Port forwarding allows approved internet traffic to reach a specific device or service on your local network, such as a gaming console, web server, IP camera, or remote desktop application. The steps below will help you configure port forwarding, verify that it is working correctly, troubleshoot common issues, and follow security best practices to help protect your network.

1. Identify the Device or Service That Requires Port Forwarding

Determine which device or application needs to accept incoming internet connections.

Common examples include:

• Gaming consoles
• Web servers
• IP cameras
• Remote desktop services
• Media servers
• Network-attached storage (NAS) devices

Before continuing:

1. Review the application's documentation.
2. Identify the required port number or port range.
3. Determine whether the application uses TCP, UDP, or Both.

Having the correct information ensures your forwarding rule is configured properly.

2. Assign a Static IP Address

Port forwarding rules must always point to the same device.

To prevent the device's IP address from changing:

1. Assign a static IP address on the device, or
2. Create a DHCP reservation in your router.

3. Sign In to Your Router

Access your router's administration interface.

1. Open a web browser.
2. Enter your router's IP address (commonly 192.168.0.1 or 192.168.1.1) into the address bar.
3. Sign in using your administrator username and password.

If you do not know your router's login credentials, consult the manufacturer's documentation or your network administrator.

4. Locate the Port Forwarding Settings

Navigate to the section used to manage incoming connections.

Depending on your router, this section may be named:

• Port Forwarding
• Virtual Server
• NAT
• Applications & Gaming

The exact name varies by router manufacturer and firmware version.

5. Create a Port Forwarding Rule

Create a forwarding rule using the information provided by your application or service.

Typical settings include:

• Rule Name (optional but recommended)
• External Port
• Internal Port
• Protocol (TCP, UDP, or Both)
• Local IP Address of the destination device

After entering the required information:

1. Save or apply the configuration.
2. Verify that the rule appears in the forwarding list.

Create forwarding rules only for trusted applications or services that require remote access.

6. Configure the Device Firewall

Port forwarding alone does not guarantee that incoming traffic is allowed.

1. Ensure the destination device's firewall allows inbound traffic on the required port.
2. Create an allow rule if necessary.
3. Avoid disabling the firewall except during temporary troubleshooting.
4. Re-enable the firewall immediately after testing.

7. Restart Your Router and Device

Restart both devices to apply the new configuration.

1. Restart your router.
2. Restart the destination device.
3. Wait for both devices to reconnect.
4. Confirm that the application or service is running.

8. Verify That the Port Is Open

Test your configuration using an external connection.

Recommended methods include:

• Connecting through mobile data instead of your Wi-Fi network.
• Using a trusted online port-checking tool.
• Connecting remotely using the intended application.

Ensure the application or service is actively running during testing.

If the port is reported as open and the application functions correctly, your configuration is complete.

9. Check for Double NAT (Advanced)

If port forwarding does not work, determine whether multiple routers are performing Network Address Translation (NAT).

Common scenarios include:

• An ISP modem/router connected to another wireless router.
• Multiple routers connected together.

If Double NAT is detected:

1. Enable Bridge Mode on the ISP modem if supported, or
2. Configure port forwarding on both devices.

Double NAT is one of the most common causes of failed port forwarding.

10. Verify ISP Restrictions (Advanced)

Some Internet Service Providers (ISPs) restrict inbound connections.

Possible limitations include:

• Blocking specific ports.
• Using Carrier-Grade NAT (CGNAT).

If you suspect either situation:

1. Contact your ISP.
2. Ask whether inbound connections are supported.
3. Confirm whether your connection uses CGNAT.
4. Request available alternatives if necessary.

If port forwarding is not working, try the following steps.

• Verify the local IP address. Ensure the forwarding rule points to the correct destination device.
• Confirm the service is running. Verify that the application is actively running and listening on the configured port.
• Check the port number and protocol. Confirm:
  • The correct port number.
  • The correct protocol (TCP, UDP, or Both).
• Restart your equipment. Restart both the router and the destination device after making configuration changes.
• Review firewall settings. Ensure your operating system firewall or third-party security software is not blocking incoming traffic.
• Test from outside your network. Use:
  • Mobile data
  • Another internet connection
  • A remote computer

  Testing externally provides the most accurate results.

• Check for Double NAT. Verify which router has the public IP address and configure Bridge Mode or forwarding rules as needed.
• Verify your public IP address. Compare your router's WAN IP address with your public IP address. If they do not match, your ISP may be using Carrier-Grade NAT (CGNAT).
• Review router logs. Look for:
  • Blocked inbound connections
  • Firewall events
  • Port forwarding errors
  • Authentication failures
• Update router firmware. Install the latest firmware from the manufacturer's official website.
• Scan the port. Use a trusted external port scanner while the application is running. If the port is closed:
  • Verify the forwarding rule.
  • Confirm the application is listening.
  • Check firewall settings.

1. Check ISP restrictions. Contact your ISP if you suspect blocked ports or CGNAT limitations.
2. Remove conflicting rules. Remove unnecessary or conflicting:
   • Port Forwarding rules
   • Port Triggering rules
   • UPnP-created rules
   • Firewall rules

• Port forwarding exposes a device or service to the internet. Only open ports that are required.
• Assign a static IP address or DHCP reservation before creating forwarding rules.
• Keep your router firmware and device operating systems updated.
• Use strong administrator passwords and enable multi-factor authentication (MFA) whenever available.
• Protect internet-facing applications with strong passwords and encryption whenever supported.
• Some ISPs block certain ports or use Carrier-Grade NAT (CGNAT), which can prevent port forwarding from working.
• Never leave your firewall permanently disabled. Instead, create firewall rules that allow only the required traffic.
• Remove unused forwarding rules to minimize security risks.
• Regularly review your router configuration to ensure only necessary services remain accessible.
• Contact Swazzy Support if you continue experiencing issues after completing this guide.