Port redirection on Xiaomi router: full instructions with examples

Port forwarding on Xiaomi router is a key function for gamers, developers, owners IP-camera-user P2P-Without the right setup, you won't be able to connect to your home server from the Internet, run a Minecraft server for friends, or access files remotely through the Internet. FTP. In this article, we will discuss how to configure port port port port port port port port port port port port on popular Mi Router models. 4A/4C, AX3600, AX6000 and others, avoiding the typical mistakes.

It's important to understand that port overlays open up access to your device from an external network, which may not be secure, and we'll show you how to minimize risks, choose the right protocols (TCP/UDP) and check the health of your settings. If you're a beginner, don't skip the security section!

Why do you need to port to Xiaomi?

Port forwarding allows you to redirect external requests from a particular router port to a particular device on your local network.

• 🎮 Game servers (Minecraft, CS:GO, Valheim will not be available to friends online.
• 📹 IP-Cameras (e.g. Xiaomi Mi Home Camera) will not be able to stream video remotely.
• 💻 Remote access to the PC through RDP or SSH will become impossible.
• 📤 FTP/HTTP-Servers will not be available for downloading files from the outside.

Example: if you run a Minecraft server on a PC with local IP 192.168.31.100 and port 25565, without a pass, friends will not be able to connect to it. Xiaomi router blocks external requests by default - they must be explicitly allowed.

Another important point is that port port overlay is different from UPnP (Universal Plug and Play). UPnP automatically opens ports for applications, but it's less secure. In manual mode, you control which ports are open and for which devices.

Preparation: What to Know Before Setup

Before you start the squash, follow a few mandatory steps:

1. Find out locally. IP-The address of the device you are setting up the pass for can be found in the device network settings or in the router web interface (Settings) → Local area network → Connected devices).
2. Reserve. IP-address DHCP, If you don't change it, then the router will stop working.
3. Check the outside. IP-router address (for example, on the site) 2ip.ru). If it is dynamic (changes when reconnecting), you will need a service. DDNS.
4. Select the protocol: TCP (for secure data transfer, for example, for web servers), UDP (for speed, for example, for online games), or both.

If your ISP uses CGNAT, port overlay may not work, as is common with mobile operators (MTS, Beeline) and some home tariffs. Check this out by trying to connect to an external IP from another device.

Also make sure that the target device (PC, server, camera) has a firewall turned off or exceptions configured for the desired ports. For example, in Windows, check the rules in Control Panel → Windows Defender Firewall → Additional settings.

Step-by-step: port port transfer on Xiaomi

Consider setting up on the example of the firmware MiWiFi (relevant for most models: Mi Router 4A, AX3600, AX6000, Redmi Router AC2100). the interface may be slightly different, but the logic is the same.

Find out the local IP of the target device |Reserve IP in DHCP|Select protocol (TCP/UDP)|Check external IP on CGNAT|Deactivate firewall on the device-->

Step 1: Connect to the router's web interface.

• Open your browser and type 192.168.31.1 (or miwifi.com for some models).
• Log in with your login and password (by default — admin/admin or listed on the router's sticker).

Step 2. Go to Additional Settings → Redirect → Port Flip (or Port Forwarding in English).

Step 3. Click Add the rule and fill in the fields:

Step 4: Save the rule and restart the router (optional, but recommended).

To check the health of the service, use online services like PortChecker or the command in the terminal:

telnet your external IP your port

If the port is open, you will see a message about a successful connection or a blank screen (for some protocols).

💡

If the spread is not working, check if the provider is blocking it. Some operators (for example, Rostelecom at some tariffs) by default close all incoming ports, in which case you will need a support call to unlock.

Common mistakes and their solution

Even with the right setup, port overlays may not work, and here are the typical problems and ways to fix them:

• ❌ The port is closed, although the rule is added Check: Is the firewall on the target device disabled, does the port conflict with other rules (e.g. UPnP). Is it being used? CGNAT (see spoiler above).
• ❌ Outside IP Changes after router reboot Solution: Configure DDNS (For example, through No-IP service or request static service from the provider. IP.
• ❌ The rollover only works on the local network Make sure you are testing the connection from a different internet connection (like mobile internet) and not over the same network.

Another common mistake is to indicate the wrong locality. IP-If the device receives the address IP down DHCP, It can change. Always reserve. IP customized DHCP router (section "Local network" → Tethering IP/MAC").

💡

If port overlay is not working, first check the external IP on CGNAT. This is the most common cause of failure, especially for mobile carriers.

Security: How to Protect Yourself When Passing Ports

Open ports are a potential vulnerability to attacks.

• 🔒 Use non-standard ports, for example, instead of 22 for SSH Select 2222 or a random number above 10,000.
• 🛡️ Restrict access by IP. In the rule of rolling some routers, you can specify the allowed external IP-address.
• 🔄 Regularly update the router firmware and software on the target device to close vulnerabilities.
• 🚫 Don't open unnecessary ports. Delete rules that are no longer used.

For mission-critical services (such as RDP or SSH), set up a VPN instead of port-dropping. This is safer because traffic is encrypted. On Xiaomi routers with OpenWRT firmware, you can deploy WireGuard or OpenVPN.

⚠️ Please note: Never open port 3389 (RDP) directly to the Internet without any additional protection. This is one of the most attacked services. VPN At least change the standard port.

If you’re setting up a game server spacing, consider alternatives like Hamachi or ZeroTier – they create a virtual LAN without opening ports.

Features of the pass on different models Xiaomi

The interface and port port port port port port capabilities may vary depending on the router model and firmware version.

On routers with OpenWRT firmware (e.g., AX3600 with alternative firmware), the rollover is configured via the /etc/config/firewall file or the LuCI web interface.

config redirect


option target 'DNAT'




option src 'wan'




option dest 'lan'




option proto 'tcp udp'




option src_dport '25565'




option dest_ip '192.168.31.100'




option dest_port '25565'




option name 'Minecraft'

If your router doesn’t support the right features, consider installing custom firmware. However, this voids the warranty and requires experience.

Alternatives to port port port port port transfer

If port port overlay is not working due to CGNAT or provider restrictions, use alternative solutions:

• 🌐 Cloud services: For game servers: Minecraft Realms, Steam Remote Play. FTP: Dropbox, Google Drive or Nextcloud (self-hosted).
• 🔗 VPN-ZeroTier, Tailscale or WireGuard create secure connections without opening ports.
• 🔄 Reverse Proxy: Services like Cloudflare Tunnel or Ngrok let you turn your local server out without a snoop.

For IP-Xiaomi cameras are often easier to use the official Mi Home cloud than to adjust the scatter. however, it depends on the model - some cameras (e.g. Xiaomi Mi Home Camera 360)°) require manual adjustment to access the RTSP.

⚠️ Note: Services like Ngrok provide temporary public services URL, Do not use them to transmit sensitive data without additional encryption.

FAQ: Answers to Frequent Questions