How to open a port on the Xiaomi router: instructions with pictures and nuances

Opening ports on the Xiaomi router is a necessary procedure for organizing remote access to surveillance cameras, game servers (Minecraft, CS2), Torrent clients or their own NAS-Despite the seeming complexity, port port port overlay on Mi Router 4 routers, 4A, 5 or AX-The series takes no more than 10 minutes, if you know the key nuances, the main thing is not to confuse port forwarding with settings. DMZ or the inclusion of UPnPs that solve similar but not identical tasks.

In this article, you will find step-by-step instructions for all current Xiaomi firmware (including MiWiFi and Padavan), a table of standard ports for popular services, as well as solutions to typical errors like β€œPort does not open” or β€œExternal” IP Not defined. Particular attention is paid to the specifics of working with double-definition NAT And if you've ever seen networks only at the cable level, don't worry, every step is accompanied by screenshots and explanations for kettlesΒ».

1.Preparation: What to know before port port rollover

Before you open ports, make sure you understand three key concepts:

  • πŸ”Œ Local. IP β€” The address of the device on your network (e.g. 192.168.31.100) must be static, otherwise the overhead will stop working after the router restarts.
  • 🌍 External (white) IP β€” If it's dynamic (changes with each connection), you'll need a service. DDNS.
  • πŸ”’ Port: A numerical identifier (from 1 to 65535) that external devices will use to access your service. HTTP, 443 for HTTPS.

Most of the problems with port port transfer arise from:

  1. Dynamic localization IP devices (decided by binding on the MAC).
  2. Double. NAT from the provider (external) IP Start with 10., 172.16. or 192.168.).
  3. Port locks on the ISP side (relevant for ports 80, 443, 22).
πŸ“Š What kind of Xiaomi router do you have?
Mi Router 4/4A
Mi Router 5/5G
Mi Router AX1800/AX3600
Another Xiaomi
Not Xiaomi.

Before setting up, check:

Find out local IP target-pointer|Check the outside IP site 2ip.ru|Shut down. VPN/proxy on the device|Update the router to the latest version-->

2. How to find out the local IP and make it static.

If you are sniffing through the port for the Xiaomi camera, NAS-server or computer, first find its current local IP. It can be done:

  • πŸ–₯️ On Windows: Open Command Prompt and type ipconfig. The address you want will be in the line. IPv4-address.
  • πŸ“± On Android: Go to Settings β†’ The phone. β†’ Status β†’ IP-address.
  • πŸ“± On iOS: Settings β†’ Wi-Fi β†’ β“˜ net-side β†’ IP-address.
  • 🌐 Through the router's web interface: Settings β†’ Local area network β†’ List of devices.

Now, lock this one up. IP, I don't want him to change:

  1. Open the router web interface (192.168.31.1 or miwifi.com).
  2. Go to Settings β†’ Local Network β†’ DHCP.
  3. Find the section β€œReservation of addresses” or β€œAffiliation” IP-MACΒ».
  4. Add a rule, pointing out MAC-device address and desired IP (for example, 192.168.31.100).

πŸ’‘

If the list of devices is not required MAC-Addresses, connect the device to the router via cable (for PC) or reboot it so that it appears in the logs DHCP.

⚠️ Warning: If you use Mi Router with Padavan firmware, the path to redundancy IP It will be different: Local network β†’ DHCP-server β†’ Hand-tied ARP. This firmware also has a Static Lease option that works similarly.

3. port transfer on standard MiWiFi firmware

Instructions are relevant for Xiaomi Mi Router routers 4/4A/4C/5/5G/AX1800/AX3600 Original MiWiFi firmware (not Padavan:

  1. Open the router web interface (192.168.31.1) and log in.
  2. Go to Additional settings β†’ Redirect β†’ Port rollover.
  3. Click Add Rule and fill in the fields: Name: arbitrary (e.g., Minecraft Server: TCP, UDP or TCP/UDP (External port: port that will be open "outside" (e.g, 25565 Internal port: port on a local device (often the same as the external one). IP: static IP devices, for example, 192.168.31.100).

Save the rule and restart the router.

Example of filling for qBittorrent torrent client:

ParameterMeaning
Name.qBittorrent
ProtocolTCP/UDP
Outer port6881
Inland port6881
Internal IP192.168.31.100

⚠️ Note: If the port does not open after saving the rule, check it:

  • πŸ”₯ Does not block the port Windows firewall or antivirus (for example, Kaspersky, Avast).
  • πŸ”„ Are the settings reset after restarting (relevant for routers with unstable firmware).
  • 🌐 Does the provider give out gray? IP (test 2ip.ru β€” if IP Starts at 10. The sling won't work).

4. Alternative methods: DMZ and UPnP

If port rollover doesn’t work or you need to open all ports for a single device (like a game console), use the port. DMZ or UPnP.

πŸ”Ή Setting up DMZ (Demilitarized Zone)

DMZ It redirects all the external ports to one device on the LAN, which is less secure than the overflow of individual ports, but sometimes necessary:

  1. Go to Additional Settings β†’ Redirect β†’ DMZ.
  2. Enable the option and specify local IP device.
  3. Save the settings and restart the router.

⚠️ Attention: Device in DMZ Become vulnerable to attacks from the Internet. Do not use this feature for PCs with sensitive data or weak antivirus.

πŸ”Ή Enable UPnP (Universal Plug and Play)

UPnP allows devices (such as game consoles or Plex Media Server) to automatically open the desired ports.

  1. Go to Additional Settings β†’ UPnP.
  2. Turn on the option and save the changes.

UPnP is convenient, but has disadvantages:

  • βœ… Automatic port opening without manual settings.
  • ❌ Security risk (devices can open ports without your knowledge).
  • ❌ Not all providers support UPnP on their hardware.

πŸ’‘

UPnP is suitable for temporary use (for example, for a gaming session), but for permanent services, it is better to set up port rollover manually.

5. Port port port transfer on Padavan firmware

Padavan firmware (alternative to Xiaomi routers) has advanced port port port port port port port port settings.

  1. Open the web interface (192.168.1.1 by default).
  2. Move to the NAT β†’ Port forwarding (port forwarding).
  3. Fill in the fields: Rule name: arbitrary. Protocol: TCP, UDP External port: range or single port (e.g, 8080 or 30000-30010). Local. IP: Device address on the network. Local port: port on the device.

Β«ApplyΒ» β†’ Β«SaveΒ» β†’ Β«RebootΒ»

In Padavan, additional options are also available:

  • πŸ”„ Port Triggering – Opens ports dynamically under certain conditions.
  • 🌐 Virtual Servers – an alternative way to pass.
  • πŸ”’ Filtration by MAC β€” Restriction of access to abandoned ports.

⚠️ Note: In Padavan, when passing ports for IP-camera NAS You may need to disconnect SPI Firewall (in the Firewall) β†’ Main settings as it sometimes blocks traffic.

6. Open port inspection and problem solving

After you set up the drip, check if the port is open from the outside, and you can do this using online services:

  • 🌍 2ip.ru/check-port
  • 🌍 YouGetSignal
  • 🌍 PortChecker

If the port is closed, perform the algorithm diagnostics:

Algorithm for Diagnostics of a Broken Port
1. Check the local IP β€” Has it changed since the router restarted? 2. Make sure the external router is stable. IP β€” If it is dynamic, use it. DDNS (For example, No-IP or DynDNS. 3.NAT β€” external IP Starts with 10., 172.16. or 192.168., contact the provider for transfer to whiteΒ» IP. 4. Check the firewall - on the target device (PC, NAS) Temporarily disable firewall and antivirus. 5. Test from another connection - sometimes the port is blocked on the mobile operator side (if you check from the phone).

Common mistakes and their solutions:

Mistake.Reason.Decision
The port won't open.Double. NAT providerOrder "whiteΒ» IP use VPN port-pass.
Outside IP not determinedRouter in bridge modeSwitch to router mode or configure the spread on the main router.
Port open, but service is not availableIncorrect local port or IPCheck the service settings (e.g., the same port must be specified in qBittorrent).
The port is working, but slowly.Speed limit by the providerChange the port to a non-standard port (e.g. 52344 instead of 8080).

If you don’t know which port to open for your service, use the following table:

ServicePort port (TCP/UDP)Description
Minecraft (Java Edition)25565 (TCP)Standard port for multiplayer games.
CS2 / CS:GO27015-27020 (UDP)Ports for the game server.
qBittorrent / Transmission6881-6889 (TCP)Ports for torrent clients (preferably non-standard ones, such as 51413).
Plex Media Server32400 (TCP)Port for remote access to the media library.
RDP (Remote desktop)3389 (TCP)Port for connecting to Windows RDP.
SSH22 (TCP)Port for remote server management (often blocked by providers)
HTTP80 (TCP)Standard port for web servers.
HTTPS443 (TCP)Secure port for web servers.

⚠️ Note: Ports 80, 443 and 22 are often blocked by ISPs:

  • Use reverse proxy (such as Nginx or Cloudflare Tunnel).
  • Redirect to a non-standard port (e.g. 8080 instead of 80).
  • Rentals. VPS port transfer (if the provider completely blocks incoming connections).

8 Additional settings: DDNS protection

If your external IP Dynamic (changes with each router reboot), use DDNS (Dynamic DNS). This will allow you to access your service by domain name instead of IP. Popular services:

  • 🌐 No-IP (free, requires confirmation every 30 days).
  • 🌐 DynDNS (paid but reliable).
  • 🌐 DuckDNS (Free, Home Assistant Integration).

To set up DDNS on a Xiaomi router:

  1. Sign up for a No-IP site and create a host (e.g. myhome.ddns.net).
  2. In the router web interface, go to Additional settings β†’ DDNS.
  3. Select the service (No-IP), enter the login, password and domain.
  4. Save the settings and check for the update IP (It can take up to 5 minutes).

For safety:

  • πŸ”’ Change the standard port SSH (22 to 2222 or otherwise).
  • πŸ›‘οΈ Set up. fail2ban on a server to block brute force attacks.
  • πŸ”‘ Use complex passwords for all services with abandoned ports.

πŸ’‘

DDNS This is required if your provider is dynamic. IP. Without him after shift. IP Access to the service will disappear, and you will have to manually update the address.

FAQ: Frequent questions about port port port port port port port port port port transfer on Xiaomi

❓ Why is the port closed after the transfer?
There could be several reasons: πŸ”Œ Local. IP The device has changed (set up static). IP). 🌐 The provider gives out a grayΒ» IP (check on 2ip.ru). πŸ”₯ Firewall on the device blocks the port (turn it off temporarily for the test). πŸ”„ The roll rule did not survive after restarting the router (update the firmware). To diagnose, use the command on the target device: netstat -ano | findstr (replace β€œPORT” with your port number, for example) 8080).
❓ How to open a port for Xiaomi camera?
For Xiaomi cameras (e.g. Mi Home Security Camera): Assign a static camera IP In the router settings. Fly the ports: 80 (TCP) β€” for the web interface. 554 (TCP) β€” flow RTSP (if maintained). 34567 (UDP) β€” for P2P-In the camera settings, turn on the connection. RTSP (if required). ⚠️ Many Xiaomi cameras use cloud connectivity and don't require port-over.Check the model documentation.
❓ Can I open the port on the router in the β€œbridge” modeΒ»?
No. In Bridge Mode, Xiaomi's router is not running NAT, So you can't set up port skids: πŸ”„ Switch the router to router mode (turn off the bridge). πŸ”Œ Set up a spread on the provider’s main router (if you have access). 🌐 Use it. VPN or reverse proxy (e.g. Cloudflare Tunnel).
❓ How to Fly a Port for a Torrent Client?
For qBittorrent, Transmission or uTorrent: In the torrent client settings, find the Connection section and specify the port (for example, 51413). Flip this port on the router, specifying the local IP Enable UPnP in the client settings (optional). ⚠️ Avoid standard ports (6881-6889), Because they're often blocked by providers. 49152-65535.
❓ What to do if the provider blocks incoming ports?
If the provider completely blocks incoming connections (relevant for Beeline, MTS, some tariffs by Rostelecom), try it: πŸ“ž Call for support and request whiteΒ» IP (sometimes free of charge). 🌐 Use it. VPN port port port transfer (for example, WireGuard) + Tailscale). πŸ”„ Set up the reverse. SSH-tunnel through a remote server. πŸ’° Order a dedicated IP ISP (paid option) for game servers (Minecraft, CS2) best option is renting VPS low-ping.