The modern pace of life often dictates the need to access a workstation from anywhere in the world. The ability to control a home computer while in the office or traveling has ceased to be the preserve of select IT professionals and has become an everyday necessity for many users. Remote access via WiFi router allows you to solve work tasks, run heavy programs, or simply check the system status without being physically near the device.
However, simply turning on your computer will not allow you to connect to it from an external network without prior configuration. Router By default, it blocks incoming connections from the internet, protecting your local network from unauthorized intrusion. To bypass this restriction legally and securely, you need to properly configure your network settings and the router itself.
In this article, we'll cover all the steps involved in setting up a remote connection. We'll cover assigning a static address, setting up port forwarding rules, and using the protocol. RDPUnderstanding these processes will help you create a reliable communication channel that operates stably and securely.
Preparing the operating system and network settings
The first step to establishing stable remote access is to properly configure the computer you plan to connect to. Without a fixed internal address, the router won't know where to forward incoming requests from the external network. The dynamic IP assigned by the DHCP server may change after a reboot, resulting in a disconnected connection and the inability to log in again.
First, you need to go to your operating system's network adapter settings. In Windows, this is done through the Control Panel or Network Settings. You need to find the active connection, usually called Ethernet or Wireless network, and go to the IPv4 protocol properties. Here, it's important to enter a static IP address that's within your local network range but not included in the pool of addresses automatically assigned by the router.
⚠️ Attention: When choosing a static IP address, make sure it doesn't match the router's default gateway address or is already in use by another device on the network. A conflicting IP address will result in network connectivity loss for both devices.
At this stage, it's also worth checking whether the remote desktop feature is enabled in the system itself. In Windows, this setting is located under "System" -> "Remote Desktop." You need to enable the "Enable Remote Desktop" switch and ensure that the user account you plan to log in with has a password. Empty passwords are often blocked by default system security policies.
☑️ Preparing your PC for remote access
Setting up static IP and DHCP reservations
There are two main ways to assign an address to your computer: manually assigning it in Windows or reserving it via DHCP on your router. The latter option is often more convenient, as it allows you to centrally manage the addressing of all devices in your home. To do this, you'll need to log into your router's web interface and enter its address (usually 192.168.0.1 or 192.168.1.1) in the browser's address bar.
After authorization, find the section responsible for local area network (LAN) settings or the DHCP server. In the menu TP-Link This may be called "Address Reservation" Asus - "DHCP Server" -> "Manually Assigned IP", and in Mikrotik — "Leases." You need to find your computer in the list of connected devices (use the MAC address of the network card as a guide) and assign the selected IP address to it. Now, even if you reset the network settings on your PC, the router will always assign the same value.
Using a reserved address significantly simplifies network management. You won't have to check your current IP address every time via the command line. This also prevents situations where, after a long power outage, the router assigns a new address to the computer, causing all port forwarding rules to stop working.
Port Forwarding on a Router
The key point in organizing external access is setting up port forwardingBy default, the router acts as a firewall, hiding all local network devices from the outside world. To ensure that an external request coming to the router's WAN port reaches a specific computer, you need to create a rule that explicitly specifies: "Send all traffic coming to port X to internal IP address Y."
Go to the router settings section, usually labeled "Port Forwarding," "Virtual Server," "NAT," or "Forwarding." You'll need to create a new entry. In the "Internal IP" or "Server IP" field, enter the static address of your computer that we configured earlier. In the "External Port" and "Internal Port" fields, enter the Remote Desktop Service port number. The standard port for the RDP protocol is 3389.
However, using the standard port 3389 makes your computer a target for automated security scanners that constantly scan the internet for open RDP ports. It is recommended to change the external port to a non-standard value, such as 53389, while leaving the internal 3389 unchanged. This is a simple security measure that will significantly reduce the number of unauthorized access attempts in your system logs.
| Setting parameter | Meaning for RDP | Description |
|---|---|---|
| Service Name | RemoteDesktop | Custom rule name |
| Internal IP | 192.168.1.X | Static IP of your PC |
| External Port | 53389 | External connection port |
| Internal Port | 3389 | Standard Windows RDP port |
| Protocol | TCP | Data transfer protocol |
After saving the settings, the rule takes effect immediately. However, keep in mind that changes to the router configuration may require a device reboot, although this happens automatically on modern models. Check the rule's status in the list—it should be marked as "Enabled" or "Active."
Remote access with dynamic IP (DDNS)
Most home internet service providers don't provide a static "public" IP address, but rather a dynamic one, which changes every time the router reconnects or once a day. In this case, knowing your current IP address won't help, as it will change tomorrow. The solution to this problem is technology. DDNS (Dynamic DNS).
The technology works by linking your router's changing IP address to a permanent domain name. The router automatically monitors changes to its external address and sends updated information to a dedicated server. In the remote connection program, you'll use a permanent name, not IP numbers, such as myhomepc.ddns.net.
Many modern routers have built-in support for free DDNS services such as No-IP, DynDNS or the manufacturers' own cloud services (KeenDNS, Asus DDNS, Mikrotik Cloud). Simply register on the service's website, create an account, and enter the information you receive (login, password, domain) into the appropriate section of your router's settings.
What if the provider uses CGNAT?
If your router receives an address in the 10.xxx or 100.xxx range, you're behind your ISP's NAT. In this case, port forwarding and DDNS won't work. The only solution is to request a static IP from your ISP or use tunneling software like ZeroTier or TeamViewer.
Using third-party programs for remote control
If setting up a router seems too complicated or impossible due to ISP restrictions, specialized programs can help. They create a secure virtual network (VPN) between devices or use their own servers to forward the image. This is the easiest way. How to access a computer through a Wi-Fi router without deep technical knowledge.
Popular solutions like TeamViewer, AnyDesk or RustDesk No port configuration is required. Simply install the client on both computers and enter your ID and password. More advanced users can deploy their own server. Tailscale or ZeroTier, which create a secure mesh network, making your home computer accessible via a local IP, as if you were at home.
The advantage of these methods is that they bypass NAT and dynamic IP limitations. However, connection speed in this case depends on the bandwidth of the intermediary servers (unless P2P mode is used), which can be critical when working with graphics or large files. For server administration or text processing, this is an excellent option that doesn't require tweaking the router settings.
Security issues when opening ports
By opening ports on your router, you're literally breaching the wall of your local network. Therefore, security is a major concern. The RDP protocol has had numerous vulnerabilities in the past, and although they've been patched in modern versions of Windows, the risk remains. Never use simple passwords like "12345" or "password."
It's recommended to use complex combinations of letters, numbers, and special characters at least 12 characters long. Enabling two-factor authentication is also a great addition if you use third-party gateways or programs. If you've configured port forwarding only for work, it's a good idea to disable this feature in your router when not needed or use an access schedule.
⚠️ Attention: Regularly update the operating system and antivirus software on the computer you access remotely. Vulnerabilities in the operating system can allow an attacker to bypass password protection.
Monitor your Windows security logs. If you see multiple failed login attempts, this indicates that your port is being scanned. In this case, changing the external port to an even more exotic one or temporarily blocking access from certain IP addresses through the router's built-in firewall may help.
Diagnosing and resolving connection problems
Even with proper configuration, connection issues may arise. First, check if your computer is accessible on the local network. Try connecting from a laptop or phone on the same WiFi network using the internal IP address. If this doesn't work, the issue is with Windows settings, not the router.
If everything works locally, check your external IP. Go to the website. 2ip.ru From the computer you're connecting to, and compare the address with the one you see from an external device (for example, via mobile data). If the addresses are different, you're behind your provider's NAT, and port forwarding is impossible without obtaining a public IP address.
A common problem is that antivirus software or Windows Firewall blocks incoming connections. Try temporarily disabling the firewall for diagnostic purposes. Also, make sure the network profile in Windows is set to "Private" and not "Public," as many services are hidden by default in the public profile.
Why does the connection drop when I log in?
A common cause is attempting to log in using the same account that's already active locally. Windows may block concurrent sessions or forcibly terminate the local one. Use a different account for remote login.
Is it possible to access a computer if it is sleeping?
By default, no. The computer must be turned on. However, you can configure the Wake-on-LAN (WoL) feature, which allows you to wake the PC with a special network packet. This requires support from the motherboard, network card, and router, which must be able to send "magic packets" on a schedule or request.
Is it safe to use port 3389?
Using the standard port 3389 makes you an easy target for bots. Be sure to change the external port in your forwarding settings to a non-standard one (for example, 3399 or 54321) and use very complex passwords. Ideally, connect via a VPN.
Why isn't RDP working on Windows Home?
The Windows Home edition doesn't have a built-in remote desktop server; it can only act as a client. To set up access on this version of the OS, you'll need to use third-party programs (TeamViewer, AnyDesk) or upgrade to the Pro edition.
How to find out your external IP address?
The easiest way is to search for "my IP" or visit specialized websites. However, if you have a dynamic IP, it can change at any time, so for constant access, it's best to set up DDNS.