Modern gaming, remote access to corporate databases, or setting up your own media server require a stable and reliable connection between devices. Often, the default security settings provided by the equipment manufacturer are insufficient for the proper operation of specific applications. In such situations, it becomes necessary to manually configure the router to ensure that external traffic can unimpededly reach the desired device on your local network.
The process of opening ports, known as port forwarding, is a critical configuration step for many online games, such as Minecraft, World of Tanks, or video surveillance systems. Routers of this brand Mercusys, a subsidiary of TP-Link, has a clear, yet sometimes hidden, interface where the necessary options may not be immediately obvious. In this article, we'll take a detailed look at how to properly open ports on a Mercusys router, avoiding common mistakes and ensuring maximum security for your network.
Before changing settings, it's important to understand that you're opening a "door" from the external network into your home. This requires precision: if you enter the wrong device IP address, traffic will simply be lost, and if you select the wrong protocol, the application will fail to connect. We'll cover not only the setup process itself but also the preparatory steps necessary for port forwarding to work reliably.
Why do you need port forwarding and how does it work?
By default, any home router acts as a strict guard, blocking all incoming connections from the internet unless you initiate the request yourself. This is a basic NAT (Network Address Translation) security mechanism that hides your devices behind a single public IP address. However, when you run a game server or want to access a security camera from another location, the external device needs to "knock on the door," and the router needs to know who to relay this knock to.
Imagine your router is a large office building with one main phone number (your external IP). Within the office, there are many employees (computers, consoles, cameras). When someone calls and asks to connect to the accounting department (the port for 1C), the operator (router) needs to know the accountant's extension number. Port forwarding is an instruction to the operator: "Connect all calls about accounting directly to extension 105."
What is this procedure most often used for? Gamers often need to open ports to improve connection quality in multiplayer games and resolve NAT errors. System administrators use port forwarding to enable remote access to workstations via RDP or SSH. It's also essential for smart home owners who need to forward ports for CCTV cameras or NAS storage.
Preparation: Static IP and Addressing
The foundation of a successful setup is a static IP address for the device being forwarded to. If your computer or console receives an address dynamically (via DHCP), the address may change after rebooting the router or the device itself. As a result, the configured forwarding rule will stop working, as it will lead nowhere. Therefore, the first step is assigning an address to the network adapter.
There are two ways to do this. The first option is to set up a static IP directly in the network settings of your Windows or macOS operating system. The second, more reliable option for a home network is to reserve an address in the router itself using the DHCP Reservation feature. In the interface Mercusys This is usually located in the section Advanced → Network → DHCP Server → Address Reservation.
To reserve an address, you'll need the device's MAC address. You can find it in the list of connected clients or on a sticker on the gadget. By binding the MAC address to a specific IP address (e.g., 192.168.1.50), the device will always receive the same address. This ensures that the firewall rule we'll create later will always point to the correct recipient.
Logging into the Mercusys router web interface
To manage security and routing settings, you need to log in to the admin panel. Modern routers Mercusys They often support management via a mobile app, but for fine-tuning ports, it is highly recommended to use the web interface from a computer, as it provides full access to all hidden functions.
Open any browser and enter the router's local address in the address bar. By default, this is most often 192.168.1.1 or mwlogin.netIf the default address was changed during initial setup, use the current IP address, which can be found in your PC's network connection properties. In the window that opens, enter the administrator username and password.
⚠️ Note: If you changed the password for the web interface and forgot it, you will need to reset the router to factory settings. The factory settings are usually located on a sticker on the bottom of the device.
The interface comes in two versions: classic (green) or new (blue, similar to TP-Link). The operating logic is similar, but the menu layout may differ. We're looking for the section responsible for advanced settings, often referred to as Advanced or the gear/tool icon.
Configuring Port Forwarding Rules (Virtual Servers)
The primary tool for opening ports in Mercusys and TP-Link routers is called "Virtual Servers." This is where you create a rule that tells the router to redirect incoming traffic from a specific WAN port to the LAN port of a specific device.
Go to the menu Advanced → NAT Forwarding → Virtual ServersClick the "Add" button to create a new rule. A form will open, which you must fill out as accurately as possible. A single error will result in the service not working.
- 📍 Service Port: The external port that will be visible to the internet. For standard services, you can select from the list, but for games, you often need to specify a specific range, such as 27015-27030.
- 🖥️ Internal Port: The port the application runs on within your network. This is usually the same as the external port, but may differ.
- 💻 IP Address: the same static IP address of the device that we recorded during the preparation stage. Carefully check each number.
- 🔄 Protocol: protocol type. Select
ALL, if you don't know exactly, orTCP/UDPSome games only require UDP, others TCP, so the universal option is often preferable.
After filling in the fields, save the rule. It will appear in the list below. Make sure the "Status" column is set to Enabled (Enabled). If there are multiple rules, they are applied sequentially, and the router checks them from top to bottom.
☑️ Check before saving
Specific settings for games and DMZ
Game consoles (Xbox, PlayStation) and some PC games require multiple ports to be open or have an open NAT. If manual port forwarding seems too complicated or doesn't work, you can use the DMZ (Demilitarized Zone). In this mode, the selected device is completely excluded from the router's firewall and gains direct internet access.
DMZ settings are in the same section. NAT Forwarding, but in the tab DMZActivate this feature, enter the IP address of your gaming console or PC, and save it. This solves 99% of connection issues in games, but it reduces the security of the device located in the DMZ.
⚠️ Caution: Never enable DMZ mode on your primary work computer where important data or passwords are stored. Use this method only for game consoles or devices that do not contain sensitive information.
For popular games, port lists are often published by the developers. For example, for Minecraft Java Edition, the standard port is 25565, and for CS:GO servers the range is used 27015-27030Always check the game's official documentation to avoid opening anything unnecessary.
List of popular game ports
Call of Duty: 3074 (UDP/TCP)|World of Tanks: 10200-10210 (UDP)|Minecraft: 25565 (TCP)|Xbox Live: 3074 (UDP)|PlayStation Network: 80, 443, 3478-3480 (TCP/UDP)
Common mistakes and how to solve them
Even a properly configured router can block traffic due to external factors. The most common issue is a "gray" IP address from your ISP. If your ISP assigns you an address in the 10.xxx, 100.xxx, or 192.168.xx range, you're behind double NAT. In this case, Mercusys router settings are useless, since the outside world sees your ISP's IP, not yours.
There's only one solution: call your provider and order a "Static IP" or "Dedicated IP" service. This is often a paid service, but it's essential for the proper operation of servers and cameras. Without a public IP address, port forwarding won't work, no matter how many settings you change.
Another common error is blocking by antivirus software or the built-in Windows firewall. You've opened a port on your router, but the computer's operating system is blocking the incoming connection. Check your Windows firewall settings and ensure that a rule has been created for your application to allow incoming connections.
| Problem | Possible cause | Solution |
|---|---|---|
| The port is closed for inspection. | Gray IP from the provider | Order a static IP from your provider |
| The rule doesn't work | The device's IP has changed | Assign IP address to DHCP Reservation |
| The connection is reset | Blocked by antivirus | Add an exception to the firewall |
| Invalid protocol | TCP is selected instead of UDP | Change the rule to ALL or UDP |
Security with open ports
Opening ports is always a tradeoff between convenience and security. Every open port is a potential entry point for attackers. Therefore, it's critical not to open ports "just in case" and to close them as soon as they're no longer needed. Never use simple passwords on externally accessible services.
Update your router firmware regularly MercusysManufacturers frequently release patches to address security vulnerabilities. You can check for updates in the section System Tools → Firmware Upgrade.
If you've opened ports for remote control (such as RDP or a camera's web interface), try changing the default ports to non-standard ones. For example, instead of the default 80 for the web server, use 8085. This won't protect you from a targeted attack, but it will protect you from automated scanners that search for vulnerabilities on standard addresses.
What should I do if my Mercusys router doesn't save port settings?
If the settings are reset after clicking "Save," try the following: 1) Make sure you're using a modern browser (Chrome, Firefox) and cleared the cache. 2) Check if parental controls or other priority rules are enabled that are blocking traffic. 3) Try resetting the router and setting it up again, as there may be a software glitch in the configuration.
Is it possible to open ports through the Mercusys app?
The Mercusys mobile app is primarily designed for basic management (Wi-Fi password, guest network). The Virtual Servers (port forwarding) feature is often missing or limited in mobile apps. For full configuration, use the web interface via a browser on your PC or phone.
Does opening ports affect internet speed?
Port forwarding itself doesn't affect internet speed. It merely changes the route data packets take. However, if you're setting up a server that will be actively used by other people, it can hog the bandwidth and reduce speed for other devices on the network.
Do I need to reboot my router after setup?
Changes typically take effect immediately. However, if you've changed DHCP settings or network parameters, it's recommended to reboot the router and client device so they receive the new addresses and apply filtering rules correctly.