eero gives the steps in one article. Open the eero app, tap Settings, Advanced networking, Reservations and port forwarding. There you can add an IP reservation under IPv4 Reservations and Port Forwards, or a firewall rule under IPv6 Firewall Rules. Assign a connected device or add a new one with its nickname, MAC address and IP address, select Open a port and tap Save, then open a specific port or a range, entering the start, a dash and the end, choose a nickname and a protocol, TCP, UDP or both, and tap Save at the top right.
To remove one, go back to the reservation, tap the port or range, scroll down and tap Delete port forward. eero's example: to run an FTP server on a laptop, forward TCP port 21 to the laptop's IP address.
The checks in more detail
Reserve the address first so it does not change. Port forwards only work when the eero is the network's router: in bridge mode or behind another router (double NAT) they will not work, and eero says a soft reset keeps these settings while a hard reset clears them. UPnP is on by default and opens ports for consoles and media centers automatically, so you may not need manual rules.
Test with a port-check tool from outside your network. Test a forward properly: from a device outside your network, such as a phone on cellular data, try to reach the service by your public address, because testing from inside the home can succeed or fail for reasons unrelated to the rule. If you run a server for others, also keep its software patched, since an open port is the first thing scanners find.
Differential
Likely causes of “eero mesh wifi port forwarding is not working”, and how to tell them apart
- 1
No IP reservation
What separates it The rule misses because the device's address changes, as it has no IP reservation
How to confirm Reserve the address for the device, so that the rule keeps pointing at it
- 2
Bridge mode or double NAT
What separates it The ports stay closed because the eero is in bridge mode or behind another router doing NAT
How to confirm Fix the upstream router first, since the eero cannot open ports that another router keeps closed
- 3
A wrong protocol
What separates it The service is unreachable because the protocol chosen in the rule is wrong
How to confirm Choose TCP, UDP or both correctly for the service, as the service's documentation says
- 4
The device firewall
What separates it The port is blocked because the firewall on the device itself stops the traffic
How to confirm Allow the port in the device's own firewall, as well as in the eero's port forwarding
- 5
A hard reset
What separates it The rules have vanished because a hard reset erased them
How to confirm Re-enter the reservations and the port forwards, since a hard reset clears all of them
Before you touch a setting
Record this first — changing settings destroys the evidence
- The device, its IP and the ports needed
- The protocol that you chose for the rule
- Whether the eero is the router or bridged
- The result of testing the port from outside your network
Try in this order
0 of 7 completedReserve an IP
ReversibleReserve an IP address under Reservations and port forwarding, so the device keeps the same address.
Pick the device
ReversiblePick the device from the list, and assign a nickname, its MAC address and the IP address.
Open a port
ReversibleOpen a port by choosing the port number, or a range of ports, that the service needs.
Choose the protocol
ReversibleChoose the protocol for the rule, which can be TCP, UDP or both, depending on the service.
Save
ReversibleSave the rule using the button at the top right, and wait a moment for it to apply.
Test from outside
ReversibleTest from outside your network using a port checker, since testing from inside can mislead you.
Remove unused rules
ReversibleRemove unused rules by tapping the port and choosing Delete port forward, to keep things tidy.
Model-specific
What is true of this model and not of its siblings
- Firewall
- IPv6 uses firewall rules rather than port forwards.
- Gateway
- Rules apply on the gateway eero.
- Other models this page answers
- These steps also fit models eero Pro 6E, eero Pro 6, eero 6+, eero 6, eero Pro (2nd generation), eero Outdoor 7.
Stop boundary
When this stops being a self-service repair
- !If the port stays closed with a reserved IP and eero as router, check the provider does not block it
- !If the WAN IP is private, resolve double NAT
- !If the app errors on save, contact eero support
Evidence ledger
Sources behind this answer
App steps, protocols and removal.
The Internet, Network services, Wireless and Integrations sections.
UPnP, DNS, port forwarding, Client Steering and more.
Bridge mode, Automatic and features.
The company and its products.
Exact questions
Common questions
Where do I set port forwarding?+
Settings, Advanced networking, Reservations and port forwarding.
Can I forward a range?+
Yes, start, a dash, then the end.
Do I need an IP reservation?+
Yes, so the address stays fixed.
Does UPnP replace it?+
For consoles and media centers it can.
Does it work in bridge mode?+
No, port forwarding does not work through the eero when it is in bridge mode.
Does a soft reset keep rules?+
Yes, a soft reset keeps your reservations and port forwards, according to eero.
Does a hard reset keep them?+
No, a hard reset does not keep them, so you must enter the rules again.
How do I delete one?+
Tap the port and choose Delete port forward.