Ok so my PlayStation is getting a nat type 3 and its affecting some online gaming. I configured my srx to all allow the ports the PlayStation has released. Here is my config, can anyone see whats wrong?
nat {
source {
rule-set nsw_srcnat {
from zone Internal;
to zone Internet;
rule nsw-src-interface {
match {
source-address 0.0.0.0/0;
destination-address 0.0.0.0/0;
}
then {
source-nat {
interface;
}
}
}
}
}
destination {
pool PLEX_NAT_POOL {
address 192.168.1.14/32 port 32400;
}
pool PLAYSTATION-DNAT-POOL {
address 192.168.1.109/32;
}
rule-set PLEX_RULE {
from zone Internet;
rule PLEX_PORT_FORWARD {
match {
source-address 0.0.0.0/0;
destination-address 0.0.0.0/0;
destination-port 32400;
protocol tcp;
}
then {
destination-nat pool PLEX_NAT_POOL;
}
}
rule PLAYSTATION-TCP-80 {
match {
destination-address 0.0.0.0/0;
destination-port 80;
protocol tcp;
}
then {
destination-nat pool PLAYSTATION-DNAT-POOL;
}
}
rule PLAYSTATION-TCP-443 {
match {
destination-address 0.0.0.0/0;
destination-port 443;
protocol tcp;
}
then {
destination-nat pool PLAYSTATION-DNAT-POOL;
}
}
rule PLAYSTATION-TCP-UDP-3478 {
match {
destination-address 0.0.0.0/0;
destination-port 3478;
protocol [ tcp udp ];
}
then {
destination-nat pool PLAYSTATION-DNAT-POOL;
}
}
rule PLAYSTATION-TCP-UDP-3479 {
match {
destination-address 0.0.0.0/0;
destination-port 3479;
protocol [ tcp udp ];
}
then {
destination-nat pool PLAYSTATION-DNAT-POOL;
}
}
rule PLAYSTATION-TCP-3480 {
match {
destination-address 0.0.0.0/0;
destination-port 3480;
protocol tcp;
}
then {
destination-nat pool PLAYSTATION-DNAT-POOL;
}
}
}
}
}
policies {
from-zone Internal to-zone Internet {
policy All_Internal_Internet {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
from-zone Internet to-zone Internal {
policy PLEX {
match {
source-address any;
destination-address PLEX_SERVER;
application any;
}
then {
permit;
}
}
policy policy_in_wizard_dyn_vpn {
match {
source-address any;
destination-address any;
application any;
}
then {
permit {
tunnel {
ipsec-vpn wizard_dyn_vpn;
}
}
}
}
policy Remote_MGMT {
match {
source-address any;
destination-address any;
application junos-https;
}
then {
permit;
}
}
policy PLAYSTATION {
match {
source-address any;
destination-address PS4;
application PLAYSTATION;
}
then {
permit;
}
}
}
}
applications {
application PLAYSTATION-80 {
protocol tcp;
destination-port 80;
}
application PLAYSTATION-443 {
protocol tcp;
destination-port 443;
}
application PLAYSTATION-3478 {
protocol tcp;
destination-port 3478;
}
application PLAYSTATION-3478_3480 {
protocol tcp;
destination-port 3478-3480;
}
application PLAYSTATION-3478_3479 {
protocol udp;
destination-port 3478-4479;
}
application-set PLAYSTATION {
application PLAYSTATION-80;
application PLAYSTATION-443;
application PLAYSTATION-3478_3480;
application PLAYSTATION-3478_3479;
}
}