NETGEAR explains that the router's firewall blocks all incoming connections from the internet by default, and that port forwarding rules let chosen traffic through to a device. Decide the service, find the device's local IP address, and reserve that address because the server must always have the same one. Then open a browser on a device on the network, go to www.routerlogin.net (www.orbilogin.net on Orbi), sign in as admin with your password, and choose ADVANCED, Advanced Setup, Port Forwarding/Port Triggering.
The checks in more detail
Leave Port Forwarding selected, pick the service name from the list or create a custom service, enter the server IP address and click Add. Rule order matters: each inbound packet is checked against the top rule first, so a broad rule above a specific one captures everything. You can also set a default DMZ server, which receives all other incoming traffic, and that is far more exposed.
Port forwarding is grayed out in AP mode, and behind another router the upstream device must forward as well. Test from outside your network, such as a phone on cellular data, and remove rules you no longer use. Name every rule for what it does so you can still read them in a year, and delete any you cannot account for, since stale forwards are a risk that costs nothing to close. Check a forward from outside your network, such as a phone on mobile data, since a test from inside the home can pass or fail for unrelated reasons.
A rule that works for a day and then stops usually means the device took a new address, which is why reserving the address is step one and not an optional extra.
Differential
Likely causes of “NETGEAR Orbi mesh wifi port forwarding is not working”, and how to tell them apart
- 1
The device IP changed
What separates it The rule points nowhere because the device's IP address has changed since it was made
How to confirm Reserve an address for the device so the rule always points at the right machine
- 2
AP mode
What separates it Port forwarding is grayed out because the router is running in AP mode
How to confirm Return the router to router mode, since AP mode turns off port forwarding
- 3
Double NAT
What separates it The ports stay shut because another router in front is also doing NAT
How to confirm Open the ports upstream as well, so traffic reaches the Orbi and then the device
- 4
Rule order
What separates it The wrong server receives the traffic because two rules overlap and one is checked first
How to confirm Reorder the rules, so that the one you want is checked before any other that matches
- 5
A device firewall
What separates it The device's own firewall is stopping the port, so traffic never arrives
How to confirm Open the port in the device's firewall as well as in the router's forwarding rule
Before you touch a setting
Record this first — changing settings destroys the evidence
- The service and the port numbers that you want to open
- The device IP and whether reserved
- Which mode the router is running in
- Result of a test from outside
Try in this order
0 of 7 completedReserve an IP
ReversibleReserve an IP address for the server, so that it keeps the same address all the time.
Sign in
ReversibleSign in to the router at routerlogin.net or orbilogin.net, using the admin account, and then test again to see whether it helped.
Open Port Forwarding
ReversibleOpen Port Forwarding by choosing ADVANCED and then Advanced Setup in the router's menu, and then test again to see whether it helped.
Choose the service
ReversibleChoose the service from the list, or create a custom service if it is not there.
Enter the server IP
ReversibleEnter the server's IP address, and click Add, to create the rule for that service.
Check the order
ReversibleCheck the order of the rules, remembering that the top rules are checked first and win.
Test from outside
ReversibleTry it from outside the house, on a phone using mobile data rather than your wifi.
Model-specific
What is true of this model and not of its siblings
- Address
- Use orbilogin.net for an Orbi router and routerlogin.net for other NETGEAR routers.
- Models
- The menu names can differ slightly between models.
- Other models this page answers
- These steps also fit the Orbi 960 Series mesh.
Stop boundary
When this stops being a self-service repair
- !If the port stays closed with a reserved IP and router mode, check the provider
- !If the page is grayed out, check AP mode
- !If the rule cannot be saved, contact NETGEAR support
Evidence ledger
Sources behind this answer
Reserved IP, service name and rule order.
Custom services.
Editing rules.
Features grayed out in AP mode.
The company and its products.
Exact questions
Common questions
Where is port forwarding?+
ADVANCED, Advanced Setup, Port Forwarding/Port Triggering.
Why reserve an IP?+
So the server keeps its address.
Does rule order matter?+
Yes, the top rule is checked first.
Can I delete a rule?+
Yes, you can delete a rule that you no longer need, from the same page.