I have an ASUS Router GT-BE98 Pro, I've enabled upnp. I have a Mac mini 4 running the Roon Server. Ive disabled all the firewalls on the router and Mac mini 4. I have ran testing through DMZ and also tried the port forwarding. Still not working.
Thanks for writing in and welcome to the Roon community!
@Wade_Oram is correct - your issue is related to the "status": MultipleNatFound section of the error code above.
You’ll either want to disable your second local subnet, or set your second router into bridge mode if possible. Let us know if the thread linked above is helpful!
This can be risky in regard to your network security, and we advise against using DMZ.
I don’t think that putting the Asus router in the DMZ of the ISP router significantly compromises network security. It is just delegating security to the Asus router.
However, the DMZ is basically just a catch all port forward. Thus, irrespective of whether you use a proper explicit manual port forward on the ISP router or put the second router in the DMZ of the ISP router, you will need to use a manual port forward rule on the Asus router. uPnP will not work in either case (it should configure the port forwarding on the Asus router OK but the external ip address check that it will perform afterwards will fail so the Roon Server will still report ‘NotReady’).
Putting the ISP router into bridge mode (or modem only mode) will stop it acting as a router and should allow uPnP on the Asus router to work (unless CG-NAT is also present ).
Also, if your ISP router is connected to an ONT by ethernet, you may be able to remove it altogether if you can determine how to connect a third party router to your ISP service. My BT service in the UK uses PPPoE so I can (and have) removed the ISP router and replaced it with my ASUS using the PPPoE settings (login, password). Some ISP’s may also need a vlan id.
Since you have a MacOS RoonServer, you can also bypass port forwarding entirely by installing Tailscale on your Mac and phone.
Many users with your network topology prefer Tailscale for its simplicity and flexibility. It’s often easier to set up - and a more permanent solution - than an open port configuration.