How to get a Type 2 (Open) NAT on your PS3

[Peench]

Having a closed or limited NAT on your gaming console will cause a variety of issues. Similar to strict, moderate or open on an Xbox 360, the PS3 offers Type 3, Type 2 and Type 1 NAT results. These break down as follows:

Type 1 - Connected directly to the internet (no router/firewall). Should have no issues.

Type 2 - Connected through a router properly. Should have no issues.

Type 3 - Connected through a router without open ports or DMZ setup for PS3. Everything should function properly, but you may have connection, voice chat or other issues.

While most everything will function properly regardless of what your NAT setting is, your best bet is to set up your PS3 so that you can obtain a Type 1 or Type 2 NAT. Since most of us have routers at home for connecting multiple computers or devices to the internet, chances are the best we will get will be Type 2. Thankfully that's fine and everything will work properly.

If you have not adjusted your settings on your PS3 or router, chances are you have a Type 3 NAT and probably never knew it. With a few simple changes you too can have a Type 2 NAT. Order now for just $19.99. But wait, there's more.

The first thing you will want to do is check your network connection. Head on over to the Network Settings tab on the XMB. It looks like this:



Once there choose the Internet Connection Test item. It looks like this:



You will receive a warning letting you know that you will be signed out in order to perform the test. Choose okay. If you have not made any setting changes in your PS3 or Router, chances are you will receive the following message:


The warning reads: "When the NAT type is type 3, chat or the communication features of games may be restricted. For more information, refer to the online instruction manual."

If you run the test and have Type 2 or Type 1, stop fooling around and go play some games! If, however, you have Type 3, read on for help on opening up your NAT.

In order to open up your NAT on your PS3 you will need to make an adjustment on your PS3 and on your router. First you will want to set up your PS3 for a static IP address. This means turning off DHCP and assigning your PS3 a single, static IP address. Before you start this process head over to the network tab on the XMB and choose "Internet Connection Status." From here note your current IP address, your subnet mask, your default router and primary and secondary DNS settings. Write these down, you will need them in the following steps.

To do this, visit the Internet Connection Settings tab on the XMB. It looks like this:



From here most of the settings can simply be passed through with default settings. There are two areas, however, that you have to change. The first is choosing a Custom address setting (instead of Easy).



From here, you will want to choose Manual IP Address Setting:



Remember the settings you wrote down from your status page? You will need them here. You will have to enter in the static IP Address you want to assign to your PS3, the Subnet Mask (which is usually 255.255.255.0), the default router (the IP address of your router, most often 192.168.1.1 or 192.168.100.1), and the Primary and Secondary DNS settings. You will have to input all of these numbers. This is made much easier with a DVD Remote or keyboard.

Please NOTE - You will want to set the last number of your IP address high enough that other wireless or wired items on your network will not be assigned the same number through DHCP. While DHCP had chosen .3 as an IP address for my PS3 initially, I bumped it up to .23 because I have less than 23 items in my network. If you do not have DHCP enabled on your router, you do not need to worry about this and can simply choose an IP address that does not conflict with your other devices and which is available through your router.



Once you have all of the settings input, press X to save them. Your settings will change and the PS3 will offer to perform an Internet Connection Test for you. If you let it do the test now chances are you will still get a Type 3 NAT connection. Don't fret little bear, we still have one more step.

In addition to making the necessary changes on your PS3, you will also have to open up some ports on your router. The ports you need to open are:

TCP: 80, 443, 5223
UDP: 5223, 3478, 3479, 3658

I have a Linksys Router and my port forward settings page looks like this:



Depending on what type of router you have, your settings page may look different. In order to obtain an open or Type 2 NAT, you will need to open those ports listed above.

You can see in my screen capture that my PS3 is listed with its static IP address that I set above (.23) and that all of the necessary ports are forwarded to that IP address. The X listed items above (.24) are for my Xbox 360 so you don't have to worry about those.

Once you have forwarded these ports and saved your settings its a good idea to unplug and plug back in your router. This will refresh everything on your network connected to your router. Once done head back to your PS3 and perform an Internet Connection Test. If you did everything correctly you should receive the following page:



Congratulations, your NAT is now setup and working properly!

[lovekeiiy]

Not to knock your wondful info, did you try setting up UPnP on both the PS3 and router (if available). I've had that fix the problem on the 360.

Personally, I don't like opening ports up or using the DMZ in my secured network. In theory, it can leave your secured LAN susceptible to breaches; hackers doing bad things.

Granted, this may be a bit die hard security wise, but it's still there nonetheless.

[Peench]

UPnP didn't work when I was setting up the 360 and even putting it into the DMZ didn't work (perhaps an issue w/ my router). But opening up these ports worked like a charm.

As far as hacking, those ports are only open to those IP addresses. While I understand and appreciate that the 360 and the PS3 are computers underneath, I doubt anyone will be snooping onto my network and actually able to access anything on either console.

[BrewCityUpstart]

Originally Posted by Peench

I doubt anyone will be snooping onto my network and actually able to access anything on either console.

What aboot credit card numbers from accounts on Live/PSN?

[Peench]

Those aren't stored on the console. They're stored on Live/PSN servers.

[BrewCityUpstart]

Oh. Then I guess you would be correct! Sustained!

[lovekeiiy]

Like I said, in theory, you leave a security hole. I'm not a LAN security expert or even a LAN expert. I just have some knowledge.

On my router, opening the ports didn't help me at all. I had to put it in the DMZ. I found later I could use the UPnP worked, and I didn't leave the 360 in the DMZ.

With my LAN setup, I have a DMZ zone and secured zone. I'm just waiting from my second router so I could use my DMZ for the gaming zones. The only bad thing, per se, is I won't be able to streem media to the 360, and I presume to the PS3.

[Peench]

Yup, opening up anything is a security risk, but if they are only opened to those items, the risk is minimized. I imagine if someone figures out how to access and take control of the PS3 thru one of those ports while you are playing (i.e. it is on), then something might be done about it. But in all the years that ports have been opened for gaming, I haven't heard about it. Perhaps on the PC, but not on consoles.

[BrewCityUpstart]

Originally Posted by lovekeiiy

Like I said, in theory, you leave a security hole..

You're a security hole.

[Peench]

I can only imagine what people who don't know us here are thinking when they read this stuff.

[lovekeiiy]

Originally Posted by BrewCityUpstart

You're a security hole.

may explain why every girlfriend I've had fathers' did not like me or why my friends' girlfriends' fathers did not like me either. I never got the later because it's not like I was the one boinking their daughters, LOL.

[Woundup]

Peench in regards to security you really should not display your ip address bro.

[Peench]

My internal IP address? That's not my external IP address so it really doesn't matter. You all would have to be tapped into my home network for it to make any difference.

[Woundup]

Originally Posted by Peench

My internal IP address? That's not my external IP address so it really doesn't matter. You all would have to be tapped into my home network for it to make any difference.

Do you want to bet?

[Peench]

Yes.

Pink slips again?

[Woundup]

You have no cars worth anything. Talk to me when you have something worth more then a hundred bucks.

[Peench]

Hack my network and find out big boy!

[BrewCityUpstart]

Originally Posted by Peench

Hack my network and find out big boy!

That couldn't sound any gayer even if you said it with a lisp lol

[Peench]

That was exactly the sound I was going for. Glad you recognized it brew!

[Sir Ireland]

Hey I followed all those instuctions but when I click apply for my port forewarding its says cannot find server and none of my settings are changed.