NETGEAR · port forwarding

NETGEAR Orbi 850 Series mesh port forwarding is not working

NETGEAR Orbi 850 Series mesh port forwarding is not working: local service, firewall, reserved IP, double NAT, CGNAT and provider blocks should be proved in order. Scoped to RBK852/RBS850.

Port forwarding on an Orbi 850 lets an outside connection reach a device at home, such as a game server, a camera or a remote desktop, and when the forward does not work it is nearly always because of a wrong address, a double NAT or a firewall on the device. Sign in at orbilogin.com, open Advanced, Advanced Setup, Port Forwarding, and add a service. Choose the device from the list, or type its local address, and set the external port and the internal port, along with the protocol, TCP, UDP or both, as the application requires.

The checks in more detail

The device's address must not change, so first reserve it in Advanced Setup, LAN Setup, Address Reservation, so that it keeps the same address after a restart. If the forward is in place and the test fails, check for a second router in front of the Orbi. A modem supplied by your provider that also routes will block incoming traffic before it reaches the Orbi; this is double NAT, and the fix is to put the modem into bridge mode or to forward the port from the modem to the Orbi's address as well. Check the router's WAN address on the status page: if it is a private address such as one beginning 10.

or 192.168 or in the 100.64 range, the provider is using carrier-grade NAT and no port forward will work from outside, so ask for a public address or use another method, such as a VPN or a relay service. Then check the device. Its own firewall must allow the port, and the application must be listening on it. Use a port check website from outside your network, or a phone on mobile data, to test. Do not test from inside the home, since many routers do not loop back. Make sure the external port you chose is not used by the router's own remote management. Update the Orbi's firmware, then restart.

A forward that worked and stopped may be a changed address on the device or the provider changing your public address, so use dynamic DNS. Open only the ports you need and keep the application up to date, since an open port is an invitation. Contact Netgear if the router will not save the rule, with the serial number. The Orbi 850 is a Wi-Fi 6E tri-band set, and a rule saved on it applies to devices on the main router and on satellites alike. Check that the device you are forwarding to is connected to this mesh and not to a separate access point, since a device behind another router needs a rule there too.

Differential

Likely causes of “NETGEAR Orbi 850 Series mesh port forwarding is not working”, and how to tell them apart

  1. 1

    A device address that changed

    What separates it The forward worked and stopped

    How to confirm Reserve an address for the device

  2. 2

    A double NAT

    What separates it The test fails from outside

    How to confirm Bridge the modem or forward there too

  3. 3

    Carrier-grade NAT

    What separates it The WAN address is private

    How to confirm Ask for a public address or use a VPN

  4. 4

    A firewall on the device

    What separates it The port is closed on the device

    How to confirm Allow the port in the firewall

  5. 5

    Testing from inside the home

    What separates it The check fails

    How to confirm Test from mobile data

Before you touch a setting

Record this first — changing settings destroys the evidence

  • The WAN address
  • The device's address
  • The ports and protocol
  • Where the test was made

Try in this order

0 of 6 completed
  1. Reserve the device's address

    Reversible

    In LAN Setup.

  2. Add the forward

    Reversible

    Advanced Setup, Port Forwarding.

  3. Check for a second router

    Reversible

    Bridge the modem.

  4. Check the WAN address

    Reversible

    It must be public.

  5. Allow the port on the device

    Reversible

    In its firewall.

  6. Test from mobile data

    Reversible

    Outside the home.

Model-specific

What is true of this model and not of its siblings

Address reservation
Keeps the device on the same address.
Double NAT
A modem acting as a router blocks the forward.

Stop boundary

When this stops being a self-service repair

  • !If the router will not save the rule, contact Netgear with the serial number
  • !If the provider uses carrier-grade NAT, ask for a public address
  • !Open only what you need

Evidence ledger

Sources behind this answer

Exact questions

Common questions

Why does my port forward not work?+

A double NAT, a changed address or a firewall.

What is carrier-grade NAT?+

The provider shares one public address.

Should I test from inside?+

No, use mobile data.

Is an open port safe?+

Only if the service is kept updated.

Wrong device or version?

Match the path before repeating the steps.

Match another device