How to Set Up Port Forwarding on Your Router

Reserve the device's local IP, add a port forwarding rule with the external port, internal port, and protocol, then confirm the port is open from outside.

You need traffic from the internet on a certain port to reach one device inside the network, such as a game server, camera, or remote desktop. Port forwarding tells the router where to send it.

Reserve the device's IP address

Port forwarding sends traffic to a fixed local IP, so the device must keep the same one. Pin it in the router's DHCP or LAN section first: see reserve an IP address for a device. Note the address, such as 192.168.1.50.

Log in to your router

Open the admin page in a browser and sign in. See log in to your router if needed.

Find the port forwarding section

Look for Port Forwarding. Depending on brand it sits under Advanced, NAT, Virtual Server, Applications & Gaming, or a firewall or security section.

Add the rule

Click Add or Add New, then fill in:

  • Name or Service name: anything, such as Minecraft.
  • External port (also WAN port or Start port and End port): the port people connect to from the internet, such as 25565.
  • Internal port (also LAN port): the port the device listens on. Usually the same as the external port.
  • Internal IP or Device: the reserved address from the first step. Some routers let you pick the device from a list.
  • Protocol: TCP, UDP, or Both. Use what the application's documentation says. When unsure, Both works.

Click Save or Apply. Some routers reboot. Forward only the ports you actually need; each open port is a door to that device.

Test the port from outside

Start the application on the device so it is listening on the port. Then, from a computer inside the network, open a port checker such as canyouseeme.org, enter the port number, and run the check. The site detects the public IP and tries to connect from the internet side. If nothing is listening on the device, the port shows closed even when the rule is right.

If the port still shows closed. Check that the device's own firewall allows the port and that no other rule uses the same external port. If a second router or the provider's gateway sits in front of yours, the rule has to be made on the outermost one, or the inner router set to bridge mode.

If the router's WAN IP starts with 100.64 through 100.127, or 10. The provider is using carrier-grade NAT (CGNAT), which shares one public IP among many customers. Port forwarding cannot work through it. Ask the provider for a public IP, sometimes offered as a paid static IP option.

See also

More Wi-Fi & Network how-tos