How do I fix NAT Type and Xbox network connectivity errors in Windows 11?

Fixing NAT Type issues (Strict or Moderate) and Xbox server connectivity errors on Windows 11 requires configuring the Teredo tunneling protocol, enabling core network services, and ensuring your router allows Xbox Live traffic through.

1.Enable core Windows network services:Required for Teredo tunneling and Xbox Live connectivity.

1. Press Win + R, type services.msc, and press Enter.

2. Locate IP Helper in the list, double-click it, set Startup type to Automatic, and click Start if it is stopped.

3. Locate and configure the following services to Automatic or Manual (Trigger Start):

   • Xbox Live Auth Manager

   • Xbox Live Game Save

   • Xbox Live Networking Service

4. Click Apply and OK.

2.Reset Teredo state via Command Prompt:Re-enables the primary IPv6-over-IPv4 tunnel used by Xbox Live.

1. Press Win + X and select Terminal (Admin) or Command Prompt (Admin).

2. Check your current Teredo state by executing:

DOS

netsh interface teredo show state

1. If the state displays disabled or offline, run the following commands sequentially:

DOS

netsh interface teredo set state type=default
netsh interface teredo set state state=enabled
netsh interface teredo set state type=enterpriseclient

1. Verify connection status again with netsh interface teredo show state. The state should now report qualified or managed.

3.Reset Windows Defender Firewall rules:Prevents blocked inbound UDP handshake packets.

Teredo relies on Windows Defender Firewall to manage incoming connection state requests. If third-party firewalls or custom rules block it, NAT defaults to Strict/Blocked.

1. Open Settings > Privacy & security > Windows Security > Firewall & network protection.

2. Click Restore firewalls to default (or open Command Prompt as Admin and run netsh advfirewall reset).

3. Ensure that Windows Defender Firewall is ON for Public and Private networks—disabling the Windows firewall actually breaks Teredo functionality rather than enabling it.

4.Switch to a Public DNS server:Resolves server lookup failures caused by ISP DNS filtering.

Some ISP DNS servers fail to resolve Microsoft's Teredo qualification servers (win11.ipv6.microsoft.com).

1. Go to Settings > Network & internet > Wi-Fi (or Ethernet).

2. Next to DNS server assignment, click Edit.

3. Select Manual, toggle IPv4 to On, and enter public DNS servers:

   • Preferred DNS: 1.1.1.1 (Cloudflare) or 8.8.8.8 (Google)

   • Alternate DNS: 1.0.0.1 (Cloudflare) or 8.8.4.4 (Google)

4. Click Save.

5.Configure Router UPnP or Port Forwarding:Allows your router to dynamically route inbound Xbox Live traffic.

1. Log into your router’s admin gateway (typically 192.168.1.1 or 192.168.0.1).

2. Navigate to Advanced / Network Settings and turn UPnP (Universal Plug and Play) ON.

3. If UPnP is already enabled or your NAT remains Strict, set up static Port Forwarding rules to your PC's local IP address for the following ports:

Protocol
Port Numbers

UDP

88, 500, 3544, 4500

UDP & TCP

3074

Carrier-Grade NAT (CGNAT) Notice

If your NAT type remains Strict or Unavailable after completing these steps, your Internet Service Provider (ISP) may be using CGNAT (where multiple customers share a single public IPv4 address).

• How to test: Check the WAN IP address displayed in your router settings. If it falls within the range 100.64.0.0 – 100.127.255.255, you are behind CGNAT.

• Solution: Contact your ISP and request a Dynamic Public IP or Static Public IP address to enable open port forwarding.