View Full Version : I'm so close...please help me get Nat Type 2 on my PS3!


Rieper
06-09-07, 07:52 AM
So here it is, this is my current Network situation on my PS3:

http://img257.imageshack.us/img257/9624/dscn7013qb8.jpg


Here are the ports I need to open on my Linksys WRT54GS wireless G router in order to get Nat Type 2:

TCP: 80, 443, 5223
UDP: 3478, 3479, 3658


And here is my current router settings in my Linksys WRT54GS:

http://img257.imageshack.us/img257/4667/linksysro1.jpg


I setup a DMZ (192.168.1.50) for my PS3. I have my PS3 setup as a static IP using the DMZ IP 192.168.1.150.

Why can't I get Nat Type 2? What am I doing wrong, any ideas???

PikachuManZzZ
06-09-07, 08:29 AM
aye dawg wat it is. Your linksys router seems to be setup correctly.

I think your problem is that, while yes the ports are open on your linksys wireless router, they are not open on your cable or dsl modem.

intarnets <--> dsl/cable modem --> linksys wrt54gs --> ps3

Go to your cable or DSL modem, and check if it has any firewall or port-forwarding options. Set it so that those ports are forwarded to your WRT54GS (note, you are using a different set of ip addresses here, so your WRT54G might not be 192.168.1.1).

oldirtdog
06-09-07, 08:32 AM
if the ps3's ip address is 192.168.1.150
and your dmz ip address is 192.168.1.50 then theres your problem right there...

you don't even need to forward ports at all if you actually assign the ps3 the same ip address designated as your dmz.

tdc01
06-09-07, 08:52 AM
So here it is, this is my current Network situation on my PS3:

http://img257.imageshack.us/img257/9624/dscn7013qb8.jpg


Here are the ports I need to open on my Linksys WRT54GS wireless G router in order to get Nat Type 2:

TCP: 80, 443, 5223
UDP: 3478, 3479, 3658


And here is my current router settings in my Linksys WRT54GS:

http://img257.imageshack.us/img257/4667/linksysro1.jpg


I setup a DMZ (192.168.1.50) for my PS3. I have my PS3 setup as a static IP using the DMZ IP 192.168.1.150.

Why can't I get Nat Type 2? What am I doing wrong, any ideas???


Man, my is setup just like your and everything is working. But I can't figure out why the NAT3 don't want to change to NAT2. I left it along and I don't have problem. Just like someone said early to check the cable or DSL box. I will do that and see what give and see if it change.

Rock Daddy
06-09-07, 09:02 AM
I have never changed anything in my router from total default.
I plug the PS3 into it and always had Type 2.
I never looked into why or the diffrences.

Rieper
06-09-07, 10:20 AM
I have never changed anything in my router from total default.
I plug the PS3 into it and always had Type 2.
I never looked into why or the diffrences.

Thanks for nothing. Now, kindly move along.

eyerox
06-09-07, 10:38 AM
Yeah...lI agree with the post of few msgs back. It could possibly be your cable modem, because you appear to have the router setup correctly.

Tenkaipalm
06-09-07, 12:15 PM
So here it is, this is my current Network situation on my PS3:

http://img257.imageshack.us/img257/9624/dscn7013qb8.jpg


Here are the ports I need to open on my Linksys WRT54GS wireless G router in order to get Nat Type 2:

TCP: 80, 443, 5223
UDP: 3478, 3479, 3658


And here is my current router settings in my Linksys WRT54GS:

http://img257.imageshack.us/img257/4667/linksysro1.jpg


I setup a DMZ (192.168.1.50) for my PS3. I have my PS3 setup as a static IP using the DMZ IP 192.168.1.150.

Why can't I get Nat Type 2? What am I doing wrong, any ideas???

You're forwarding ports to the wrong ip. If you've set your PS3 to xxx.xxx.x.150, then that's where your ports should be fowarded to, not xxx.xxx.x.50 like you have it set up.

Ignore using the DMZ- it's asking for trouble any way, since any node in the DMZ is completely unprotected.

Rock Daddy
06-09-07, 03:06 PM
Thanks for nothing. Now, kindly move along.

Edited
Not worth my time

redmption
06-09-07, 04:44 PM
Go in Admin setting and make sure UPnp is actually 'Enabled'
I had NAT type 3 until I changed it over to enabled and I got NAT 2.
Also forget all the port forwarding. You can use DMZ if the IP you are specifying is only for the PS3. So make sure you have a DHCP server running, have an IP for your computer and then an IP for the PS3. Do not do auto detect in the PS3 manually assign the IP in the settings and have the DMZ in your router set to that same IP. You should be golden after that

ji0005
06-09-07, 04:50 PM
Thanks for nothing. Now, kindly move along.

You may not like his answer, but I have the same one for you. I have no ports forwarded to my PS3 and it is not in the DMZ, and my PS3 is reporting Type 2. :p My UPnp is disabled though... dont know if that matters.

Rieper
06-09-07, 06:19 PM
You're forwarding ports to the wrong ip. If you've set your PS3 to xxx.xxx.x.150, then that's where your ports should be fowarded to, not xxx.xxx.x.50 like you have it set up.

Ignore using the DMZ- it's asking for trouble any way, since any node in the DMZ is completely unprotected.

If I ignore DMZ, as you suggest, what would you recommend? How do I setup an individual static IP for my PS3 without using DMZ?

By the way, thanks for the previous tip. I just noticed my mistake in forwarding to the wrong ports.

Tenkaipalm
06-09-07, 09:02 PM
If I ignore DMZ, as you suggest, what would you recommend? How do I setup an individual static IP for my PS3 without using DMZ?

By the way, thanks for the previous tip. I just noticed my mistake in forwarding to the wrong ports.
Just assign an IP address in your PS3 settings that's in the same subnet as your network. Looks like your router is 192.168.1.1, so give your PS3 an IP of 192.168.1.10 change your fowarded ports to that ip. Lemme know how that works.

All DMZ does is leave whatever node is in it wide open to ALL traffic.

eyerox
06-10-07, 01:45 AM
You're forwarding ports to the wrong ip. If you've set your PS3 to xxx.xxx.x.150, then that's where your ports should be fowarded to, not xxx.xxx.x.50 like you have it set up.

Ignore using the DMZ- it's asking for trouble any way, since any node in the DMZ is completely unprotected.

You get the trouble shooter of the day award.

I think 3 people responded (including me) and didn't catch the fact that he had the wrong ip.

Dralt
06-10-07, 02:25 AM
Was it a typo or did you assign 150 to the PS3 and then declared 50 to be in the DMZ?

There are 3 ways to solve your problem:

1) Enabled UPnP (It's a BIG security risk, but it's an option.)
2) Put your PS3's IP address in the DMZ box.
3) Configure port forwarding explicitly.

"2)" is the easiest and best option, as long as no one finds a way to inject a virus into the PS3 OS.

Tell me what you prefer.

Tenkaipalm
06-10-07, 04:47 AM
Was it a typo or did you assign 150 to the PS3 and then declared 50 to be in the DMZ?

There are 3 ways to solve your problem:

1) Enabled UPnP (It's a BIG security risk, but it's an option.)
2) Put your PS3's IP address in the DMZ box.
3) Configure port forwarding explicitly.

"2)" is the easiest and best option, as long as no one finds a way to inject a virus into the PS3 OS.

I dunno if it's the "best" option- DMZ on a linksys router isn't a real DMZ in that it allows hosts within the DMZ to connect to the internal network. Meaning that someone could flow traffic through the unprotected PS3 to other hosts on the network.

In a real DMZ, external traffic stops completely once it hits whatever is in the DMZ.

Abaddon
06-10-07, 10:49 AM
1) Enabled UPnP (It's a BIG security risk, but it's an option.)

He already has UPnP enabled (see the "Available" on the network connection test), and it's not really that big of a security risk.

With UPnP enabled the NAT classification should be mostly a non-issue.

Dralt
06-10-07, 01:43 PM
I dunno if it's the "best" option- DMZ on a linksys router isn't a real DMZ in that it allows hosts within the DMZ to connect to the internal network. Meaning that someone could flow traffic through the unprotected PS3 to other hosts on the network.

In a real DMZ, external traffic stops completely once it hits whatever is in the DMZ.

It's the best solution because it's the easiest. You don't have to keep up with ports this or that game uses and exploiting the PS3 to burrow into your private network would require installing a malicious program on your PS3.

Dralt
06-10-07, 01:46 PM
He already has UPnP enabled (see the "Available" on the network connection test), and it's not really that big of a security risk.

Any feature that allows a program (within your private network) to open ports in your firewall is a security risk.
Trojans love UPnP, there is no better way to turn a compromised host into a warez distribution node.

oldirtdog
06-10-07, 01:49 PM
if the ps3's ip address is 192.168.1.150
and your dmz ip address is 192.168.1.50 then theres your problem right there...

you don't even need to forward ports at all if you actually assign the ps3 the same ip address designated as your dmz.

takes back my rightfully deserved troubleshooter of the day award...

aclerok
06-10-07, 05:21 PM
I've got the exact same router as you and setting my PS3 to a static IP and using DMZ worked perfect for me.

Tenkaipalm
06-11-07, 11:31 AM
It's the best solution because it's the easiest. You don't have to keep up with ports this or that game uses and exploiting the PS3 to burrow into your private network would require installing a malicious program on your PS3.

You wouldn't have to install anything on the PS3 to get to the internal network- The DMZ creates an open path for traffic. One could attack the PS3's TCP/IP stack directly to get through, use a packet spoof, or better yet, SYN attack the stack to cause a DoS. Nothing would be worse than smoking someone in Resistance only to have them cause you to disconnect due to a DoS.

Is it likely? Probably not. But it is indeed possible. And should he ever decide to install Linux on his PS3, he certainly wouldn't want to keep it in the DMZ then. I say better to foward the ports correctly for future reference.