Once I was able to upgrade my firmware to version 8.0.35x on my Z100g I was able to set it with the following settings to allow me to connect to Xbox Live.

"Go to the security tab on the left then navigate to the SmartDefense Tab on the top. Click on Games -> XBOX Live -> and select enabled."

How ever I have now found that if I am connected to Xbox Live on my Xbox 360 and my nephew decides to login on his Xbox 360 on the same network, I get bumped of the Live, or vice versa.

This is a NAT issue so whatever settings changes take place when you enable Xbox Live on the SmartDefence tab is only a partial fix. They need to figure out how to also allow 2 Xbox 360s the ability to connect to Live at the same time.

Oh by the way I still recieve a NAT restricted on my Xbox 360 network test. Is that true for everyone that has the Xbox Live Enabled?

Rkeenjr

I don't have multpile boxes, but my access to XBOX Live stopped working after the upgrade. It reports that my MTU size needs to be at least 1364. No matter what I do nothing works to change it. I tried Tech Support and explained my problem 4 times before I gave up.

Not once did the young lady tell me that there was the .35x .36x upgrade.

Let me bring everyone up to date on my XBOX and Z100G troubles.
1. Checked all my settings again for the 100th time.

2. Called XBOX and asked them if there was anything that could prevent my XBOX from connecting and then displaying an MTU size less than 1364. Their answer was no (of course).

3. Called my ISP and talked to tech support about their MTU settings. My new 'up to date' cable modem does not allow users to modify the settings. It is truly plug and pray, works like a champ actually.

4. Logged into this site and clicked on the "Live Person" link. Taked with Mary about my problems and we agreed to rollback my version from 8.0.36x to 7.5.55x to see if versions made any difference. Mary also stated that the Z100G's setting for MTU was 1500 hard coded, but you could change it to a lessor setting...did that and changed it from 1360 to 1500.

5. After rolling backwards there was no change in my XBOX'x attitude...still less than 1364.

6. Clicked on "Live Person" again and Wendy brought my version back to 8.0.36x. Same results with upgrading my software versions.

7. Looked around for my old HE102 Netgear 802.11a device and plugged it in. My cable box seen it and connected the HE102 as if it was new technology.

8. Went to my XBOX and said scan for WIFI networks and it found this old box and connected after I gave it the security settings.

9. XBOX went out and found the HE102 without incident and connected to XBOX Live....just like it was supposed to do, without an MTU size issue.

10. Disconnected my cable modem from the HE102 and plugged it back into the Z100G and then connected the HE102 into the Z100G to see what I could get out of that. Shut off the WIFI on the Z100G and only used the HE102 WIFI to test this theory. Z100G sees the HE102 and the XBOX sees the HE102, but it again says that there is a problem with my MTU size.

11. The only problem with this setup is the HE102 only has one RJ45 and that is for incoming. I can't split into a hub and break it out to share the cable modem with the rest of my house.


So to end a long posting I believe that I have exhausted all testing to prove that I have a problem with my Z100G and some setting is stuck inside the unit. Rolling back or upgrading to the current version of software did not clear that problem. Now who do I call to get any help? Who can I get to listen to my problem?

I do not have an Xbox on my network, but I have a couple of suggestions.

I noticed that there is the "hide NAT" feature. I do not know if this has anything to do with the problem, but you might check it out.

Also can you create a rule that would allow any traffic to and from the Xboxes bypassing NAT?

Later: I googled "z100g +xbox +nat +multiple"
and found references to your problem on other boxes as well as the Z100. Some referenced UPnP as the issue.

This message has been edited. Last edited by: KBR,

KBR,
Thanks for giving me more to think about.
Let me tell you my findings from your ideas.

I tried Disable 'hide NAT' and then the device could not find my DNS even
with manual entries. Turned it back on and it returned to the MTU error.

Went to Google and entered the uPnP question and all of the ideas proved fruitless.

Your last idea of opening all services was tried a couple times before with no luck. Now I sound like a typical end user, but tried it anyway and checked the box to log all good connections.

Was able to connect and noted all the ports/services that were green. Entered these into the 'Security tab' and then turned off the exclusive access...it failed to connect. Re-opened the free pass for in and out bound was then able to connect again.

Turned off the ALL into XBOX statement and it stayed connected, however, if I re-enable it and turn off XBOX to outabound ALL it shuts down. Even though, I have all the ports and services entered as rules.

Not sure what outbound service shuts down the path, but I think I am secure for the time being, but am closely monitoring the entries.

Thanks again KBR.

R/

Jim

I've only got on Xbox ...
My son got it for Christmas and he is whining about "strict NAT" ... big shock eh?

Can somebody explain what "strict NAT" is?
I know what NAT is (Network Address Translation), but had no idea up until now that there were apparently 3 flavors ... strict, moderate, and open?

Heck even wikipedia doesn't have a definition for these flavors... what is the world coming to??? ;-)

If under SmartDefense I enable the "XBox LIVE Open NAT" feature have I somehow compromised/reduced the security of the rest of my network?

Again since I only have one Xbox here, I'm wondering if I should just make the Xbox an exposed host instead?

Thanks in advance for the education!
Jim

I have gotten the Z100G to work, or at least allowing it to update its software, with the XBOX here (My son got it for Xmas). I think what did it was reducing the firewall security from high to medium. I also enabled the Xbox feature in "Smart Defense".

This message has been edited. Last edited by: KBR,

Thanks KBR!

I think I just found out what "open NAT" means...

This might also provide the answer to the original question also...

http://www.cainetworks.com/sup...NAT-strict-open.html

It says:

To make the firewall/router from strict to open, actually Microsoft′s devices looking for three UDP ports to be properly routed. If you can add following ports to the NAT rules on the router, it will be considered open:

UDP port 5060;
UDP port 5061;
UDP port 3074;

If that is all the "smart defense" changes I guess I'm not REAL worried about the impact on the rest of the devices behind the firewall... or if I wanted to be "really attentive" I guess I could define a network object for the xbox and then open(forward?) those ports only for the Xbox device?