What Is Port Forwarding? 3 Steps To Port Forward on Your Router

date

Sep 27, 2022

slug

what-is-port-forwarding

status

Published

summary

Port forwarding creates a connection between a device on LAN and another service on WAN. There are some details of this specific connection. Learn how to setup on router with 3 steps.

What is Port Forwarding?

Port forwarding (or port mapping) creates a direct and tunneled connection between a device on your LAN (Local Area Network) and another service on WAN (Wide Area Network, or Internet). It is a “tunnel” between your device and the desired service, sidestepping the router’s security. LAN involves all the devices connected to your home network’s router.

Typically, a router acts as a gateway between your network and the internet. Routers are a natural form of security but don’t always allow connections you want through. For example, routers will typically block connections coming from a game server.

When game servers see your connections blocked, you might have a strict or moderate NAT (Network Address Translation) type. Having a strict NAT type usually means that specific ports of the game you are playing are blocked.

Port forwarding tells the router that usually blocks these ports to open them up. This way, the game server that typically seeks these ports out has no impedance. This feature allows faster connection speeds, more reliability, and the ability to play with people regardless of their NAT type.

Is Port Forwarding Safe?

Overall, port forwarding is relatively safe when connecting your device to external servers. It is better than setting up an unregulated DMZ or disabling your router’s security. But there is a catch.

Having an open port on your router allows anyone knowing the port to access your home network. This port creates a wide-open door for anyone to waltz right through. All they need are two pieces of information:

What game you are playing (this one is tricky)

What ports your game commonly uses (this one is easy)

Remote criminals will also need your IP address, which is uncommon if you have a dynamic IP. But this won’t stop nearby people from plugging into your network.

The only exception to this rule is through Nintendo games. Nintendo recommends you open up ports 1 through 65535, making it more challenging to determine which port Nintendo uses.

This scenario is the homeowner’s equivalent to unlocking all of your doors and loudly announcing your unsecured house to all passing neighbors. In other words, don’t do this.

How to Port Forward on Your Router

Step One: Access Your Router’s Admin Page

If you want to start port forwarding, your first stop is your router’s admin page. The admin page is available on any router, but you must log in.

To log in, you need to find your gateway’s IP address, username, and password. You can find the gateway IP under your network & internet settings. The IP address you are looking for is the “default route.”

The default IP differs depending on your router. Typically, this varies by the company you use. If you struggle to find the information on your computer, you can also find it in your owner’s manual.

If you’ve lost your owner’s manual, your third option is to look on the side of the router. Typically, you will also find a username and password there that you need anyway.

If the side of your router doesn’t contain this information, look on the router company’s website. You’ll need to know your router’s model name and number. From plugging in this information on the company’s website, you should find what you are looking for. You can also use Google if you are desperate for answers.

Step Two: Getting To The Port Forwarding Page

Start by putting the default route IP into your favorite browser’s address bar. Once you’ve done that, your screen should resemble this:

Input your username and password, and you should see a page that shows a variety of settings. Depending on your network provider, port forwarding is typically under advanced settings.

Some larger network providers also allow you to manage this through an app, like so:

Tapping on port forward (or clicking on it) will bring you to a screen with existing port forwards. If you do not have any, you won’t see anything.

Clicking on the “add port forward” button will allow you to select two things:

Device – Where the ports are forwarded from

Port Number – The port number that you are going to input

Protocol – Both TCP and UPD connection types

Step Three: Finding The Port Numbers

Once you’ve got to this page, it’s natural to wonder what to put in. Often, your internet service provider doesn’t provide this information; you have to find it.

Some ISPs are aware of this, enabling an “automatic setup.” This only inputs the default port number based on the ISP’s database of information. Because game servers sometimes go through updates, this doesn’t always work.

To supplement this information, you have a few options:

Port Forward, the website which keeps an up-to-date database of ports.

The company website behind the software you are port forwarding for.

Random forums and a Google search.

Because all of these options have a chance to be wrong, you might have to go through all of them before you give up. In some cases, you will need to contact the customer service team of the software you are trying to forward. You might have to wait a bit, as they likely do not readily available this information.

Once you plug the port forward in and hit the “next” button, your port will be active. Test out your chosen software to see if it works and go from there.

What if The Port Gives Me an Error?

The most common reason port forwarding doesn’t work is existing ports. Typically, only one computer can have an open port at a time. So disable your current ports and try again.

Go back to your port forwarding dashboard and click the delete button next to the port to delete your ports. You might need to reset your router after deletion.

If you are still running into issues, try parallel ports that are one number up and one number down. When software companies update their ports, they typically do not go too far.

Sometimes, a blocked connection comes from a combination of a firewall and router. So in the event nothing works, check to see if your service needs a firewall exception.

Does Port Forwarding Work With a VPN?

Typically, port forwarding activities and VPNs do not work in tandem. With FastVPN, you’ll find this to be the case, so don’t bother using them simultaneously. Much of this comes from the inherent nature of the two activities.

Recall earlier that establishing ports for your preferred server is similar to creating a tunnel. VPNs, or Virtual Private Networks, establish similar tunnels to external servers.

Because VPN clients typically work on the device side, it is as if you are connecting a tunnel and building a brick wall.

Some VPNs (specifically PPTP and L2TP connections) use specific tunnels to exit. This tunnel enables those VPN types to connect through alternative ports. Many times, port forwarding only uses one port per device. Sometimes, this extends to one port per network, creating connection conflicts.

So, because the VPN server is already port forwarding, you cannot port-forward alongside another forwarded port.

Can You Port Forward on VPN Routers?

When using VPN routers, the situation stays the same. Because VPN routers connect to another data center to encrypt data through a forwarded port, it will cause a conflict.

Even if you could use your VPN router while port forwarding, any connection your device makes is an exposure. So port forwarding while utilizing a VPN eliminates the usefulness of your VPN

Where Do You Use Port Forwarding?

Despite port forwarding being a low-grade security risk, it does have its uses. Below is a shortlist:

Virtual Desktops

Modern desktops are often on cloud computing devices. This feature enables schools and businesses to save money while providing internet to stakeholders.

However, having connection slowdown and security blockages will cause issues. Port forwarding creates an open and secure connection between the two devices to address this.

Game Servers

Playing video games with your friends is great, but connecting to servers can be painful. Video games often require an unimpeded connection between you and the game’s server, reducing lag and communication issues. It directly affects internet speed while gaming.

Friends with different NAT types cannot always connect, resulting in poor game experiences. Forwarding ports enable you to stick with the preferable moderate (or open) NAT types for gaming.

Remote Access and Backups

Direct communication between your computer and another can sometimes be necessary. When accessing a remote desktop or server, overcoming security is occasionally challenging.

Regular and straightforward access to backup data is often through port forwarding. This backup information is given easier access behind other security measures.

CCTV and Security

CCTV camera feeds have direct connections to security company’s monitoring services. If you’ve received a motion alert on your phone from a security system catching a raccoon, you know how this feels.

In the case of security, closed-circuit systems also exist as a form. But in cases where multiple computers and a network are involved, a port forward can simplify your connection and improve response time.

Types of Port Forwarding

With the different uses for port forwarding, there are different types. Here are three significant types of forwarding you might be familiar with:

Local Port Forwarding

Local port forwarding refers to connecting your local network computer to an external server. This process usually involves putting specific port information on your local firewall.

This forward comes from an application on the same computer, handled through an SSH (Secure Shell) client. The client listens for incoming connections and decrypts the data on your behalf. An excellent example of this in action is an inter-company email server.

It is the most common form of port forwarding because it involves requesting consent from both sides. If you are trying to play games with friends, the game server already has this open for you. Inserting the game ports from their company website ports opens your computer up for them.

Remote Port Forwarding

Remote port forwarding is very much the opposite of local port forwarding. It refers to server-side applications offering a secure connection through their ports.

Remote port forwarding often involves allowing other computers to access backups or remote servers. While you still need to know some credentials to get in, the server handles the connection.

Dynamic Port Forwarding

Dynamic Port Forwarding (DPF) uses firewall pinholes for direct connections. This port forwarding type is typical when you connect to a trusted third-party server.

The server then connects to a series of other services on the other side. DPF is often applicable when you need an extra layer of security, such as a SOCKS Proxy Server.

As a result, DPF tools are helpful when protecting yourself on public servers. However, many of these proxy servers do not encrypt your data, giving them weaker security measures.

Port Forwarding Benefits

Knowing everything about port forwarding, there are some pretty substantial benefits to setting it up:

Faster connection speeds. Having an open port between you and your target service provides speedier loading times. This more incredible speed can be great for inbound traffic and online gaming.

Great way to access essential documents. Need easy access to critical documents from everywhere? Port forwarding provides that instantaneously from any location.

Maintains security elsewhere. Having a single open port is the safest method of opening your router. There is no impact on other security aspects of your router.

Can host online games and servers. Port forwarding is helpful if you want to host a server for an online game. Having a single open port gives people a simple pathway to travel through.

Port Forwarding Risks

Often, you end up trading convenience for security (and vice versa). Below is how port forwarding can be risky.

It gives users unlimited access. Anyone who knows about this exposed port has complete access to whatever tools you use it for. This can include access to sensitive data and your remote PC.

Can expose your IP. If you use a VPN and are concerned about privacy, port forwarding can ruin that. The wrong user can find your IP and location using this exposed point.

There are two ways to prevent port forwarding risks: First, you can choose to require online credentials for users accessing the data. If users want to access it, they will need another authenticator you give them.

The second method for preventing hackers from accessing port forwards is closing the port. When you are done, closing the port re-activates the security.

You can also keep up your firewall, which often blocks unwanted connections regardless. However, some applications (primarily games) have the same port limitation issues with firewalls.

Port Forwarding FAQs

What is TCP?

TCP, or Transmission Control Protocol, allows application programs and computers to communicate. It is a primary communications standard of the internet, guaranteeing the integrity of data sent. Because of the focus on data integrity, TCP is slower than its similar cousin: UDP.

Together, TCP/IP is the preferred way of communicating online. This enables people to identify different connections, allowing for a straightforward definition of where you send your data.

What is UDP?

UDP, or User Datagram Protocol, is a fast protocol commonly used for video and voice traffic. Its speed comes from its tendency to send data before a formally established connection.

Because of this habit, the protocol sends entire data packets with built-in headers, requiring quick authentication of the two users. The chance of data loss is a bit higher, as a result, making it suitable for non-essential data sending and communication.

What is NAT?

NAT, or Network Address Translation, transforms multiple local IP addresses into a single public IP address. The public IP address is that of the router, seen in IPv6.

Combined with the port types above, you can identify where the computer comes from by looking at your router diagnostics. So instead of revealing your private IP address, you find the named device using a specific port.

Depending on whether a specific application port is open, different NAT types apply. For example, a moderate NAT is most likely the case when using port forwarding.

Conclusion – Should I Trust Port Forwarding?

In the grand scheme of things, port forwarding is perfect. Much like VPNs, it provides a secure tunnel between you, your app, and your target device. While the risks for leaving a port open are relatively high, having a client-facing firewall often solves this problem. By establishing a reminder to close the port when finished, you solve many of the most challenging issues with port forwarding.

For an alternate method on internet security, download FastVPN. While port forwards and VPNs do not always get along, having multiple security options provides you with more excellent protection.

What is Port Forwarding? How to Setup on Router? Effects on VPNs