To the knowledge base
Dokument informacyjny #893

Configuring static port sharing in the FRITZ!Box

You can configure static port sharing to allow other users in the internet to access certain server services in your FRITZ!Box home network, such as HTTP servers and remote maintenance servers, or online games and internet applications.

Requirements / Restrictions

  • The FRITZ!Box must either obtain an IPv6 address or a public IPv4 address from the internet service provider.
  • The mobile network provider must allow incoming connections to the FRITZ!Box.

    Important:Many mobile network providers block incoming connections or only allow ones with special contracts.

Note:All instructions on configuration and settings given in this guide refer to the latest FRITZ!OS for the FRITZ!Box.

1 Preparations

Determining ports and IP protocols

  1. Determine which ports and IP protocols are used by the server service or application to accept incoming connections. Refer to the manufacturer for this information, for example consult the manual.

Configuring the device's firewall

If the server service or application is installed on a device with its own firewall (for example Windows firewall), the firewall must also be configured:

  1. Configure the device's firewall according to the manufacturer's instructions so that the server service or application can be accessed.

2 Setting up port sharing in the FRITZ!Box

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Permit Access" in the "Internet" menu.
  3. Click on the "Port Sharing" tab.
  4. Click the (Edit) button for the (computer) name of the device for which you want to configure port sharing. If you have not configured any sharings for the device yet:
    1. Click "Add Device for Sharing".
    2. Select the (computer) name of the device from the drop-down list "Device".

      Note:If you cannot select the device, you can select "Enter the IP address manually" and enter the IP address. Only devices that automatically obtain their IP settings (DHCP) from the FRITZ!Box are listed in the drop-down list.

  5. Click "New Sharing" in the "Sharing" or "Permit Access" section.
  6. Enable the option "Port Sharing".
  7. Select "Other application" from the drop-down list "Application".
  8. Enter a name of your choice for the port sharing rule in the "Name" field.
  9. Select the IP protocol (TCP, UDP, ESP or GRE) required by the server service or application from the drop-down list "Protocol".

    Note:The IP protocols ESP and GRE are only required for VPN server services.

  10. To enable port sharing for a single port, enter the number of the port used by the server service or application to accept connections in the "Port to device", "through..." ("to port"), and "Port requested externally (IPv4)" fields.
    • To enable port sharing for a port range:
        1. In the "Port to device" field, enter the number of the first port used by the server service or application to accept connections, and in the "to port" field, enter the number of last port.
        2. In the "Port requested externally (IPv4)" field, enter the number of the first port used by the server service or application to accept connections.

      Important:If a list of externally available IPv4 ports is displayed under "Port requested externally (IPv4)", the internet service provider only allows IPv4 port sharings for the ports given here. Your internet service provider can provide you with information on the available IPv4 ports.

  11. Enable the sharing.
  12. Click "Apply" to save the settings.

3 Setting up the FRITZ!Box for access over the internet

Register the FRITZ!Box with MyFRITZ!Net so that it can always be reached on the internet at a fixed MyFRITZ! address:

If the FRITZ!Box is registered with MyFRITZ!Net, devices for which port sharing has been configured can be reached using the MyFRITZ address with the shared port added to it.

Example:
An HTTP server for which the TCP port 12345 was assigned externally in the FRITZ!Box with the MyFRITZ! address pi80ewgfi72d2os42.myfritz.net can be reached via http://pi80ewgfi72d2os42.myfritz.net:12345.