I have Open NAT on all consoles at the same time in Network Settings and Call of Duty.
I have MiniUPnP and MiniUPnP ACLs configured this way so that only Consoles can open ports and no one else, I use these static IP addresses "192.168.1.8" to "192.168.1.11" on the Consoles. (Network -> DHCP and DNS -> Static leases)
I use this page to know the CIDR Address Range:
About UPnP: