Skip to main content

Port Forwarding

Written by Sunny

Port Forwarding Configuration – Support Document

Overview

Port Forwarding allows external users from the internet to access internal LAN devices or services behind the router.

This is commonly used for:

  • Remote camera (CCTV) access

  • Remote desktop / server access

  • Hosting applications or web servers

  • IoT device access

  • Third-party integrations

Port forwarding works by mapping an external WAN port to an internal LAN IP address and port.

How to Configure Port Forwarding

  1. Navigate to Configuration → Port Forwarding

  2. Enter a Group Name

  3. Select:

    • Devices

    • Device Tags

    • Network

This defines where the port forwarding rule will be applied.

Create Port Forwarding Rule

Enter the following details:

  • Rule Name – Friendly name for identification

  • Protocol – Select TCP / UDP

  • External Port – Public port accessible from internet

  • IP Address – Internal LAN device IP

  • Internal Port – Port on LAN device where service is running

Click Create Port Forwarding

Multiple rules can be added using Add Port Forwarding Rules

Example Configuration

Rule Name

Protocol

External Port

Internal IP

Internal Port

Use Case

CCTV

TCP

8080

192.168.xx.xx

80

Remote camera access

RDP

TCP

3390

192.168.xx.xx

3389

Remote desktop

WebServer

TCP

8443

192.168.xx.xx

443

HTTPS hosting

How Port Forwarding Works

  1. External user connects to Router Public IP + External Port

  2. Router checks port forwarding rule

  3. Traffic is forwarded to Internal IP + Internal Port

  4. Internal device responds back through router

Important Requirements

  • Router must have Public WAN IP

  • Internal device must have Static IP

  • Service must be running on internal device

  • Firewall must allow the port

  • ISP should not block required ports

Troubleshooting Port Forwarding

If port forwarding is not working:

  • Verify WAN IP is public (not private NAT IP)

  • Check device reachable from router LAN

  • Confirm correct internal port/service

  • Ensure no duplicate or conflicting rules

  • Verify ISP port blocking

  • Reboot device after configuration

Best Practices

  • Avoid using default ports (security risk)

  • Use strong authentication on internal services

  • Limit exposure to only required ports

  • Maintain documentation of all rules

  • Remove unused port forwarding rules

Conclusion

Port Forwarding enables secure remote access to internal services when configured correctly. Proper planning, validation, and security practices are essential to ensure stable and safe network operation.

Did this answer your question?