Skip to content
FixingBook
Sign In
Verifiedadvancedest. 30 minutes

Fix Port Forwarding Not Working on Router

Configured port forwarding rules fail to expose local services to the external internet, often due to CGNAT, double NAT, or host firewall blocks.

port-forwardingcgnatrouter-configgaming

Confirmed working on: Windows 10 · Windows 11 · Routers

Before you begin

Match the environmentUse this guide only for Windows 10, Windows 11, Routers or a clearly compatible setup.
Protect recoveryBack up important data and save encryption or account recovery keys before changing system state.
Know when to stopThis guide includes advanced changes. If the device contains irreplaceable data or belongs to an employer, stop and use a qualified technician.

Problem overview

You have configured port forwarding rules on your router, but external users or port checking tools report that the port is still closed. This prevents remote access to local servers or affects gaming connectivity.

Common causes

  • Carrier-Grade NAT (CGNAT) deployed by your ISP
  • A Double NAT environment (e.g., two routers chained together)
  • The target device’s local firewall blocking the inbound connection
  • The port forwarding rule targets the wrong internal IP address

Solution 1: Check for Carrier-Grade NAT (CGNAT)

  1. Open a web browser and visit whatismyip.com to find your public IPv4 address.
  2. Log into your router’s web interface.
  3. Look for the WAN IP or Internet IP on the router’s status page.
  4. Compare the two IP addresses. If they are different, your ISP is using CGNAT.
  5. If you are behind CGNAT, traditional port forwarding will not work. You must contact your ISP to request a public IP or use a tunneling service.
Expert Tip

If your router’s WAN IP starts with 100.64.x.x through 100.127.x.x, you are definitely behind a CGNAT.

Solution 2: Assign a static LAN IP

  1. Open Command Prompt on the target computer and run ipconfig. Note your IPv4 Address and Default Gateway.
  2. Log into your router and navigate to the DHCP or LAN Settings section.
  3. Find the DHCP Reservation or Static Lease feature.
  4. Add a new reservation using your computer’s MAC address and assign it the current IP address.
  5. Save the settings. Ensure your port forwarding rule points to this exact IP address.

Solution 3: Allow the port through Windows Firewall

  1. Press Windows Key + R, type wf.msc, and press Enter to open Windows Defender Firewall with Advanced Security.
  2. Select Inbound Rules on the left pane.
  3. Click New Rule on the right pane.
  4. Select Port and click Next.
  5. Choose TCP or UDP (depending on your service) and enter the specific port number.
  6. Select Allow the connection and apply the rule to all network profiles (Domain, Private, Public).
  7. Name the rule and click Finish.
  8. Retest your port using a service like portchecker.co.

Solution 4: Eliminate Double NAT

  1. Trace your network layout. If you have a modem/router combo from your ISP and a second personal router, you have a Double NAT.
  2. Log into the ISP modem/router combo.
  3. Locate the Bridge Mode or IP Passthrough setting and enable it.
  4. Alternatively, find the DMZ setting on the ISP router and enter the WAN IP address of your personal router.
  5. Save and reboot both devices.
Caution

Enabling DMZ on your primary PC directly exposes it to the entire internet, bypassing the router’s hardware firewall. Only use DMZ to pass traffic to a secondary router.

Confirm the result

  1. Repeat the exact action that originally triggered the problem.
  2. Confirm the original error or symptom is gone and no new warning has appeared.
  3. If the guide changed a driver, service, package, or system setting, restart once and test again.
  4. If the result is worse or unexpected, stop. Reverse only the last change using its documented restore option; if none is documented, use your backup or qualified support.

Questions about this fix

How do I know if I have CGNAT?

Compare the WAN IP shown in your router interface to the IP shown on sites like whatismyip.com. If they don't match, you likely have CGNAT.

Do I need a static IP for port forwarding?

You need a static internal LAN IP for the device hosting the service, so the router always knows where to forward the traffic.

Did this fix work for you?

Weighted Consensus Protocol

Consensus0%
Required100% (Weight 3)
Contributors0
Verified By YouNo
Your Weight--

Did this solution resolve your issue?

Confirming if this works strengthens verification statistics on the registry.

Sign In to VerifySign in required to verify

FixingTeam10,000 rep

Official Project Maintainers

The core engineering and moderation team behind FixingBook. We curate, verify, and maintain the standards of the troubleshooting ledger.

Spotted something outdated? Suggest an edit. Maintainers review submissions within 48 hours.
Share:XReddit

Related fixes

Discussion (0)

No comments yet. Share your experience or verify if this fixed your issue!

Join the Discussion