How to open ports on the Xiaomi router: detailed instructions with pictures and tips

Opening ports on the Xiaomi router is a must for gamers, owners IP-If you don't set up your port toss, or torrent trackers, or people who deploy your home servers, you'll run into problems like lags in online games, inaccessibility of remote access to your cameras, or slow download speeds. In this article, we will discuss how to configure ports on popular Mi Router models. 4A, 4C, 5, AX3000 and AX6000, including features of the firmware MiWiFi and Padavan.

It is important to understand that the procedure is different from the standard instructions for TP-Link or ASUS. Xiaomi routers have a unique interface with limitations: for example, some firmware versions lack a separate Port Forwarding section, and the settings are hidden in Additional features. Weโ€™ll show you the latest screenshots from 2026 and tell you how to get around common bugs, such as port conflict or resetting after an update.

If you've never worked with networking, don't worry. We broke it down into simple steps with each parameter explained. For experienced users, we'll give you extended tips: how to check for port opening over telnet, why don't the dual-banding work? NAT, and how to set up DMZ-host for full access to the device on the network.

๐Ÿ“Š What model of Xiaomi router you use?
Mi Router 4A
Mi Router 4C
Mi Router 5/5G
Mi Router AX3000/AX6000
Another model
I don't know.

1.Preparation for the opening of ports: what you need to know

Before you go into settings, make sure you consider three key points:

  • ๐Ÿ”Œ Static IP-The device you open the port for (e.g., a camera or PC) must have a fixed local area. IP. Otherwise, after restarting the router, the throw will stop working.
  • ๐Ÿ”’ Security. Open ports are a potential vulnerability. Never scatter ports to the sea. RDP (3389) or SSH (22) without a strong password and firewall.
  • ๐Ÿ“ก Type of connection: If your ISP uses CGNAT (double NAT), external IP-The address will be dynamic and port port transfer will be impossible without additional services (for example, dedicated port address). IP).

To check if you have any CGNAT, compare IP-website 2ip.ru with the address in the router's web interface (status) โ†’ If they are different, contact your provider for white. IP.

โš ๏ธ Note: Xiaomi routers with MiWiFi firmware version below 3.0.27 may not have port-dropping option. Update firmware through Settings โ†’ Update or install alternative firmware Padavan.

2. How to go to the settings of the Xiaomi router

Xiaomi router management interface is available via the web panel or the Mi Wi-Fi mobile application. We recommend using the web version - it is more stable and contains more options.

Steps to enter:

  1. Connect to the router network via Wi-Fi or cable.
  2. Open your browser and type in 192.168.31.1 (for most models) or miwifi.com.
  3. Enter the login and password (by default โ€“ admin and password from the sticker on the router).
  4. If a confirmation code is requested, check the Mi Wi-Fi app on your phone.

On models AX3000 and AX6000 The address may be different: 192.168.0.1. Check it on the sticker under the device:

  • ๐Ÿ”„ Reset the router with the Reset button (hold 10 seconds).
  • ๐Ÿ“ฑ Check that your device is connected to the correct network (not the guest network).
  • ๐Ÿ”Œ Turn it off. VPN browser-based proxy.

๐Ÿ’ก

If you forget the password from the router, reset the settings with the Reset button (hold on). 15 After reset, the login/password will become standard (admin/sticker).

3. Static adjustment IP-device-address

No fixed local IP Port rolling is useless: once the router restarts, the address of the device changes, and the rules stop working. IP:

Go to Additional Settings โ†’ Local area network โ†’ DHCP and:

  1. Find the device in the list for which you need a pass (by name or by name) MAC-address).
  2. Click Reserve next to it.
  3. Specify the desired IP- address (e.g., 192.168.31.100) and save it.

Method 2: Manual adjustment IP device-wise

On Windows:

  1. Open the Control Panel โ†’ Network and Internet โ†’ Network Management Center.
  2. Select the connection. โ†’ Properties โ†’ IP version 4 (TCP/IPv4).
  3. Set a tick Use the following IP-enter:
IP- Address: 192.168.31.100


Subnet mask: 255.255.255.0




Main lock: 192.168.31.1




DNS: 8.8.8.8 (or your providerโ€™s DNS)

On Android or iOS, fixed IP configured in the parameters of the Wi-Fi network (section Additional or Settings) IP).

โš ๏ธ Note: If you assign a device IP-An address that is already in use on the network (e.g. 192.168.31.1, the router's address) will conflict and the Internet will disappear. DHCP.

4. Step-by-step instructions: how to open a port on Xiaomi

The port-over algorithm is the same for most models, but the menu layout may vary.

  1. Go to the router's web interface (192.168.31.1).
  2. Go to Additional Settings โ†’ Redirection โ†’ Port rollover (on some firmware path: Advanced) โ†’ NAT Forwarding โ†’ Port Forwarding).
  3. Click Add the rule and fill in the fields:
Field.MeaningExplanation
Name of the ruleMinecraft_ServerAny name for convenience (e.g, Camera_8080)
ProtocolTCP, UDP or TCP/UDPFor games, usually TCP/UDP, camera-wise โ€” TCP
Outer port25565The port that's going to be open out, could match the one in the inland.
Inland port25565Port on your device (for example, for a Minecraft server)
IP-hostage192.168.31.100Local. IP The device for which we open the port

Example of filling for popular services:

  • ๐ŸŽฎ Minecraft server: port 25565 (TCP/UDP), IP server.
  • ๐Ÿ“ท IP-camera: port 8080 or 554 (RTSP), IP camera.
  • ๐Ÿ’พ uTorrent/qBittorrent: port 6881-6889 (TCP), IP PC.
  • ๐Ÿ–ฅ๏ธ RDP (Remote Desktop: Port 3389 (TCP), IP PC.

After saving the rule, restart the router (System Tools) โ†’ Reboot).

The correct locality is indicated IP device|Ports do not conflict with other regulations|The right protocol is chosen (TCP/UDP)|The port is not blocked by the provider-->

5. Checking the opening of the port: 3 reliable ways

Just keeping the rule is not enough, you have to make sure the port is actually open.

Method 1: Online services

Go to one of the sites:

  • ๐ŸŒ 2ip.ru/check-port
  • ๐ŸŒ yougetsignal.com

Enter the port number and click Check. If the port is open, you will see a message Port X is open.

Method 2: Command line (Windows/Linux)

On another device on the network (or via the mobile Internet), execute the command:

telnet [your external IP] [port]

Example: telnet 93.123.45.67 25565. If the screen clears or the cursor appears, the port is open. If the connection resets, the port is closed.

Method 3: PortQry utility (for experienced)

Download Microsoftโ€™s PortQry and run the command:

portqry.exe -n [your IP] -e [port]

โš ๏ธ Note: If the port does not open, check it: ๐Ÿ”ฅ firewall Windows/Antivirus (add an exception for the port). ๐Ÿ”„ The pass rule is saved and active (reboot the router). ๐Ÿ“ก The provider does not block the port (especially for ports). 80, 443, 3389).

What happens if the port does not open?
1. check whether the provider is using the CGNAT (double NAT). In this case, port transfer is impossible without dedicated IP. 2. Make sure the device runs a service that uses that port (e.g., Minecraft server or camera is enabled). 3. Try changing the external port to another (e.g., use 25566) instead of 25565 โ€“ sometimes providers block standard ports. 4. If you have a router in the โ€œbridgeโ€ mode, port forwarding is configured on the providerโ€™s main router.

6. Advanced settings: DMZ, UPnP and Alternative Firmware

If port rolling doesnโ€™t solve your problem or you need full access to your device, consider these options:

DMZ-Demilitarized Zone (Demilitarized Zone)

DMZ Redirects all external ports to a single device on the LAN, which is easy to test, but highly insecure for continuous use (the device becomes vulnerable to attacks).

How to turn on:

  1. Go to Additional Settings โ†’ Redirect โ†’ DMZ.
  2. Enter local. IP devices (e.g. 192.168.31.100).
  3. Save and restart the router.

UPnP (Universal Plug and Play)

UPnP allows devices (such as games or torrent clients) to automatically open ports, but this creates security risks.

To include:

  1. Go to the Additional Settings โ†’ UPnP.
  2. Activate the switch Enable UPnP.
  3. In the UPnP Rules section, check that the ports you want are added automatically.

Alternative firmware (Padavan, OpenWRT)

MiWiFi stock firmware is limited. For advanced features (for example, port port port port forwarding on Mi Router) 4A with firmware below 3.0.27) install Padavan:

  • ๐Ÿ”ง Download the firmware for your model from the official website.
  • ๐Ÿ“ Download it through System Tools โ†’ Manual update.
  • โš ๏ธ Warning: Continuous power during firmware! interruption will lead to "bricking" router.

After installing Padavan, port rollover is configured in Advanced Settings โ†’ NAT โ†’ Port Forwarding with advanced options (e.g., interface selection) WAN/LAN).

๐Ÿ’ก

Use it. DMZ For permanent access (such as a camera or server), always configure port-specific overlays, which are safer.

7.Typical errors and their solutions

Even experienced users have problems with port port port port port port port forwarding, and we've collected the most common cases and ways to fix them:

Problem.Reason.Decision
The port is not open, although the rule is maintained.Conflict with firewall or antivirusTurn off the firewall on the device or add an exception for the port
Outside IP changes after rebootingDynamic IP from the providerSet up. DDNS (For example, through No-IP or order static IP
The application only works for local devices.Provider uses CGNATContact the provider for white access. IP
Settings are reset after the updateMiWiFi firmware bugReverse to a stable version or install Padavan

If you use a router paired with a modem provider (for example, Rostelecom or Beeline), port port port rollover should be configured on both devices:

  1. On the modem provider open the port to IP-Addresses of your Xiaomi router.
  2. On Xiaomi, roll the port onto the target device.

For Mi Router models AX6000 4.0-plate+ You may need to disconnect IPv6 In the Internet settings, if the pass does not work.

8 Security: How to Protect Open Ports

Open ports are like an unlocked door to your network, and follow these rules to minimize the risks.

  • ๐Ÿ” Complex passwords for port-dropped devices (cameras, NAS) Use passwords that are long โ‰ฅ12 characters with numbers and special symbols.
  • ๐Ÿ›ก๏ธ Updates: Update your router and software on your devices regularly (especially if it's open). RDP or SSH).
  • ๐ŸŒ VPN It's a remote access, instead of a drop-off. RDP (3389) set up VPN-server (for example, WireGuard) on the router.
  • ๐Ÿ“Š Monitoring. Check router logs (System Tools) โ†’ Logs) for suspicious connections.

For Xiaomi routers with Padavan firmware, you can configure a firewall:

  1. Go to Advanced Settings โ†’ Firewall.
  2. Add a rule that allows traffic only from certain areas. IP-addresses (for example, your working PC).

If you open the ports for IP-cameras, of course:

  • Disable access by protocol. HTTP, Use only HTTPS.
  • Set up two-factor authentication (if supported).
  • Close the camera web interface from the external network, leave only the video stream through the camera. RTSP.

โš ๏ธ Please note: Never open ports 21 (FTP), 22 (SSH), 23 (Telnet) or 3389 (RDP) These services are often the target of brute force attacks. FTP use SFTP (port 22), for remote access โ€” VPN.

FAQ: Answers to Frequent Questions

Can I open ports on Xiaomi Mi Router? 4A firmware below 3.0.27?
Older versions of MiWiFi firmware do not have port rollover option.Solutions: Update the firmware through Settings โ†’ Update. Install an alternative firmware Padavan (requires unlocking the bootloader). Use DMZ Temporary access (not recommended for permanent use).
Why does the game/torrent not work after the port is dropped?
Check it out: ๐Ÿ”Œ Is the local area correctly indicated? IP The device (whether it has changed after the reboot). ๐Ÿ”ฅ Is the firewall blocking? Windows/antivirus. ๐Ÿ“ก Does the provider not use the CGNAT (check the outside IP on 2ip.ru). ๐ŸŽฎ For games (e.g, GTA V or Call of Duty may require multiple ports to be rolled over (UDP + TCP).
How to open port 80 or 443 if your provider is blocking them?
Many providers block standard web ports (80, 443) for private clients Solutions: Use another port (e.g. 8080 or 8443) and set up a redirect on the server. Contact the provider's support to request that the port be unlocked (you may need a dedicated tariff). IP). For a web server, use a cloud proxy (such as Cloudflare Tunnel) that does not require open ports.
Can I open ports on Xiaomi via the Mi Wi-Fi app?
The official Mi Wi-Fi app does not have port port rollover option. You can: Use the web interface (192.168.31.1). Install the Router Tool app (requires root rights on your phone) configure the pass through Telnet/SSH (on some models (e.g. for advanced users, AX3000) The application has a section Redirect, but it is limited in functionality.
What if after the port rolling, the router started to slow down?
Throwing a large number of ports or high traffic (for example, from a torrent client) can load the router's processor: ๐Ÿ”„ Reboot the router. ๐Ÿ“‰ Limit the download/return speed in the torrent client settings. ๐Ÿ”ง Turn off unnecessary skipping rules. ๐Ÿ”„ If the problem persists, reset the router to factory settings and reset the spread. 4A) It is recommended to open no more 5-10 port.