Inability to do port forwarding

Inability to get port forwarding to work.
Upnp ports are visible when doing a nmap scan of the wan ip address. But the port 51820 used for wireguard does not open for any reason or any other port.
I even switched Upnp off and still not working. It is a battle. I have 3 M5 also wirelessly connected in a mesh. Wan IP starts with a 103.8.x.x ..
I am considering throwing these TPlink against the wall. I dont want to buy new ones without having the supplier guarentee that it will work for the
TP-Link Deco XE75 AXE5400.
Any reason why port forwarding is not functioning for the M4.??? Does it work for the Deco XE75 AXE5400.
Rudi
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
Hi, welcome to our community.
It is suggested to follow the two guides to check and troubleshoot:
How to set up Port Forwarding feature on the Deco
Why port forwarding feature is not working on my Wi-Fi router or Deco
Thank you and best regards.
- Copy Link
- Report Inappropriate Content
Thanks Marvin. ISP says I am behind CGNAT but have a static IP address and should be able to port forward with no problem.
How many ports can this Deco do now with this firmware and does the UPNP ports count towards the 16 that I understand is used on it at this time.
Ii read those instructions and followed them. But cannot get 51820 to port forward for wireguard.
When I do an nmap on my want port I see all the UPNP ports , but not the one I port forwarded. Any other advise .
Tx
- Copy Link
- Report Inappropriate Content
Interesting question. When port forwarding you need to select from an internal ip the ip address you want to port forward to.
How often does this list get updated as i cannot find the IP address i want to use in this list.I can ping and access via browser.
Tx.
- Copy Link
- Report Inappropriate Content
Hi, thanks for sharing more details.
As Step4 in the guide says, if it is a private IP address, which means it's not enough to only open the port on the TP-Link, you have to do the same setting on the modem router as well. The WAN IP of your Deco network is 103.8.x.x, which is a private IP. It is also suggested to google whether your IP address is public or private on your own.
And, as you mentioned “ ISP says I am behind CGNAT but have a static IP address”,you can also see the explanations in blue words.
So, you may contact you ISP and ask them to offer a Public IP address for your network directly.
- Copy Link
- Report Inappropriate Content
@Rudi101 so 103.8.x.x is not a private IP address it's a public IP address, that isn't he problem.
But I noticed there was some confusion about the address you need to forward to.
But, if you need to use port forwarding the VPN server must be a device on your internal network and it's address needs to be static, either DHCP assigned or set to an address outside the DHCP range on the device itself, so the address of the server to forward to is obvious.
If you are talking about the VPN server on the router itself port forwarding is not needed and if you try to set port forwarding for that port it may stop the router service from being able to communicate.
Remember that for an external port scan to indicate the port is accessible the service must be listening on that port so the service must be up and running.
- Copy Link
- Report Inappropriate Content
Rudi101 wrote
Inability to get port forwarding to work.
Upnp ports are visible when doing a nmap scan of the wan ip address. But the port 51820 used for wireguard does not open for any reason or any other port.
I even switched Upnp off and still not working. It is a battle. I have 3 M5 also wirelessly connected in a mesh. Wan IP starts with a 103.8.x.x ..
I am considering throwing these TPlink against the wall. I dont want to buy new ones without having the supplier guarentee that it will work for the
TP-Link Deco XE75 AXE5400.
Any reason why port forwarding is not functioning for the M4.??? Does it work for the Deco XE75 AXE5400.
@Rudi101 what are you describing here?
What has the M4 got to do with a VPN server?
If it's the one you are using for the VPN server why are you doing that instead of using the XE75?
Which device is the ISP internet connected to, surely the best one would be the XE75?
- Copy Link
- Report Inappropriate Content
Hi All,
Thanks for the assist. I am trying to install tailscale (headscale) vpn self hosted to bypass the CGNAT issue and does not need port forwarding. But it is a battle and have not succeeded yet. I also tried other self hosted VPN's with the same result. Will battle it out a bit more.
Thanks again.
- Copy Link
- Report Inappropriate Content

Information
Helpful: 0
Views: 595
Replies: 7
Voters 0
No one has voted for it yet.