How does NAT port forwarding work?
If you install a router that handles the Internet connections of your local network, it uses the public IP address which your Internet service provider assigned to you to communicate with other machines on the Internet. For reasons of simplicity and scarcity of IPv4 addresses, your ISP only assigns one address to your router, independent of how many machines are operating in your LAN. Each of your machines has a "local" IP address. Now the router has to employ a method to multiplex one "public" IP address to multiple "private" IP addresses in your LAN. This is done by NAT port forwarding.
All connections on the Internet can be identified by four parameters:
- Source IP address
- Source port number
- Destination IP address
- Destination port number
When one of the computers in your LAN initiates a connection to a server on the public Internet, it selects a source port number and establishes a connection to a certain destination IP address and port number. The source IP address for packets on this connection is the local ("private") address. However, this IP address is only valid in the LAN behind the router, but not on the Internet (hence the attribute "private").
So packets from the Internet can get back to your computer, the router maps your computer's local IP address and port number to a public IP address and port number. Typically, the port number is kept, but the local IP address must be replaced by the public IP address. The router modifies all packets sent to the remote server as long as the connection is alive. When the router receives a packet from the remote server for a mapped port, it uses the same port mapping to send the packet to the right computer on your LAN. For outgoing connections the router can establish this port mapping automatically.
For example:
- Local ("private") IP address, e.g. 192.168.2.11
- Local port, e.g. 4242
- Remote IP address, e.g. 144.76.59.84
- Remote port, e.g. 80 (for HTTP)
- Public IP address, e.g. 85.161.92.143
Connections from 192.168.2.11:4242 to 144.76.59.84:80 are mapped to connections from 85.161.92.143:4242 to 144.76.59.84:80.
However, this automatic mapping is not possible for incoming connections. When someone from the Internet wants to establish a connection to one of the computers in your LAN, all your router sees is your public IP address as destination IP address and some port number, but it has no way to know to which local computer the packet should be forwarded. Therefore, you need to configure this mapping manually.
Usually the destination port number of incoming connection requests determines the local destination. You can set up your router accordingly, so that a certain destination port is always forwarded to a specific computer. If a new packet arrives from the Internet, your router replaces the public IP address and port number with their local counterparts that you had configured and then forwards the packet to the right local computer.
So from the standpoint of the public Internet all your local computers are just one machine with one public IP address and several established connections.
Setup NAT port forwarding for your router
Get a free cFosSpeed and cFos Personal Net license! (If your router isn't already listed here)
Help us to complete our router guide.
Write instructions of how to set up NAT port forwarding with your router.
Is your router already listed?
Select the brand of your router
2Wire
8level
Arcadyan
Arris
ASUS
ASUSWRT-Merlin
Aterm
AVM (FRITZ!Box)
Binatone
BT
Cisco
Compal
Dasan
DD-WRT
Digisol
Draytek
D-Link
Edimax
Fast
Fiberhome
Hitron Technologies
Huawei
Intelbras
Jio
Kozumi
LB-LINK
Linksys
Mercusys
Mikrotik
Mitrastar
Multilaser
NetComm
Netgear
NetMaster
O2
Observa
OpenWRT
Orange
Pace
PandoraBox SDK
Peplink
Phicomm
Prolink
Proximus
Sagemcom
Sercoom
Sky
Speedport
Spectrum
Synology
Technicolor
Tenda
Thomson
Tomato
TP-Link
UniFi
Unitymedia
Virgin
Vodafone
Wolflink
Xiaomi
Zhone
ZTE
Zyxel
Other
2Wire
8level
Arcadyan
Arris
TG1652S
TG1692A
TG2472
TG862
Touchstone DG1670
Other
ASUS
DSL-N12U
DSL-N12U_C1
DSL-N55U
DSL-N55U-C1
DSL-N55U-D1
RT-AC54U
RT-AC66U
RT-AC68U
RT-AC86U
RT-AC87U
RT-AC88U
RT-AC5300
RT-N10P
RT-N12HP
RT-N56U
RT-N66U
WL-330N3G
Other
Asuswrt-Merlin
Aterm
AVM (FRITZ!Box)
FRITZ!Box 3370
FRITZ!Box 3390
FRITZ!Box 6490 Cable
FRITZ!Box 7113
FRITZ!Box 7170
FRITZ!Box 7270
FRITZ!Box 7312
FRITZ!Box 7360
FRITZ!Box 7362 SL
FRITZ!Box 7390
FRITZ!Box 7490
Other
Belkin
Connect N150 (F7D5301v1)
F9K1102 v3
F9K1105 v1
F9K1115 v2
N+ Wireless Router (F5D8235-4)
Other
Binatone
BT
Cisco
Compal
Dasan
DD-WRT
Digisol
Draytek
D-Link
DIR-300NRU rev.B5/B6
DIR-605LW
DIR-612
DIR-615
DIR-655
DIR-809
DIR-818LW
DIR-820L
DIR-825
DIR-842
DIR-850L
DIR-862L
DIR-880L
DSL-2730U
DSL-2750
DSL-2640T
DSL-520B-SE
DVG 5102S
DWR-116
Viper DSL-2900AL Dual Band AC1900
Other
Edimax
Fast
Fiberhome
Hitron
Huawei
B310
B315s-936
HG532e
HG633
WS319
Other
Intelbras
Jio
Kozumi
LB-LINK
Linksys
E2500
EA6900
N750 (EA3500)
WRT1900ACS
WRT600N
Other
Mercusys
Mikrotik
RB2011UiAS-2HnD-IN
RB951G-2HnD
Other
Mitrastar
Multilaser
NetComm
NetComm ADSL2+ Wireless N300 Modem Router (NB304N)
Other
Netgear
DG834N
JWNR2010
R6300v2
R7000 (Nighthawk)
WNDR3700 N600
WNDR3800
WNDR3400v2
WNR2000v2
CENTRIA WNDR4700
Other
NetMaster
O2
Homebox 6641 (Homebox II)
Other
Observa
OpenWRT
Orange
Pace
PandoraBox SDK
Peplink
Phicomm
Prolink
Proximus
Sagemcom
Sercoom
Sky
Speedport
Spectrum
Synology
Tenda
Technicolor
DPC3848VE
TC7200
TC8715D
TG589VN v3
Other
Thomson
Tomato
TP-Link
AC750 Archer C20i
Archer AX6000
Archer C1200
DSL-2700E
TD-8840Tv4
TD-W8951ND
TD-W8901N
TD-W8970
TD-W9970
TL-MR3040
TL-MR3420
TL-WDR4300
TL-WDR7660
TL-WR1043ND
TL-WR740N
TL-WR541G/TL-WR542G
TL-WR741ND
TL-WR840N
TL-WR841N
TL-WR842N
TL-WR845N
TL-WR886N
TL-WR940N
Other
UniFi
Unitymedia
Connect Box
Horizon
Technicolor TC7200
Other
Virgin
Vodafone
Wolflink
Xiaomi
Zhone
ZTE
F609
ZXHN H108N V2.5
ZXHN H267A V1.0
Other
Zyxel
Keenetic 4G II
Keenetic Giga
C1100Z
Zyxel VMG8823-B50B
Other
Other
If you would like to earn a license key for cFosSpeed and cFos Personal Net by sending us instructions for this router, you can contact us by clicking on the button below.
(If your router isn't already listed here)
Important
The instructions should contain some screenshots and a step-by-step guide, which can be followed easily (see example).
The numbers to mark the specific steps in your screenshots can be downloaded here. Please don't use other means (e.g. arrows or circles) to mark the steps
The screenshots should not be scaled down and saved as 24-bit PNG or high quality JPG.
Please don't put your screenshots into any kind of container file (e.g. DOC, PDF or HTML mail), but send them as single files or in one ZIP archive. To describe the specific steps you can use a plain text file or the body of your mail.