Remote Desktop Protocol (RDP) is one of the most popular tools for system administrators and advanced users. The standard port for this service is 3389, and to work from an external network you need to perform its roll on the router. Owners of Xiaomi equipment often face the need to properly configure network rules to ensure a stable connection without compromises in security.
The process of setting up Mi Router or Redmi Router routers requires careful attention to the details of the local network configuration. Incorrect setting of parameters can lead not only to a broken connection, but also to potential vulnerabilities in your home network. In this article, we will discuss each step in detail, from preparing your computer to final verification of the availability of the service from the Internet.
Before you start changing your router settings, you need to make sure that the target device is ready to receive incoming connections, which is the basic step, ignoring which is the most common cause of failure when rolling ports. IP-address and activate remote access in the Windows operating system, as it is most often the client for the RDP.
Computer preparation and fixation IP-address
The first critical step is to assign a static IP-address to the computer you plan to connect to. DHCP, which normally gives out addresses automatically, can change the current address of the device after the router restarts or the lease expires, which will cause the previously created rule of tossing to inoperable. IP It is a prerequisite for stable work.
First, you need to know the current network settings. Open the command line by typing cmd into the search menu, and execute the command ipconfig. You are interested in the fields «IPv4-Address, Subnet Mask, and Main Gateway. Write down this data because it's going to be needed to manually configure the network map. Without the exact gateway and mask values, the device won't be able to communicate properly with the Xiaomi router.
Next, we'll move to manual settings. In the control panel, find the Network and Sharing Center section, select your connection, and navigate to the protocol properties. IP version 4 (TCP/IPv4). You need to switch the option to “Use the following” IP-Enter the address from the same subnet as the gateway (e.g. if the gateway is located). 192.168.31.1, I can give the computer 192.168.31.50), point out the mask and DNS-server.
⚠️ Note: Make sure that the static you choose is IP-The address does not fall within the range of addresses that the router automatically distributes to the DHCP. It is best to choose addresses at the end of the range, for example, above 192.168.31.200 to avoid conflicts.
☑️ Preparing the computer for port transfer
Once you save the settings, check the availability of the remote desktop within the local network. Try connecting to a new static address from another device on the same network. If the connection is successful, then the operating system is ready, and you can switch to the configuration of the Xiaomi router itself.
Log in to the web interface of the Xiaomi router
Xiaomi’s networking equipment is managed using a web interface available at a standard address. Open any modern browser and enter 192.168.31.1 or the domain name miwifi.com in the address bar. The default routers of this brand use this gateway address, but if you have previously changed the LAN settings, the address may differ.
The system will ask for an administrator password. Please note that this is not necessarily a Wi-Fi password, although users often set them the same when they first set up. If you forget the password, you will have to reset the router to factory settings, which will require you to reconfigure the Internet, and after successful authorization, you will be taken to the main network status page.
The interface can be in Chinese or English depending on the firmware version (Global or CN). For comfortable work, it is recommended to switch the interface language in the system settings, if such an option is available, or use a built-in browser translator. Navigation in new versions of MIWiFi OS may differ, but the partition logic remains similar.
💡
If the standard address 192.168.31.1 does not open, check your computer’s network card settings – the default gateway address will indicate the correct path to the router.
Setup Virtual Servers (Port Transfer)
The main tool for opening access from an external network is in the Advanced Settings section. On the left or tab menu, look for Port Forwarding or Virtual Servers. This is where rules are created that tell the router where to redirect incoming traffic.
Press the add-on button for a new rule, and you need to fill in a few fields, each of which plays a key role. In the Name field, type in an arbitrary name, such as, RDP_Home, This is especially important if you plan to open multiple ports for different services.
In the "Protocol" field, select TCP, since RDP It works mainly through it, although for full compatibility it is sometimes recommended to choose between the two. TCP/UDP or ALL. The fields External Port and Internal Port must contain the value 3389. In the field "Internal" IP» (Internal IP) Specify the static address you assigned to your computer in the first step.
| Parameter | Meaning | Description |
|---|---|---|
| Name | RDP_Access | Arbitrary name of the rule |
| Protocol | TCP | Protocol for data transmission |
| External Port | 3389 | Port for Internet entry |
| Internal Port | 3389 | Port of service on the computer |
| Internal IP | 192.168.31.X | Static IP of the target PC |
Once you have filled in all the fields, click Save. The router will apply the changes and the rule will appear on the active list. Some Xiaomi models may require a reboot to take effect, although most often the changes are instant.
Checking External IP and Availability
After setting up the rules, you need to know your external IP-The address that you see on the global network, if you're on your router's network, go to any verification service. IP, for example, 2ip.ru or whatismyip.com. The displayed address is exactly the identifier that will need to be entered in the remote desktop client when connecting from the outside.
But just knowing the address is not enough, and it's important to understand that Internet service providers often use technology. CGNAT, and many of the other subscribers are on the outside IP-In this case, the direct port overlay will not work. IP-address WAN-router port (in network status) and address shown on the verification site IP. If they are different, you have a gray» IP.
To check the availability of port 3389 from the outside, you can use online port scanners. Enter your external IP and port 3389 in such a service. If the scanner shows the status of "Open" (Open), then the configuration is correct. If the status is "Closed" (Closed) or "Filtered", check the settings of the Windows firewall and the correctness of the internal IP entered in the router.
⚠️ Warning: Never leave port 3389 open without additional protection if your Windows account password is simple. RDP for brute-force attacks.
Dynamic IP Problems and DDNS Solution
Most home fares providers provide dynamic external IP-It's an address that can change every time you reboot your router, or it can change every time you reboot your router, or it's a timer that you have, and it creates a problem: today you're connected to the same address, and tomorrow it's changed, and you can't get online. DDNS (Dynamic DNS).
The essence of technology is to link the changing IP-The Xiaomi router has built-in support for some services DDNS, But it's often easier and more reliable to use third-party solutions. DDNS (For example, No-IP, DynDNS or free analogues), create a domain like myhome.ddns.net and configure a router or a special client on a PC to update the address.
If your router doesn't automatically update DDNS for the service you've chosen, you can run a small script or program on the computer itself inside the network, and it will track changes to the external IP and tell the DDNS service a new address, so instead of remembering IP numbers, you'll use a permanent domain name.
How does the DDNS update work?
Using a domain name makes life much easier: even if the provider changes your IP, within minutes of updating the record, you can connect using the old name, which is standard practice for organizing stable remote access.
Alternative methods and safety of RDP
Opening port 3389 directly to the Internet carries certain risks. RDP protocol in the past had a number of vulnerabilities (for example, BlueKeep), which were actively exploited by hackers. Even with a strong password, the exposure of remote management services to public IP is undesirable from the point of view of modern cybersecurity.
A safer alternative is to create a VPN-Xiaomi routers with OpenWrt firmware or some stock models support lifting VPN-servers (OpenVPN, WireGuard, L2TP). Connect to the home network through VPN, Your computer will consider itself part of a local network and you will be able to use it. RDP locally IP It's a port that's completely closed to port 3389.
If you can’t use a VPN, be sure to do the following to protect yourself: change the standard RDP port in the Windows registry to a non-standard one (e.g. 53389) and update the router’s rollover rule accordingly. Also enable Network Level Authentication (NLA) in your remote desktop settings and use complex passwords longer than 12 characters.
💡
Use of the VPN-Connecting instead of direct port 3389 is the gold standard of security and completely eliminates the possibility of external attacks on the service. RDP.
In conclusion, setting up port port port port port port port port port porting on Xiaomi routers is a technically simple process, but requires attention to detail. IP-Addressing and security: Following these steps will allow you to organize effective remote access to your computer from anywhere in the world.