How to Set Up Port Forwarding: Step-by-Step Guide by Router Brand

A plain-English guide to port forwarding on every major router brand. Find your router login, open the right ports, and keep your network safe.

Updated on
How to Set Up Port Forwarding: Step-by-Step Guide by Router Brand

Last updated: August 2026

Key Takeaways

  • Port forwarding follows the same recipe on every router: log into the admin panel, find the forwarding page, enter the port number and your device's local IP, and save. Only the menu names change by brand.
  • Reserve your device's IP address first so the rule does not break at the next reboot, and open only the specific ports you need.
  • On cellular and 5G home internet gateways, port forwarding usually cannot work at all — that is carrier-grade NAT, and the fix lives at a different layer.

Port forwarding works the same way everywhere: log into your router's admin panel, open the port forwarding page, enter the port number and the local IP address of the device that should receive the traffic, and save. The menus differ by brand, so this guide gives the exact path for every major router and ISP gateway — plus the honest answer for cellular gateways, where forwarding usually cannot work at all.

Your router normally acts like a doorman, blocking every connection your devices did not ask for. Port forwarding tells that doorman to let visitors on one specific port through to one specific device — which is exactly what a game server, a security camera you check remotely, or a self-hosted service needs.

Before You Start: Two Things That Prevent Headaches

First, find the local IP address of the device you are forwarding to. On Windows, run ipconfig in Command Prompt and read the IPv4 Address line; on Mac, it is under System Settings, then Network; consoles show it in their connection status screens. It will look like 192.168.1.150.

Second, give that device a reserved (static) IP in your router's DHCP settings. Without a reservation, the device can receive a different address after a reboot and your forwarding rule silently points at nothing — the single most common reason a working forward stops working. Most routers offer this as "DHCP reservation" or "address reservation" near the forwarding settings.

You will also need your router's admin address and login, usually printed on a sticker on the device. If the sticker is gone, here is how to find your router's IP address in under a minute.

Common Router Login Addresses

Brand Admin Address Where Forwarding Lives
Netgear routerlogin.net or 192.168.1.1 Advanced, Advanced Setup, Port Forwarding
TP-Link tplinkwifi.net or 192.168.0.1 Advanced, NAT Forwarding, Port Forwarding
ASUS router.asus.com or 192.168.1.1 WAN, Virtual Server / Port Forwarding
Linksys myrouter.local or 192.168.1.1 Security, Apps and Gaming
eero eero app only Settings, Network Settings, Reservations & Port Forwarding
Google Nest WiFi Google Home app Wifi, Settings, Advanced Networking, Port Management
Xfinity gateway 10.0.0.1 or Xfinity app Xfinity app, WiFi, Advanced Settings, Port Forwarding
AT&T gateway 192.168.1.254 Firewall, NAT/Gaming
Verizon Fios gateway 192.168.1.1 or myfiosgateway.com Advanced, Security & Firewall, Port Forwarding
Spectrum gateway 192.168.1.1 or My Spectrum app Advanced settings, Port Forwarding

Menu names and logins vary by model and firmware. The sticker on your device wins any disagreement with this table.

Step-by-Step Port Forwarding by Router Brand

Netgear (Nighthawk, Orbi)

Log in at routerlogin.net, then go to Advanced, Advanced Setup, Port Forwarding / Port Triggering. Choose Port Forwarding, select Add Custom Service, name the rule, enter the port or range, pick TCP, UDP, or both, enter your device's IP, and apply. Orbi systems use the same path through the web interface.

TP-Link (Archer, Deco)

On Archer routers, log in at tplinkwifi.net and go to Advanced, NAT Forwarding, Port Forwarding, then Add. On Deco mesh systems, use the Deco app: More, Advanced, Port Forwarding. Enter the service name, ports, protocol, and device, then save.

ASUS

Log in at router.asus.com and go to WAN, then the Virtual Server / Port Forwarding tab. Enable port forwarding, add a profile with the service name, external port, internal port, internal IP, and protocol, then apply.

Linksys

Log in at myrouter.local and go to Security, then Apps and Gaming, then Single Port Forwarding (or Port Range Forwarding for a range). Enter the application name, external and internal ports, protocol, and device IP, check Enabled, and save.

eero

eero is app-only and reservation-first: open the eero app, go to Settings, Network Settings, then Reservations & Port Forwarding. Add an IP reservation for your device under IPv4 Reservations & Port Forwards, then select Open a port, enter the port or range and protocol, and save — the steps match eero's official guide. If a forward will not take, confirm the reservation saved first; that ordering is the usual culprit.

Google Nest WiFi

Open the Google Home app and go to Wifi, Settings, Advanced Networking, then Port Management, and tap Add. Select the IPv4 tab, choose your device, and enter the internal and external ports — Google's port management doc notes that when forwarding a range, the internal and external ranges must match.

Xfinity Gateways

Xfinity moved port forwarding into the app: open the Xfinity app, go to WiFi, select your network, then Advanced Settings and Port Forwarding. Pick the device and the ports. If you use your own router behind a bridged gateway, forward on your router instead.

AT&T Gateways

Browse to 192.168.1.254, enter the access code from the gateway sticker, and go to Firewall, then NAT/Gaming. Choose a predefined service or create a custom one with your ports, point it at your device, and save.

Verizon Fios Gateways

Browse to 192.168.1.1 or myfiosgateway.com, log in with the sticker credentials, and go to Advanced, Security & Firewall, then Port Forwarding. Add the device, ports, and protocol, and apply.

Spectrum Gateways

Newer Spectrum equipment manages forwarding through the My Spectrum app under Advanced settings; older units expose it in the admin panel at 192.168.1.1. If you run your own router with Spectrum's modem, set the forward on your router using the brand steps above.

Port Forwarding on ISP, Cellular, and Fixed-Wireless Gateways

Cellular home internet gateways — UScellular, T-Mobile, Verizon 5G Home, and similar fixed-wireless services — generally cannot port forward at all, and it is not a settings problem. These services place IPv4 traffic behind carrier-grade NAT, where many customers share one public address, so inbound traffic stops at the carrier before it ever reaches your gateway. The check takes a minute: find your gateway's WAN address, and if it falls between 100.64.0.0 and 100.127.255.255, your line is behind CGNAT. The workarounds that actually function — IPv6, tunnels like Tailscale, and VPNs with port forwarding — are covered in our Double NAT vs. CGNAT guide.

DSL and fiber gateways from providers like Windstream and Frontier vary widely by model, but nearly all follow the generic flow: browse to the admin address on the gateway's sticker, log in, and look for Port Forwarding under an Advanced, Firewall, or NAT heading. If your service pairs the ISP's box with your own router, put the forward on your router — the brand steps above — and make sure only one device is routing.

How to Test That Your Port Is Open

With the rule saved and the target application running, visit canyouseeme.org from a device on your network and check the port. It tests from the outside, which is the view that matters. If it reports open, you are done. If it reports closed, work through the list below in order.

Troubleshooting: When Port Forwarding Does Not Work

The Port Still Shows Closed

Three quiet culprits cover most cases: the device's local IP changed (set the DHCP reservation), the protocol is wrong (try TCP and UDP both), or nothing is actually listening — the game, server, or camera software has to be running for the port to answer.

You Are Behind Double NAT

If your ISP's combo gateway and your own router are both routing, forwards die between them. Either forward the port on both devices, or better, fix it properly: our bridge mode guide for every major ISP shows how to make one device do the routing.

Your Router's WAN Address Starts With 100.64

That is carrier-grade NAT, and no forwarding rule on your equipment can overcome it — the blockage is inside your ISP's network. The CGNAT guide covers what works instead.

The Device's Own Firewall Is Blocking

Windows Defender Firewall, the Mac firewall, or a console's own settings can block a connection even when the router rule is perfect. Allow the specific application or port on the device itself and test again.

Keep It Safe

  • Open only the specific ports an application requires, never broad ranges for convenience.
  • Point forwards only at devices you control and keep updated.
  • Change your router's default admin password and keep firmware current.
  • Close ports when you no longer need them, and avoid DMZ except for brief testing — it exposes every port on a device at once.

When You Need a New Router

If your router's interface looks nothing like anything described here, it is probably old enough to be missing years of security updates — and modern budget routers make forwarding genuinely easy. Our best routers of 2026 roundup compares nine picks across every price point, and every one of them handles port forwarding, DHCP reservations, and UPnP cleanly.

Shop WiFi Routers

Frequently Asked Questions

Do I need port forwarding for gaming?

Usually no. Most modern games work through your router's automatic NAT and UPnP. Port forwarding is only needed when you have a strict NAT type, host a private game server, or play older titles that require specific ports.

Can you port forward on a cellular or 5G home internet router?

Usually not. Cellular home internet services — including UScellular, T-Mobile, and Verizon 5G Home — generally place IPv4 traffic behind carrier-grade NAT, so there is no public address for a forward to reach and no gateway setting that changes it. Check your WAN address: 100.64.x.x confirms it. Tunnels like Tailscale or a VPN with port forwarding are the working alternatives.

What is the difference between TCP and UDP?

TCP verifies every packet arrives, which suits web servers, remote desktop, and file transfers. UDP favors speed over verification, which suits games and video streams. When an application does not say which it uses, forward both.

Is port forwarding safe?

It is reasonably safe if you open only the specific ports you need, point them at a device you control and keep updated, and close them when finished. Opening wide ranges or forwarding to outdated devices is where the risk lives.

What is the difference between port forwarding and DMZ?

Port forwarding opens one or a few ports to one device. A DMZ exposes every port on a device to the internet at once, removing most of your router's protection. Use DMZ only for brief testing, never as a permanent setup.

Why did my port forward stop working after a reboot?

The device's local IP probably changed. Set a DHCP reservation in your router so the device always receives the same address, then update the forwarding rule to match it once.

Can I port forward without logging into my router?

Sometimes. UPnP lets applications open the ports they need automatically, and most routers ship with it enabled — consoles rely on it. It is convenient but less controlled, since any application on your network can open ports; disable it if you prefer to manage every rule manually.

Does port forwarding slow down my internet?

No. A forwarding rule only tells the router where to send traffic arriving on a specific port. It adds no processing overhead and has no effect on your speeds.

USA-Based Modem & Router Technical Support Expert

Our entirely USA-based team of technicians each have over a decade of experience in assisting with installing modems and routers. We are so excited that you chose us to help you stop paying equipment rental fees to the mega-corporations that supply us with internet service.

Updated on

Leave a comment

Please note, comments need to be approved before they are published.