Opening ports on the Xiaomi router is a must for gamers, owners IP-If you don't set up your port toss, or torrent trackers, or people who deploy your home servers, you'll run into problems like lags in online games, inaccessibility of remote access to your cameras, or slow download speeds. In this article, we will discuss how to configure ports on popular Mi Router models. 4A, 4C, 5, AX3000 and AX6000, including features of the firmware MiWiFi and Padavan.
It is important to understand that the procedure is different from the standard instructions for TP-Link or ASUS. Xiaomi routers have a unique interface with limitations: for example, some firmware versions lack a separate Port Forwarding section, and the settings are hidden in Additional features. Weโll show you the latest screenshots from 2026 and tell you how to get around common bugs, such as port conflict or resetting after an update.
If you've never worked with networking, don't worry. We broke it down into simple steps with each parameter explained. For experienced users, we'll give you extended tips: how to check for port opening over telnet, why don't the dual-banding work? NAT, and how to set up DMZ-host for full access to the device on the network.
1.Preparation for the opening of ports: what you need to know
Before you go into settings, make sure you consider three key points:
- ๐ Static IP-The device you open the port for (e.g., a camera or PC) must have a fixed local area. IP. Otherwise, after restarting the router, the throw will stop working.
- ๐ Security. Open ports are a potential vulnerability. Never scatter ports to the sea. RDP (3389) or SSH (22) without a strong password and firewall.
- ๐ก Type of connection: If your ISP uses CGNAT (double NAT), external IP-The address will be dynamic and port port transfer will be impossible without additional services (for example, dedicated port address). IP).
To check if you have any CGNAT, compare IP-website 2ip.ru with the address in the router's web interface (status) โ If they are different, contact your provider for white. IP.
โ ๏ธ Note: Xiaomi routers with MiWiFi firmware version below 3.0.27 may not have port-dropping option. Update firmware through Settings โ Update or install alternative firmware Padavan.
2. How to go to the settings of the Xiaomi router
Xiaomi router management interface is available via the web panel or the Mi Wi-Fi mobile application. We recommend using the web version - it is more stable and contains more options.
Steps to enter:
- Connect to the router network via Wi-Fi or cable.
- Open your browser and type in 192.168.31.1 (for most models) or miwifi.com.
- Enter the login and password (by default โ admin and password from the sticker on the router).
- If a confirmation code is requested, check the Mi Wi-Fi app on your phone.
On models AX3000 and AX6000 The address may be different: 192.168.0.1. Check it on the sticker under the device:
- ๐ Reset the router with the Reset button (hold 10 seconds).
- ๐ฑ Check that your device is connected to the correct network (not the guest network).
- ๐ Turn it off. VPN browser-based proxy.
๐ก
If you forget the password from the router, reset the settings with the Reset button (hold on). 15 After reset, the login/password will become standard (admin/sticker).
3. Static adjustment IP-device-address
No fixed local IP Port rolling is useless: once the router restarts, the address of the device changes, and the rules stop working. IP:
Method 1: Reservation IP in the router settings (recommended)
Go to Additional Settings โ Local area network โ DHCP and:
- Find the device in the list for which you need a pass (by name or by name) MAC-address).
- Click Reserve next to it.
- Specify the desired IP- address (e.g., 192.168.31.100) and save it.
Method 2: Manual adjustment IP device-wise
On Windows:
- Open the Control Panel โ Network and Internet โ Network Management Center.
- Select the connection. โ Properties โ IP version 4 (TCP/IPv4).
- Set a tick Use the following IP-enter:
IP- Address: 192.168.31.100
Subnet mask: 255.255.255.0
Main lock: 192.168.31.1
DNS: 8.8.8.8 (or your providerโs DNS)On Android or iOS, fixed IP configured in the parameters of the Wi-Fi network (section Additional or Settings) IP).
โ ๏ธ Note: If you assign a device IP-An address that is already in use on the network (e.g. 192.168.31.1, the router's address) will conflict and the Internet will disappear. DHCP.
4. Step-by-step instructions: how to open a port on Xiaomi
The port-over algorithm is the same for most models, but the menu layout may vary.
- Go to the router's web interface (192.168.31.1).
- Go to Additional Settings โ Redirection โ Port rollover (on some firmware path: Advanced) โ NAT Forwarding โ Port Forwarding).
- Click Add the rule and fill in the fields:
| Field. | Meaning | Explanation |
|---|---|---|
| Name of the rule | Minecraft_Server | Any name for convenience (e.g, Camera_8080) |
| Protocol | TCP, UDP or TCP/UDP | For games, usually TCP/UDP, camera-wise โ TCP |
| Outer port | 25565 | The port that's going to be open out, could match the one in the inland. |
| Inland port | 25565 | Port on your device (for example, for a Minecraft server) |
| IP-hostage | 192.168.31.100 | Local. IP The device for which we open the port |
Example of filling for popular services:
- ๐ฎ Minecraft server: port 25565 (TCP/UDP), IP server.
- ๐ท IP-camera: port 8080 or 554 (RTSP), IP camera.
- ๐พ uTorrent/qBittorrent: port 6881-6889 (TCP), IP PC.
- ๐ฅ๏ธ RDP (Remote Desktop: Port 3389 (TCP), IP PC.
After saving the rule, restart the router (System Tools) โ Reboot).
The correct locality is indicated IP device|Ports do not conflict with other regulations|The right protocol is chosen (TCP/UDP)|The port is not blocked by the provider-->
5. Checking the opening of the port: 3 reliable ways
Just keeping the rule is not enough, you have to make sure the port is actually open.
Method 1: Online services
Go to one of the sites:
- ๐ 2ip.ru/check-port
- ๐ yougetsignal.com
Enter the port number and click Check. If the port is open, you will see a message Port X is open.
Method 2: Command line (Windows/Linux)
On another device on the network (or via the mobile Internet), execute the command:
telnet [your external IP] [port]Example: telnet 93.123.45.67 25565. If the screen clears or the cursor appears, the port is open. If the connection resets, the port is closed.
Method 3: PortQry utility (for experienced)
Download Microsoftโs PortQry and run the command:
portqry.exe -n [your IP] -e [port]โ ๏ธ Note: If the port does not open, check it: ๐ฅ firewall Windows/Antivirus (add an exception for the port). ๐ The pass rule is saved and active (reboot the router). ๐ก The provider does not block the port (especially for ports). 80, 443, 3389).
What happens if the port does not open?
6. Advanced settings: DMZ, UPnP and Alternative Firmware
If port rolling doesnโt solve your problem or you need full access to your device, consider these options:
DMZ-Demilitarized Zone (Demilitarized Zone)
DMZ Redirects all external ports to a single device on the LAN, which is easy to test, but highly insecure for continuous use (the device becomes vulnerable to attacks).
How to turn on:
- Go to Additional Settings โ Redirect โ DMZ.
- Enter local. IP devices (e.g. 192.168.31.100).
- Save and restart the router.
UPnP (Universal Plug and Play)
UPnP allows devices (such as games or torrent clients) to automatically open ports, but this creates security risks.
To include:
- Go to the Additional Settings โ UPnP.
- Activate the switch Enable UPnP.
- In the UPnP Rules section, check that the ports you want are added automatically.
Alternative firmware (Padavan, OpenWRT)
MiWiFi stock firmware is limited. For advanced features (for example, port port port port forwarding on Mi Router) 4A with firmware below 3.0.27) install Padavan:
- ๐ง Download the firmware for your model from the official website.
- ๐ Download it through System Tools โ Manual update.
- โ ๏ธ Warning: Continuous power during firmware! interruption will lead to "bricking" router.
After installing Padavan, port rollover is configured in Advanced Settings โ NAT โ Port Forwarding with advanced options (e.g., interface selection) WAN/LAN).
๐ก
Use it. DMZ For permanent access (such as a camera or server), always configure port-specific overlays, which are safer.
7.Typical errors and their solutions
Even experienced users have problems with port port port port port port port forwarding, and we've collected the most common cases and ways to fix them:
| Problem. | Reason. | Decision |
|---|---|---|
| The port is not open, although the rule is maintained. | Conflict with firewall or antivirus | Turn off the firewall on the device or add an exception for the port |
| Outside IP changes after rebooting | Dynamic IP from the provider | Set up. DDNS (For example, through No-IP or order static IP |
| The application only works for local devices. | Provider uses CGNAT | Contact the provider for white access. IP |
| Settings are reset after the update | MiWiFi firmware bug | Reverse to a stable version or install Padavan |
If you use a router paired with a modem provider (for example, Rostelecom or Beeline), port port port rollover should be configured on both devices:
- On the modem provider open the port to IP-Addresses of your Xiaomi router.
- On Xiaomi, roll the port onto the target device.
For Mi Router models AX6000 4.0-plate+ You may need to disconnect IPv6 In the Internet settings, if the pass does not work.
8 Security: How to Protect Open Ports
Open ports are like an unlocked door to your network, and follow these rules to minimize the risks.
- ๐ Complex passwords for port-dropped devices (cameras, NAS) Use passwords that are long โฅ12 characters with numbers and special symbols.
- ๐ก๏ธ Updates: Update your router and software on your devices regularly (especially if it's open). RDP or SSH).
- ๐ VPN It's a remote access, instead of a drop-off. RDP (3389) set up VPN-server (for example, WireGuard) on the router.
- ๐ Monitoring. Check router logs (System Tools) โ Logs) for suspicious connections.
For Xiaomi routers with Padavan firmware, you can configure a firewall:
- Go to Advanced Settings โ Firewall.
- Add a rule that allows traffic only from certain areas. IP-addresses (for example, your working PC).
If you open the ports for IP-cameras, of course:
- Disable access by protocol. HTTP, Use only HTTPS.
- Set up two-factor authentication (if supported).
- Close the camera web interface from the external network, leave only the video stream through the camera. RTSP.
โ ๏ธ Please note: Never open ports 21 (FTP), 22 (SSH), 23 (Telnet) or 3389 (RDP) These services are often the target of brute force attacks. FTP use SFTP (port 22), for remote access โ VPN.