Port port port transfer on the Xiaomi router: full instructions with pictures and tips

Set up port port port port port port port port port port on Xiaomi routers is a task faced by smart home owners, gamers, administrators IP-And the camera people, the people who deploy the home servers, although it's so complicated, the process of opening the port on Mi Router 4 is really challenging, 4A, AX3000 or AX6000 It takes less than 10 minutes, if you know the key nuances, and the main problem for users is not understanding why the connection still doesn't work after setting up. IP-Addresses, conflicts with the firewall or features of the MiWiFi firmware.

In this article, we will examine not only the basic pass algorithm, but also hidden settings that Xiaomi does not advertise in the official documentation, such as how to circumvent the restrictions of the provider with a gray light» IP, Why UPnP can be dangerous, and how to check if the port is open, and we will focus on models with Padavan firmware, an alternative OS that expands the capabilities of the router.

Why do you need port port port port port port port port transfer on Xiaomi and when it is not enough to do without it?

Port forwarding is a mechanism that allows external devices from the Internet to access specific services on your local device, and without this setup, most network applications will only work within the home network.

Here are the typical scenarios where a sling is needed:

• 🎮 Online Games: For hosting the Minecraft server, CS:GO Valheim requires the opening of ports 25565, 27015 and others.
• 📹 IP-Remote viewing from Xiaomi Mi Home or Ezviz cameras via the app often requires ports 80, 554 (RTSP).
• 🖥️ Home Servers: Access to Nextcloud, NAS-Plex Media Server or Plex Media Server.
• 🔌 Smart Home: Manage Xiaomi devices via Home Assistant or Node-RED MQTT (port 1883).
• 🌍 Remote Desktop: Connecting to RDP (port 3389) or VNC.

Without port rollover, these services will only be available within your local network, for example, you will not be able to connect to your home network. NAS Start a multiplayer game for friends.

⚠️ Warning: Opening ports reduces network security. Always use strong passwords and, if possible, use strong passwords, VPN instead of direct access.

Preparation for the pass: check IP-address and type of connection

Before you start setting up your router, you need to make sure your Internet connection allows you to skip ports. Most of the problems arise from the "gray" (private) IP-Addresses issued by the provider.

Here's how to check out your IP:

1. Open the site 2ip.ru or whatismyipaddress.com.
2. Remember or write down your external IP-address.
3. Go to the router control panel (192.168.31.1 or miwifi.com) and check the Status section. → Internet.
4. Compare the outside IP If they're different, you have a gray» IP, And port transfer won't work.

If IP «gray, there are two exits:

• 📞 Ask the provider to issue a public (white) IP. Some operators (for example, Rostelecom or Beeline) this is a paid option.
• 🔄 Use cloud services like Ngrok or Cloudflare Tunnel, which create a tunnel to your device without port spills.

Also before setting up:

Static tie IP local-network|

Disable the firewall Windows/macOS target-device|

Check if the port is blocked by an antivirus (Kaspersky, ESET)|

Make sure that the port is not occupied by another service (check via cmd: netstat) -ano | findstr:PORT)-->

Step-by-step: how to throw the port on Xiaomi Mi Router

The customization algorithm is the same for most Xiaomi models (Mi Router 4, 4A, 4C, AX3600, AX6000), But the menu items may differ depending on the firmware version.

Step 1. We're going to the control panel.

• Connect to the router network via Wi-Fi or cable.
• Open your browser and type in 192.168.31.1 or miwifi.com.
• Enter the login and password (by default — admin/router sticker).

Step 2. Set up static. IP device

It is critically important that IP The device will change, the spread will stop working.

1. Go to Additional Settings → Local Network → DHCP.
2. Find the device in the list for which you need a pass (for example, NAS or IP-camera).
3. Click "Reserve" next to it. MAC-address.
4. Remember the assigned one. IP (for example, 192.168.31.100).

Step 3. Set up port pass

1. Go to Additional settings → Redirect → Port rollover.
2. Click "Add rule."
3. Fill in the fields: Rule name: Any (e.g., Minecraft Server: TCP, UDP or TCP/UDP (External port: Port that will be open from the outside (for example, 25565 Internal port: Usually the same as the external port, but may differ (for example, if you redirect) 8080 on 80). IP-Address: Enter static IP device 2).

Keep the rule.

Step 4. Checking the rollover.

Use online services like PortChecker or CanYouSeeMe. Enter the port and press Check. If the port is open, you will see a Success message.

💡

If the port does not open, try temporarily disabling UPnP in the router settings (Additional settings) → Redirection → UPnP. Sometimes this function conflicts with manual rules.

Common Mistakes and How to Fix Them

Even after you set up the right port overlay, you might not be able to do it.

Another common mistake is port conflict, for example, if you're sniffing port 80 for a web server, but it's already occupied by the router's control panel, in which case, redirect the external port 8080 to the internal 80.

⚠️ Note: Xiaomi routers with MiWiFi firmware older than 2020 may not have the option of port forwarding in the web interface. In this case, use the Mi WiFi mobile application (Redirect section) or install Padavan.

Alternative means: DMZ UPnP

If port rollover is not working or you need to open all ports for a single device (for example, for testing), you can use the port. DMZ (Demilitarized Zone: This feature redirects all external ports to a single device on the LAN.

How to set up DMZ Xiaomi:

1. Go to Additional Settings → Redirect → DMZ.
2. Turn on the function.
3. Enter static. IP devices (e.g. 192.168.31.100).
4. Save the settings.

UPnP (Universal Plug and Play) is another way to automatically flip ports. Many programs (such as uTorrent or Steam) can open ports on their own via UPnP. However, this feature is not secure, since any device on the network can request a pass.

To turn on UPnP:

1. Go to Additional Settings → Redirection → UPnP.
2. Activate the switch.
3. Set up a list of allowed devices (optional).

Port port transfer on Xiaomi with Padavan firmware

Padavan is an alternative operating system for Xiaomi routers that extends their functionality and supports more port port port port port port port port port options, including:

• 🔄 Redirecting port ranges (e.g, 30000-30010 Call of Duty).
• 🔒 Filtering by MAC-address for additional security.
• 📡 Support IPv6 (In standard scoring, the scoring only works for IPv4).

How to get a port to Padavan:

1. Go to the control panel (192.168.1.1).
2. Go to Advanced Settings → NAT → Port transfer.
3. Add a rule by specifying: Name: Rule name. Protocol: TCP, UDP External port: Port from the Internet. Internal port. IP port: Local address and port of the device. Included: Activation tick.

Save and restart the router.

In Padavan, you can set up a spread for IPv6, Which is true if your ISP has already switched to a new protocol. IPv6 and specify the appropriate address of the device.

How to protect your network after port overdrive

Opening ports increases the risk of your network being compromised.

• 🔐 Change the standard password from the router control panel (admin/admin — The first thing hackers check out).
• 🛡️ Update the firmware to the latest version (in Additional settings) → Update).
• 🔄 Disable remote access to the control panel (Additional settings) → System system → Remote control).
• 🔑 Use complex passwords for devices to which the port is flashed (for example, for IP-camera NAS).
• 🌐 Set up. Fail2Ban on a device (if it is a server) to block suspicious connections.

It is also recommended that:

• 📊 Log connections: In Padavan, this can be done in the System Log → Firewall logs.
• 🔍 Check open ports regularly through services like Shodan (enter your own). IP See what services are available from the outside).
• 🔄 Use it. VPN Instead of diffusing: For example, WireGuard or OpenVPN lets you securely connect to your home network without opening ports.

⚠️ Note: If you are using the port for RDP (3389) or SSH (22), be sure to change the standard ports to non-standard ones (e.g. 3390 or 2222) which will reduce the number of bot attacks.

FAQ: Answers to Frequent Questions