It Means & How to Fix It?

Note that this NAT type restricts incoming internet traffic to a PC

by Srishti Sisodia
Srishti Sisodia
Srishti Sisodia
Srishti is an avid writer with a keen interest in technology. She has spent the past ten years of her career researching and writing troubleshooting articles for Windows... read more
Reviewed by Alex Serban
Alex Serban
Alex Serban
Windows Server & Networking Expert
After moving away from the corporate work-style, Alex has found rewards in a lifestyle of constant analysis, team coordination and pestering his colleagues. Holding an MCSA Windows Server... read more
Affiliate Disclosure
  • NAT (Network Address Translation) type indicates local network accessibility; there are three NAT types; Open, Moderate, and Strict.
  • In this guide, we will discuss what the Strict NAT type means and how to easily change it to Open.
strict nat type

To fix various PC problems, we recommend Restoro PC Repair Tool:
This software will repair common computer errors, protect you from file loss, malware, hardware failure and optimize your PC for maximum performance. Fix PC issues and remove viruses now in 3 easy steps:

  1. Download Restoro PC Repair Tool that comes with Patented Technologies (patent available here).
  2. Click Start Scan to find Windows issues that could be causing PC problems.
  3. Click Repair All to fix issues affecting your computer's security and performance
  • Restoro has been downloaded by 0 readers this month.

If you are a gamer, a Strict NAT type can cause problems as it doesn’t let you connect with fellow gamers on other servers, which may be annoying. However, it can be fixed. 

This guide will explain the Strict NAT type and how to change it to Open so you can connect with other devices without any issues.

What does the Strict NAT type mean?

Strict NAT is a firewall configuration that stops all data from traveling through a local network. It makes initiating connections with the computer difficult. Also, it might restrict the computer’s ability to connect to other devices on the internet. 

This is the safest type of NAT type as it could prevent attacks, thereby keeping your computer secure. However, if you are a gamer, you might not like this configuration as it stops you from joining other servers and sharing files, and you might also experience lags when playing games.

For a better gaming experience, you need to change it to Open NAT type.

How can I change the NAT type from Strict to Open?

Before moving to the advanced troubleshooting steps, you should consider performing the following:

1. Enable UPnP on your router

  1. Login to your router. Here we are taking TP-Link Router for demonstration purposes.
  2. Go to Forwarding and select UPnP. You need to look for UPnP in your router settings.Enable UPNP -strict nat type
  3. Click Enable, then Refresh to check the status.

2. Port Forwarding

  1. Login to your router.
  2. Go to Forwarding, then click Virtual Server.
  3. Click Add NewForwarding - Virtual Server - strict nat type
  4. Enter Service Port, IP Address, and Internal Port. Now under Protocol, select All, and under Status, select Enabled.Virtual Server
  5. Click Save.

3. Enable Network discovery

  1. Press the Windows key, type Control Panel, and click OpenCP Control Panel
  2. Select Category for View by, and click Network & InternetNetwork and Internet -strict nat type
  3. Now click Network and Sharing CentreNetwork and Sharing Center
  4. From the left pane, click Change advanced sharing settings.Change advanced Sharing settings
  5. Under Private networks, toggle on the switch for Network discovery.
  6. Also, place a checkmark next to Set up network connected devices automatically.Network discovery

4. Change IPv4 properties and enable DMZ

4.1 Change the IPv4 properties 

  1. Press the Windows key, type CMD, and click Run as administrator.DOS COmmand Prompt -strict nat type
  2. Type the following command to get the IPv4 address and press Enter: ipconfigipconfig
  3. Press Windows + R to open the Run window.
  4. Type ncpa.cpl and hit Enter to open Network Connections.ncpa.cpl
  5. Right-click on the connection, and select Properties.Ethernet Properties -strict nat type
  6. From The connection uses the following items, locate and double-click Internet Protocol Version 4 (TCP/IPv4) to open Properties.IPv4
  7. Click the radio button next to Use the following address and enter the IPv4 address, Subnet mask, and Default gatewayIPv4 address
  8. Now, click OK.

4.2 Enable DMZ

  1. Login to your router.
  2. Go to Forwarding, and select DMZ.
  3. Now, choose Enable for DMZDMZ status strict nat type
  4. For DMZ Host IP Address, enter the IPv4 address you got from Command Prompt.
  5. Click Save.

5. Make changes to the Configuration file 

  1. Go to your router page and log in. Here, we use TP-LINK.
  2. Click System Tools, then click Backup and Restore.System Tools - Backup & Restore - strict nat type
  3. Click on Backup to download the configuration file. 
  4. Double-click the file to open it and locate last bind
  5. Under the last bind, type the following after replacing 5555-5555 with your port number: bind application=CONE(UDP) port=5555-5555
  6. You can add open several ports if you like. Once done, click Save
  7. Now go to the router page, navigate to System Tools, and then click Backup and Restore.
  8. Click Choose File, and upload the modified Configuration file.Choose File
  9. Now click Restore and restart your router.

So, this is how you can change the NAT type from Strict to Open. Also, if you happen to be an Xbox One user and the Double NAT detected error is bothering you, the solutions from our guide can help.

If you have any questions or concerns about NAT type, please let us know in the comments section below. We will be happy to help! 

Still having issues? Fix them with this tool:


If the advices above haven't solved your issue, your PC may experience deeper Windows problems. We recommend downloading this PC Repair tool (rated Great on to easily address them. After installation, simply click the Start Scan button and then press on Repair All.

This article covers:Topics: