How to open a port on the Xiaomi router: a step-by-step guide

Modern home networks often require fine-tuning to work properly for specific applications, online games or video surveillance systems. If you encounter restrictions when connecting to a remote desktop or playing games with a low NAT rating, you need to perform port rollover. On Xiaomi devices such as Mi Router 3G or Axia Pro, this process has its own nuances, which are important to consider for the stability of the connection.

The main challenge is to create a rule that redirects incoming traffic from the external network to a specific device within your local network. Without this setting, the router defaults to blocking unsolicited external connections for security reasons. The correct configuration of WAN-LAN rules will ensure that your services run smoothly without compromises in network perimeter protection.

In this guide, we will take a detailed look at the algorithm required to open ports on firmware MiWiFi. We will look not only at the standard procedure, but also at critical preparatory steps such as fixing. IP-Addresses that will not work without, and following the instructions will allow you to avoid typical errors and ensure reliable communication.

Preparation of the device and appointment of static IP

Before you start setting up routing rules, you need to fix IP-port address of the device for which the ports are opened. Dynamic protocol address issuance DHCP It can cause your computer or camera to get a new address after you restart the router, and the rule that you created will no longer work. MAC-the address of the target device to the permanent local IP.

Log in to the web interface of the administrator by entering the browser address 192.168.31.1 or the domain miwifi.com. After authorization, go to the Settings section and select the tab LAN. Here's a list of connected customers. Find your device by name or MAC-Address and activate the static function IP, If this option is available in your version of the firmware directly.

⚠️ Note: If your router model does not allow you to fix IP Through the web interface, the static address must be configured directly in the network settings of the computer or camera itself. Make sure that the selected address is in the same subnet as the gateway, but does not fall into the dynamic distribution range. DHCP.

An alternative way is to reserve the address through settings DHCP-The server, the menu. LAN find a section DHCP Server. You can manually write the correspondence between MAC-address IP. For example, a device with MAC AA:BB:CC:11:22:33 Assign 192.168.31.100 to the address, which ensures that the router will always give this address to the device.

Entrance to the control panel and navigation

Xiaomi router management interface may vary depending on the regional firmware version (Chinese or global) and device model. In most cases, the port port port menu is hidden in the advanced settings. After successful login, look at the top or side menu where the main configuration sections are located.

You need to find a section that's dedicated to security or extras. Global firmware often calls it Advanced or Security. In Chinese versions of the interface, look for characters that mean "Additional Settings" or "Brandmower," and that's where the network flow management tools are concentrated.

If standard methods do not find the desired section, try to switch the interface language to English, as the translation of some technical terms may be incorrect or abbreviated, NAT, Virtual Server or Firewall.

Setting up port forwarding rules

The central element of the configuration is to create a new rule. In the corresponding menu section, click Add Rule or similar. You will see a form that requires you to fill in several critical fields. A mistake in even one character can cause the entire scheme to fail.

In the Name field, type in an arbitrary name for a rule, such as "Camera" or "GameServer." This will help you navigate the list if there are more rules. In the Protocol field, select the type of traffic: TCP, UDP or TCP/UDP (Both). The choice depends on the requirements of your application; games often require both protocols, and TCP is enough for a web server.

The most important step is to specify the addresses. IP (Internal IP) Type the static address you assigned to the device in the first step (e.g., 192.168.31.100). Enter the port number in the External Port and Internal Port fields. These are usually the same, but may differ if you want to redirect.

💡

Use port ranges if an application requires multiple connections, for example, for some torrent clients or games, you can specify a range of 5000-5010 instead of a single number.

After filling in all fields, be sure to click the Save or OK button. The system may require you to confirm or restart the network service. Make sure that the created rule appears in the general list and has Enabled status. If the status is turned off, traffic will not pass.

Using DMZ Mode for Game Consoles

For game console users like PlayStation, Xbox or Nintendo Switch, which require multiple ports to be opened at the same time, a more radical method is DMZ (Demilitarized Zone), which redirects all unfiltered traffic from the external network to one specified device, completely bypassing the firewall rules for it.

Using a DMZ is only justified if the port rolling does not solve the problem with strict NAT or connections in games. However, this reduces the level of security, since the console or PC is directly accessible from the Internet.

To activate DMZ, Find the router's menu with the same name, which is usually next to the port forwarding settings. IP-After applying the settings, it is recommended to restart the gaming device and check the status of the game. NAT In the console's network tests, it should change to Open).

💡

DMZ mode opens all ports for a single device, which is ideal for gaming, but requires increased security measures on the device itself.

Performance check and diagnosis

After making all the changes, you need to make sure that the ports are really open and accessible from the external network. Simply saving settings does not guarantee their immediate activation, especially if the DNS cache or routing tables are not fully updated.

There are many resources, such as 2ip.ru, portscanner.ru or canyouseeme.org. Go to one of these sites from a device outside your home network (for example, via mobile Internet on your smartphone), enter the port number you opened and start the scan.

If the service says the port is open, then the configuration is correct. If the port is closed or filtered, check the following:

• 🔥 The target device may have a Windows Firewall that blocks incoming connections. Add an exception rule to the OS security settings.
• 📡 Your provider can use the technology. CGNAT, hide you behind the common IP-In this case, white is the address. IP-The address must be ordered separately from the operator.
• 🔄 The rules may not have been applied to the end. Try rebooting Xiaomi router via web interface.

Table of popular ports for services

To make it easier to set up, we’ll show you the most commonly used ports for various networking tasks, and this data will help you fill out configuration fields quickly without looking for information in the documentation for each application.

Using non-standard ports can improve security by hiding services from automated scanners, but requires specifying a specific port in the client application. For example, if you change a port for RDP, you will need to specify IP:Port when connecting.

Frequently Asked Questions (FAQ)