Port forwarding on an eero network is done in the app, on the gateway, and the Beacon plays no part in it because it does not route. eero's article on port forwarding gives the path: open Settings, Advanced networking, Reservations and port forwarding, first reserve an IP address for the target device so that its address does not change, then add the port forward with the port and protocol.
The checks in more detail
Without a reservation, a forward breaks when the device gets a new address. Services that need forwards, such as game servers, cameras and remote desktops, fail if the network is in double NAT, if the provider uses carrier-grade NAT with no public address, or if the device's own firewall blocks the port. Check the device is on the eero network, not a guest network. After saving, test from outside your network with an online port checker.
Remember that in bridge mode the forwarding must be made on the other router. For safer access, prefer a VPN or a vendor cloud service over opening ports to the internet. eero Plus subscribers also see a security dashboard, but the port forward rules stay on the gateway and appear in the Reservations and port forwarding list, where you can edit or delete them.
Keep a note of the ports you open and remove rules you no longer use, since open ports are a security risk. If you use a game console with an eero, reserve its address and set up the ports the game lists, but also try enabling UPnP in the app, which opens ports automatically when the game asks, and is often enough for consoles without manual rules. UPnP is convenient but opens ports without review, so weigh it against safety.
Differential
Likely causes of “eero Beacon port forwarding is not working”, and how to tell them apart
- 1
No IP reservation
What separates it The forward stops working after a restart
How to confirm Reserve the device's address first
- 2
Double NAT or carrier-grade NAT
What separates it The port checker shows closed
How to confirm Fix double NAT or ask the provider for a public address
- 3
The device's firewall
What separates it Closed despite the rule
How to confirm Allow the port in the device's firewall
- 4
Wrong protocol or port
What separates it The service does not respond
How to confirm Check TCP, UDP and the exact ports
- 5
Bridge mode
What separates it The eero forwarding has no effect
How to confirm Forward on the router you kept
Before you touch a setting
Record this first — changing settings destroys the evidence
- The device and its reserved address
- The port and protocol
- The result of an outside port check
- Whether the network is in bridge mode
Try in this order
0 of 8 completedReserve an IP address
ReversibleSettings, Advanced networking, Reservations and port forwarding.
Add the port forward
ReversibleChoose the device, the port and the protocol.
Check the device's firewall
ReversibleAllow the port.
Test from outside
ReversibleUse an online port checker.
Fix double NAT if closed
ReversibleBridge one of the routers.
Consider a VPN
ReversibleFor safer remote access.
Review your forwarding list
ReversibleOpen Reservations and port forwarding and delete unused rules.
Keep a record of open ports
ReversibleWrite down each port and its purpose.
Model-specific
What is true of this model and not of its siblings
- Gateway only
- The Beacon does not route.
- Reservations
- They keep the target address fixed.
- Housekeeping
- Unused rules should be removed.
- Security
- Each open port is a risk.
Stop boundary
When this stops being a self-service repair
- !If the port stays closed with a public address and a clean rule, ask the service's maker
- !If the provider uses carrier-grade NAT, ask for a public address
- !Prefer a VPN for access
Evidence ledger
Sources behind this answer
Exact questions
Common questions
Does a Beacon need port forwarding?+
No, only the gateway does it.
Why reserve an address?+
So the forward does not break.
Why is my port closed?+
Double NAT or a firewall.
Is port forwarding safe?+
Only for what you need, kept updated.
Where do I see my port forwards?+
In Reservations and port forwarding.
Should I delete old rules?+
Yes.