Port rollover on Xiaomi router: a complete guide with examples for different models

Set up port forwarding on the Xiaomi router is a task that users face when organizing remote access to home devices, launching game servers or setting up IP-Despite the apparent complexity, the process boils down to several key steps: the assignment of static IP-Addresses to the device, creating a pass rule in the router's web interface and checking the health. 2026 Many users make mistakes in choosing the wrong protocol (TCP/UDP), Port conflicts or neglect of security.

In this article, we’ll look at port port scattering on popular Xiaomi models, from the budget Mi Router 4A to the flagship AX6000 and AX9000, taking into account the features of their firmware. You’ll learn how to avoid typical problems (such as dual NAT when connecting through a provider) and why it’s sometimes better to use DMZ instead of the classic dashboard. And for those who are afraid of making a mistake, we’ve prepared a checklist and FAQ with answers to frequent questions.

What is port port transfer and why it is needed

Port forwarding (or port forwarding) is a mechanism that allows you to redirect external requests from a particular router port to a particular device on the local network. Without this setting, all incoming connections are blocked by the router firewall by default, which protects the network from unauthorized access, but also limits the functionality of some services.

Examples of use:

• 🎮 Game servers: for Minecraft hosting, CS:GO Valheim friends need to connect to your home server via a dropped port (e.g. 25565 for Minecraft).
• 📹 IP-camera NVR: Remote viewing of video from Xiaomi Mi Home or other brands requires port port port port port port 80, 554 (RTSP) or 34567.
• 🖥️ Remote access: Connecting to RDP (port 3389) or SSH (port 22) to the home PC.
• 🌍 Web servers: If you have deployed your site on a Raspberry Pi or home server, port 80 rollover (HTTP) 443 (HTTPS) Make it available from the Internet.

It is important to understand that port rollovers open up access to your device from the internet, so it should only be used when necessary and with additional security measures (for example, changing standard ports or configuring fail2ban on the target device).

⚠️ Note: Before setting up the toss, make sure your provider does not use CGNAT (collective NAT). In this case, the external IP-The address will be dynamic and shared by multiple users, making it impossible to pass without additional services (for example, dedicated services). IP). You can check it out on the website. 2ip.ru — external IP It is similar to what the router gives in status. WAN, CGNAT absent.

Preparation for passover: assignment of static IP

Before you adjust the spread, you need to fix the device static IP-This is to ensure that the rollover rule does not break after the router is restarted or the lease expires. DHCP. There are two ways to do this:

1. IP backup in the DHCP router settings (recommended).
2. Manually configure static IP on a device (e.g., in PC network card settings).

Consider the first method on the example of the router Xiaomi AX6000:

1. Open the router’s web interface at 192.168.31.1 (or miwifi.com) and log in.
2. Go to the Local Network section → DHCP.
3. Find the device that needs the pass (for example, a PC with IP 192.168.31.100).
4. Click on the pencil icon next to the device and select the option to Reserve IP.
5. Save the changes.

Now, even after the router is restarted, the device will always receive the same IP. If your router does not support DHCP redundancy (such as the older Mi Router 3 models), set up static IP manually on the device itself, specifying:

• IP-address: 192.168.31.X (where X is a number from 2 to 254 not occupied by other devices).
• Subnet mask: 255.255.255.0.
• Gateway: 192.168.31.1 (IP of your router).
• DNS: 192.168.31.1 or public DNS (e.g. 8.8.8.8).

Make sure the device is connected to the router via cable or Wi-Fi

Write it down. MAC-target-point

Reserve IP in DHCP settings or manually configure static IP

Check communication with the device over the local network (ping)

-->

Step-by-step: port transfer on Xiaomi routers

The algorithm for setting port port throw on most Xiaomi routers is the same, but the names of menu items may differ depending on the model and firmware version. We will consider the universal method on the example of the firmware MiWiFi ROM (relevant to the AX6000, AX3000, Mi Router 4A, etc.).

Step 1. Log in to the web interface

• Connect to the router network via Wi-Fi or cable.
• Open your browser and go to 192.168.31.1 or miwifi.com.
• Enter the login and password (by default — admin/admin, unless changed).

Step 2: Go to the port port forwarding section

• In the main menu, select Additional settings → Redirect → Ports rollover.
• On some models, the path may look like a Network → Redirect → Virtual Servers.

Step 3: Creating a pass rule

Click Add the rule and fill in the fields:

Step 4: Conservation and application

• Click Save and wait for the router to restart (if required).
• Check that the rule appears on the active list.

Step 5: Checking the performance

To make sure the port is correctly ported:

1. Find out your external IP-website 2ip.ru.
2. From another device (such as a smartphone on the mobile Internet), try connecting to [your IP]:[port].
3. Use online port checking services like PortChecker.

💡

If the dashboard doesn’t work, try turning off the firewall on the target device (for example, Windows Firewall Windows Defender) or temporarily disable the antivirus. Also check if the provider is blocking incoming connections (relevant for some tariffs).

Features of the pass on different models Xiaomi

While the general principle of port port port port porting on Xiaomi routers is the same, there are nuances that depend on the model and firmware.

Xiaomi AX6000 / AX9000 (MiWiFi ROM firmware)

These flagship models support dual spread (at the same time for the IPv4 and IPv6), What is useful if your provider is IPv6-To enable a scattering for the IPv6:

1. In the Redirect section, select the IPv6 tab.
2. Add a rule, pointing out IPv6-Device address (can be found in the Local Network) → Devices).

Also available on these models is the DMZ (Demilitarized Zone) feature, which sprinkles all ports onto one device, and use it with caution, which reduces network security!

Xiaomi Mi Router 4A / 4C

On budget models, the interface is simplified, and the port-over section can be called Virtual Servers.

• 🔹 The diffuse only works for one external port per rule (the range cannot be specified, for example, 8000-9000).

Xiaomi Redmi Router AC2100

This model has an alternative OpenWRT firmware in some regions, and if you have one installed, the rollout is configured via:

1. Network → firewall → Port transfer.
2. Port ranges can be specified here (for example, 30000-30010 for qBittorrent).

⚠️ Attention: On routers with MiWiFi firmware ROM In 2022, there may be no port support for UDP-In this case, update the firmware through Settings. → Update the software or use alternative methods (e.g. UPnP if the device supports it).

Typical errors and their solutions

Even if you set up the port skid correctly, here are the most common problems and ways to fix them:

1. port not opened (checking services show "closed")

• 🔌 Problem: Firewall on target device blocks port.
• 🔧 Solution: Turn off the firewall temporarily or add an exception for the port:

netsh advfirewall firewall add rule name="Minecraft" dir=in action=allow protocol=TCP localport=25565

2. the external IP is not the same as that of the router

• 🔌 Problem: Provider uses the CGNAT (collective NAT).
• 🔧 Solution: Order from the provider dedicated IP (Use services like Ngrok or Cloudflare Tunnel to bypass CGNAT.

3. the spread only works on the local network

• 🔌 Problem: Port is dropped, but external devices can not connect.
• 🔧 Solution: Check that the external port does not conflict with other rules. Make sure the provider does not block incoming connections (relevant to mobile Internet). Try connecting via mobile Internet (not via Wi-Fi router).

4.Transmission works, but connection unstable

• 🔌 Problem: Dynamic IP The provider changes and customers lose their connection.
• 🔧 Solution: Use the service DDNS (For example, No-IP or built-in Xiaomi router: Register for No-IP and create a host. → DDNS and set up automatic updates IP.

Security: How to protect your network when you pass ports

Opening up ports on the Internet is always a risk, and attackers can scan networks for open ports and try to exploit vulnerabilities, and to minimize threats, follow these guidelines:

1.Change the standard ports

Many services use default ports (e.g., 22 for SSH, 3389 for RDP) that are often attacked by bots.

• 🔹 For example, instead of 22 for SSH Use 2222.
• 🔹 For Minecraft, 25570 can be used instead of 25565.

2. Limit access over IP

If you know what kind of IP-Users will connect to the addresses (for example, your work computer), limit access only to them:

• In the rollover rule, specify the permitted IP (if the router supports this function).
• On the target device, set up a firewall to block all IPs except trusted ones.