How to Set Up Port Forwarding on an ASUS Router: Step-by-Step Guide

Introduction / Why You Need This

Port forwarding is a router function that redirects incoming internet traffic from a specific port to a device within your local network. On ASUS routers, this configuration is done through the web interface and is essential if you want to:

• Host a game server (e.g., for Minecraft or Counter-Strike).
• Provide remote access to a home camera or NAS system.
• Set up access to a file or web server from outside.

Without port forwarding, external connections cannot reach devices behind the router, as they are hidden behind NAT. This guide will detail how to properly configure port forwarding on any ASUS router with ASUSWRT firmware.

Requirements / Preparation

Before you begin, ensure you have:

1. An ASUS router with web interface support (all modern models, such as RT-AC86U, RT-AX86U, RT-AX88U).
2. Router access: IP address (default 192.168.1.1 or 192.168.0.1), admin login and password (default admin/admin if unchanged).
3. Target device (computer, console, IP camera) to which the port will be forwarded. You must know its local IP address and the port of the service you want to open.
4. A static IP for the target device (recommended). If the IP changes via DHCP, the forwarding rule will stop working. We will show how to assign a fixed IP in the router settings.
5. Protocol information (TCP, UDP, or both). This is usually specified in the service documentation (e.g., Minecraft uses TCP port 25565).

Step-by-Step Guide

Step 1: Log into the ASUS Router Web Interface

1. Connect to your router's network (via Wi-Fi or cable).
2. Open any browser (Chrome, Firefox, Edge).
3. In the address bar, enter the router's IP address. Usually, it is 192.168.1.1 or 192.168.0.1. Press Enter.
4. On the login page, enter the username and password. If unchanged, use admin for both fields.
5. After logging in, you will be in the ASUSWRT control panel.

Step 2: Assign a Static IP to the Target Device

To prevent the forwarding rule from breaking when the router's DHCP server updates the IP, assign a fixed address to the device.

1. In the left menu, go to LAN → DHCP Server.
2. Find the Static IP table (or the + button below it).
3. Click Add.
4. Fill in the fields:
   • MAC Address: Enter the MAC address of the target device. You can find it in the device's network settings (e.g., in Windows: ipconfig /all, under "Physical Address").
   • IP Address: Enter the desired IP, e.g., 192.168.1.100. Ensure it does not conflict with other devices and falls within the router's DHCP range (usually 192.168.1.2 - 192.168.1.254).
5. Click Apply. The device may temporarily disconnect and obtain the new IP.

Step 3: Open the Port Forwarding Section

1. In the left menu, find the WAN section (or "Internet").
2. In the submenu, select Port Forwarding. In some firmware versions, it may be called "Virtual Server" or located under "WAN Advanced Settings."

Step 4: Create a New Port Forwarding Rule

1. In the Port Forwarding section, click the Add (or +) button.
2. Fill in the rule parameters:
   • Rule Name: Enter a descriptive name, e.g., Minecraft Server or Web Camera.
   • Port Range: Specify the external port that will be open to the internet. You can set a range (e.g., 25565-25565 for a single port) or a single port.
   • Local IP: Enter the IP address of the target device that you fixed in Step 2 (e.g., 192.168.1.100).
   • Local Port: The port on the target device where the service runs. Usually, it matches the external port but can differ (e.g., external 8080, local 80).
   • Protocol: Select TCP, UDP, or BOTH. Most games and servers require TCP; for VoIP or some games, UDP is needed. If unsure, choose BOTH.
   • Source Port: Leave blank or set to * (any) if you do not need to restrict the source.
   • Enable: Ensure the checkbox is ticked.
3. Click Apply (or OK). The rule will be added to the list.

Step 5: Save Settings and Reboot the Router

1. After adding all rules, click the Apply button at the bottom of the Port Forwarding page to save changes to the router.
2. The router may prompt for a reboot. If a pop-up appears, confirm the reboot. If not, manually reboot the router via Administration → System → Reboot.
3. After rebooting, the rules will take effect.

Verifying the Result

To ensure the port is truly open and accessible from the internet:

1. Find your external IP address. In the router interface, go to WAN → Status and look for the "WAN IP" field. Alternatively, use a third-party service like 2ip.ru.
2. Use an online port checker. Visit sites like canyouseeme.org or yougetsignal.com. Enter:
   • Your external IP address.
   • The port you forwarded (e.g., 25565).
   • Click Check.
3. If the service reports the port is open, the forwarding works. If not, proceed to the "Troubleshooting" section.
4. Test the service directly. Try connecting to your server from an external device (e.g., a phone on mobile data) using the external IP and port.

Troubleshooting

• Port remains closed after checking:
  • Ensure the service (game, server) is running and listening on the specified port on the target device.
  • Check the firewall on the target device (Windows Firewall, iptables on Linux). Allow incoming connections for the port.
  • Double-check that the forwarding rule has the correct IP and port, and the protocol matches.
• "Port already in use" error or rule won't save:
  • The port may be used by another forwarding rule or a service on the router. Delete conflicting rules.
  • An application on the target device might already be using that port. Change the port in the service settings or choose a different free port.
• ISP blocks ports:
  • Some internet providers block standard ports (80, 443, 25) or all incoming connections. Contact your ISP support to clarify their policy. If necessary, use a non-standard port.
• Double NAT:
  • If your ASUS router is connected to another router (e.g., from your ISP), incoming traffic first hits the primary router, which is unaware of the forwarding to your ASUS. You need to configure port forwarding on both routers or set the ASUS router to Bridge Mode.
• UPnP conflicts:
  • If UPnP (Universal Plug and Play) is enabled, it can automatically modify forwarding rules. For critical services, disable UPnP in WAN → UPnP → Disable.
• Incorrect protocol:
  • Ensure you selected the correct protocol (TCP/UDP). Many games require both. If unsure, try BOTH or check the service documentation.

💡 Tip: After setting up port forwarding, regularly check that your external IP hasn't changed (if you have a dynamic IP from your ISP). For permanent access, use Dynamic DNS (DDNS) services, which are also supported on ASUS routers under WAN → DDNS.