cFosSpeed is now in new hands. Atlas Tech Solutions now owns, develops, and sells new versions of it
New! By the makers of cFosSpeed: The cFos EVSE

How does NAT port forwarding work?

If you install a router that handles the Internet connections of your local network, it uses the public IP address which your Internet service provider assigned to you to communicate with other machines on the Internet. For reasons of simplicity and scarcity of IPv4 addresses, your ISP only assigns one address to your router, independent of how many machines are operating in your LAN. Each of your machines has a "local" IP address. Now the router has to employ a method to multiplex one "public" IP address to multiple "private" IP addresses in your LAN. This is done by NAT port forwarding.

All connections on the Internet can be identified by four parameters:

  • Source IP address
  • Source port number
  • Destination IP address
  • Destination port number

When one of the computers in your LAN initiates a connection to a server on the public Internet, it selects a source port number and establishes a connection to a certain destination IP address and port number. The source IP address for packets on this connection is the local ("private") address. However, this IP address is only valid in the LAN behind the router, but not on the Internet (hence the attribute "private").

So packets from the Internet can get back to your computer, the router maps your computer's local IP address and port number to a public IP address and port number. Typically, the port number is kept, but the local IP address must be replaced by the public IP address. The router modifies all packets sent to the remote server as long as the connection is alive. When the router receives a packet from the remote server for a mapped port, it uses the same port mapping to send the packet to the right computer on your LAN. For outgoing connections the router can establish this port mapping automatically.

For example:

  • Local ("private") IP address, e.g. 192.168.2.11
  • Local port, e.g. 4242
  • Remote IP address, e.g. 144.76.59.84
  • Remote port, e.g. 80 (for HTTP)
  • Public IP address, e.g. 85.161.92.143

Illustration port forwarding
Connections from 192.168.2.11:4242 to 144.76.59.84:80 are mapped to connections from 85.161.92.143:4242 to 144.76.59.84:80.

However, this automatic mapping is not possible for incoming connections. When someone from the Internet wants to establish a connection to one of the computers in your LAN, all your router sees is your public IP address as destination IP address and some port number, but it has no way to know to which local computer the packet should be forwarded. Therefore, you need to configure this mapping manually.

Usually the destination port number of incoming connection requests determines the local destination. You can set up your router accordingly, so that a certain destination port is always forwarded to a specific computer. If a new packet arrives from the Internet, your router replaces the public IP address and port number with their local counterparts that you had configured and then forwards the packet to the right local computer.

So from the standpoint of the public Internet all your local computers are just one machine with one public IP address and several established connections.

Setup NAT port forwarding for your router

Is your router already listed?

Select the brand of your router

2Wire
8level
Arcadyan
Arris
ASUS
ASUSWRT-Merlin
Aterm
AVM (FRITZ!Box)
Binatone
BT
Cisco
Compal
Dasan
DD-WRT
Digisol
Draytek
D-Link
Edimax
Fast
Fiberhome
Hitron Technologies
Huawei
Intelbras
Jio
Kozumi
LB-LINK
Linksys
Mercusys
Mikrotik
Mitrastar
Multilaser
NetComm
Netgear
NetMaster
O2
Observa
OpenWRT
Orange
Pace
PandoraBox SDK
Peplink
Phicomm
Prolink
Proximus
Sagemcom
Sercoom
Sky
Speedport
Spectrum
Synology
Technicolor
Tenda
Thomson
Tomato
TP-Link
UniFi
Unitymedia
Virgin
Vodafone
Wolflink
Xiaomi
Zhone
ZTE
Zyxel

2Wire

2701HG-G

8level

AWRT-300

Arcadyan

VGV7519

Arris

TG1652S
TG1692A
TG2472
TG862
Touchstone DG1670

ASUS

DSL-N12U
DSL-N12U_C1
DSL-N55U
DSL-N55U-C1
DSL-N55U-D1
RT-AC54U
RT-AC66U
RT-AC68U
RT-AC86U
RT-AC87U
RT-AC88U
RT-AC5300
RT-N10P
RT-N12HP
RT-N56U
RT-N66U
WL-330N3G

Asuswrt-Merlin

ASUSWRT-Merlin

Aterm

WG1400HP

AVM (FRITZ!Box)

FRITZ!Box 3370
FRITZ!Box 3390
FRITZ!Box 6490 Cable
FRITZ!Box 7113
FRITZ!Box 7170
FRITZ!Box 7270
FRITZ!Box 7312
FRITZ!Box 7360
FRITZ!Box 7362 SL
FRITZ!Box 7390
FRITZ!Box 7490

Belkin

Connect N150 (F7D5301v1)
F9K1102 v3
F9K1105 v1
F9K1115 v2
N+ Wireless Router (F5D8235-4)

Binatone

DT910W

BT

Home Hub 5 (Type A)

Cisco

EPC3925
Valet M10 V2

Compal

CH7465LG

Dasan

H640W

DD-WRT

DD-WRT

Digisol

DG-HR3300

Draytek

VIGOR 2830n

D-Link

DIR-300NRU rev.B5/B6
DIR-605LW
DIR-612
DIR-615
DIR-655
DIR-809
DIR-818LW
DIR-820L
DIR-825
DIR-842
DIR-850L
DIR-862L
DIR-880L
DSL-2730U
DSL-2750
DSL-2640T
DSL-520B-SE
DVG 5102S
DWR-116
Viper DSL-2900AL Dual Band AC1900

Edimax

BR6228N

Fast

FWR200

Fiberhome

AN5506-04-F

Hitron

CGNF-TWN

Huawei

B310
B315s-936
HG532e
HG633
WS319

Intelbras

WRN 150

Jio

JioFi 2

Kozumi

KM-4150NR

LB-LINK

BL-MP02

Linksys

E2500
EA6900
N750 (EA3500)
WRT1900ACS
WRT600N

Mercusys

AC12G

Mikrotik

RB2011UiAS-2HnD-IN
RB951G-2HnD

Mitrastar

HGW-2501GN-R2

Multilaser

N 150mbps

NetComm

NetComm ADSL2+ Wireless N300 Modem Router (NB304N)

Netgear

DG834N
JWNR2010
R6300v2
R7000 (Nighthawk)
WNDR3700 N600
WNDR3800
WNDR3400v2
WNR2000v2
CENTRIA WNDR4700

NetMaster

CBW-383Z4

O2

Homebox 6641 (Homebox II)

Observa

BRA14NR_H2

OpenWRT

OpenWRT

Orange

Livebox 3.0

Pace

5168N

PandoraBox SDK

Version 14.09

Peplink

Balance One

Phicomm

K2

Prolink

H5004NK

Proximus

BBox3

Sagemcom

2764

Sercoom

VD625

Sky

Hub SR101

Speedport

W 724V
W 921V

Spectrum

Technicolor TC8715D

Synology

RT1900ac

Tenda

AC10
AC15
AC6 V1.0
FH1202

Technicolor

DPC3848VE
TC7200
TC8715D
TG589VN v3

Thomson

TG789vn v1

Tomato

Tomato

TP-Link

AC750 Archer C20i
Archer AX6000
Archer C1200
DSL-2700E
TD-8840Tv4
TD-W8951ND
TD-W8901N
TD-W8970
TD-W9970
TL-MR3040
TL-MR3420
TL-WDR4300
TL-WDR7660
TL-WR1043ND
TL-WR740N
TL-WR541G/TL-WR542G
TL-WR741ND
TL-WR840N
TL-WR841N
TL-WR842N
TL-WR845N
TL-WR886N
TL-WR940N

UniFi

Security Gateway 3P

Unitymedia

Connect Box
Horizon
Technicolor TC7200

Virgin

Media Hub 3.0
Superhub 2

Vodafone

Station Revolution

Wolflink

HC5661-Wolflink

Xiaomi

MI 3C
MiWiFi Mini

Zhone

ZNID-GPON-2426A-2TS

ZTE

F609
ZXHN H108N V2.5
ZXHN H267A V1.0

Zyxel

Keenetic 4G II
Keenetic Giga
C1100Z
Zyxel VMG8823-B50B