We have had several issues, from individual IP addressing being blocked that are PAT (NAT Overload) and just having strict NAT issues. For this reason, all game consoles get a public IP address. We only have a few /24's for this reason and use NAC/Policy to assign the public IP to the correct device. Also, one more possibility that might help, if you can identify devices on your network using something such as NAC. You could have a rule that blocks all traffic to SPN unless you are a game console. You could probably even do that with DSCP markings and your edge router/firewall. This would at least cut down on the chance of a non game console device from "attacking" the SPN.
*--Jeremy L. Gibbs* Sr. Network Engineer Utica College IITS T: (315) 223-2383 F: (315) 792-3814 E: jlgi...@utica.edu http://www.utica.edu On Mon, Oct 3, 2016 at 11:34 PM, Bryan Sherwood <bryan.sherw...@nau.edu> wrote: > Hi all, > > > NAU is currently fighting repeated blocks from Sony on our residence hall > network IP addresses. There are a number of PAT'd devices behind these IPs, > and Sony has so far only provided us with timestamps (no port information > for us to do a PAT lookup). Each time, we get a notification to our > ab...@nau.edu inbox, and when we ask them to remove the block they have > done so (so far). Sony claims they are seeing "account hacking" activity > coming from the blocked IPs, but we're starting to believe it may just be a > large number of devices behind a few IPs. > > > This is the first semester we've seen this issue, but it's getting > frustrating as students are unable to use their PlayStations on ResNet when > the blocks are in place. Has anyone else had this experience? Any tips or > tricks in identifying the issue or working with Sony to raise the "allowed > traffic" from NAT/PAT Pools? > > > Thanks in advance! > > Bryan > > > -- > Bryan Sherwood > End-User Computing Specialist, Sr. > Student Technology Center > Information Technology Services > Northern Arizona University > (928) 523-6634 > bryan.sherw...@nau.edu > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at http://www.educause.edu/ > groups/. > > ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
