Ports transfer on Xiaomi Redmi AC2100: from theory to practice with examples

Why Open Ports on a Router and When to Do It

Opening ports on Xiaomi Redmi AC2100 β€” It's a procedure that's been asking a lot of questions, and many people mistakenly believe that without port port drops, you can't run an online game, set up video surveillance, or even just speed up torrent downloads. In fact, 80 percent of the time, you don’t need to open ports β€” modern apps use UPnP or cloud services to bypass them. NAT. However, there are situations where the transfer becomes a necessity.

Classic examples: organizing remote access to a home server (Nextcloud, Plex), setting up a Minecraft server for friends, or connecting a Minecraft server to your friends IP-Directly unintermediated cameras. AC2100 It supports port port-over, but the router interface has features that are important to consider, such as the older 2.0.37 firmware that doesn't have a separate "Port Forwarding" section, which has been replaced with "Virtual Servers," which is confusing for beginners.

Before you start setting up, make sure: 1) your device does require a pass (check the program documentation), 2) you understand the security risks (an open port can become an entry point for attacks), 3) you have a static device. IP-address on the target device or set up binding MAC.

πŸ“Š Why you open ports on the router?
Games (Minecraft, CS:GO etc.)
Video surveillance (IP-camera)
Home server (Nextcloud, Plex)
Torrents
Other

Preparation for the transfer: check the network and equipment

Before you go into the Redmi settings AC2100, There are a number of preparatory steps to be taken. IP-configuration of your local network:

  1. On Windows: Open the Command Prompt (Win) + R β†’ cmd) and enter ipconfig /all. Find a line. IPv4-address.
  2. Nana macOS/Linux: Use the ifconfig or ip a command.

Remember or write down: Local IP devices (e.g. 192.168.31.100), MAC-address (required for binding), default gateway (usually 192.168.31.1 for Xiaomi).

Make sure the device is connected to the router via cable (Wi-Fi may crash)

Check that the device is static IP or-reserve DHCP

Temporarily disable firewall/antivirus on target device

Preparation of data: external IP router, ports for transfer, protocol (TCP/UDP)

-->

Pay special attention to the external IP-You can find it on sites like this. 2ip.ru If the address starts with 10., 172.16. or 192.168, you have a gray" IP, And the port rollover won't work without the provider settings:

  • πŸ“ž Call for support from the provider to issue a white" IP (Maybe it's a paid option),
  • πŸ”„ Use services like Ngrok or Cloudflare Tunnel to circumvent restrictions,
  • πŸ”„ Alternatively, set up DDNS (dynamic DNS) In the router, if the provider changes IP.

⚠️ Note: Providers like Rostelecom or Beeline often give out "gray" IP Before you pass the ports, make sure you make that point, otherwise all efforts will be in vain.

Step-by-step: how to open a port on Xiaomi Redmi AC2100

Now, let's get to the point. This is the same as standard firmware 2.0.37 and later. If you have an older version, we recommend you update via Settings. β†’ Firmware update.

Step 1. Log in to the router’s web interface:

Open the browser and enter 192.168.31.1 (or miwifi.com β€” admin/If it doesn't fit, reset the settings with the Reset button. 10 seconds).

Step 2. Go to the port port forwarding section:

Path: Additional settings β†’ Network β†’ Virtual Servers (in some versions - Port forwarding) You can add up to 32 rules for rollover.

Step 3. Create a new rule:

Fill in the fields as shown in the table below. Example for Minecraft server:

ParameterMeaningExplanation
Service Port25565The default port for Minecraft
Internal Port25565Must match Service Port if no redirect is used
ProtocolTCPMinecraft is good enough. TCP, but sometimes it is required TCP/UDP or ALL
LAN IP192.168.31.100Local. IP device on which we are putting the port
StatusEnabledActivate the rule

Step 4: Save settings and restart the router through System Tools β†’ Reboot. It's mandatory -- the rules of throwing only apply after the reboot.

1) Does the port block the firewall on the target device (stop temporarily),

2) Is the protocol correct (TCP/UDP),

3) Does the port conflict with other services (e.g., 80 is often occupied by the router's web server).-->

To avoid guessing which ports to open, use our most popular service table. Note that some programs (such as uTorrent) require opening a range of ports rather than a single number.

Service/ApplicationPort(s)ProtocolNotes
Minecraft (server)25565TCPMods may be required 25566-25570
CS:GO / Dota 227015-27020TCP/UDPSteam also uses the same 27000-27015 matchmaking
IP-cameras (Hikvision, Dahua)80, 554, 8000TCP554 for RTSP-stream, 80 - web interface
Transmission / qBittorrent51413 or rangeTCPIt is better to specify the range, for example 51413-51420
RDP (remote-desktop)3389TCPIt's dangerous to open the Internet! VPN

For torrent clients, it is important not only to open the port, but also to specify it in the program settings. For example, in qBittorrent, this is done in Tools. β†’ Settings β†’ Connection, field "Port for incoming connections".

⚠️ Attention: Ports 80 (HTTP) 443 (HTTPS) Often blocked by home users' providers.If you need these ports for a web server, consider using NGINX Redirected to a non-standard port (e.g. 8080).

Open Port Verification: 3 Reliable Methods

After you set up the dashboard, you need to make sure that the port is actually accessible from the Internet.

  • 🌐 Online services: yougetsignal.com or canyouseeme.org. Enter the port number and run the check.
  • πŸ’» Command Prompt: From another computer (not from your network) run: telnet [your external computer_IP] [Port: If the screen is empty or the cursor appears, the port is open. If the connection is reset, the port is closed.
  • πŸ“± Mobile apps: Network Analyzer (Android) or Fing (iOS) have built-in port scanning tools.

If the port does not open, check:

  1. Is it correct? LAN IP in the settings of the pass (the device must be on the network),
  2. Hasn't changed? WAN IP Router (relevant to dynamic addresses),
  3. Is the port blocked by the provider (especially relevant for ports 80, 443, 25).
What if the port is open but the connection is not working?
The problem may be: 1) Double NAT β€” If you have two routers (for example, from a provider) + your Redmi AC2100). Solution: Turn the first router to Bridge mode. 2 Firewall on the target device - even if the port is thrown, the local firewall can block connections. Turn it off temporarily for the test. 3) Wrong protocol - some services require simultaneous connection TCP and UDP (e.g. online games).

How to Open Ports Without Getting a Hacker Attack

An open port is like an unlocked door to your network, and according to Kaspersky, 60 percent of home routers with abandoned ports are targeted for scanning in the first 24 hours to minimize the risks:

  • πŸ”’ Use non-standard ports instead of 3389 for RDP Throw 3390 or 3399.
  • πŸ›‘οΈ Set up firewall rules: At Redmi AC2100 This is done in additional settings. β†’ Security β†’ Firewall, allow access only to trusted IP.
  • πŸ”„ Regularly update firmware: Vulnerabilities in older versions (e.g, CVE-2021-27561 Xiaomi allows attackers to bypass protection.
  • 🌐 Use it. VPN: Instead of putting ports on the Internet, configure WireGuard or OpenVPN on a router. It's safer and more flexible.

It is especially dangerous to open ports for remote administration (e.g. 22 for the use of remote control). SSH or 3389 for RDP). If you need access to the router from the outside, it is better:

  1. Set up SSH authenticated by key (not by password),
  2. Use Cloudflare Tunnel or Tailscale for safe tunneling
  3. Restrict access by geolocation (in the router firewall).

πŸ’‘

An open port 80 or 443 will result in a scan of your computer. IP If you don't need a public web server, use it. NGINX Basic authentication or redirection to a non-standard port.

Frequent errors and their solutions: analysis of flights

Even experienced users face problems when throwing ports on Xiaomi Redmi AC2100. Here's the top.-5 errors and ways of correcting them:

Problem.Reason.Decision
The port is not open, although the rule is created.Double. NAT (two-way)Turn off Wi-Fi on the provider’s router or put it in bridge mode
The rule of throwing disappears after rebootingResetting settings due to unstable firmwareUpdate your firmware to the latest version or roll back to a stable one
Outside IP It changes every day.Dynamic IP providerSet up. DDNS on the router (Additional settings) β†’ DDNS)
Port open, but no connection is establishedFirewall on target deviceTurn off the firewall temporarily or add an exception for the port
You can't keep the pass rule.Limitation on the number of rules (maximum 32)Remove unnecessary rules or reset router settings

If you encounter a "Conflict with existing rule" error, it means that the port is already being used by another rule. Check the list in Virtual Servers and delete duplicates.

  • You do not sniff port 80 or 443 if the router is enabled by the Web server (disabled in Additional Settings). β†’ USB-setting),
  • The target device has a static IP or-reserve DHCP (Otherwise, after restarting the router, the rule will stop working).

FAQ: Answers to Frequent Questions

Can I open ports through the Mi Wi-Fi app?
No, the official Mi Wi-Fi application does not have port port port port port port port port functionality. To configure, use the router's web interface at 192.168.31.1.
How to skip the port for IP-The camera, if it has a dynamic IP?
At Redmi. AC2100 tie IP-camera address MAC-For this purpose: Go to Additional Settings β†’ Network β†’ DHCP. Find the "Reservation of Addresses" section and add a rule by specifying MAC-camera address and desired IP. You can now drop the port on the reserved IP.
Why don't torrents get distributed faster after the port is rolled over?
Port overdrive only affects incoming connections. Download speed depends on: Number of seats in the handout, bandwidth of your Internet channel, torrent client settings (speed limits, number of connections). Open port will only help if you previously had a "yellow triangle" (limited status) in the client.
How to close the port after it is no longer needed?
To remove the pass rule: Go to Additional settings β†’ Network β†’ Virtual Servers. Find an unnecessary rule and click "Delete." Save settings and restart the router. Also check if there are any rules left for that port in the firewall or on the target device.
Can I flip a port to a device on another subnet (VLAN)?
Xiaomi Redmi AC2100 It does not support the interconnection (between the VLAN). All devices must be on the same subnet (usually) 192.168.31.0/24). If you need device isolation, consider buying a support router VLAN (for example, Xiaomi AX6000).