Port forwarding on an Orbi 850 lets an outside connection reach a device at home, such as a game server, a camera or a remote desktop, and when the forward does not work it is nearly always because of a wrong address, a double NAT or a firewall on the device. Sign in at orbilogin.com, open Advanced, Advanced Setup, Port Forwarding, and add a service. Choose the device from the list, or type its local address, and set the external port and the internal port, along with the protocol, TCP, UDP or both, as the application requires.
The checks in more detail
The device's address must not change, so first reserve it in Advanced Setup, LAN Setup, Address Reservation, so that it keeps the same address after a restart. If the forward is in place and the test fails, check for a second router in front of the Orbi. A modem supplied by your provider that also routes will block incoming traffic before it reaches the Orbi; this is double NAT, and the fix is to put the modem into bridge mode or to forward the port from the modem to the Orbi's address as well. Check the router's WAN address on the status page: if it is a private address such as one beginning 10.
or 192.168 or in the 100.64 range, the provider is using carrier-grade NAT and no port forward will work from outside, so ask for a public address or use another method, such as a VPN or a relay service. Then check the device. Its own firewall must allow the port, and the application must be listening on it. Use a port check website from outside your network, or a phone on mobile data, to test. Do not test from inside the home, since many routers do not loop back. Make sure the external port you chose is not used by the router's own remote management. Update the Orbi's firmware, then restart.
A forward that worked and stopped may be a changed address on the device or the provider changing your public address, so use dynamic DNS. Open only the ports you need and keep the application up to date, since an open port is an invitation. Contact Netgear if the router will not save the rule, with the serial number. The Orbi 850 is a Wi-Fi 6E tri-band set, and a rule saved on it applies to devices on the main router and on satellites alike. Check that the device you are forwarding to is connected to this mesh and not to a separate access point, since a device behind another router needs a rule there too.
Differential
Likely causes of “NETGEAR Orbi 850 Series mesh port forwarding is not working”, and how to tell them apart
- 1
A device address that changed
What separates it The forward worked and stopped
How to confirm Reserve an address for the device
- 2
A double NAT
What separates it The test fails from outside
How to confirm Bridge the modem or forward there too
- 3
Carrier-grade NAT
What separates it The WAN address is private
How to confirm Ask for a public address or use a VPN
- 4
A firewall on the device
What separates it The port is closed on the device
How to confirm Allow the port in the firewall
- 5
Testing from inside the home
What separates it The check fails
How to confirm Test from mobile data
Before you touch a setting
Record this first — changing settings destroys the evidence
- The WAN address
- The device's address
- The ports and protocol
- Where the test was made
Try in this order
0 of 6 completedReserve the device's address
ReversibleIn LAN Setup.
Add the forward
ReversibleAdvanced Setup, Port Forwarding.
Check for a second router
ReversibleBridge the modem.
Check the WAN address
ReversibleIt must be public.
Allow the port on the device
ReversibleIn its firewall.
Test from mobile data
ReversibleOutside the home.
Model-specific
What is true of this model and not of its siblings
- Address reservation
- Keeps the device on the same address.
- Double NAT
- A modem acting as a router blocks the forward.
Stop boundary
When this stops being a self-service repair
- !If the router will not save the rule, contact Netgear with the serial number
- !If the provider uses carrier-grade NAT, ask for a public address
- !Open only what you need
Evidence ledger
Sources behind this answer
Exact questions
Common questions
Why does my port forward not work?+
A double NAT, a changed address or a firewall.
What is carrier-grade NAT?+
The provider shares one public address.
Should I test from inside?+
No, use mobile data.
Is an open port safe?+
Only if the service is kept updated.