How to set up port forwarding on your business router for remote applications
Summary
This guide helps you troubleshoot and resolve: How to set up port forwarding on your business router for remote applications. Follow the steps below to fix the issue.
Common Causes
Port forwarding allows external internet traffic to reach specific devices or applications on your business network, such as CCTV cameras, remote desktop servers, or web applications. By directing incoming traffic on a particular port to an internal device, you can securely access office resources from outside your network. This guide walks you through configuring port forwarding on most common business routers.
Before You Begin
Before configuring port forwarding, gather the following information:
- The internal IP address of the device you want to forward traffic to
- The port number (or port range) used by the application or service
- The protocol type required (TCP, UDP, or both)
- Your router's admin login credentials
Quick Fix Steps
- Log in to your router's admin panel
- Locate the Port Forwarding section
- Create a new forwarding rule with the device's IP and port details
- Save and apply the changes
- Test the configuration from an external network
Detailed Instructions
Step 1: Access Your Router's Admin Panel
- Open a web browser on a device connected to your office network
- Enter your router's gateway address in the address bar (commonly
192.168.0.1,192.168.1.1, or10.0.0.1) - Enter your admin username and password
ipconfig, or open Terminal on macOS and type netstat -nr | grep default. The gateway address listed is your router.
Step 2: Navigate to the Port Forwarding Section
Router interfaces vary by manufacturer, but look for one of these menu options:
- Port Forwarding
- Virtual Server
- NAT Forwarding
- Advanced then Port Forwarding
Step 3: Create a New Port Forwarding Rule
- Click Add New or Create Rule
- Enter a descriptive Service Name (for example, "CCTV Camera" or "Remote Desktop")
- Enter the internal IP address of the target device
- Enter the external port (the port external users will connect to)
- Enter the internal port (the port the application listens on locally)
- Select the protocol — TCP, UDP, or Both
- Click Save or Apply
Step 4: Common Port Forwarding Examples
- Remote Desktop (RDP): External
3389to internal3389, TCP - CCTV (Hikvision): External
8000to internal8000, TCP - Web Server (HTTP): External
80to internal80, TCP - Web Server (HTTPS): External
443to internal443, TCP - SSH: External
22to internal22, TCP
Step 5: Test Your Configuration
- From a device on a different network (such as your mobile phone on 4G/5G), attempt to connect to your public IP address on the forwarded port
- Find your public IP by visiting
whatismyip.comfrom your office network - Confirm the connection succeeds
3389) directly to the internet without additional protection. Use a VPN, change the default port, or restrict source IPs to reduce exposure to brute-force attacks.
Troubleshooting
Port Forwarding Not Working
- Confirm the target device has a static IP address or DHCP reservation
- Verify the device's local firewall (Windows Firewall or macOS Application Firewall) allows traffic on the relevant port
- Check that the ISP is not blocking the port — some Australian ISPs block common ports like
25,80, and3389on business plans. Contact your ISP if suspected - Reboot the router after applying changes
- Double-check the protocol (TCP vs UDP) matches the application requirements
Can't Access Router Admin Panel
- Try a different browser or clear your browser cache
- Ensure you're connected to the office network, not a guest or VPN network
- Reset the router to factory defaults if credentials are lost (note: this will erase all configuration)
Multiple Devices Need the Same Port
Use different external ports pointing to the same internal port on different devices. For example, external 8080 forwards to device A on 80, and external 8081 forwards to device B on 80.
Security Recommendations
- Restrict forwarded ports to specific source IP addresses where possible
- Use non-standard external ports to reduce automated scanning attempts
- Enable fail2ban or similar intrusion prevention on Linux servers
- Keep device firmware and software up to date
- Consider a VPN solution instead of exposing services directly
For related networking guidance, see our article on How to connect to Wi-Fi.
Still Having Issues?
💻 Open a Ticket