The MultipleNatFound snippet above indicates that there is a second, redundant network address translation layer (NAT layer) between RoonServer and the internet.
This can either take the form of a second active router or your service provider’s own Carrier-Grade NAT (CG-NAT).
You mentioned you have two routers active - in that case, port forwarding can’t automatically configure via UPnP/NAT-PMP.
You’ll instead need to access the port forwarding section of each Deco router separately and create a TCP-protocol rule pointing to the IP address and port number listed in Roon Settings → ARC. Make sure this rule is identical in both router administration settings pages.
Alternatively, you can use the built-in Tailscale network interface in your Nucleus One. This will bypass port forwarding entirely, so you wouldn’t need to configure anything in your routers.
Thanks for checking in. I have gotten stuck on my router since I have lost my password access, so I have to contact my ISP to reset. I’ll try do tomorrow.
Unfortunately no luck. I updates the NAT part forwarding on the modem and the WiFi network. Same IP and port as the Roon server. On the Deco X60, I use a Custom Service type rather than other preselects like DNS or POP3. The protocol is TCP & UDP
On the Zyxel modem, I use all protocols.
Here the Roon diagnostics
{
“ipv4_connectivity”: {“status”:“NetworkError”,“status_code”:504,“error”:“error: Error: ETIMEDOUT, response code: undefined, body: undefined connected? undefined”},
“external_ip”: {“actual_external_ip”:“188.aaa.bbb.ccc”,“actual_external_ipv6”:“null”,“router_external_ip”:“192.168.1.144”},
“status”: “status”: MultipleNatFound
,
“natpmp_autoconfig”: {“status”:“NotFound”},
“upnp_autoconfig”: {“server_ip”:“192.168.68.1”,“found_upnp”:true}
}
It sounds like yu’ve correctly configured port forwarding rules in both routers and continue to receive the multiplateNATfound diagnostic.
Unfortunately, that’s strong evidence your internet service provider has implemented Carrier-Grade Network Address Translation (CG-NAT) above the level of your account.
You can either:
Reach out to your ISP to inquire if a dedicated external IPv4 address is available
Configure an end-to-end IPv6 network from your router to your RoonServer machine (this will require some more delicate network settings knowledge)
Install Tailscale on your phone and use the built-in Tailscale network interface in the Nucleus One instead of port forwarding
We usually recommend option 3. You can find specific instructions in the article we posted above.. Please let us know if this helps!
I believe I finally have success. Tailscale seems to be doing the trick. I will test on the road later this week. Thanks so much for your help and patience. Pity this is such a convoluted procedure. Hopefully Roon will develop something more plug and play in the future…
