A+ Score GL-MT6000 NAT Type Moderate

Just recently setup a GL-MT6000 coming from a Nighhawk XR1000 running on dumaos. I’m sorry in advance for not using any config commands Opentwrt is completely new to me but love the learning experience. Decided to flash to OpenWrt 24.10.2 r28739- LuCl openwrt-24.10 reading off wiki’s,forums doing my own research been able to slowly but surely configure my Flint 2. I was able to successfully setup my SSH & login using my macbook m1 even though I don’t know how to use any commands, or really know much about running it or how to use it.

connected with fiber/isp modem is outside ethernet cable hooked up into my WAN in the flint with 2 lan ports (PS5 & MB) running 1gig up/down DHCP with ipv6 with rest of home on wifi.
have my interface config br-lan bridged with both lan ports & the 2 wifi towers.

My ps5 is setup is static ip assigned 192.168.x.x isp dns with ipv6 running at 100% with the ipv6 site checker.

Here’s my score result after a few configuring & resets trying to port forward

using sqm/cake

Taking it day by day learning what I can such as wondering why my external ip was different than others, learning about cgnat not sure if that’s the reason for my moderate nat type as seen here

tested gameplay felt amazing first time ever in my life playing on 6 Ping that I did a couple recovery back ups just incase.

My goal here is to see if can replicate this exact low ping A+ score with open type perhaps again tomorrow, and the next day after that. seen something about tails not sure if i even need that maybe perhaps to bypass cgnat but then read that’s what ipv6 is for!

If you look into

luci/network/interfaces - what are first two numbers in WAN ip address? If it is indeed cgnat there is no cure.

xbox needs upnp (miniupnpd-nftables and luci-app-upnp) for open type.

nintendo needs fullcone patch (not in openwrt, but available in some forks) for type A, but it breaks to type D if 2 switches aRe in the network in place of default B for all.
draw your average for play stations. Version is important too.

Sorry for late response the first two numbers for ipv4 wan ip starts with 172.xx.x.xxx might be a cgnat issue honestly. My public ip shows as 192.xxx.xx which is complete different from wan. In this case would you recommend installing and learning tails?

I think they meant first two bytes not first two decimal digits. Meaning the whole number before first dot and the number after the first dot. I think you over-redacted it.

Is the wan IP in https://en.wikipedia.org/wiki/Private_network#Private_IPv4_addresses
or in https://en.wikipedia.org/wiki/Private_network#Dedicated_space_for_carrier-grade_NAT_deployment ?

Well if output of curl -4 ifconfig.me differ from WAN address they you are indeed most likely
behind CGNAT.

1 Like

Correct shows different from WAN ip ;
Screenshot 2025-09-03 at 9.43.46 AM

First two IP elements please

Invalid (private) IPs are eg

 192.0.0.0/24
 192.0.2.0/24
 192.88.99.0/24
 192.168.0.0/16

I am not very good at partial OCR. We need IP address on your WAN interface, not the one you are NAT-ed to and use for internet connections (see network/interfaces/ locate WAN - it is right there)

First for “best” nat would be setting up UPNP (defaults are OK, just tick the box to enable) and rebooting game gear to see if it works right away.

@brada4 the image OP posted above is output of curl -4 ifconfig.me so that's always some public IP. But the thing is that it is different from theirs WAN ip, indicating that there is CGNAT.

1 Like

My interface shows likes this;


with UPnP enabled shows the the ports im connecting to but connection remains; moderate

again you overredacted that IP address. Show the byte after 172 too. Is it 16?

Example:

Protocol: DHCP client
Uptime: 0d 15h 55m 0s
MAC: AA:BB:CC:XX:YY:ZZ
RX: 44.47 GB (32993817 Pkts.)
TX: 3.28 GB (4794490 Pkts.)
IPv4: 12.34.XX.YY/20

Please use the "Preformatted text </>" button for logs, scripts, configs and general console output.
grafik
Please edit your post accordingly. Thank you! :slight_smile:

yes correct shows 16.

That's private addres.

1 Like

OK, you are behind CGNAT, A/full/open NAT is not possible.

UPNP MAY work if you have standards-conformant and little utilized cgnat public address pool.

That is : if UPNP starts and is able to get back connection in its stun test your unavoidable nat is less restricted and UPNP often can open public ports.

1 Like

Got it okay so in this instance would learning Tails to bypass CGNAT, or possibly even use Cloudflare tunnels?

You talking about gaming experience not some geekish privacy issues here. I dont think 1.5s latency of typical tor would go well for even snail race games.

TRY UpNP, there are really no other improvements possible keeping gaming side afloat.

EDIT: I unticked the answer if you need help with upnp.

2 Likes

Got it yeah I will try UpNP/with the mix of SQM for a full low latency experience. I think I'll be okay with not being host for most parts. Currently using google's stun service with port 19302. I believe UPnP is working full on these are my current ports

1 Like

As the public address pool runs out at your provider either UPNP port opening or UPNP in totality will start to fail…. But you are good for now.

You can use a torrent client to redo STUN-style test eg

I see all is good. Congrats.

1 Like