How to Set Up RCON on a CS2 Server (and Its Known Limits)

To set up RCON on a CS2 server, set rcon_password "yourpassword" in game/csgo/cfg/server.cfg, make sure the server starts with the -usercon launch option, then connect an external RCON tool to the server's IP and game port (27015 by default, over TCP). The catch: typing rcon commands from the CS2 game client is unreliable and fails for most people, so use an external tool, a plugin based admin system, or your host's web console instead.

What is RCON in CS2?

RCON (remote console) lets you send server console commands over the network with a password. It uses the Source RCON protocol over TCP, on the same port number as the game (27015 unless you changed -port). Anything you can type in the server console, like changelevel, mp_restartgame 1 or kick, you can send over RCON.

It exists for two cases: admins who are not sitting at the server, and tools like bots, match managers and Discord integrations that need to control the server.

Step 1: Set an RCON password

Add this to game/csgo/cfg/server.cfg:

rcon_password "Use-A-Long-Random-Password-2026"

Rules for the password:

• Long and random. RCON gives full control of your server, including changing passwords and kicking everyone.
• Stick to letters, numbers, dashes and underscores. Spaces, dots and commas cause trouble with some tools.
• Never reuse your Steam or email password.

An empty rcon_password means RCON is off, which is the safe default if you do not need it.

Step 2: Start the server with -usercon

CS2 needs -usercon on its launch line for RCON to listen. A typical self hosted start line:

./cs2 -dedicated -usercon -port 27015 +map de_mirage +game_type 0 +game_mode 1 +exec server.cfg

If your server runs in Docker or behind a panel, do not bind it to one specific IP with -ip or +ip. Use 0.0.0.0 or leave it out, otherwise RCON often refuses connections that the game itself accepts.

Step 3: Open the port (self hosting)

RCON uses TCP on the game port. If you self host, forward or allow TCP 27015 as well as the usual UDP 27015 for players. Only open TCP to the addresses that need it if your firewall allows that. Our port forwarding guide covers the router side.

Step 4: Connect with an RCON tool

Any tool that speaks the Source RCON protocol works. Two open source options:

• CS2 RCON Tool: a Windows app made for CS2, with buttons for common commands.
• rcon-cli: a small command line client for Windows, Mac and Linux, handy for scripts.

With rcon-cli, a command looks like this:

rcon -a 203.0.113.10:27015 -p "Use-A-Long-Random-Password-2026" "changelevel de_inferno"

Run status first. If it prints the player list, everything works.

Why does rcon not work from the CS2 console?

In CS:GO you could connect to a server, type rcon_password yourpassword in your own console, then rcon changelevel de_dust2. In CS2 this is broken for most people. Players have reported it on Valve's forums since 2024: the password is set, the server is configured correctly, and in game rcon commands still never arrive or fail with "Unable to connect to remote server". Valve has not commented on it publicly.

What still works:

• External tools over TCP, as above. This is the reliable route.
• Unconnected rcon from your game console sometimes works: set rcon_address 203.0.113.10:27015 and rcon_password while you are not connected to the server, then send rcon commands. Results vary, so do not depend on it.
• Plugin based admin commands, which skip RCON entirely.

The better option for in game admin: CounterStrikeSharp

If what you want is to type commands while playing, RCON is the wrong tool in CS2. Install Metamod:Source and CounterStrikeSharp, add yourself as admin in addons/counterstrikesharp/configs/admins.json, and use an admin plugin such as CS2-SimpleAdmin. You get chat commands like css_kick and css_ban, an admin menu, and bans, which vanilla CS2 does not do on release servers. No password to share, and permissions are per admin.

{
  "YourName": {
    "identity": "76561198000000000",
    "flags": ["@css/root"]
  }
}

The install steps for the Metamod and CounterStrikeSharp stack are in how to set up a CS2 retakes server.

Keeping RCON safe

Change the password any time with rcon_password "newpassword" in the console, then update server.cfg so it survives a restart.

On GamezServers you may not need RCON at all

The panel console on a GamezServers CS2 server runs any server command directly, from any browser, with no password to manage and nothing to install. The everyday ones are buttons: Change map, Workshop map, Restart match, End warmup, Pause match, Kick player, Kick all bots and Run a config. Friends who split the bill get the same console in their own dashboard.

If you do need RCON for a bot or a match tool, turn on Enable RCON in your server's Settings and restart. That adds -usercon to the launch line for you. Your server comes with a random RCON password already generated, which you can see and change in the same place. Then connect the tool to your server's address on its game port. If a tool cannot connect, email support@gamezservers.com and we will check it with you. For the commands themselves, see the CS2 server commands list.

FAQ

What port does CS2 RCON use?

The same number as the game port, 27015 by default, but over TCP instead of UDP. If you change the game port with -port, RCON follows it.

Why does my CS2 RCON tool say connection refused?

Usually the server was started without -usercon, rcon_password is empty, TCP on the game port is blocked, or the server is bound to a specific IP inside Docker. Check those four in that order.

Is RCON safe to use?

Yes, with a long random password and only the people who need it. Anyone with the password has full control of the server, so treat it like an admin login.

Can I use RCON while playing on the server?

Not reliably in CS2. In game rcon commands fail for most people. Use an external tool, your host's web console, or CounterStrikeSharp admin commands instead.

How do I turn RCON off?

Set rcon_password "" in server.cfg and restart. With no password, the server does not accept RCON logins.