Why Open Ports on a Router and When to Do It
Opening ports on Xiaomi Redmi AC2100 β It's a procedure that's been asking a lot of questions, and many people mistakenly believe that without port port drops, you can't run an online game, set up video surveillance, or even just speed up torrent downloads. In fact, 80 percent of the time, you donβt need to open ports β modern apps use UPnP or cloud services to bypass them. NAT. However, there are situations where the transfer becomes a necessity.
Classic examples: organizing remote access to a home server (Nextcloud, Plex), setting up a Minecraft server for friends, or connecting a Minecraft server to your friends IP-Directly unintermediated cameras. AC2100 It supports port port-over, but the router interface has features that are important to consider, such as the older 2.0.37 firmware that doesn't have a separate "Port Forwarding" section, which has been replaced with "Virtual Servers," which is confusing for beginners.
Before you start setting up, make sure: 1) your device does require a pass (check the program documentation), 2) you understand the security risks (an open port can become an entry point for attacks), 3) you have a static device. IP-address on the target device or set up binding MAC.
Preparation for the transfer: check the network and equipment
Before you go into the Redmi settings AC2100, There are a number of preparatory steps to be taken. IP-configuration of your local network:
- On Windows: Open the Command Prompt (Win) + R β cmd) and enter ipconfig /all. Find a line. IPv4-address.
- Nana macOS/Linux: Use the ifconfig or ip a command.
Remember or write down: Local IP devices (e.g. 192.168.31.100), MAC-address (required for binding), default gateway (usually 192.168.31.1 for Xiaomi).
Make sure the device is connected to the router via cable (Wi-Fi may crash)
Check that the device is static IP or-reserve DHCP
Temporarily disable firewall/antivirus on target device
Preparation of data: external IP router, ports for transfer, protocol (TCP/UDP)
-->
Pay special attention to the external IP-You can find it on sites like this. 2ip.ru If the address starts with 10., 172.16. or 192.168, you have a gray" IP, And the port rollover won't work without the provider settings:
- π Call for support from the provider to issue a white" IP (Maybe it's a paid option),
- π Use services like Ngrok or Cloudflare Tunnel to circumvent restrictions,
- π Alternatively, set up DDNS (dynamic DNS) In the router, if the provider changes IP.
β οΈ Note: Providers like Rostelecom or Beeline often give out "gray" IP Before you pass the ports, make sure you make that point, otherwise all efforts will be in vain.
Step-by-step: how to open a port on Xiaomi Redmi AC2100
Now, let's get to the point. This is the same as standard firmware 2.0.37 and later. If you have an older version, we recommend you update via Settings. β Firmware update.
Step 1. Log in to the routerβs web interface:
Open the browser and enter 192.168.31.1 (or miwifi.com β admin/If it doesn't fit, reset the settings with the Reset button. 10 seconds).
Step 2. Go to the port port forwarding section:
Path: Additional settings β Network β Virtual Servers (in some versions - Port forwarding) You can add up to 32 rules for rollover.
Step 3. Create a new rule:
Fill in the fields as shown in the table below. Example for Minecraft server:
| Parameter | Meaning | Explanation |
|---|---|---|
| Service Port | 25565 | The default port for Minecraft |
| Internal Port | 25565 | Must match Service Port if no redirect is used |
| Protocol | TCP | Minecraft is good enough. TCP, but sometimes it is required TCP/UDP or ALL |
| LAN IP | 192.168.31.100 | Local. IP device on which we are putting the port |
| Status | Enabled | Activate the rule |
Step 4: Save settings and restart the router through System Tools β Reboot. It's mandatory -- the rules of throwing only apply after the reboot.
1) Does the port block the firewall on the target device (stop temporarily),
2) Is the protocol correct (TCP/UDP),
3) Does the port conflict with other services (e.g., 80 is often occupied by the router's web server).-->
Popular ports and their purpose: a table for quick setup
To avoid guessing which ports to open, use our most popular service table. Note that some programs (such as uTorrent) require opening a range of ports rather than a single number.
| Service/Application | Port(s) | Protocol | Notes |
|---|---|---|---|
| Minecraft (server) | 25565 | TCP | Mods may be required 25566-25570 |
| CS:GO / Dota 2 | 27015-27020 | TCP/UDP | Steam also uses the same 27000-27015 matchmaking |
| IP-cameras (Hikvision, Dahua) | 80, 554, 8000 | TCP | 554 for RTSP-stream, 80 - web interface |
| Transmission / qBittorrent | 51413 or range | TCP | It is better to specify the range, for example 51413-51420 |
| RDP (remote-desktop) | 3389 | TCP | It's dangerous to open the Internet! VPN |
For torrent clients, it is important not only to open the port, but also to specify it in the program settings. For example, in qBittorrent, this is done in Tools. β Settings β Connection, field "Port for incoming connections".
β οΈ Attention: Ports 80 (HTTP) 443 (HTTPS) Often blocked by home users' providers.If you need these ports for a web server, consider using NGINX Redirected to a non-standard port (e.g. 8080).
Open Port Verification: 3 Reliable Methods
After you set up the dashboard, you need to make sure that the port is actually accessible from the Internet.
- π Online services: yougetsignal.com or canyouseeme.org. Enter the port number and run the check.
- π» Command Prompt: From another computer (not from your network) run: telnet [your external computer_IP] [Port: If the screen is empty or the cursor appears, the port is open. If the connection is reset, the port is closed.
- π± Mobile apps: Network Analyzer (Android) or Fing (iOS) have built-in port scanning tools.
If the port does not open, check:
- Is it correct? LAN IP in the settings of the pass (the device must be on the network),
- Hasn't changed? WAN IP Router (relevant to dynamic addresses),
- Is the port blocked by the provider (especially relevant for ports 80, 443, 25).
What if the port is open but the connection is not working?
How to Open Ports Without Getting a Hacker Attack
An open port is like an unlocked door to your network, and according to Kaspersky, 60 percent of home routers with abandoned ports are targeted for scanning in the first 24 hours to minimize the risks:
- π Use non-standard ports instead of 3389 for RDP Throw 3390 or 3399.
- π‘οΈ Set up firewall rules: At Redmi AC2100 This is done in additional settings. β Security β Firewall, allow access only to trusted IP.
- π Regularly update firmware: Vulnerabilities in older versions (e.g, CVE-2021-27561 Xiaomi allows attackers to bypass protection.
- π Use it. VPN: Instead of putting ports on the Internet, configure WireGuard or OpenVPN on a router. It's safer and more flexible.
It is especially dangerous to open ports for remote administration (e.g. 22 for the use of remote control). SSH or 3389 for RDP). If you need access to the router from the outside, it is better:
- Set up SSH authenticated by key (not by password),
- Use Cloudflare Tunnel or Tailscale for safe tunneling
- Restrict access by geolocation (in the router firewall).
π‘
An open port 80 or 443 will result in a scan of your computer. IP If you don't need a public web server, use it. NGINX Basic authentication or redirection to a non-standard port.
Frequent errors and their solutions: analysis of flights
Even experienced users face problems when throwing ports on Xiaomi Redmi AC2100. Here's the top.-5 errors and ways of correcting them:
| Problem. | Reason. | Decision |
|---|---|---|
| The port is not open, although the rule is created. | Double. NAT (two-way) | Turn off Wi-Fi on the providerβs router or put it in bridge mode |
| The rule of throwing disappears after rebooting | Resetting settings due to unstable firmware | Update your firmware to the latest version or roll back to a stable one |
| Outside IP It changes every day. | Dynamic IP provider | Set up. DDNS on the router (Additional settings) β DDNS) |
| Port open, but no connection is established | Firewall on target device | Turn off the firewall temporarily or add an exception for the port |
| You can't keep the pass rule. | Limitation on the number of rules (maximum 32) | Remove unnecessary rules or reset router settings |
If you encounter a "Conflict with existing rule" error, it means that the port is already being used by another rule. Check the list in Virtual Servers and delete duplicates.
- You do not sniff port 80 or 443 if the router is enabled by the Web server (disabled in Additional Settings). β USB-setting),
- The target device has a static IP or-reserve DHCP (Otherwise, after restarting the router, the rule will stop working).