Opening port 27015 on Xiaomi router: full instructions for gamers and administrators

Port 27015 is the standard network port for popular multiplayer games like Counter-Strike: Global Offensive, Minecraft or Team Fortress 2. If you're trying to run your own game server but friends can't connect, the problem almost certainly lies in the closed port on your Xiaomi router. Unlike the TP-Link or ASUS models, the Mi Router interface has its own features that can baffle even experienced users.

In this article, we will discuss not only the basic port overlay, but also alternative methods: setting up the DMZ, turning on UPnP, as well as solving common errors such as โ€œfailure to connect to the serverโ€ or โ€œtimeout connections.โ€ Particular attention will be paid to the models of Xiaomi Mi Router 4A/4C/4Q, AX3600 and AIoT Router AC2350, where the interface may differ. If you have never visited the routerโ€™s administrator panel before, donโ€™t worry: weโ€™ll start with the basics.

1 Preparation: Checking the local area network and IP- addresses

Before you open a port, make sure your computer or server has a static local IP- address. Without that, the port skip can get lost after each router restart. Here's how to check this:

  • ๐Ÿ–ฅ๏ธ On Windows: Open Command Prompt (Win + R โ†’ enter cmd) and execute the command: ipconfig /all Find the IPv4- address in your network adapter section (usually 192.168.31.X or 192.168.0.X).
  • ๐Ÿง On Linux or macOS: enter: ifconfig | grep"inet" Look for an address starting with 192.168.
  • ๐Ÿ“ฑ On Android/iOS: Use applications like Fing or Network Analyzer to scan the network.

If your IP starts at 169.254, it's a sign of a DHCP problem.

โš ๏ธ Warning: Before you roll over the port, make sure your computer is connected to the router via cable (not Wi-Fi). A wireless connection can cause delays and failures when setting up the server.

For the purpose of static IP:

  1. Go to Control Panel โ†’ Network Control Center โ†’ Change the Adapter settings.
  2. Select your connection โ†’ Properties โ†’ IP version 4 (TCP/IPv4).
  3. Specify the IP- address manually (e.g., 192.168.31.100), the 255.255.255.0 mask, the gateway - the IP of your router (usually 192.168.31.1).
๐Ÿ“Š What kind of Xiaomi router do you have?
Mi Router 4A
Mi Router 4C/4Q
AX3600
AIoT Router AC2350
Other

2. Entrance to the Administrator Panel of the Xiaomi router

Xiaomi's router management interface is available via a web browser. Here's how to get there:

  1. Open your browser (Chrome, Firefox, Edge) and type in the address bar: http://192.168.31.1 or (for some models): http://miwifi.com
  2. Enter the username and password. By default, this is: ๐Ÿ”‘ Login: admin ๐Ÿ”‘ Password: admin or the one on the router sticker.

If you forget your password, reset your router settings with the Reset button (hold 10 seconds). On Xiaomi models with MIUI Router firmware, a reset results in the loss of all settings, including guest network and parental controls.

Once you log in, you'll see the main page with information about connected devices.

  • ๐ŸŒ Firmware version (top right). 2.28.XX or later is recommended for stable port port port port port operation.
  • ๐Ÿ”„ Operating mode (should be a "Router" and not a "Repiter" or "Access Point").

๐Ÿ’ก

If the control panel is in Chinese, switch the language in the upper right corner to English or Russian (if available).

Port 27015 rollover: step-by-step instruction

Now, to the main thing, Port Forwarding is set up, and Xiaomi routers can call this section differently depending on the model:

  • ๐Ÿ“ก Mi Router 4A/4C: Advanced Settings โ†’ NAT Forwarding โ†’ Port Forwarding.
  • ๐Ÿ“ก AX3600/AIoT Router: Settings โ†’ Advanced โ†’ Port Forwarding.

Instructions for most models:

โ˜‘๏ธ Set up Port Forwarding on Xiaomi

Done: 0 / 5
  1. Click Add New Rule (or โ€œAdd Ruleโ€).
  2. Fill in the fields: ๐Ÿ“Œ Service Name: arbitrary name (e.g., CSGO_Server. ๐Ÿ“Œ Internal IP: local IP of your server (e.g., 192.168.31.100). ๐Ÿ“Œ External Port and Internal Port: 27015 (or range 27015-27020 if you need multiple ports). ๐Ÿ“Œ Protocol: select TCP/UDP or ALL.

System Tools โ†’ Reboot

For games like CS:GO, you may need to open additional ports.

Game.Port(s)ProtocolNote
CS:GO27015, 27005-27020TCP/UDPFor Steam servers
Minecraft25565TCPStandard port.
Team Fortress 227015, 27020UDPFor the Source engine.
Garry's Mod27015UDPRequires port 27005 for the master server

๐Ÿ’ก

After the port is rolled over, be sure to check its availability from the outside using services like YouGetSignal or PortChecker.

4. Alternative methods: DMZ and UPnP

If the port rollout didnโ€™t work, try alternative ways:

๐Ÿ”น Setup DMZ (DeMilitarized Zone)

DMZ redirects all external ports to one device on the LAN, which is less secure, but sometimes the only working option.

  1. Go to Advanced Settings โ†’ DMZ.
  2. Enter your serverโ€™s local IP (e.g. 192.168.31.100).
  3. Activate the option and save it.

โš ๏ธ Warning: DMZ turns off the router firewall for the specified device. Do not use this method if the server does not have its own firewall (for example, Windows Defender or iptables).

๐Ÿ”น Enable UPnP (Universal Plug and Play)

UPnP allows programs (such as Steam or Minecraft Server) to automatically open ports.

  1. Go to Advanced Settings โ†’ UPnP.
  2. Activate the Enable UPnP switch.
  3. Save the settings.

UPnP is convenient but has vulnerabilities, such as the callstranger critical flaw that allowed hackers to attack devices via UPnP in 2021. If security is critical, itโ€™s better to use handheld.

How to check if the port is open through UPnP?
Run the command prompt and type: netstat -ano | findstr 27015 If you have a line with LISTENING, the port is open locally. Use online services to check from the outside (see above).

5. Typical errors and their solution

Even after a port rollover, the server may not be available, and here are the most common problems and solutions.

  • ๐Ÿšซ Connection timed out: Check that the server software (e.g., srcds for CS:GO) is actually running. Make sure the firewall Windows/Linux allows traffic to the port 27015.
  • ๐Ÿšซ Port closed when checked by online service: Reboot router and server, check if the port is blocked by your ISP (especially for Rostelecom or Beeline).
  • ๐Ÿšซ No Settings: Update the router's firmware to the latest version. Reset the router to factory settings and reset the spread.

If you use dual NAT (for example, the router is connected to another router provider), port port port port port port to Xiaomi will not help.

  1. Check with the provider if you are given a white (public) IP- address.
  2. If not, ask for it or set up a pass on the first router (the one that the provider issues).

6. Additional settings for game servers

Opening a port is only half the battle, and maintaining a stable server will also require:

  • ๐ŸŽฎ QoS Optimization: Xiaomi routers have built-in Quality of Service (QoS) that can be configured to prioritize game server traffic. Go to Advanced Settings โ†’ QoS and add a rule for your serverโ€™s IP top priority.
  • ๐Ÿ›ก๏ธ Setup firewall on the server: On Windows, open the Windows Defender Firewall โ†’ Additional settings and create a rule for incoming connections to the port 27015. Use iptables: sudo iptables on Linux -A INPUT -p udp --dport 27015 -j ACCEPT sudo iptables -A INPUT -p tcp --dport 27015 -j ACCEPT
  • ๐ŸŒ Dynamic DNS (DDNS): If you have dynamic IP (changes when you reconnect), use services like No-IP or DynDNS. On Xiaomi routers, support DDNS is available in the Advanced Settings section โ†’ DDNS.

The CS:GO- servers will also require:

  • Download SteamCMD and install server files.
  • In the server.cfg file, specify: sv_setsteamaccount "Your Steam Token" (the token can be obtained from the Steam Game Servers website).

7. Checking the result and troubleshooting

After you set up the port rollover, you need to make sure that everything works correctly.

  1. Local Verification: On another device on the same network, try connecting to the server via local IP (e.g. 192.168.31.100:27015). If the connection passes, the problem is on the dash side.
  2. Use the online services: YouGetSignal PortChecker CanYouSeeMe

Enter port 27015 and run the check. If the port is closed, go back to the router settings.

Checking from another device

Ask a friend to connect to your server via external IP (you can find it on 2ip.ru), if the connection fails, check the firewall and antivirus settings.

If the port is still not open, try:

  • Disable antivirus (for example, Kaspersky or Avast often block network ports).
  • Temporarily disable Windows firewall for test.
  • Try another port (e.g. 27016) โ€“ some providers block standard ports.

FAQ: Frequent questions about port port port port port 27015

โ“ Why is the port closed after the transfer?
There are several reasons: your ISP uses CG-NAT (common IP for multiple subscribers). In this case, port rolling on the router will not help - you need to order a dedicated IP. The server does not run software that listens to port 27015. Firewall on the server or antivirus blocks the port. To diagnose, use the command: netstat -ano | findstr 27015 If there is no line from LISTENING, the port is not open on the server.
โ“ How to open port 27015 on Xiaomi Mi Router with Chinese firmware?
The interface may be different on Chinese firmware. Try: Switch to English in the upper right corner. Port Forwarding can be called (virtual server). If there is no Advanced partition, upgrade to the international version through the official Xiaomi website.
โ“ Do I need to open port 27015 for peer-to-peer (P2P) games?
Most P2P-Gs (e.g., GTA Online or Sea of Thieves) do not require port rollovers, they use UPnP or their own servers to connect. However, for hosting a dedicated server (e.g., in CS:GO or Minecraft), opening a port is mandatory.
โ“ Can I open a port 27015 on the mobile Internet (4G/5G)?
No. Mobile operators (e.g. MegaFon, MTS, Tele2) use CG-NAT, which does not allow port-dropping. Server hosting requires fixed Internet with a white IP- address.
โ“ How to close port 27015 after use?
To close the port: Enter the router control panel. Go to Port Forwarding. Find the rule for port 27015 and delete it. Save settings and restart the router. Also check that the server has closed the corresponding ports in the firewall.