Set up remote access to the Xiaomi router: 3 working ways

Why you need remote access to the Xiaomi router and what risks it carries

Imagine if you went on a business trip and the Internet went missing at home, or if you had to reboot your router so that your family could connect to Wi-Fi, remote access to Mi Router solves these problems, because it allows you to manage your network from anywhere in the world via your smartphone or computer, but with convenience comes security risks: open access to the admin panel can be a loophole for hackers if you don't configure it correctly.

Xiaomi routers (including popular Mi Router models) 4A, 4C, AX3000 Redmi Router AX6) Support several ways of remote control: through the official application Mi WiFi, by protocol Telnet/SSH through VPN-Each method has its own nuances, from ease of setting to security level. In this article, we will discuss all options with step-by-step instructions, comparison tables and solutions to typical errors.

It is important to understand that remote access on Xiaomi routers is disabled by default – this is done for security. Its activation requires a conscious approach, especially if sensitive data is stored on your network (for example, security cameras or smart devices). If you are not sure about your skills, it is better to limit yourself to managing over a local network.

Method 1: Remote management via Mi WiFi

The easiest method is to use the official Mi WiFi app (formerly Mi Router), which allows you to connect to a router through the Xiaomi cloud without opening ports manually. Minus: only works if the router is connected to the Internet and is linked to your Mi Account.

To activate the function:

1. Install the Mi WiFi app on your smartphone (Android/IOS).
2. Connect to the network of the Xiaomi router over Wi-Fi.
3. Open the app and log in to your Mi Account (the same as on the router).
4. Go to Profile → Settings → Remote access and enable the option.

Once activated, you can control the router from any network, even the mobile Internet.

• 🔒 Access is limited to basic functions: reboot, change Wi-Fi password, view connected devices.
• 🌐 It only works with a stable Internet connection on the router.
• ⚠️ It does not support models with MiWiFi firmware ROM (Like Mi Router. 3G).

💡

If the application does not see the router, check that it has enabled cloud sync in Settings → Cloud → Sync.

Method 2: Configure remote access via Telnet/SSH (for experienced)

For advanced users who need advanced features (for example, installing custom firmware or scripts), access via Telnet or SSH is suitable. This method requires manual port configuration and command line knowledge.

Instructions for the Mi Router 4A Gigabit Edition (similar to other models with OpenWRT firmware):

1. Enable Telnet via web interface: Settings → Additional → Developer → Enable Telnet
2. Connect to the router via a local network using PuTTY (Windows) or terminal (Linux/macOS): telnet 192.168.31.1 Login / password by default: root / password from the admin panel.
3. Install SSH for secure connection: opkg update opkg install openssh-server
4. Set up port 22 (SSH) to Settings → Redirect → Ports Fast.

Now you can connect to the router from the outside at your external IP:22.

⚠️ Attention: Open SSH-Port is a favorite target for botnets. Always change the standard password and set up key authentication!

Disable Telnet after setting up SSH|

Use a complex password (12+ characters) |

Set up fail2ban to block brute force |

Close port 22 in the firewall after use-->

Method 3: VPN-Server on the router - secure remote access

The most secure option is to deploy VPN-It allows you to connect to your home network as if you were next to the router, without opening ports out. PPTP OpenVPN (on Padavan or OpenWRT firmware).

Setting up a PPTP VPN on the Mi Router AX3000:

1. Turn it on. VPN-server settings → VPN → PPTP VPN.
2. Specify the range IP for VPN-customers, for example, 192.168.32.100-200).
3. Create a user account with a password.
4. Set up port 1723 (TCP) and allow GRE (47).

To connect to Windows:

1. Open Control Panel → Network Management Center → Connection creation.
2. Choose a Workplace Connection (VPN).
3. Enter the external IP of the router and user data.

DDNS

No-IP

Solving typical problems when setting up

"Not remotely connected" is the most common complaint, and the reasons may be different:

• 🔌 The port is closed by the provider. Many operators (for example, Rostelecom or Beeline) block incoming connections at home rates.
• 🔄 Double. NAT. If the router is connected via another router (for example, from a provider), port overlay will not work. DMZ main-router.
• 🔒 Firewall locks. Turn off firewall on router (Settings) → Security → Firewall or add an exception for your IP.

Another common mistake is the wrong login details: After resetting the router's settings, logins/passwords are reset to factory ones (admin/admin or root/empty password depending on the model). If you forget your password, restore it via Mi WiFi or Reset button on the case.

⚠️ Attention: On routers with MiWiFi firmware ROM (For example, Mi Router 3) after a reset may require re-assignment to the Mi Account through the QR-sticker.

How to protect your router after setting up remote access

Open access to a router is like a door to your network, so it doesn't get hacked.

1. Turn off remote access when you don't need it. In Mi WiFi, it's done with a tap.
2. Use the whitelist. IP. In port port port port port settings (Settings) → Redirection) only indicate your own IP-address.
3. Update the firmware. Outdated versions contain vulnerabilities (e.g. CVE-2021-27561 in Mi Router 4A).
4. Set up two-factor authentication in your Mi Account.

💡

Even if you use a VPN, regularly check the connection logs in Settings → System Tools → Log. Unknown IPs can signal hacking attempts.

For maximum security, consider alternative firmware like Padavan or OpenWRT, which supports WireGuard, fail2ban, and other security tools, but remember, flashing over warranty voids and requires technical skills.

Alternative solutions: when remote access is not needed

If you only need to reboot your router periodically or check your connected devices, there are safer ways to do this:

• 🔌 Connect your router via Xiaomi Smart Plug and manage power via Mi Home.
• 📱 In Mi WiFi, turn on alerts for new connections or a downfall of the Internet.
• 🌐 Cloud services, for cameras or NAS Use Xiaomi Cloud or Synology DSM instead of direct access.

These methods do not require opening ports and minimize risks.For example, the Xiaomi Mi Smart Power Plug smart outlet is worth it. ~1000₽ It allows you to restart the router even without access to its web interface.

FAQ: Frequent questions about remote access to Xiaomi routers