Port port transfer on the Xiaomi router is a task faced by gamers, owners IP-Camera users, torrent trackers and home servers, although it seems difficult, the process of setting up port forwarding on Mi Router devices is very difficult, AX3600 or AX6000 It takes no more than 10 minutes, if you know the key points, and the key is not to confuse the scatter with the scatter. DMZ (which opens all ports at once) and understand when to enable UPnP and when to manually configure.
In this article, we will learn how to properly configure port port port port port port port port over Xiaomi routers with MiWiFi and OpenWRT firmware, avoid common errors (such as conflict with a Windows firewall), and check that ports are really open, and also find out why sometimes even after all the manipulations the connection does not work โ and what to do about it.
Why You Need to Drop Ports on Xiaomi and When You Donโt Need It
Port forwarding allows external devices to connect to a particular device on your local network via the Internet. Without this setting, the router blocks all incoming requests by default - this is part of the basic network protection.
When the pass is mandatory:
- ๐ฎ Online Games (such as Minecraft, CS2, GTA Online, where you need to open ports for the server or ping booster.
- ๐น IP-Cameras (e.g. Xiaomi Mi Home Camera) if you want remote access without cloud services.
- ๐ป Home servers (NAS, Nextcloud, Plex or Remote Access RDP/SSH.
- ๐ Torrents (if the tracker requires an open port for distribution).
When no drip is needed:
- ๐ For normal surfing the internet, watching YouTube or streaming Netflix.
- ๐ฑ If all devices are connected to the same local network (for example, to print on a printer over Wi-Fi).
- โก When UPnP (Universal Plug and Play) is enabled, some programs (e.g. uTorrent, Steam) open ports automatically.
โ ๏ธ Note: Port overlays reduce network security; open ports can be targeted for attacks (e.g., password selection). SSH Use complex passwords and update the router's firmware!
If you are not sure if you need to pass, try first to enable UPnP in the router settings (Settings) โ Additionally. โ Many modern applications can work through it without manual configuration.
Preparation for pass: static IP port selection
Before you set up the spread, you need to fix the local IP-If you don't, the router can assign a new device to the device. IP through DHCP, and the dash will stop working.
How to tie a static IP on a Xiaomi router:
- Open the router's web interface at 192.168.31.1 (or miwifi.com).
- Go to Settings โ Local Network โ DHCP.
- Find the device you need to pass in the list and click โReserveโ.
- Write down the assigned one. IP (192.168.31.100 โ you will need it later.
If your Xiaomi model does not have a redundancy feature IP, set up a static address manually on the device itself (for example, on a Windows PC this is done in the Control Panel). โ Network control centre โ Change of adapter parameters โ Properties IPv4).
Now, you can decide on ports. Some applications require specific ports (see the table below), others allow you to choose any ports.
- ๐ข Use ports 1024 to 65,535 (ports below 1024 are often occupied by system services).
- ๐ For one device, you can pass several ports (for example, TCP 25565 and UDP 19132 for Minecraft).
- ๐ซ Avoid ports 80 (HTTP) 443 (HTTPS), If you donโt configure a web server, they are often blocked by providers.
| Annex/Device | Protocol | Ports (by default) |
|---|---|---|
| Minecraft (Java Edition) | TCP | 25565 |
| Minecraft (Bedrock Edition) | UDP | 19132 |
| CS2 / Steam | TCP/UDP | 27015-27050 |
| IP-Xiaomi | TCP | 80, 554 (RTSP) |
| uTorrent / qBittorrent | TCP | 6881-6889 (better) |
โ ๏ธ Note: If your Internet Service Provider is using CGNAT (For example, Beeline, MTS in some regions, port port port port forwarding will not work) IP-If not, you'll need to adjust it through the IPv6 or the service โDedicatedโ IPยป.
โ๏ธ Preparation for port port port transfer
Step-by-step: port transfer on Xiaomi Mi Router
Consider setting up on the example of the Xiaomi Mi Router router 4A Gigabit Edition (MiWiFi firmware) 3.x). Interface of other models (AX3600, AX6000, AIoT Router AC2350) It may be a little different, but the logic is the same.
Step 1. Open the router's web interface:
- Connect to the router network via Wi-Fi or cable.
- Enter 192.168.31.1 or miwifi.com.
- Sign in (the default password is on the router sticker).
Step 2. Go to the port port forwarding section:
- Select Settings โ Additionally. โ Port forwarding (port forwarding).
- Click "Add rule."
Step 3. Fill in the rule fields:
- Rule name: Any name that is understandable (e.g., Minecraft Server).
- Protocol: Select TCP, UDP or TCP/UDP (If you're not sure, choose both).
- External port: A port that will be opened "outside" (e.g., 25565).
- Internal port: A port on a local device (usually the same as an external one).
- IP-Address: Local IP devices (e.g. 192.168.31.100).
Step 4: Save the rule and restart the router:
- Click "Save" and wait for the settings to apply.
- Go to Settings. โ System system โ Reboot and restart the router.
Example of a completed rule for Minecraft:
Rule Name: Minecraft Server
Protocol: TCP
Outer port: 25565
Inland port: 25565
IP- Address: 192.168.31.100If you need to skip a range of ports (for example, for CS2), In the field "Outer port" specify the initial and final port through the dash: 27015-27050. Also, fill in the โInternal Portยป.
๐ก
If it doesnโt appear in the list after saving the rule, try updating the page (Ctrl+F5) or use another browser (e.g. Firefox instead of Chrome) sometimes cache interferes with the display of changes.
Port port transfer on Xiaomi with OpenWRT firmware
If your Xiaomi router runs on an alternative OpenWRT firmware (e.g, AX3600 or Mi Router 3G It's different with custom software, it's different. It uses a LuCI interface or a configuration file. /etc/config/firewall.
Method 1: Through the LuCI Web Interface
- Open 192.168.1.1 (address may vary) and log in.
- Go to Network โ Firewall โ Port Forwards.
- Click Add and fill in the fields: Name: Rule Name (e.g., "Plex Server: TCP or UDP. External port: External port: Port open from the outside (e.g. 32400 for Plex). Internal zone: lan. Internal IP address: Local IP Devices (e.g. 192.168.1.100) Internal port: Port on the device (usually the same as the external port).
Save & Apply
Method 2: Configuration file (for experienced)
Open the file. /etc/config/firewall through SSH (For example, using PuTTY) and add a rule to the config redirect section:
config redirect
option name 'Minecraft'
option src 'wan'
option dest 'lan'
option proto 'tcp'
option src_dport '25565'
option dest_ip '192.168.1.100'
option dest_port '25565'
option target 'DNAT'After editing, restart the firewall:
/etc/init.d/firewall restartโ ๏ธ Warning: OpenWRT may default to masquerading, which will prevent the pass from working. /etc/config/firewall There is a line option masq '1' Config Zone for wan.
Open Port Checking: 3 Reliable Ways to Check
After you set up the drip, you need to make sure the ports are actually open. Here are three proven methods:
1. Through online services
Use one of the following services to check ports:
- ๐ YouGetSignal is a simple tool without registration.
- ๐ PortChecker โ Supports range checks.
- ๐ก๏ธ ShieldsUP! (from Gibson Research) โ detailed analysis with explanations.
Enter the port that was splashed, and run the check. If the port is open, you'll see a message like, "Port X is open on." IP]ยป.
2. Through the command line (Windows/Linux)
On your PC or laptop, run the command:
telnet [your external IP] [port]If the port is open, the screen will remain empty (or a server greeting will appear), and if it is closed, you will see a "Could not open connection" error.
For Linux/macOS You can use Nc (netcat):
nc -zv [your external IP] [port]3. Through specialized utilities
- ๐ฅ๏ธ Advanced Port Scanner โ Scans ports on local or remote IP.
- ๐ง Nmap (for power users) โ a powerful tool with a team:
nmap -Pn -p [port] [your external IP]If the port does not open, check:
- ๐ Correctness of the input IP port in the router settings.
- ๐ก๏ธ Firewall settings on the target device (e.g. Windows Defender or iptables on Linux).
- ๐ Does the provider block the port (especially relevant for mobile Internet).
What to do if the port does not open?
Typical errors and their solutions
Even if you set up the port overlay correctly, it might not work, and we'll look at some of the most common problems and how to fix them.
| Problem. | Possible cause | Decision |
|---|---|---|
| The port is not open, although the rule is maintained. | Conflict with UPnP or DMZ | Turn off UPnP and DMZ In the router settings, then check the port again. |
| Port open, but no connection is established | Firewall on target device blocks port | Add an exception to the firewall (for example, in Windows Defender). โ Allow the program through the firewall). |
| The rule of throwing disappears after rebooting | Firmware failure or lack of memory | Update the routerโs firmware to the latest version or reset the settings to factory ones. |
| The port is open but only available on the local network. | Provider uses CGNAT (grey IP) | Order white from the provider IP or tune in IPv6 (if maintained). |
| You can't keep the pass rule. | Firmware restriction or incorrect data format | Try using another browser or reset the cache, and if it doesn't work, run the router to OpenWRT. |
Critical error: if your provider uses a dual service NAT (CGNAT), portage IPv4 The only solution is to order the allocated IP (fee) or switch IPv6 (If supported by the router and provider).
Another common mistake is to drop the port on the wrong local IP. For example, if you have reserved IP 192.168.31.100 for PCs, but the rule says 192.168.31.1 (router address), the pass won't work. Always double-check. IP!
๐ก
If the port does not open after all the manipulations, first check whether the provider gives you white. IP. Compare your external environment to this. IP (site 2ip.ru) with the address in the router settings (Settings) โ Status. โ Internet. If they're different, you have CGNAT.
DMZ UPnP: When they replace port port port overlay
Port rollover isn't the only way to open up a device from the internet: Xiaomi routers support two alternative features: DMZ And UPnP. Let's see when they're worth using.
DMZ (Demilitarized Zone)
DMZ It redirects all incoming ports to one device on the local network:
- ๐ฏ You need to open many ports for a single device (e.g., to test the server).
- ๐ You donโt know what ports the app needs.
How to turn it on DMZ Xiaomi:
- Go to Settings. โ Additionally. โ DMZ.
- Enable the function and specify the local IP device.
- Save the settings and restart the router.
โ ๏ธ Attention: DMZ It's a significant security loss, because it opens all the ports of the device to the Internet. Use only temporarily and disable when you don't need access. DMZ Devices with vulnerable software (such as older versions of Windows or routers with factory passwords).
UPnP (Universal Plug and Play)
UPnP allows programs to automatically open ports without manually configuring them.
- ๐ฎ Game Clients (Steam, Epic Games, Xbox Live).
- ๐ฅ Torrent clients (uTorrent, qBittorrent).
- ๐บ Media servers (Plex, Jellyfin).
How to turn on UPnP on Xiaomi:
- Go to Settings. โ Additionally. โ UPnP.
- Activate the function and save the settings.
Cons of UPnP:
- ๐ Potential security threat (Attackers can exploit vulnerabilities in protocol).
- ๐ Not all apps work properly with UPnP (for example, some games require manual tossing).
If you choose between manual spreading and UPnP, you should prefer manual settings, which are more reliable and safer. UPnP should only be enabled if you are confident in the security of devices on the network.