Home networking · inbound access

Router port forwarding is configured but not working

Forwarding fails when the target IP changes, the service is not listening, host firewall blocks it, double NAT/CGNAT exists, or testing occurs from inside without loopback support.

Direct answer

Forwarding fails when the target IP changes, the service is not listening, host firewall blocks it, double NAT/CGNAT exists, or testing occurs from inside without loopback support.

What this covers

  • The observed symptom matches this record
  • Customer-accessible settings, connections and external components
  • Diagnosis before reset, deletion or component replacement

What it does not cover

  • ×A model-specific error code with a different documented meaning
  • ×Internal electrical, battery-cell, gas, refrigeration or sealed-component repair
  • ×A guarantee that every model exposes the same control label
Try in this order0 of 4 completed
  1. Capture the exact symptom

    Reversible

    Confirm the service listens locally on the target device and record its current LAN and public WAN addresses.

  2. Run the smallest isolation test

    Reversible

    Reserve the target IP, allow the service in its firewall and compare the router WAN address with an external address.

  3. Correct only the proven cause

    Reversible

    Remove double NAT or request a public address where appropriate; expose only the required authenticated service.

  4. Verify before changing anything else

    Reversible

    Test from a separate cellular connection and inspect service logs.

Evidence ledger

Sources behind this answer

Visible sources support the visible claims. Home Product Support records the publisher, the fact used and the review date; community reports can suggest an issue but do not become a published fact on their own.

Exact questions

Common follow-ups

What should I check before resetting anything?+

Confirm the service listens locally on the target device and record its current LAN and public WAN addresses.

What is the safest isolation test?+

Reserve the target IP, allow the service in its firewall and compare the router WAN address with an external address.

When should I stop troubleshooting?+

Do not expose remote desktop, cameras or admin panels without strong authentication and current security guidance.

Change recordAug. 17, 2026 — Published as an independently scoped question with a distinct isolation test, verification and safety boundary; source boundary: TP-Link Support.
Report a correction
Wrong device or version?

Match the path before repeating the steps.

Match another device