Networking

Port Forwarding on Router: Complete Guide 2025

October 29, 2025 • 15 min read

Port forwarding is one of the most in-demand and simultaneously challenging topics for beginners in home network configuration. In this guide, we'll break down in detail how to properly set up port forwarding for any purpose: from game servers to surveillance systems.

What is Port Forwarding?

Port Forwarding is a technology that allows redirecting network requests from the router's external port to a specific port of a device on your local network.

Internet

External requests come to your router

Router

Redirects requests to the right device

Your Device

Receives and processes requests

Why Do You Need Port Forwarding?

Purpose Example Ports Application
Game Servers 25565 (Minecraft)
27015 (CS:GO)
3074 (Xbox Live)		 Creating multiplayer game servers
Web Servers 80 (HTTP)
443 (HTTPS)
8080 (alternative)		 Hosting websites on home server
Surveillance Systems 3777, 3778 (DVR)
80, 443 (web interface)		 Remote access to cameras
Remote Access 3389 (RDP)
22 (SSH)
5900 (VNC)		 Remote computer management
Media Servers 32400 (Plex)
8096 (Jellyfin)
8200 (Emby)		 Access to media library from any network

Important to Understand

Port forwarding opens access to your device from the internet. Always follow security measures and don't open ports unnecessarily!

Preparation for Setup

  1. Determine the static IP address of the device

    Your device (PC, server, camera) needs a permanent local IP address so the router knows where to redirect traffic.

    How to find IP address in Windows:

    ipconfig

    Look for the "IPv4 Address" line for your network connection

    How to find IP address in Linux/macOS:

    ifconfig

    Or use: ip addr show

  2. Configure static IP

    To prevent the IP address from changing, configure it statically:

    • In the router: Assign a static IP via DHCP reservation
    • On the device: Manually configure a static IP in network settings

  3. Find out the external IP address

    This is the address that other users see on the internet:

    Ways to find out the external IP:

    # Via command line
curl ifconfig.me

# Or visit sites:
# - whatismyipaddress.com
# - 2ip.ru
# - myip.com

  4. Determine the required ports

    Find out which ports your application or service uses. This information is usually in the documentation.

Step-by-step setup instructions

  1. Log in to the router's control panel

    Open a browser and enter the router's IP address. Usually it's:

    • 192.168.1.1 (TP-Link, D-Link)
    • 192.168.0.1 (Netgear, some TP-Link)
    • 192.168.31.1 (Xiaomi)
    • 192.168.10.1 (Huawei)

    The default login/password are usually on the sticker on the router.

  2. Find the port forwarding section

    The section may be called differently:

    • Port Forwarding
    • Virtual Servers
    • Port Redirection
    • NAT
    • Firewall

  3. Fill in the port forwarding parameters

    You will need to specify:

    • Service Name: Arbitrary name (e.g., "Minecraft Server")
    • External Port: Port that will be open on the router
    • Internal Port: Port on your device
    • Internal IP: Static IP of your device
    • Protocol: TCP, UDP or Both (both)

  4. Save settings

    After filling in all fields, click "Save" or "Apply". The router may reboot.

Instructions for popular routers

TP-Link

  1. Log in to the control panel (192.168.1.1)
  2. Go to: Advanced → NAT Forwarding → Virtual Servers
  3. Click "Add New"
  4. Fill in:
    • Service Type: Select from the list or enter your own
    • External Port: Port for external access
    • Internal Port: Port on the device
    • IP Address: Local IP of the device
    • Protocol: TCP/UDP/BOTH
  5. Save and reboot the router

ASUS

  1. Log in to the panel (192.168.1.1)
  2. Go to: Advanced Settings → WAN → Virtual Server/Port Forwarding
  3. Turn on "Enable Port Forwarding"
  4. Fill in the fields:
    • Service Name: Service name
    • Port Range: Port range (e.g., 25565-25565)
    • Local IP: IP of your device
    • Local Port: Device port
    • Protocol: TCP/UDP/BOTH
  5. Click "Add" and "Apply"

D-Link

  1. Log in to the panel (192.168.0.1)
  2. Go to: Advanced → Port Forwarding
  3. Click "Add"
  4. Fill in:
    • Rule Name: Rule name
    • External Port: External port
    • Internal Port: Internal port
    • Internal IP: Device IP
    • Schedule: Always
    • Inbound Filter: Allow All
  5. Save settings

Zyxel Keenetic

  1. Log in to the panel (my.keenetic.net or 192.168.1.1)
  2. Go to: Security → Port Forwarding
  3. Click "Add rule"
  4. Fill in:
    • Description: Service name
    • Interface: Internet
    • Protocol: TCP/UDP
    • External port: Port for external access
    • Destination IP: Local IP of device
    • Internal port: Port on device
  5. Save changes

Verifying port forwarding operation

  1. Use online services

    Sites for checking open ports:

  2. Checking via command line

    Check from another computer:

    # Use telnet or nc (netcat) 
telnet your-external-ip port 
# Or using nmap 
nmap -p port your-external-ip

  3. Testing the service

    Try connecting to your service from another device outside the local network (for example via mobile internet).

Signs of successful setup

  • Port shows as "open" in online checker
  • You can connect to the service from outside
  • Service works stable without interruptions

Troubleshooting common problems

Port is still closed

  • Check the firewall: Add an exception to Windows Firewall or other firewall
  • Reboot the router: Sometimes settings are applied only after reboot
  • Check IP address: Make sure the device has the correct static IP
  • Disable UPnP: Sometimes UPnP conflicts with manual port settings

Provider's dynamic IP

If you have a dynamic IP, it may change. Solutions:

  • Use DDNS: Services like No-IP, DuckDNS
  • Check IP: Regularly update information about current IP
  • Static IP: Order a static IP from the provider (paid)

Double NAT

The problem occurs when you have multiple routers on the network:

  • Bridge mode: Set one of the routers to bridge mode
  • DMZ: Configure DMZ on the main router for the second router
  • Forwarding on both: Configure forwarding on both routers

Security measures

Critical rules

  1. Open only necessary ports - each open port increases the attack surface
  2. Use complex passwords on all services accessible from outside
  3. Regularly update software - fix vulnerabilities
  4. Monitor connections using router logs
  5. Consider VPN as a more secure alternative to port forwarding

Best practices

  • Use non-standard ports to reduce scanner attention
  • Set up automatic port disabling on schedule
  • Regularly check logs for suspicious activity
  • Use fail2ban or similar to block suspicious IPs

Security checklist

Related Articles

Subscribe on Telegram Subscribe on VK