Table of Contents

Networking

Table of Contents

Port Forwarding on Router: Complete Guide 2025

October 29, 2025 • 15 min read

Port forwarding is one of the most in-demand and simultaneously challenging topics for beginners in home network configuration. In this guide, we'll break down in detail how to properly set up port forwarding for any purpose: from game servers to surveillance systems.

🔍 What is Port Forwarding?

Port Forwarding is a technology that allows redirecting network requests from the router's external port to a specific port of a device on your local network.

Internet

External requests come to your router

Router

Redirects requests to the right device

Your Device

Receives and processes requests

🎯 Why Do You Need Port Forwarding?

Purpose Example Ports Application
🕹️ Game Servers 25565 (Minecraft)
27015 (CS:GO)
3074 (Xbox Live)		 Creating multiplayer game servers
🌐 Web Servers 80 (HTTP)
443 (HTTPS)
8080 (alternative)		 Hosting websites on home server
📹 Surveillance Systems 3777, 3778 (DVR)
80, 443 (web interface)		 Remote access to cameras
💻 Remote Access 3389 (RDP)
22 (SSH)
5900 (VNC)		 Remote computer management
📱 Media Servers 32400 (Plex)
8096 (Jellyfin)
8200 (Emby)		 Access to media library from any network

⚠️ Important to Understand

Port forwarding opens access to your device from the internet. Always follow security measures and don't open ports unnecessarily!

🔧 Preparation for Setup

  1. Determine the static IP address of the device

    Your device (PC, server, camera) needs a permanent local IP address so the router knows where to redirect traffic.

    How to find IP address in Windows:

    ipconfig

    Look for the "IPv4 Address" line for your network connection

    How to find IP address in Linux/macOS:

    ifconfig

    Or use: ip addr show

  2. Configure static IP

    To prevent the IP address from changing, configure it statically:

    • In the router: Assign a static IP via DHCP reservation
    • On the device: Manually configure a static IP in network settings

  3. Find out the external IP address

    This is the address that other users see on the internet:

    Ways to find out the external IP:

    # Via command line
curl ifconfig.me

# Or visit sites:
# - whatismyipaddress.com
# - 2ip.ru
# - myip.com

  4. Determine the required ports

    Find out which ports your application or service uses. This information is usually in the documentation.

🚀 Step-by-step setup instructions

  1. Log in to the router's control panel

    Open a browser and enter the router's IP address. Usually it's:

    • 192.168.1.1 (TP-Link, D-Link)
    • 192.168.0.1 (Netgear, some TP-Link)
    • 192.168.31.1 (Xiaomi)
    • 192.168.10.1 (Huawei)

    The default login/password are usually on the sticker on the router.

  2. Find the port forwarding section

    The section may be called differently:

    • Port Forwarding
    • Virtual Servers
    • Port Redirection
    • NAT
    • Firewall

  3. Fill in the port forwarding parameters

    You will need to specify:

    • Service Name: Arbitrary name (e.g., "Minecraft Server")
    • External Port: Port that will be open on the router
    • Internal Port: Port on your device
    • Internal IP: Static IP of your device
    • Protocol: TCP, UDP or Both (both)

  4. Save settings

    After filling in all fields, click "Save" or "Apply". The router may reboot.

📡 Instructions for popular routers

🔄 TP-Link

  1. Log in to the control panel (192.168.1.1)
  2. Go to: Advanced → NAT Forwarding → Virtual Servers
  3. Click "Add New"
  4. Fill in:
    • Service Type: Select from the list or enter your own
    • External Port: Port for external access
    • Internal Port: Port on the device
    • IP Address: Local IP of the device
    • Protocol: TCP/UDP/BOTH
  5. Save and reboot the router

🛡️ ASUS

  1. Log in to the panel (192.168.1.1)
  2. Go to: Advanced Settings → WAN → Virtual Server/Port Forwarding
  3. Turn on "Enable Port Forwarding"
  4. Fill in the fields:
    • Service Name: Service name
    • Port Range: Port range (e.g., 25565-25565)
    • Local IP: IP of your device
    • Local Port: Device port
    • Protocol: TCP/UDP/BOTH
  5. Click "Add" and "Apply"

🔗 D-Link

  1. Log in to the panel (192.168.0.1)
  2. Go to: Advanced → Port Forwarding
  3. Click "Add"
  4. Fill in:
    • Rule Name: Rule name
    • External Port: External port
    • Internal Port: Internal port
    • Internal IP: Device IP
    • Schedule: Always
    • Inbound Filter: Allow All
  5. Save settings

📶 Zyxel Keenetic

  1. Log in to the panel (my.keenetic.net or 192.168.1.1)
  2. Go to: Security → Port Forwarding
  3. Click "Add rule"
  4. Fill in:
    • Description: Service name
    • Interface: Internet
    • Protocol: TCP/UDP
    • External port: Port for external access
    • Destination IP: Local IP of device
    • Internal port: Port on device
  5. Save changes

✅ Verifying port forwarding operation

  1. Use online services

    Sites for checking open ports:

  2. Checking via command line

    Check from another computer:

    # Use telnet or nc (netcat) 
telnet your-external-ip port 
# Or using nmap 
nmap -p port your-external-ip

  3. Testing the service

    Try connecting to your service from another device outside the local network (for example via mobile internet).

✅ Signs of successful setup

  • Port shows as "open" in online checker
  • You can connect to the service from outside
  • Service works stable without interruptions

🔧 Troubleshooting common problems

🚫 Port is still closed

  • Check the firewall: Add an exception to Windows Firewall or other firewall
  • Reboot the router: Sometimes settings are applied only after reboot
  • Check IP address: Make sure the device has the correct static IP
  • Disable UPnP: Sometimes UPnP conflicts with manual port settings

⚠️ Provider's dynamic IP

If you have a dynamic IP, it may change. Solutions:

  • Use DDNS: Services like No-IP, DuckDNS
  • Check IP: Regularly update information about current IP
  • Static IP: Order a static IP from the provider (paid)

🔒 Double NAT

The problem occurs when you have multiple routers on the network:

  • Bridge mode: Set one of the routers to bridge mode
  • DMZ: Configure DMZ on the main router for the second router
  • Forwarding on both: Configure forwarding on both routers

🛡️ Security measures

🔐 Critical rules

  1. Open only necessary ports - each open port increases the attack surface
  2. Use complex passwords on all services accessible from outside
  3. Regularly update software - fix vulnerabilities
  4. Monitor connections using router logs
  5. Consider VPN as a more secure alternative to port forwarding

🎯 Best practices

  • Use non-standard ports to reduce scanner attention
  • Set up automatic port disabling on schedule
  • Regularly check logs for suspicious activity
  • Use fail2ban or similar to block suspicious IPs

📋 Security checklist

Comments

Leave your feedback

Subscribe on Telegram Subscribe on VK