Opening ports on Xiaomi router: a complete guide with examples

Port rollover on Xiaomi routers is a necessary procedure for organizing remote access to home devices, launching game servers (Minecraft, CS2), connection IP-Despite the unified MiWiFi interface, users often encounter errors due to firmware or network settings, this article covers all the steps: From network preparation to testing of open ports, taking into account the nuances of the latest software versions (2023-2026.).

It's important to understand that opening ports reduces network security if you don't follow the basic rules. For example, rolling over port 3389 for RDP without changing the standard password can lead to a hack in a few hours. We'll take a look at not only the technical side, but also the protections, from enabling DMZ to configuring fail2ban on the connected server.

Preparation for port port port transfer: network and equipment inspection

Before setting up your router, make sure your ISP does not block incoming connections. Many operators (such as Rostelecom or Beeline) use the default router. CGNAT — Technology where your router gets a “gray» IP-You can check this out on the website. 2ip.ru: if IP The same address in the personal account of the provider — CGNAT absent.

If CGNAT is detected, you will need to:

• 📞 Order a static white service provider IP (fee, ~100–300 ₽/moss).
• 🔄 Use services like Ngrok or Cloudflare Tunnel to circumvent restrictions (free but with traffic restrictions).
• 🔧 Switch to a tariff with real support IP (For example, “Home Internet Pro” at MTS).

Also check the router model. Some Xiaomi budget devices (such as the Mi Router 4A Gigabit Edition) have limited port port port port port port port port port port port port port port portability in stock firmware, and alternative software like OpenWRT or Padavan will help, but installing it requires unlocking the bootloader.

Log in to the router web interface and basic settings

To open ports, log in to the router control panel first.

1. Connect to the router network via Wi-Fi or cable.
2. Open your browser and type in 192.168.31.1 (for most Xiaomi models) or miwifi.com.
3. Enter the login and password (by default — admin/admin, unless changed).

If the page does not open:

• 🔌 Make sure the cable is connected to the port. WAN (usually blue).
• 🔄 Reset the router with the Reset button (hold 10 seconds).
• 📡 Check what your device is getting. IP-address automatically (in the settings of the network connection should be DHCP).

After you log in, update your router firmware: go to General Settings → Firmware Update. The current version of the software fixes vulnerabilities and adds support for new protocols (such as IPv6).

💡

If the router requests a password from your Xiaomi account but you haven’t tied it, reset the settings with the Reset button and reset the device without being linked to your account.

Static adjustment IP-device-address

Port rollover only works for fixed local IP devices. If your PC or server receives a DHCP address, it can change after the router restarts and the rollover will stop working.

1. Reservation of IP in the router (recommended):

Go to Additional Settings → Local Network → IP and MAC binding. Press Add, select the device from the list and save. Now the router will always give it the same IP.

1. Manual IP setting on the device:

On Windows: Control Panel → Network & Internet → Network Control Center → Change Adapter Settings. Select Connection, click Properties → IP version 4 and enter data manually (e.g., 192.168.31.100 with 255.255.255.0 mask and 192.168.31.1 gateway).

Critical error: If you assign a static IP manually, but it falls within the DHCP range of the router (e.g. 192.168.31.2-192.168.31.100), there will be an address conflict. Always check the DHCP range in the router settings (Local Area → DHCP Settings) and select the IP outside of it.

Port Forwarding on the Xiaomi router

Now, let's get to the main setting. In the router control panel,

1. Open the section Additional settings → Redirect → Port forwarding.
2. Click "Add rule."
3. Fill in the fields:

• 📌 Rule name: arbitrary (e.g., Minecraft Server»).
• 📡 Protocol: Select TCP, UDP or TCP/UDP (Most games and services are suitable TCP).
• 🔢 External port: port that will be open from the outside (e.g. 25565 for Minecraft).
• 🔄 Internal port: port on a local device (may coincide with an external port).
• 🖥️ IP-address: static IP The device for which you open the port.

Example for Minecraft Server:

Name: Minecraft


Protocol: TCP




Outer port: 25565




Inland port: 25565




IP- Address: 192.168.31.100

Once the rule is saved, the router will restart. If the port does not open, check:

• 🔥 firewall Windows/Linux: It can block incoming connections. Open the port in the firewall settings.
• 🔄 Double. NAT: If you have two routers (for example, from a provider) + Xiaomi, the sling needs to be configured on both.
• 📡 UPnP: If it's on, it can conflict with manual rules. Turn it off in Additional Settings → UPnP.

The port is not used by another service.|IP-address|The protocol was chosen correctly.|The external and internal ports are the same (unless you need to mask)|The rule is saved and applied (the router has restarted)-->

DMZ settings and alternative methods of transfer

If port rollover is not working or you need to open all ports for a single device (for example, for testing), use DMZ (Demilitarized Zone). This redirects all external connections to the selected IP, which is convenient but extremely insecure.

To enable DMZ on Xiaomi:

1. Go to Additional Settings → Redirect → DMZ.
2. Enter the static IP device.
3. Save the settings and restart the router.

⚠️ Attention: DMZ expose all device ports to the Internet, including vulnerable services (e.g., Telnet or FTP). Use only temporarily and necessarily:

• 🔒 Set up a firewall on your device (e.g., ufw allow). 22/tcp for SSH).
• 🔄 Disable unnecessary services (systemctl stop) apache2).
• 🛡️ Update to the latest version.

Alternative methods of dripping:

• 🌐 Cloud spread: Ngrok or LocalXpose services create a tunnel without router settings.
• 🔗 IPv6: if the provider supports IPv6, You can open the port directly via firewall-cmd (Linux).
• 🔄 Double pass: if you have two routers, set up the pass on the first (provider) to the IP The second (Xiaomi) and then the target device.

Open port testing and troubleshooting

After you set up the dashboard, check if the port is available from the Internet.

• 🌍 YouGetSignal – Checking a specific port.
• 🔍 PortChecker – Supports port ranges.
• 🛡️ On Linux sudo iptables -A INPUT -p tcp --dport 25565 -j ACCEPT sudo ufw allow 25565/tcp ⚠️ Note: If you are testing a port from the same device you are sniffing to (for example, from a PC behind a router), use an external port. IP Or a domain. Local connection. 127.0.0.1 or 192.168.x.x bypass NAT, And the port may appear closed, even though it's open to external connections. Security: how to protect open ports. Open ports are a potential vulnerability: 🔐 Change the standard passwords: SSH (port 22), RDP (3389), FTP (21). Use generators like Bitwarden. 🔄 Limit the range IP: In the squash rule, specify the permitted IP (For example, only for your work network. 🛡️ Use it. fail2ban: program IP After several failed attempts to connect. Install on Linux: Sudo apt install fail2ban sudo systemctl enable fail2ban For game servers (such as Minecraft): 🎮 Set up a whitelist (whitelist)=true in server.properties). 🔒 Turn it off. RCON, if you don't use. 📡 Update your server software regularly, if you want to access files remotely, instead of opening ports. FTP or SMB (It is not safe!) use it: 🌐 Nextcloud + Let’s Encrypt (HTTPS). 🔗 Syncthing (P2P, portless). 📦 SFTP through SSH (Port 22 with an authentication key). 💡Never open ports 135-139 (SMB), 445 (SMB over IP), 3389 (RDP) without extreme necessity – they are most often scanned by bots for attacks. FAQ: Frequent questions about port port port transfer on Xiaomi ❓ Why is the port still closed after the rollover? The reasons may be: The provider uses the port. CGNAT (check IP on 2ip.ru). Firewall on the device blocks the port (turn it off temporarily for the test). IP-The device address has changed (set up static). IP). The port is occupied by another service (check via netstat or ss). ❓ How to open the port for IP-For cameras (e.g. Xiaomi Mi Home Camera): Assign the camera a static camera IP Router, run the ports. TCP 80 (HTTP) and TCP 554 (RTSP). In the camera settings, enable access to RTSP (usually in the "Network" section. DDNS (For example, No-IP, if you have a dynamic IP. ⚠️ Do not open access to the camera without a password – this will allow anyone to view video! ❓ Can I open ports without static? IP Yes, but with limitations: Use DDNS (For example, DynDNS or No-IP for linking a domain to a dynamic domain. IP. Set up Cloudflare Tunnel or Ngrok to get around CGNAT. For games (e.g, CS2) Sometimes you get UPnP, but it's less reliable. IP The connection will break and you will need to reconnect. ❓ How to close the port after use? To remove the rollover rule: Go to Additional settings → Redirection → Port forwarding. Find the rule you want and click Delete. Save the settings and reboot the router. Also check if it's disabled. DMZ (Is the port in the firewall of the device closed. ❓ Does port port port port port port porting work on Xiaomi routers with alternative firmware? Yes, but the setting is different: OpenWRT: rollover rules are configured in the /etc/config/firewall or through the LuCI web interface. Padavan: section NAT → Port Forwarding, a stock interface. Advantages of alternative firmware: Support IPv6 And WireGuard, more flexible firewall rules, no link to Xiaomi account. ⚠️ Installation of custom software can deprive warranty and damage the router in case of errors!