Opening ports on the Xiaomi router is a necessary procedure for organizing remote access to surveillance cameras, game servers (Minecraft, CS2), Torrent clients or their own NAS-Despite the seeming complexity, port port port overlay on Mi Router 4 routers, 4A, 5 or AX-The series takes no more than 10 minutes, if you know the key nuances, the main thing is not to confuse port forwarding with settings. DMZ or the inclusion of UPnPs that solve similar but not identical tasks.
In this article, you will find step-by-step instructions for all current Xiaomi firmware (including MiWiFi and Padavan), a table of standard ports for popular services, as well as solutions to typical errors like βPort does not openβ or βExternalβ IP Not defined. Particular attention is paid to the specifics of working with double-definition NAT And if you've ever seen networks only at the cable level, don't worry, every step is accompanied by screenshots and explanations for kettlesΒ».
1.Preparation: What to know before port port rollover
Before you open ports, make sure you understand three key concepts:
- π Local. IP β The address of the device on your network (e.g. 192.168.31.100) must be static, otherwise the overhead will stop working after the router restarts.
- π External (white) IP β If it's dynamic (changes with each connection), you'll need a service. DDNS.
- π Port: A numerical identifier (from 1 to 65535) that external devices will use to access your service. HTTP, 443 for HTTPS.
Most of the problems with port port transfer arise from:
- Dynamic localization IP devices (decided by binding on the MAC).
- Double. NAT from the provider (external) IP Start with 10., 172.16. or 192.168.).
- Port locks on the ISP side (relevant for ports 80, 443, 22).
Before setting up, check:
Find out local IP target-pointer|Check the outside IP site 2ip.ru|Shut down. VPN/proxy on the device|Update the router to the latest version-->
2. How to find out the local IP and make it static.
If you are sniffing through the port for the Xiaomi camera, NAS-server or computer, first find its current local IP. It can be done:
- π₯οΈ On Windows: Open Command Prompt and type ipconfig. The address you want will be in the line. IPv4-address.
- π± On Android: Go to Settings β The phone. β Status β IP-address.
- π± On iOS: Settings β Wi-Fi β β net-side β IP-address.
- π Through the router's web interface: Settings β Local area network β List of devices.
Now, lock this one up. IP, I don't want him to change:
- Open the router web interface (192.168.31.1 or miwifi.com).
- Go to Settings β Local Network β DHCP.
- Find the section βReservation of addressesβ or βAffiliationβ IP-MACΒ».
- Add a rule, pointing out MAC-device address and desired IP (for example, 192.168.31.100).
π‘
If the list of devices is not required MAC-Addresses, connect the device to the router via cable (for PC) or reboot it so that it appears in the logs DHCP.
β οΈ Warning: If you use Mi Router with Padavan firmware, the path to redundancy IP It will be different: Local network β DHCP-server β Hand-tied ARP. This firmware also has a Static Lease option that works similarly.
3. port transfer on standard MiWiFi firmware
Instructions are relevant for Xiaomi Mi Router routers 4/4A/4C/5/5G/AX1800/AX3600 Original MiWiFi firmware (not Padavan:
- Open the router web interface (192.168.31.1) and log in.
- Go to Additional settings β Redirect β Port rollover.
- Click Add Rule and fill in the fields: Name: arbitrary (e.g., Minecraft Server: TCP, UDP or TCP/UDP (External port: port that will be open "outside" (e.g, 25565 Internal port: port on a local device (often the same as the external one). IP: static IP devices, for example, 192.168.31.100).
Save the rule and restart the router.
Example of filling for qBittorrent torrent client:
| Parameter | Meaning |
|---|---|
| Name. | qBittorrent |
| Protocol | TCP/UDP |
| Outer port | 6881 |
| Inland port | 6881 |
| Internal IP | 192.168.31.100 |
β οΈ Note: If the port does not open after saving the rule, check it:
- π₯ Does not block the port Windows firewall or antivirus (for example, Kaspersky, Avast).
- π Are the settings reset after restarting (relevant for routers with unstable firmware).
- π Does the provider give out gray? IP (test 2ip.ru β if IP Starts at 10. The sling won't work).
4. Alternative methods: DMZ and UPnP
If port rollover doesnβt work or you need to open all ports for a single device (like a game console), use the port. DMZ or UPnP.
πΉ Setting up DMZ (Demilitarized Zone)
DMZ It redirects all the external ports to one device on the LAN, which is less secure than the overflow of individual ports, but sometimes necessary:
- Go to Additional Settings β Redirect β DMZ.
- Enable the option and specify local IP device.
- Save the settings and restart the router.
β οΈ Attention: Device in DMZ Become vulnerable to attacks from the Internet. Do not use this feature for PCs with sensitive data or weak antivirus.
πΉ Enable UPnP (Universal Plug and Play)
UPnP allows devices (such as game consoles or Plex Media Server) to automatically open the desired ports.
- Go to Additional Settings β UPnP.
- Turn on the option and save the changes.
UPnP is convenient, but has disadvantages:
- β Automatic port opening without manual settings.
- β Security risk (devices can open ports without your knowledge).
- β Not all providers support UPnP on their hardware.
π‘
UPnP is suitable for temporary use (for example, for a gaming session), but for permanent services, it is better to set up port rollover manually.
5. Port port port transfer on Padavan firmware
Padavan firmware (alternative to Xiaomi routers) has advanced port port port port port port port port settings.
- Open the web interface (192.168.1.1 by default).
- Move to the NAT β Port forwarding (port forwarding).
- Fill in the fields: Rule name: arbitrary. Protocol: TCP, UDP External port: range or single port (e.g, 8080 or 30000-30010). Local. IP: Device address on the network. Local port: port on the device.
Β«ApplyΒ» β Β«SaveΒ» β Β«RebootΒ»
In Padavan, additional options are also available:
- π Port Triggering β Opens ports dynamically under certain conditions.
- π Virtual Servers β an alternative way to pass.
- π Filtration by MAC β Restriction of access to abandoned ports.
β οΈ Note: In Padavan, when passing ports for IP-camera NAS You may need to disconnect SPI Firewall (in the Firewall) β Main settings as it sometimes blocks traffic.
6. Open port inspection and problem solving
After you set up the drip, check if the port is open from the outside, and you can do this using online services:
- π 2ip.ru/check-port
- π YouGetSignal
- π PortChecker
If the port is closed, perform the algorithm diagnostics:
Algorithm for Diagnostics of a Broken Port
Common mistakes and their solutions:
| Mistake. | Reason. | Decision |
|---|---|---|
| The port won't open. | Double. NAT provider | Order "whiteΒ» IP use VPN port-pass. |
| Outside IP not determined | Router in bridge mode | Switch to router mode or configure the spread on the main router. |
| Port open, but service is not available | Incorrect local port or IP | Check the service settings (e.g., the same port must be specified in qBittorrent). |
| The port is working, but slowly. | Speed limit by the provider | Change the port to a non-standard port (e.g. 52344 instead of 8080). |
7. Table of standard ports for popular services
If you donβt know which port to open for your service, use the following table:
| Service | Port port (TCP/UDP) | Description |
|---|---|---|
| Minecraft (Java Edition) | 25565 (TCP) | Standard port for multiplayer games. |
| CS2 / CS:GO | 27015-27020 (UDP) | Ports for the game server. |
| qBittorrent / Transmission | 6881-6889 (TCP) | Ports for torrent clients (preferably non-standard ones, such as 51413). |
| Plex Media Server | 32400 (TCP) | Port for remote access to the media library. |
| RDP (Remote desktop) | 3389 (TCP) | Port for connecting to Windows RDP. |
| SSH | 22 (TCP) | Port for remote server management (often blocked by providers) |
| HTTP | 80 (TCP) | Standard port for web servers. |
| HTTPS | 443 (TCP) | Secure port for web servers. |
β οΈ Note: Ports 80, 443 and 22 are often blocked by ISPs:
- Use reverse proxy (such as Nginx or Cloudflare Tunnel).
- Redirect to a non-standard port (e.g. 8080 instead of 80).
- Rentals. VPS port transfer (if the provider completely blocks incoming connections).
8 Additional settings: DDNS protection
If your external IP Dynamic (changes with each router reboot), use DDNS (Dynamic DNS). This will allow you to access your service by domain name instead of IP. Popular services:
- π No-IP (free, requires confirmation every 30 days).
- π DynDNS (paid but reliable).
- π DuckDNS (Free, Home Assistant Integration).
To set up DDNS on a Xiaomi router:
- Sign up for a No-IP site and create a host (e.g. myhome.ddns.net).
- In the router web interface, go to Additional settings β DDNS.
- Select the service (No-IP), enter the login, password and domain.
- Save the settings and check for the update IP (It can take up to 5 minutes).
For safety:
- π Change the standard port SSH (22 to 2222 or otherwise).
- π‘οΈ Set up. fail2ban on a server to block brute force attacks.
- π Use complex passwords for all services with abandoned ports.
π‘
DDNS This is required if your provider is dynamic. IP. Without him after shift. IP Access to the service will disappear, and you will have to manually update the address.