Modern Wi-Fi routers Xiaomi routers, such as the popular Mi Router 3, 4 Pro, or AX3600, offer excellent performance, but their default security settings often block incoming connections. This can be a problem for gamers facing the "Strict" NAT type or users who need to run torrent client or remote serverUnderstanding how to manage network ports is key to ensuring your equipment is fully functional.
In this article we will analyze the process port forwarding (Port Forwarding) on devices Xiaomi Mi WiFiWe'll cover not only the standard web interface procedure but also important nuances related to dynamic IP addresses and security protocols. Proper configuration will allow you to get the most out of your internet connection without having to purchase additional services from your provider.
Before making any configuration changes, it's worth noting that all actions are performed through the admin panel. It's accessible via the standard URL, but the interface may differ slightly depending on the firmware version (Chinese or global). It is critical to know the exact IP address of the device to be served in advance, since ports are bound to it. Without this step, further settings will not make sense.
Preparing to set up network infrastructure
The first step to opening ports is to find the IP address of the device you're configuring. Xiaomi routers, like most modern routers, use the protocol. DHCP, which automatically assigns addresses to devices on the local network. The problem is that when you reboot your computer or console, this address may change, and the rules you created will stop working, as they will lead "to nowhere."
To avoid a situation where static IP "leaves," you need to reserve an address for a specific MAC address of the network card. This can be done in the LAN or DHCP server settings section of the router interface. You select the device from the list of connected clients and assign it a permanent address, for example, 192.168.31.100Now, no matter how many times you reboot the device, it will always receive this address.
Before starting work, we also recommend making sure you're connected to the router via cable or a stable Wi-Fi signal. Interrupting the connection while making changes to network tables can result in losing access to the control panel. If you're using a wireless connection, make sure the signal is strong and your laptop's battery is charged.
⚠️ Warning: Changing DHCP settings and network rules may temporarily interrupt your internet connection. Make sure you have access to your router even without a WAN connection so you can reset the settings if necessary.
Login to the Xiaomi Mi WiFi admin panel
To manage security settings and ports, you need to log in to the router's web interface. Open any browser on a device connected to the Xiaomi network and enter the default gateway address in the address bar. By default, for devices Mi WiFi this is usual 192.168.31.1 or domain name miwifi.comIf the default addresses don't work, check your computer's network card settings; the "Default Gateway" field should show the current IP address.
After entering the address, the system will ask for an administrator password. Please note that this is not the Wi-Fi network password, but a separate access code for managing the router that you set during initial setup. In some cases, especially on Chinese firmware versions, you may be required to log in using an account. Xiaomi Account or using a mobile application Mi Home, if the web interface is limited.
The control interface may be presented in English or Chinese, depending on the region where the device is sold. Key sections we'll need often have icons that resemble a shield or gear. Navigation is usually intuitive, but knowing the exact section names in English is a challenge (Settings, Advanced, Port Forwarding) will significantly speed up the process of searching for the options you need.
What to do if you forgot your administrator password?
If you don't remember your control panel password, the only safe way to regain access is to perform a factory reset (hard reset) of the router. To do this, locate the reset hole on the router's case, press it with a paperclip, and hold it there for 5-10 seconds until the indicator light flashes. After this, you'll need to reconfigure the router, including the Wi-Fi password.
Setting up a static IP address for a client
As mentioned, port forwarding is impossible without binding it to a specific address. In Xiaomi routers, this function is often located in the [Port Forwarding] section. Advanced Settings -> LAN Settings or DHCP ServerYou need to find the Client List and select your device by name or MAC address.
After selecting the device, enable the "Static IP Assignment" or "Address Reservation" option. In the IP address field, enter the desired address to be assigned to the device. Make sure it is in the same subnet as the router itself. For example, if the router has an address 192.168.31.1, then the client can be assigned 192.168.31.50.
Save the changes. Now the router will always assign this address to your device. This is the foundation for the rules. NAT (Network Address Translation). Without this step, after a router reboot, forwarding rules may no longer work, as they will refer to an old, no longer valid IP address.
☑️ Check before forwarding ports
Port Forwarding Process
The main setup stage is located in the section that is most often called in the Xiaomi interface Port Forwarding, Virtual Servers or NATIn some firmware versions, this item is hidden in the menu. Advanced -> Port ForwardingHere, a new rule is created that tells the router: "Forward all traffic coming to port X from the external network to device Y on the internal network."
When creating a rule, you will need to fill in several fields. In the field Name (Name) Enter any convenient designation, for example, "Minecraft Server" or "PS5 Gaming". In the field Protocol select protocol: TCP, UDP or BOTH (both). Games often require both protocols, while web servers only need TCP. In the field External Port (External port) specify the port number that will be open to the Internet, and in the field Internal Port (Internal port) — the port the service runs on your device. They are often the same.
In the field Internal IP (Internal IP) Enter the static address you reserved earlier. Once all fields are filled in, click the button. Save or ApplyThe rule will take effect immediately, and the corresponding port will become accessible from the external network.
| Parameter | Description | Example of meaning |
|---|---|---|
| Name | Rule name for convenience | WebServer |
| Protocol | Network protocol type | TCP/UDP |
| External Port | Port for access from the Internet | 8080 |
| Internal IP | The device's address on the local network | 192.168.31.100 |
| Internal Port | Service port on the device | 80 |
Using DMZ mode for gaming consoles
If forwarding individual ports seems too complicated for you, or the game requires opening a large number of ports that are difficult to track, you can use the mode DMZ (Demilitarized Zone). This mode places the selected device outside the router's main firewall, redirecting all incoming traffic to it that isn't processed by other rules.
To activate DMZ, find the appropriate section in the security or WAN settings. You will need to enable the feature and enter the IP address of your gaming console (PlayStation, Xbox, Nintendo Switch) or PC. This is guaranteed to resolve NAT type issues, making it "Open" (NAT), which is ideal for online multiplayer.
However, using a DMZ carries security risks. A device placed in the DMZ becomes completely visible to the external network and vulnerable to attack. Therefore, it is strictly not recommended to use this mode for personal computers with important data or office equipment. A DMZ is only suitable for gaming consoles whose security does not rely on router ports, or for test servers in an isolated environment.
⚠️ Note: Xiaomi firmware interfaces are updated regularly. The location of the "Port Forwarding" or "DMZ" menu items may change. If you don't see these items, look for sections labeled "Security," "Firewall," or "NAT."
Diagnostics and checking of open ports
After completing all the settings, you need to verify that the ports are actually open and working correctly. Simply saving the settings isn't enough, as there may be other obstacles in the chain, such as antivirus settings on your PC or blocking by your ISP.
You can use online services to check, such as 2ip.ru, PortCheckTool Or use specialized websites for checking ports. Enter the port number you've opened and run the test. The service will attempt to establish a connection to your router. If you see the message "Port is Open," the setup was successful.
If the port is shown as closed, check the following:
- ✅ Is the device's IP address specified correctly in the forwarding rule?
- ✅ Is the built-in Windows firewall (Windows Defender) blocking the incoming connection?
- ✅ Is the application using the port you opened (check the program settings).
- ✅ Does your provider use CGNAT technology (more on this below).
It's also worth remembering that some games and applications use random ports for each connection. In such cases, static port forwarding may not provide a permanent effect, and it's better to rely on technologies like UPnP (Universal Plug and Play), which allows applications to open the necessary ports automatically. UPnP is usually enabled by default in Xiaomi routers, but its status can be checked in the same Port Forwarding settings.
What should I do if the port is closed even though the settings are correct?
If you're confident your router settings are correct, but the port is still blocked, the problem may be with your ISP. Many ISPs use CGNAT technology, which means subscribers don't receive a unique, public IP address but are assigned a shared IP address. In this case, port forwarding on the router is impossible. The solution is to call your ISP and order a "Static IP" or "Dedicated IP" service, which is often a paid option.
Is it safe to open ports on a router?
Opening ports creates potential "entries" into your network. This is safe as long as ports are open for trusted applications (games, torrents) and the receiving device's software is up-to-date. Opening ports for outdated services or leaving the router's admin panel (port 80 or 8080) accessible from the outside world is dangerous. Always use strong passwords and don't open ports unnecessarily.
What is the difference between TCP and UDP when forwarding?
TCP (Transmission Control Protocol) guarantees data delivery and order, which is important for websites and files. UDP (User Datagram Protocol) sends data without acknowledgement, which is faster but less reliable, making it critical for online gaming and video streaming. If you're unsure which protocol you need, select "Both" or create two identical rules for TCP and UDP.