Set up port forwarding using the Xfinity app

Learn how to set up port forwarding using the Xfinity app.

See xFi Overview for additional information about getting started with xFi.

How does port forwarding work?

Similar to a wall in your home, your Wireless Gateway keeps out potentially harmful risks from the internet, while opening doors or 'ports' for safe internet traffic.

Some applications require a designated port in order to work properly, and that's where port forwarding comes in handy. Port forwarding is also commonly used for:

Video games.
Some email applications like POP3.
Instant messaging.
Video conferencing.
Peer-to-peer file sharing.
Remote computer access.
Phone service that leverages voice over IP technology.

Notes:

Customers with xFi Gateways can only set up and adjust Port Forwarding settings using the Xfinity app.
Customers with Xfinity Gateways that are not xFi Gateways can continue to set up and adjust Port Forwarding settings through the Gateway's Admin Tool (http://10.0.0.1).
For more information on setting up Port Forwarding using the Gateway's Admin Tool, see Set Up Port Forwarding on Your Xfinity Gateway.

Add a port forward

Sign in to the Xfinity app with your Xfinity ID and password.
Select WiFi (from the bottom navigation on the Xfinity app).
Select View WiFi equipment.
Select Advanced Settings.
Select Port forwarding.
Select the Add Port Forward button and Continue on the next screen.
Choose the household device for the port forward you are setting up from the drop-down list of connected devices.
- Note: If you don't see the device listed, it may be because the device:
  - Isn't connected to your home network.
  - Is using an IPv6 address.
  - Has a static IP set in the Gateway Admin Page.
Choose from the list of common applications to use a recommended, preset configuration (e.g., Xbox or PlayStation) or select Manual Setup to enter specific port numbers, ranges and/or protocols.
- Note: If you're unsure what port settings to choose, reference the device manual or the application you're trying to use.
  - Opening unnecessary ports isn't recommended, as it poses a security risk.
Select Next to complete the setup of the port forward.
The device you set up for this port forward can now use these settings.

xFi port forwarding and IPv6

At this time, xFi only supports port forwards to be set up for devices with an IPv4 address. If the device is connected to your network, but not showing as an available device in the dropdown, it could be because it’s using an IPv6 address.

For dual stack devices (has both an IPv4 and IPv6), check with the device manufacturer on how to disable the IPv6, or set the IPv4 as “Preferred."

xFi port forwarding and static IPs

With xFi, you no longer need to set a static IP for devices you wish to port forward. xFi port forwarding relies on the devices getting an IP address from the DHCP. When adding a port forward, xFi will use the IP address from Dynamic Host Configuration Protocol (DHCP) to set the static media access control (MAC) bind and establish the port forward rule.

If you are unable to set a port forward for a device that is using a static IP, remove the static IP in the Gateway Admin Tool and then try again.

xFi port forwarding and MAC randomization features

If you enable a MAC randomization feature on a device that you have established port forward rules for in xFi, it's possible those rules will break when the device's MAC address changes.

If this happens, you’ll need to log into xFi to delete the old rule and then recreate the rule for the active device entry in the list.

Advanced Security and port forwarding

If Advanced Security detects a known threat targeted for the device with Port Forwarding, demilitarized zone (DMZ) settings enabled, or Universal Plug and Play (UPnP) open ports, it'll block all traffic coming from its open ports as a measure of protection until the threat is averted. If you're unable to access a device from outside your home network, you have two options:

Allow Access: Go to the Security section in the Xfinity app, scroll down and select Advanced Security, and then the device you want to provide access to, and follow the instructions to Allow Access.
- We recommend that you only use Allow Access when you are confident about who is accessing the device from outside the home network.
- Note: The Allow Access feature will only permit access to the specific device you choose on the specified port using a specific source IP address for 30 days from the time you enable it.
Disable Advanced Security: Alternatively, you can choose to disable the Advanced Security feature.
- We don't recommend that you disable Advanced Security, as this removes Advanced Security’s protections from all of your devices.
- If you need access to a specific device, we recommend you keep Advanced Security turned on and follow the steps above to Allow Access on a device-by-device basis.

Edit or delete a port forward

Sign in to the Xfinity app with your Xfinity ID and password.
Select WiFi (from the bottom navigation on the Xfinity app).
Select View WiFi equipment.
Scroll down to select Advanced Settings.
Select Port forwarding.
Select Edit next to the port forward you wish to edit or delete.
Select Delete this Port Forward at the bottom of the screen (if removing) or Apply Changes (after making edits).

Notes:

Port forwards without an associated device can’t be edited.
- If you want to use an existing port forward that doesn’t have an associated device, you’ll need to delete it and create a new one by selecting Add Port Forward.
Advanced Security must be activated through the Xfinity app.

Additional information

Visit our Online Support Center to find common solutions.

The easiest way to activate, manage, and troubleshoot your Xfinity experience is with the Xfinity app! Get 24/7 real-time support, pay your bill, view plan details, get outage updates, and more. Download the free Xfinity app, or scan the QR code with your smartphone.

Need additional support? Ask Xfinity Assistant.