Open Ports
Revision as of 14:47, 13 October 2016 by 46.86.78.215 (46.86.78.215)
Ports are "doors" that allow programs on your computer to connect to other computers. For security reasons, the vast majority of ports in your firewall are closed. If your program is having difficulties connecting, and you have tried other basic connectivity troubleshooting methods, you may need to manually open some ports for the program. See Step 1 below to learn how to open ports on your router and in Windows Firewall.
Contents
Steps
Opening Ports in Your Router
- Figure out what ports you need to open. Most programs will function fine without opening ports, but occasionally you may need to in order to increase performance or simply get it to work. The ports you need to open are different for every program, so check the support documentation to figure out which ports need to be opened.
- Open your router's configuration page. If your computer is connected to a router, it is most likely using the router's firewall to protect ports. If you want to open ports, you will need to open your router's configuration page. You can access your router from any computer attached to your network.
- Type in the router's address into your web browser's address bar. The address is typically 192.168.1.1 or 192.168.0.1. You can find your specific router's address by Open-the-Command-Prompt-in-Windows, typing ipconfig and looking for the Default Gateway.
- You will be asked for a username and password. The default username is typically "admin" and the password is usually "password" or "admin". You can find the login information for your specific router by searching the model online.
- If you are having difficulty accessing the router, press the reset button on the back of the router and wait 30 seconds, then turn it back on. This will reset the settings to default. You can then use the login information printed on the router itself or look up the defaults online.
- Find the Port Forwarding section. The location of this option will vary from router to router, but it is typically located in the Advanced menu. It is sometimes called the "Forwarding" section or the "Applications and Gaming" section, and may be under the "NAT" menu.
- Create a new port forwarding entry. This process will vary depending on your router, but generally you will be entering the same information. You may need to click "Add Custom Service" or "Create Rule" in order to make a new entry. You will need several different pieces of information to open ports.
- IP Address - This is the IP address of the device that you want to forward ports for. For example, if you want to forward ports for your laptop, you will need its IP. See Find-the-IP-Address-of-Your-PC for instructions on finding your IP for a PC, and Find-Your-IP-Address-on-a-Mac for finding the IP address for a Mac.
- Starting port and ending port - This is the range of ports you are opening. Some programs will require a range of ports, while other will require a single port. If you are only opening one port, enter the same number for the Starting and Ending ports. If you have the option to set the Internal Port range, use the same numbers.
- Protocol - You have a choice between TCP and UDP. The one required will typically be given to you by the program that you are unblocking ports for, but if you are unsure choose the "Both" or "TCP/UDP" option.
- Save your new entry. Once you've entered in all the information you need, click the Save or Apply button. Your router will save the changes, which may take a few moments. After its done, the ports you specified will now be open for the IP address that you entered.
Opening Ports in Windows Firewall
- Open the Control Panel. Windows Firewall is a software firewall that acts in conjunction with your router's hardware firewall. Windows Firewall is especially important if you have multiple devices on the same network, as it helps prevent the spread of viruses between computers on a local network.
- In Windows Vista/7, click the Start menu and select Control Panel.
- In Windows 8, press ⊞ Win+X and select Control Panel.
- Open Windows Firewall. This can be found towards the end of the list of Control Panel options. If you are in Category View, select System and Security and then click Windows Firewall.
- Click the Advanced Settings link. This can be found in the left navigation pane. If you are not logged in as the Administrator, you will be asked for the password. This will open the "Windows Firewall with Advanced Security" window.
- Select "Inbound Rules". This is located in the left navigation pane. You will see a list of all your allowed programs (if you have any). Click "New Rule" in the left pane.
- Select "Port" from the first screen of the wizard. This will allow you to open ports instead of trying to find a specific program. Click Next > to continue.
- Choose TCP or UDP. Unlike most routers, you will need to choose between TCP or UDP to create the rule. Check your program's support documentation to ensure that you are using the correct protocol.
- Enter in the port range. Make sure the "Specific local ports" option is selected, and then type the ports you need to open into the field. You can open multiple individual ports by separating them with a comma, and you can denote a range of ports by using a dash between the two ends of the range. Click Next > to continue.
- Finish the wizard. In the Action section, make sure that the connection is allowed. In the Profile section, check the network profiles that you want the rule to apply to (Domain, Private, and Public). In the Name section, name the new rule so that you can easily identify it later. Click the Finish button to end the wizard and open the port(s).
Video
Tips
- As a general rule of thumb, most applications utilize TCP ports. Time-sensitive programs, like multiplayer video games, may utilize either UDP or TCP ports.
Warnings
- Be careful when opening ports. Opening the wrong port may compromise your computer's security and render it vulnerable to viruses and other malicious activity, like hacking.
Sources and Citations
The question is: when connecting 2 switches together (not stacked) should a technician use a trunk port or access port configuration??? In trying switchport access vlan (data) it was discovered that a dual tagged port trunked, worked the best. Any agreements with this type of configuration from past experiences?
