Call of Duty: Black Ops III

Call of Duty: Black Ops III

148 ratings
How to change NAT type to Open [Updated 2021]
By Pelinkovac CRO
The definitive guide for changing your NAT Type to Open for the best multiplayer and co-op connection (Port Forwarding)

This guide works for all games and platforms
Guide Index Section
Welcome and thank you for 40,000 views!

This guide will:

  1. Try to get you an Open NAT type as fast as possible

  2. Guide you through methods in sequence until one works for you (With pictures :) )

  3. Help you troubleshoot common issues

  4. Optional: Explain all methods for obtaining an Open NAT type

Requirements for this guide
You will need:
  1. Basic computer skills

  2. A will to read this guide

  3. A Static Local IPv4 address* instructions included in this guide
Try methods in order from top to bottom
If 1st method doesn't work move onto the 2nd etc.
  1. UPnP
  2. Manual UPnP
  3. Port Forwarding
  4. Direct WAN Connection
  5. DMZ
  6. VPN
Additional method descriptions and explanations are available at the bottom of this guide
Other games
*skip this part for BO3* This guide works for all games, for UPnP you follow the guide exactly as is , for UPnP Manual and Port Forwarding all you need are the ports that the game uses so you can forward them.

check bottom of this guide for ports
UPnP 1: How to turn on UPnP on your router
  1. Do WINDOWS + R
  2. Type cmd and hit enter
  3. Type ipconfig and hit enter
  4. Find your default gateway and write it down or copy it
  5. Type it into your internet browser and get your router settings menu

  6. Try to find WAN , Simlar "Internet" menu or "Local"
  7. Find a button for UPnP and turn it on, then click the save button if you have one

  8. Restart your router
  9. RESTART YOUR PC (Don't skip this step)
UPnP 2: How to turn on Network Discovery in Windows
Before you start make sure your routers UPnP is ON by following the UPnP part of the guide

For Windows 10:
  1. Open the Start Menu
  2. Open Settings
  3. Click Network & Internet
  4. Click Sharing options.
  5. Expand the network profile currently assigned to your network connection.
  6. In the Network discover section, select “Turn on network discovery”. Also, check the box that says “Turn on automatic setup of network connected devices.”
  7. Click Save changes
  8. Open File Explorer and go to Network on the left to see if your router is visible there
UPnP 3: Auto Forwarding Test
After you restart your PC and you are sure your router is shown in windows explorer, you can launch CoD:Black Ops 3.

When you launch you should notice your NAT is Open and you can check the UPnP settings in windows explorer to see if "DemonwarePortMapping" service is visible. This service is added by Black Ops 3 and is the "auto port forward" for the game which gives you an Open NAT Type. Other P2P programs and games that support UPnP will add their own services when launched now that UPnP is enabled.

Didn't work? Try Manual UPnP next
Manual UPnP 0: Setting a Static IP
All main methods except UPnP (non Manual) require a static local IP

Read if you don't have a static local IP

Some routers don't require a static ip to forward since they are smart enough to identify your device and lists it in a drop down menu (dhcp), however I'm including 2 methods just in case.

Router method
  1. On the main menu select clients , select your device
  2. Toggle Mac and IP binding

  3. Click Apply and you're done. Your INTERNAL IP won't change for your device anymore

Windows method
  1. Windows + R
  2. Type cmd and hit enter

  3. Type ipconfig /all and hit enter

  4. Copy/write down IPv4 , Default Gateway , Subnet , DNS Server(s)

  5. Windows + R
  6. Type ncpa.cpl and hit enter

  7. Right click your connection method (wifi/ethernet) and click properties

  8. Select IPv4 and click properties

  9. Click on Use the following IP address

  10. Fill out the spaces with the info you obtained from cmd with the exception of IPv4 , You can change the last number only so if default gateway is you can change it to 192.168.1.x x being from 2 to 255 , i recommend something like 232. If your default gateway address is your IPv4 has to be 192.168.2.x
  11. Click ok WARNING: If you typed something incorrectly you will lose your connection, revert changes to Obtain IP address automatically and Obtain DNS server address automatically to restore your connection.
  12. Use cmd ipconfig to see if your IPv4 matches your setting. (same screenshot , ignore IPv4 number being the same)
Manual UPnP 1: Network
For Manual UPnP you will most likely need to reffer to Port Forwarding 2: Setting a Static IP
as you still need to add an IPv4 unlike automatic UPnP which does this automatically

First off open file explorer and click on network

Manual UPnP 2:Finding your router
You should find your router in the "Network Infastructure" Tab , right click it and select properies

If you don't see your router here check the top of this guide and follow UPnP 1 and 2 then continue from here.

Manual UPnP 3: Settings
Now , simply click on settings

Manual UPnP 4: Entering the port(s)
Click on add and this window should pop up.

Manually added Ports may expire after some time and will need to be re-added again

So , first off i would like to tell you that you WILL require a static IP address , You can find it in the index of this guide "Port Forwarding 3: Setting a Static IP" 2 methods are included

Only using 3074 UDP and 27017 UDP should work but if it doesnt take a look at my edit below
(Don't know the ports for other games? check the link in Additional Resources Index of this guide)

EDIT: Here are all the ports used by Black Ops 3 on PC and other platforms. Port forward all of the ones listed for your platform. TCP ports only need TCP forwarding and UDP only need UDP unless you see the same port in both fields then make sure to forward it both as TCP and UDP. To port forward the ports with 2 numbers ie 27000-27031 you have to put in 27000 as the start port and 27031 as the end port or if there is one field , just enter it as 27000-27031 or 27000:27031 . The "-" or ":" means all ports from 27000 to 27031
Manual UPnP 5: Finishing up
When you are done with the port(s) simply hit OK
EDIT: Disregard the names of the ports i forwarded in this old screenshot. Yours will look different.

Manual UPnP 6: Finishing up
Now hit APPLY then OK and check your game

Didn't work? Try Port Forwarding next
Port Forwarding 1: Finding the Default Gateway (Router)
  1. Windows + R
  2. Type cmd and hit enter

  3. Type ipconfig and hit enter

  4. Copy/write down IPv4 and Default Gateway value

  5. Open your browser and in the URL bar type/paste the Default Gateway value

  6. You should be at a log in window , try admin with no password or admin user admin password (you can find your login in the manual of your router, online or at the bottom of your router (unique username password for your router)
Port Forwarding 2: Port Forwarding
Continuing with Port Forwarding:
  1. Select WAN or similar from router settings
  2. Select Port Forwarding
  3. Toggle it if its off

  4. Select Add
  5. Name it, Fill out the information with your IPv4 (static if your router needs it) , external , internal port and click ok
    Check Manual UPnP 4: Entering the port(s) index for BO3 ports,
    (Don't know the ports for other games? check the bottom of this guide and/or the link in Additional Resources Index of this guide)

  6. Try To launch CoD:Black Ops 3 and see if your NAT is Open.
  7. If it's not , restart your PC and your router (from settings menu if possible, its easier [reboot button])
Testing to see if it worked
Now close all the windows you opened , launch Black Ops 3 and hopefully you should have an OPEN NAT Type.

Didn't work? Keep reading, look at the Troubleshooting part of this guide
NAT Acceleration and its impact on NAT Type

this is important

Read this or you might waste your time

Some routers (most) have an option called NAT Acceleration also called hardware acceleration (on asus its has disabled and auto as options) when on auto it says CTF (Cut through forwarding) enabled.

It can be found under LAN -> Switch settings on Asus routers and similar for all others.

Edit: in some cases
  1. NAT Acceleration (CTF) ON = NAT MODERATE and better routing performance
  2. NAT Acceleration (CTF) OFF = slower routing but NAT can be OPEN.
In case it did NOT work
Possible reasons for failing to port forward:
  1. In my case due to my old router , whenever i port forwarded from my routers settings "website" it never opened the ports so the Manual UPnP method i showed you worked for me 1st try.
  2. ISP router is bad
  3. ISP blocking ports CG-NAT (Carrier Grade NAT)
  4. ISP router has built in port blocking that will make the ports unavailable
  5. You forwarded to the wrong IPv4
  6. You forwarded the wrong port(s)
  7. You forwarded the wrong protocol for the port(s)
  8. Your routers UPnP is bad and doesn't function correctly (try port forwarding)
  9. You can't log into your router (Try the internet to find a default username pass combo or call your ISP if you're using their equipment)
  10. "I tried ABC but the game says Strict" check firewalls (Windows and router) it may be as simple as allowing for less security so P2P (peer-to-peer) games such as this one function correctly and allow for connecting to other players.
  11. "I read this wall of text and still nothing , im stuck with Moderate" i can sympathise with you. I would still be glad its not Strict

  12. If you're on a 4g hotspot (4g/5g etc. router) you most likely have a CG-NAT. You can try to call your ISP
    and tell them you need port forwarding. They should switch your SIM to a non CG-NAT setup and you can follow this guide. If you have been successful with this guide and you are using a 4g router you don't need to do anything.

  13. If you're on a 4g hotspot (4g/5g etc. phone) you are most likely stuck with your NAT Type since most (i believe all) phones don't support any kind of forwarding by default. You can try to get a VPN that allows you to forward multiple specific ports (not one that gives you single random ones) that should literally bypass your network with a monthly cost and hopefully a small amount of added latency (ping).
Check if router is double NAT'ed
Double NAT means there is another router connected to the router you're currently configuring.

You can check if your WAN address begins with 192, 168 or 10 and if it does it means there is another modem/gateway/router combo unit still acting as a router and needs to be put into Bridge mode (meaning modem function only) or have its router functionality disabled by yourself or by a call to your ISP asking them to do it for you.

How to check if your networking is not double NAT'ed anymore?

Check the WAN IP of your router. If it does't start with 192 , 168 or 10 you don't have a double NAT anymore.

Note that CG-NAT may function differently limiting what you can accomplish on your end. In this case call your ISP for help, try to get a dedicated/static IP from your ISP or switch ISP's at your discretion.

Didn't work? Keep reading, Try the Auxiliary methods
Auxilliary 1: Direct WAN Connection
This method will limit your connection to a single device (your pc) and should only be used to check if you're having issues with your router since this method will literally remove any security measures and functionality your router provides such as firewall
You will need an Ethernet cable and a PC with an Ethernet Port

Typical Network Configuration looks like this.
Connections is:
ISP -> Modem -> Router -> PC

Direct WAN connection will look like this.
Connection is:
ISP -> Modem -> PC

If you manage to fix your NAT issue then you confirmed that the issue was indeed your router's settings or the router itself. You can try disabling your routers firewall if that is the case and check if that fixes your NAT. Try to find workarounds for other (better) methods and get them to work on your router or make sure you know about all the security risks before committing to this method/setting long time.

Didn't work? Keep reading, Try the DMZ method
Auxiliary 2: DMZ
DMZ is a way of exposing your PC to the internet while using a router.

It poses a great security risk (literally no network firewall except whats on your PC).

It should only be used as a diagnostic tool unless you know what you're doing.

Should be mostly fine but still risky for consoles, but for PC's it's way riskier due to the nature of
their usage.

How to enable DMZ:
  1. Log into router's settings panel
  2. Find DMZ under WAN or similar
  3. Add your PC's Static local IP and press OK
  4. Test if it worked in game.
  5. If it didn't work make sure you revert all changes you made for DMZ and then continue the guide

Didn't work? Keep reading, Try the VPN method
Auxiliary 3: VPN
For various reasons i will not list specific VPN providers.
You can search and find a few easily.
Just know that once you turn a VPN on it sends all your PC's internet traffic (data) through their own servers so i advise you to never use free ones. They are free because they sell your data.
When using a VPN as far as services you use (i.e. Youtube) are concerned, you are connected from the country, location and IP the VPN server is in/has.

Some games have VPN blocking and won't allow you to access their servers while a VPN is on.
Also note that usage of VPN's on Steam is against the Terms of Service.
While people report not having any negative impacts while playing with a VPN on Steam,
You should never attempt to buy something while your VPN is on or it may lead to actions taken against your account.
If the game you want to use a VPN for is not on Steam, you should check the games Terms of Service before use.

I am not responsible for any damages that may occur as the result of following this guide. Use it at your own risk.
By continuing with this part of the guide you acknowledge that you read this statement and fully understand the risks involved and that you have been warned beforehand of the potential negative outcomes.

Choose a VPN based on:
  • Trust (transparency and no logs)
  • Features (mutliple specified port forwarding, security)
  • Reliability (Servers at more locations, Reliable client software,
  • Price (it varies a lot. but only a few offer the feature mentioned above)
  • Optional: Return policy/Trial period. (i.e. get your money back in x days if you're not happy)

Steps to port forward with a VPN:
  1. Find a trustworthy VPN that supports port forwarding of multiple specified ports.
  2. Buy a suitable subscription (I recommend getting a single month just to test if it works first)
  3. Install the VPN's client software (program).
  4. Connect to a VPN server thats closest to your real location (for lower ping) or a country you trust with your internet data.
  5. Open the VPN websites control menu for your account (or software clients, varies by provider).
  6. Open the port forwarding settings
  7. Select and add all the ports you wish to forward.
  8. Read the fine print (if there is any) about anything you should know about their forwarding implementation (i.e. takes 15mins to enable at first etc)
  9. Reconnect to the server you forwarded for (or if its global connect to any server)
  10. Try to launch your game and see if it worked.

Didn't work? Leave a comment and ask for help :)
Why does NAT matter
I'll explain it as simple as possible so this guide is short.
EDIT: lol "short"

NAT Type
Can connect to all NAT Types (100%)
Your PC can connect to anyone’s games and host games and other users will be able to find and connect to the games you are hosting. No voice chat issues. Obtained by port forwarding or by connecting straight to the internet without a router or firewall.
Can connect to Open and Moderate NAT Types (66%)
Your PC will be able to connect to other players, but some functions will be limited. Obtained connecting to the internet using a router or with a firewall blocking some packets but not others. This isn't the best NAT type but it doesn't mean your networking is broken. (Most common).
Can connect to Open NAT Types (33%)
Your PC has limited connectivity with other players. You will have a hard time hosting and hearing voice chat. Other players on a moderate or strict NAT will not be able to join your hosted games. Obtaining Open or Moderate NAT might significantly reduce lag for STRICT NAT users. Obtained by your PC being behind at least 1 router and your ports not being forwarded correctly.


NAT Type Open
NAT Type Moderate
NAT Type Strict
PS4 / PS3
NAT Type 2
NAT Type 1
NAT Type 3
Xbox One, 360
NAT Type Open
NAT Type Moderate
NAT Type Strict

IF you're trying to open the same ports for multiple devices.
If you're trying to get Open NAT on more than 1 device on the same network it is not possible for the same ports.

Modern consoles allow you to use different ports on additional consoles eliminating this issue i.e. 3074 on console 1 and 4074 on console 2 will work and both can have Open NAT.

You can have 2 devices or more with Moderate NAT using the same ports but not with Open for Open you have to have unique ports for each console.

For consoles (Open = Type 1 , Moderate = Type 2, Strict = Type 3) ignore this text if you're on PC.
Explaining Forwarding Methods
There are 5 possible methods to achieve an Open NAT Type.

Try methods in order from top to bottom (If 1st method [UPnP] doesn't work move onto 2nd [Manual UPnP])

Main methods:
As its name suggest its plug and play, the game (and other games/programs) send a request for forwarding needed ports to your router ensuring great connectivity with 0 user input. Most modern P2P games support UPnP but older titles (such as CoD:WaW) don't therefor Manual UPnP or Port Forwarding is needed for older titles.
Manual UPnP
Same as UPnP but you manually add the service (ip , port , protocol) you want port forwarded from windows explorer. Basically same as Port Forwarding
Port Forwarding
Accessing your routers settings and manually adding your ip , port and protocol you want your router to forward. Takes slightly more effort than Manual UPnP
*Security wise debatable. Check the internet for more info

Auxiliary methods (advanced):
Direct WAN Connection
Last resort, Risky
Removing your router from the picture by plugging your PC directly into your modem (or in case of router/modem/gateway combo , turning on bridge mode which disables router function). Effectively directly connects your PC to the internet bypassing NAT completely. If you still don't have an open NAT it's because of your ISP's CG-NAT (Carrier Grade NAT) which is basically another router out of your control blocking/partly blocking your ports. This method is a security risk (basically windows firewall is the only thing limiting access from the internet to your PC), makes your internet dedicated to 1 device and is NOT RECOMMENDED
De-Militerized Zone (DMZ) would expose your PC directly to the internet (all ports, no firewall) posing a great security risk but hey , you gotta do what you gotta do for an Open NAT. NOT RECOMMENDED
Virtual Private Network (VPN) would allow for alternative networking by bypassing your network. Highly possible to get Moderate/Strict NAT due to how VPN services use firewalls. It's possible to find VPN services that offer custom port forwarding (any ports you want) but they are rare.
Explaining NAT Acceleration
NAT Acceleration (CTF) is basically a function that does routing on dedicated hardware chips on the router and skips the main CPU allowing your router to route traffic faster. CTF works by reducing overhead and therefor skips port forwarding and UPnP* so you will have a Moderate NAT until you turn it off on your router.

NAT Acceleration (CTF)
  1. Mainly used to achieve speeds over 100Mbps but it varies per router.
  2. Has a "snappy feeling" when browsing when ON but again , varies per router.
  3. Can cause worse multi device performance (i.e. downloading max speed on one and watching something on another works better with it ON but is terrible with it OFF)
But hey , if you need open NAT you gotta do what you gotta do besides, you can always click a few buttons and change it back later.
Explaining Direct Connection
This method will limit your connection to a single device (your pc) and should only be used to check if you're having issues with your router since this method will literally remove any security measures your router provides such as firewall
Typical Network Configuration looks like this.
You may have a Modem/Router/Gateway combo unit from your ISP and in that case you might need to switch your unit to Bridge Mode (modem function only mode) by accessing its settings "website" and turning it on.
After doing that continue with this guide.

So Connections is:
ISP -> Modem -> Router -> PC

Direct WAN connection will look like this.
Instead of connecting to your router via ethernet, you will instead connect to the WAN port on your modem that your router was connected to. This will essentially bypass your router (and its security measures) and allow you to see if it was causing your NAT type issues.
So Connection is:
ISP -> Modem -> PC

If you manage to fix your NAT issue then you confirmed that the issue was indeed your router's settings or the router itself. You can try disabling your routers firewall if that is the case and check if that fixes your NAT. Make sure you know about all the security risks before committing to this method/setting long time.
Ports for Call of Duty PC games
Call of Duty
20500, 20510, 28960
Call of Duty 2
20500, 20510, 28960
Call of Duty 4: Modern Warfare
Call of Duty: World at War
3074, 28960
Call of Duty: Modern Warfare 2
1500, 3005, 3101, 3478-4380, 27000-27030, 28960
Call of Duty: Black Ops
3074, 27014-27050
3074, 3478-4380, 27000-27030
Call of Duty: Modern Warfare 3
3074, 27014-27050
3074, 27000-27030
Call of Duty: Black Ops II
3074, 27014-27050
3074, 3478, 4379-4380, 27000-27031, 27036
Call of Duty: Ghosts
1116-1150, 28910
1116-1150, 3074, 5165, 27900-27901
Call of Duty: Advanced Warfare
3478, 4379-4380, 27000-27031, 27036
Call of Duty: Black Ops III
3074, 27014-27050
3074, 3478, 4379-4380, 27000-27031, 27036
Call of Duty: Infinite Warfare
3074, 27015-27030, 27036-27037
3074, 4380, 27000-27036
Call of Duty: WWII
3074, 27015-27030, 27036-27037
3074, 4380, 27000-27031, 27036
Call of Duty: Black Ops IIII
3074, 27014-27050
3074, 3478, 4379-4380, 27000-27031, 27036
Ports for popular Steam games
Garry's Mod
3478, 4379-4380, 27000-27030
Dying Light Steam
27015-27030, 27036-27037
4380, 27000-27031, 27036
Borderlands Steam
7777, 27015-27030, 27036-27037, 28900, 28910
4380, 7777, 27000-27031, 27036, 27900
Borderlands 2 Steam
7777, 27015-27030, 27036-27037, 28900, 28910
4380, 7777, 27000-27031, 27036, 27900
Borderlands 3 Steam
27015-27030, 27036-27037
4380, 5795-5847, 7777, 14001, 27000-27031, 27036
Grand Theft Auto V (GTA:Online)
6672, 61455-61458
Additional Resources
A great website for finding ports for other games:
Names without suffix (i.e. Xbox 360 or PS3) are for PC.

My port forwarding guide for CoD:WaW

Very useful information about NAT but way outside the minimum knowledge needed for this guide to be kept smaller than a CS textbook (for advanced users):
Guide Changes
  • Further simplification of guide content to improve reading flow and completion speed.
  • Minor reworks
  • Added instructions for 4g (5g etc) router / phone mobile hot spots.
  • Added instructions for the DMZ method.
  • Completed guide remake.
  • Minor reworks and additions.
  • Added PC ports for all CoD games directly into guide.
  • Minor additions.
  • Moved NAT explanation section to bottom for faster completion of guide from start to finish.
  • Even more minor tweaks and additions.
  • Minor tweaks and additions.
  • Huge overhaul of guide content, Fixes explanations and new pictures have been added.
Thanks for reading!
Please rate my guide if it helped you.
Leave a comment if you have any questions or suggestions.

If you use this guide in any way, shape or form in your own content please give credit and add a link to this guide as this took a while to make and more people will be able to see and use it.

Thanks for reading!

< >
Skill Issue Aug 6 @ 3:45am 
@Pelinkovac CRO Alright. I'll try it out!:steamthumbsup:
Pelinkovac CRO  [author] Aug 6 @ 3:31am 
@Skill Issue yes, it's a bit more complicated but same idea. when you type ipconfig and you get ipv6 addresses you copy the default gateway one and paste it into the url bar of your browser in this format http:// [your default gateway ipv6] and it should show right up. if that doesnt work try the same thing but instead with your local ipv6 address but after the ::something you put a 1 instead (so routingstuff::1) then put it in the url like i wrote above. If your router has a simcard in it you're using a 4g/5g modem/router and it's most likely behind a CGNAT (read the guide on how to fix it) so don't worry if it doesn't work at first.
Skill Issue Aug 3 @ 1:18pm 
Does any of this work if I have a Local IPv6 address?
Plus my router has a Simcard in it, that is giving me wifi.
Pelinkovac CRO  [author] Jul 28 @ 11:17am 
@Lucky_Denis I don't have that information but if you tried everything i wrote and you really suspect something like that, the only thing I can advise you to do is use a VPN (one with stealth mode) that has custom port forwarding, at your own risk of course.
Lucky_Denis Jul 21 @ 12:30pm 
Gears of War Ultimate Edition( Xbox Game Pass) : Spent hours of trying to solve NAT type STRICT problem... Cannot start co-op game with my friend coz of this problem. Even his type is OPEN I'm still cannot connect to his lobby with the same error...Is it possible to be blocked by government somehow? (living in China last few years and they blocking almost everything)
Carlos Drugman Jul 6 @ 6:03am 
Pelinkovac CRO  [author] Jul 6 @ 6:01am 
@Carlos Drugman however if it does, check if there is another router between you and your primary router. It could be messing up your port forwarding. If you checked everything and you're convinced it's fine then contact your ISP and explain that your port forwarding isn't working. Ask if they have you on a CGNAT and they should be able to move you to a regular IP after which it will be on your end to get it to work (if all else fails, read Auxiliary 3: VPN)
Pelinkovac CRO  [author] Jul 6 @ 5:57am 
If you did everything you said you did correctly and it's still stuck at moderate, if you're on a hardwired connection you should be using CGNAT (Carrier Grade NAT) which means you can't unblock those ports yourself. Unless you messed something up the last thing you can do is to check if you're double NAT'ed (meaning CGNAT or a second router between your PC and the internet). Check the WAN IP of your router. If it does't start with 192 , 168 or 10 you don't have a double NAT.
Carlos Drugman Jul 6 @ 5:53am 
there's quite a couple of things here, is it the dns, ip, or wan mac?
Pelinkovac CRO  [author] Jul 6 @ 5:50am 
WAN connection, then compare it to what's written in the double NAT part.