What is it? DMZ Why you need it on Xiaomi router
If you have ever encountered problems connecting to online games, IP-To cameras or remote servers via Xiaomi router, you’ve probably heard of the term. DMZ (Demilitarized Zone: Demilitarized Zone is a special feature that allows you to redirect all incoming traffic from the outside. IP-The router addresses to one particular device on the local network, DMZ Makes the device “transparent” to the Internet, as if it is connected directly to the provider.
On Xiaomi routers (be it Mi Router) 4A, AX3600 flagship AX6000) function DMZ frequently used:
- 🎮 Solutions to problems with NAT-In games (such as Call of Duty or Fortnite), servers require open ports.
- 📹 Remote access organization IP-cameras or video recorders via the Internet.
- 🖥️ Home Web Server Settings, FTP or a game server (Minecraft, CS:GO).
- 🔧 Testing network applications when port forwarding is not working.
It is important to understand that the inclusion DMZ — It's a last resort, not a standard solution, unlike the passing of specific ports, DMZ Opens all ports to the device you choose, which can create vulnerabilities for hacker attacks, so use it only if other methods (such as manual Port Forwarding) have not helped.
Preparation for setup DMZ: What to do in advance
Before you turn on DMZ On Xiaomi router, follow a few mandatory steps to avoid security and network problems:
- Check the local. IP-address of the device for which it is configured DMZ. It must be static (fixed), otherwise after restarting the router or device. DMZ It's gonna stop working. IP: 🖥️ On PC: Go to Control Panel → Network control centre → Change of adapter parameters → Properties (IPv4) and write IP manually. 📱 On your smartphone: in the Wi-Fi settings, select “Advanced” and set static IP. 🎮 On the game console: in the network settings specify a fixed IP.
Update router firmware
Settings → General → Update of firmware
Turn off UPnP
Settings → Additionally. → UPnP
It is also recommended to write down the current router settings (especially if you are experimenting with the network). → System system → Backup/Restore and save configuration to your computer.
💡
If you're setting up DMZ For a game console (PlayStation or Xbox), check it out first. NAT-type in network settings, if it is already "Open" (Type 1 or 2), DMZ Maybe not.
Step-by-step instruction: how to turn on DMZ Xiaomi router
Now, let's get to the main thing: activation. DMZ. The manual is suitable for most Xiaomi models, including the Mi Router. 4A, AX3600, AX6000, Mi Router 4C And the only difference is the design of the web interface.
☑️ Preparation for inclusion DMZ
Step 1. Log in to the router's web interface
Open your browser on a device connected to the Xiaomi network and enter one of the addresses in the address bar:
- 192.168.31.1 (standard for most models)
- miwifi.com (alternative)
Enter your username and password (the default is admin and password from the sticker on the router). If you have changed them, use your data.
Step 2. Go to section DMZ
Depending on the router model, the path may be slightly different:
- For the Mi Router 4A/4C: Settings → Additionally. → DMZ.
- For AX3600/AX6000: Settings → Internet → DMZ.
Step 3. Set-up DMZ
In the field IP-hostage DMZ enter static IP device for which the zone is configured (e.g. 192.168.31.100:
- 🔢 IP It is part of the local network of the router (usually) 192.168.31.x).
- 🔒 A device with this. IP connected to the router and enabled.
- 🔄 Function Insert DMZ activated (check or switch).
Click Save and wait for the router to restart (can take up to 1 minute).
Step 4: Verification of the work DMZ
To make sure that DMZ work:
- 🎮 For gaming consoles: check out NAT-type in network settings (should become "Open").
- 🖥️ For PC: Use YouGetSignal to check open ports.
- 📹 For IP-Cameras: Try to connect to it through the external IP router (can be found on the website) 2ip.ru).
What to do if DMZ doesn't work?
Table: comparison DMZ Port Forwarding on Xiaomi routers
Many users are confused DMZ It's actually two different mechanisms, and each has its pros and cons:
| Parameter | DMZ | Port Forwarding |
|---|---|---|
| What's opening | All ports on one device | Specific ports for a particular device |
| Level of security | ⚠️ Low (vulnerability to attacks) | ✅ High (only the necessary ports) |
| Difficulty setting up | Just one. IP) | More difficult (you need to know the ports) |
| When to use | If Port Forwarding is not helpful or if you need to test the network | For most tasks (games, cameras, servers) |
| Impact on other devices | No (only for selected) | No (only to selected ports) |
The table shows that Port Forwarding is safer and recommended for continued use. DMZ It is necessary to include only temporarily - for example, to diagnose problems with the NAT or testing network applications.
💡
If you only need to open a few ports (for example, for a Minecraft server or a server). IP-Always use Port Forwarding instead of Port Forwarding. DMZ. This minimizes the security risks to your network.
Common errors in setting up DMZ and how to avoid them
Even experienced users sometimes face problems when activating DMZ Here are the most common mistakes and ways to solve them:
⚠️ Attention: If, after activation, DMZ Internet on the device is missing, check if it conflicts IP with other devices on the network, for example, if you specified in DMZ 192.168.31.1 (IP The router itself, this will cause a crash.
Mistake 1: DMZ persistence
If you reset after clicking Save settings, try:
- 🔄 Reboot the router manually (disable power for 30 seconds).
- 📋 Check if the antivirus on your PC blocks access to the web interface.
- 🔧 Reset the router to factory settings (reset button for 10 seconds) and repeat the setting.
Mistake 2: Device in DMZ not visible from the Internet
The reasons may be as follows:
- 🌐 You have a gray" IP from the provider (double) NAT). Check your external IP on 2ip.ru and compare with IP If they are different, call for white support" IP.
- 🛡️ Firewall on target device blocks incoming connections. Turn it off temporarily for test.
- 🔌 Some operators (e.g. Rostelecom) block popular ports by default (80, 443, 22.
Error 3: After activation DMZ Internet speed has fallen
It's a rare but possible problem.
- 📡 The router is congested with a lot of open ports. DMZ Use Port Forwarding for the right ports only.
- 🔄 QoS (Quality of Service) function is enabled, which conflicts with the DMZ. Turn it off in Settings. → Additionally. → QoS.
Safety in use DMZ: How to minimize risks
Inclusion DMZ On a Xiaomi router, it's always a compromise between functionality and security, and as all the ports of a device become accessible from the Internet, it becomes vulnerable to the Internet:
- 🕵️♂️ Hackers scan ports (search for vulnerabilities).
- 💻 DDoS attacks (if yours) IP will become known to the attackers).
- 🦠 Malware infections through open services (RDP, FTP, Telnet).
To reduce the risks, follow these guidelines:
⚠️ Attention: Never turn on DMZ For devices with outdated software (such as Windows 7 or Android 5.0), vulnerabilities in such systems can be used to attack your local network.
Methods of protection:
- Use it. DMZ Only for trusted devices (e.g., a game console or server with up-to-date updates).
- Turn it off. DMZ, When you don't need it, like after playing a game or setting up a camera.
- Set up a firewall on the target device: 🖥️ On Windows PC: Open the Windows Defender Firewall → Additional settings and create rules to block unnecessary ports. 📱 On Android devices: Use apps like NetGuard or AFWall+.
Change the standard passwords
admin:admin
Use it. VPN remotely
WireGuard
If you need a permanent solution to access the device (e.g., to access the device) NAS or IP-In the camera, consider alternatives:
- 🔗 Cloud services (e.g. Xiaomi Cloud for Cameras or Synology) DDNS for NAS).
- 🔐 Reverse Proxy (such as Nginx or Traefik) SSL-encryption.
- 🌐 Dynamic DNS (Services like No-IP or DynDNS).
DMZ on specific models Xiaomi: features and nuances
Although the principle of adjustment DMZ Xiaomi is similar on all routers, some models have their own characteristics:
Mi Router 4A and 4C
These are budget models with a simplified web interface.
- 📌 Section DMZ is in the settings → Additionally. → DMZ.
- 🔄 After saving the settings, the router restarts longer (up to 2 minutes).
- ⚠️ No way to specify the range IP for DMZ — single-piece.
Xiaomi AX3600 and AX6000
Flagship routers with Wi-Fi 6 support. DMZ more flexible:
- 📡 Section DMZ located in Settings → Internet → DMZ.
- 🔒 There's a way to tie DMZ ce MAC-Address of the device (additional protection).
- 🔧 Supported IPv6, but DMZ works only for IPv4.
Xiaomi Mi Router 3/3G/3C
Outdated models with firmware based on OpenWRT. DMZ may be unstable:
- 🐌 The interface is slower to respond to changes.
- 🔄 Sometimes you need to double-boot (save settings, restart the router, then save again).
- 📌 In some firmware DMZ It's called Exposed Host.
If your model is not mentioned in the list, check the firmware version in Settings. → Status. → For older devices (for example, Mi Router Mini) you may need alternative firmware (for example, Padavan), as the official software does not support DMZ.