How to port forward on your router (a beginner’s guide)

If you want to host a game server or access your home security system remotely, port forwarding can help. While setting it up might seem daunting, this guide will walk you through simple step-by-step port forwarding processes for specific use cases.

But before we dive in, let’s cover some of the basics.

What is port forwarding and how does it work?

Port forwarding is a networking technique that opens digital doorways, known as ports, by automatically redirecting incoming traffic from a public IP address to an open port assigned to a specific device within a local network.

A router works like a mail sorter, directing internet data to the right destination while blocking potential threats to keep the network safe. But port forwarding lets the router bypass screening for specific ports, sending data directly to a set destination.

This speeds up data transfers and allows for smoother remote access, gaming, and peer-to-peer sharing, but it can also expose your network to security threats if not properly managed.

Here are some examples to give you an idea of how port forwarding works:

• Online gaming: Port forwarding reduces lag and connection issues in online games like Minecraft by allowing a direct link between players, ensuring smoother gameplay and improved multiplayer performance.
• Server hosting: Enabling external access to a hosted server allows you to run game servers, websites, or applications by directing incoming traffic to the correct local device.
• Remote access: If you have a remote access program on your computer desktop, you’ll need the right ports open to use that desktop outside the home.
• Other local devices: If you have a security system or robot vacuum you want to check remotely, port forwarding can help open up a connection between your smartphone and the device on your local network.

Although port forwarding can be useful, you should only set it up when you need direct communication between a device on your local network and the internet — as each open port is a potential attack vector for hackers or malware.

How to set up port forwarding

You can set up port forwarding by configuring your router’s advanced security settings via your router’s management page. But first, unless you have a router that lets you select specific devices for port forwarding, you’ll need to set up a static IP address for your device.

1. Set up a static IP address

Before setting up port forwarding, you need to assign a static IP to the target device. This ensures a stable connection. You can do this by opening your network settings and changing your IP address settings from automatic to manual.

Set up a static IP address on a PC

Here’s how to set up a static IP address on Windows 11:

1. Open Settings and go to Network & internet settings.
2. Select Manage known networks and go to your current connection’s Properties.
3. Make a note of your current IP address and subnet mask.
4. Select Edit next to IP settings, switch to Manual, and toggle on IPv4.
5. Enter your current IP address and subnet mask in the IPv4 address field.

Using your existing IP prevents conflicts that can occur when another device is accidentally assigned the same IP. Since your router has already assigned this IP via TCP/IP rules, keeping it ensures smooth connectivity without disruptions.

Set up a static IP address on Mac

To set up a static IP address on a Mac computer:

1. Open the System Settings through the Apple icon in the upper-left corner.
2. Select Network, Wi-Fi, and then choose your active connection.
3. Click Details next to your active connection and TCP/IP in the left-hand navigation on the new menu.
4. Select the dropdown menu to the left of Configure IPv4 and pick manually to enter your IP address and subnet mask.

After configuring these settings, test your connection by visiting any website. If the page loads normally, you’re ready for the next step in port forwarding.

Next, log into your router’s portal by entering its IP address in your browser and signing in with the username and password. These details are typically on the router’s label or in the manual. If unavailable, try using the default usernames and passwords listed below, or contact your internet service provider for assistance.

If your router’s IP isn’t listed on its label, check your device’s network settings. On Windows, open Command Prompt, type ipconfig, and hit Enter — your router’s IP will be displayed next to Default Gateway. On a Mac, go to network settings and look for the IP next to Router.

After logging in to your router’s portal, you can access the admin page to configure port forwarding settings. But first, consider using Norton Password Manager to securely store your router’s credentials for a smoother login next time.

You can enter port numbers and other details through the advanced security settings in your router's admin panel. While each router differs slightly, you can usually find this in the Advanced or Security menu.

Here’s a generic step-by-step guide to configuring port forwarding details:

1. From the Security or Advanced tab in your router admin portal, click Port Forwarding.
2. From the Port Forwarding page, select either a device or the static IP you set up earlier.
3. Enter a number between 1 and 65,535 for both the Port Start and the Port End.
4. Choose a protocol (TCP, UDP, or Both) as required by your application.
5. Click Save, Apply, or Enable, and then test the connection. You may need to restart your router to finish setting up the configuration.

When choosing port numbers, use default ports for common services. Or, if you’re setting up a new application, avoid well-known ports (0-1023) to reduce security risks, and ensure the port isn’t already in use by other services on your device to avoid conflicts.

How to port forward on a PS5 or PS4

Port forwarding on a PlayStation console can improve your online gaming performance, lower ping, enhance voice chat, and help ensure more stable peer-to-peer connections.

As with other devices, start by giving your PlayStation a static IP:

1. From the PlayStation main menu, select Settings and then Network.
2. Select View Connection Status and write down your IP address.
3. Access your router menu and open up either LAN or IP address settings.
4. Go to DHCP Reservation, select your PS5 from the device list, and manually type in the IP.

From here, click apply, which will establish your static IP on the router. You’ll need to do the same when establishing a static IP for a home security system, as neither device can establish static IPs on its own.

Next, go to the port forwarding page under your router’s advanced settings and enter these ports for your PS5 or PS4:

• TCP: 80, 443, 1935, and 3478 through 3480
• UDP: 3478, 3479, and 3658

When you’re all done, you should see the open ports available on your port forwarding list.

If you want to avoid adding these ports manually in the future, you can enable Universal Plug and Play (UPnP), which automatically creates ports for you based on online gaming needs. You can activate UPnP from your router’s advanced security settings.

However, UPnP does come with some security risks. For example, a Trojan masquerading as a video game can open ports, leaving your local network open to hackers. If you notice unusual network activity, turn off UPnP and run an antivirus scan on your home devices.

How to port forward on an Xbox Series X

To enable port forwarding on your Xbox, open your Network Settings, find and write down the device’s current IP address, and manually enter the address into your DHCP settings to establish a static IP for your console.

Then you can configure your router’s port forwarding settings via the admin portal as follows:

• TCP: 80
• UDP: 88, 500, 3544, and 4500
• Both: 3074 and 53

Bear in mind that you may need to enter ports for individual video games in some cases. For example, Fortnite’s extensive list of ports includes 80, 433, 443, and 3478.

How to check open ports

To identify open ports on your PC, Mac, or other network devices, navigate to the advanced security settings menu on your router. Within this menu, you can locate the ports you’ve manually configured under the Port Forwarding section, as well as those automatically generated through your UPnP settings.

If you find ports that you do not recognize, that’s a sign that a cybercriminal might be targeting your network. To address this, immediately check your device list for unrecognized connections, disconnect them, and change your router’s password.

Is port forwarding safe? What are the risks?

Port forwarding is generally safe if properly configured, but opening ports to the internet means data packets can bypass certain firewall restrictions to reach your device, potentially exposing your network to malware or unauthorized access by cybercriminals.

Here are the main risks associated with port forwarding:

• Cyberattack vulnerability: Open ports increase your network’s attack surface, making you an easier target for hackers who may be able to use packet sniffers to intercept data without your knowledge.
• DDoS attacks:  Hackers can use open ports as a gateway for flooding your network with excessive traffic in a Distributed Denial of Service (DDoS) attack that overloads your computer and network resources, causing slowdowns or crashes.
• Botnet attacks: Remote access ports may allow hackers to ensnare your computer in a botnet, and then use it to perform cyberattacks on others, making it seem like you are the perpetrator.
• Malware threats: Open ports to untrustworthy servers or applications can be a direct line for various forms of malware, including ransomware that hijacks your device and holds your data hostage.
• Security flaws: Incorrect port forwarding settings may expose previously unknown vulnerabilities in software or devices, making unauthorized access and exploitation easier for hackers.

To help minimize your exposure to these risks, only port forward when strictly necessary. Keep your firmware, operating system, and other software updated, and use advanced antivirus software that includes robust firewall protection.

Port forward more securely with Norton

Port forwarding improves connectivity, but it also introduces security risks.

Norton 360 Standard helps shield your network against online threats with advanced malware protection, a smart firewall to monitor incoming traffic, and a VPN that can secure your connection and hide your IP address from potential attackers. Get powerful, all-in-one protection today.

FAQs

What are ports in networking?

In networking, a port is a unique identifying number assigned to a specific type of connection endpoint, helping to organize and direct internet traffic between devices. Each port is assigned a number that corresponds to a specific service or application, which allows computers to communicate efficiently while managing multiple connections simultaneously.

What is the purpose of port forwarding?

Port forwarding allows external devices to connect to a specific device inside a private network. It directs incoming traffic to the right destination, enabling remote access, online gaming, and hosting servers. This helps bypass network restrictions while ensuring smooth communication between devices over the internet.

How do I cancel port forwarding?

To cancel port forwarding, log into your router’s admin portal, navigate to the port forwarding section, and locate the active rule. Delete or disable it, then save the changes. Restart your router if needed to apply the update. This will stop external access through the forwarded port.

Does port forwarding cost money?

Port forwarding itself is free and can be configured through your router’s settings. However, increased internet traffic that comes from server hosting or other port-forwarding applications could affect your internet costs depending on your data plan.

What’s the difference between port triggering and port forwarding?

Port forwarding keeps ports open permanently, while port triggering opens them temporarily based on specific connections. For example, UPnP can automatically open ports for online multiplayer gaming and close them once the game is no longer active, reducing security risks.