TP-Link Deco Port Forwarding for Game Servers (Mesh Guide)

On a TP-Link Deco mesh you forward ports in the Deco app: tap More, then Advanced, then NAT Forwarding, then Port Forwarding, and add an entry with the server PC as the internal IP, the game's port as external and internal port, and the right protocol. It only works when the Deco is in Router mode and is the only router on the line. If the Deco sits behind an ISP router, you have to forward on that router too, or put it in bridge mode.

Check your Deco is actually the router

This matters more on Deco than on any other system, because so many Deco setups are plugged into an ISP router that also does routing.

1. In the Deco app tap More, then Internet Connection.
2. Look at the IPv4 WAN address.

• If it is a public address (it matches what "what is my IP" shows), the Deco is the edge router. Good.
• If it starts with 192.168., 10. or 172.16. to 172.31., there is another router in front of it. That is double NAT, and a Deco rule alone will never reach the internet.
• If it starts with 100.64. to 100.127., your ISP uses carrier grade NAT and forwarding cannot work at all. See how to tell if you are behind CGNAT.

Also check the operation mode under More, then Advanced, then Operation Mode. In Access Point mode the Deco does not route, the NAT Forwarding menu disappears, and you forward ports on whatever router is upstream.

Step 1: Reserve the server's address

1. Make sure the server PC is on and connected to the Deco network.
2. In the app go to More, then Advanced, then Address Reservation.
3. Tap + (or Add), choose the server PC from the list, and confirm the address.

The Deco app does not let you type an internal IP by hand in the port forwarding screen. It only offers devices that are connected right now, so having the PC online and reserved first saves a lot of frustration.

Step 2: Add the port forwarding entry

1. Go to More, then Advanced, then NAT Forwarding, then Port Forwarding.
2. Tap + to add an entry.
3. Service Name: something like Valheim.
4. Internal IP: pick the server PC.
5. External Port: the game's port, or a range like 2456-2457.
6. Internal Port: leave it blank to match the external port, or type the same value.
7. Protocol: TCP, UDP or All.
8. Tap Save.

Some Deco models allow up to 64 port forwarding entries, which is far more than a home server needs. Common game ports:

Step 3: Deal with the ISP router in front

If the WAN check at the top showed a private address, choose one of these:

• Bridge or modem mode on the ISP box. The ISP device stops routing and passes the public IP to the Deco. Only one router left, so the Deco rule works. ISP names for this differ: bridge mode (Xfinity, Cox), IP Passthrough (AT&T). See Xfinity, Cox or AT&T for the exact menus.
• Switch the Deco to Access Point mode. The ISP router keeps routing and you forward ports on it, while Deco just provides Wi-Fi. Easy, but you lose Deco features like parental controls that need router mode.
• Forward on both. Forward the ports on the ISP router to the Deco's WAN address, then on the Deco to the PC. Workable, but every new port means two changes.

The double NAT guide compares these in more detail.

Step 4: Test from outside

TP-Link's own advice is to test using the WAN IP and external port from a device on another network. A phone on mobile data is the simplest way. For a TCP game like Minecraft Java a port checking site works while the server is running. For UDP games, the only real test is a game client joining; our UDP port testing guide has workarounds.

Deco settings that interfere

• HomeShield security can block devices or traffic. If a rule looks right and friends still time out, check HomeShield's blocked list and the device's access settings in the Deco app.
• IPv6. Deco can enable IPv6 under More, then Advanced, then IPv6. Port forwarding is IPv4 only. If your friends connect over IPv6 to your PC, the Deco firewall blocks that separately. For most games, stick to IPv4.
• Satellite units. A server connected to a satellite Deco by Ethernet works fine. A server on Wi-Fi via a satellite gets the worst latency in the house. Wire the server to the main Deco if you can.
• Fast Roaming and band steering do not affect port forwarding, but they can make a Wi-Fi server reconnect and briefly kick everyone.

UPnP on Deco

Deco has UPnP under More, then Advanced, then UPnP. Some game servers will open their own ports with it, but many dedicated servers do not use UPnP, and it never works through double NAT. Manual rules are more predictable. If you are curious why UPnP often fails, see UPnP not working for a game server.

A mesh is not a server room

Mesh Wi-Fi is great for phones and terrible for running a world that ten people rely on. If the setup keeps fighting you, a hosted server takes the Deco out of the picture: its own address, open ports and DDoS protection by default, and the world stays online when your PC sleeps. GamezServers plans start at 9.99 USD a month for 4 GB, with 50% off the first month for new customers. Have a look at the games page.

FAQ

Why can I not type an IP in Deco port forwarding?

The Deco app only lets you pick from currently connected devices. Turn the server PC on, connect it to the Deco network, and it will appear.

Why is NAT Forwarding missing in my Deco app?

The Deco is in Access Point mode. Switch it to Router mode, or forward ports on the router upstream.

Does Deco support port triggering?

Some Deco models have Port Triggering under NAT Forwarding, but triggering only opens ports after the PC sends traffic out, which does not suit a server waiting for players. Use Port Forwarding.

Do I need a Deco for each port forward?

No. The rule is set once for the whole mesh on the main Deco, and it applies wherever the server PC is connected.