Xfinity Port Forwarding for Game Servers (xFi Gateway, 2026)

On an Xfinity gateway you port forward in the Xfinity app, not on a web page: open the app, tap WiFi, View WiFi equipment, Advanced settings, then Port forwarding, and add a rule for the PC that runs your game server. Pick Manual setup, enter the game's port and protocol, and save. If friends still cannot join, the usual culprits are Xfinity's Advanced Security feature, the PC changing its local address, or a second router plugged into the gateway.

Before you start

You need three things ready, or the app will fight you:

• The server PC connected to the gateway. The Xfinity app only lets you pick devices it can see on the network. Turn the PC on and start the server first.
• An Xfinity ID with Primary or Manager access. Member accounts on the same household can sometimes see the menu but not save changes.
• The ports your game uses. Our port forwarding guide lists the defaults for every game we host. A few common ones:

The old browser admin page at 10.0.0.1 still loads on many gateways, but Xfinity moved port forwarding into the app and website. Changes made in the old page are often ignored or reset.

Step by step in the Xfinity app

1. Open the Xfinity app and sign in.
2. Tap WiFi at the bottom.
3. Tap View WiFi equipment.
4. Tap Advanced settings.
5. Tap Port forwarding, then Add port forward, and tap Continue on the info screen.
6. Choose the server PC from the device list. If it shows several entries with the same name, pick the one that is currently online.
7. Skip the list of common apps (it only has consoles and a few programs) and tap Manual setup.
8. Enter the port or port range and choose TCP, UDP or TCP/UDP. When in doubt for a game server, TCP/UDP does no harm.
9. Tap Next and confirm.

You can do the same thing from a browser by signing in to your account on xfinity.com, opening the WiFi section of your account and finding the same Advanced settings menu.

Xfinity says port forwarding only works for devices that get their address by DHCP using IPv4. That is fine for a normal Windows or Linux PC. Do not set a manual static IP on the PC itself, because the gateway ties the rule to the device it handed an address to.

Find the address to give your friends

Your friends connect to your public IP, not the 10.0.0.x address. In the Xfinity app, the gateway details screen shows the WAN IP, or you can search "what is my IP" from the server PC. Send them that address plus the port if it is not the game's default, for example 73.x.x.x:2456.

Xfinity home connections use a dynamic IP. It does not change often, but it does change, usually after a long outage or a gateway swap. If people suddenly cannot connect, check the address again. A free dynamic DNS name helps; see DDNS for game servers.

Advanced Security can block the port you just opened

Xfinity gateways include Advanced Security, which scans traffic and can block inbound connections it thinks look like an attack. Game server traffic from many unknown IPs sometimes trips it. The app's own help text warns that it may block traffic to forwarded ports.

If the rule looks right and friends still time out:

1. In the Xfinity app, open WiFi, then View WiFi equipment, then Advanced settings.
2. Look for Advanced Security (on some accounts it sits under the account or security section).
3. Check its blocked activity list for your server PC. If you see blocks, you can turn the feature off as a test.

Turn it back on later if turning it off made no difference. Leaving security features off permanently on a household network is a trade off you should make knowingly.

Do not test from your own Wi-Fi

Testing by typing your own public IP into the game while sitting on the same network often fails on Xfinity gateways, because they do not always loop traffic back inside. That makes a working rule look broken. Test with a phone hotspot on a second device, or ask a friend. If you can join via the local 10.0.0.x address but not via the public one from home, read why friends cannot connect but you can.

Using your own router behind the xFi gateway

If you plugged a mesh system or gaming router into the Xfinity gateway, you now have two routers doing NAT. A rule on the gateway sends traffic to your own router, which then has no idea where it goes. You have two fixes:

• Bridge mode on the gateway. In the Xfinity app go to WiFi, View WiFi equipment, Advanced settings, Bridge mode. This turns off the gateway's router and Wi-Fi, so your own router gets the public IP and you forward ports there only. Xfinity's own features, including xFi pods, stop working in bridge mode.
• Forward on both. Forward the port on the gateway to your router, then on your router to the PC. It works but is more to maintain.

Our double NAT guide walks through both options.

xFi Pods and port forwarding

xFi Pods extend the gateway's network, so a PC connected through a Pod still appears in the device list and the rule works the same way. If the PC moves between the gateway and a Pod, it keeps its address because the gateway still hands it out. You only see trouble if a Pod drops offline and the PC grabs a new address when it reconnects, which is rare.

Still not working

Run down this list in order:

• Server not running when you test. Nothing answers on a closed port, so every checker says it is closed.
• Wrong protocol. Most game servers use UDP. A TCP rule does nothing for them.
• Windows Firewall. Allow the server program on both Private and Public networks. Our Windows Firewall guide has the exact rules.
• Two rules for the same port. Old rules for a console or another PC can conflict. Delete anything pointing the same port elsewhere.
• Recently restarted gateway. Rules survive restarts, but the device list sometimes refreshes. Open the rule and confirm it still points to the right device.

Skip the gateway entirely

Every one of these steps exists because the server runs inside your house. A hosted server has its own public address with the game ports already open, so there is nothing to forward, no Advanced Security to argue with, and your home IP stays private. A GamezServers game server for friends is live about a minute after checkout, every setting sits in a control panel, and you can split the monthly bill with up to 10 friends.

FAQ

Can I port forward on Xfinity without the app?

Yes, through your account on xfinity.com in a browser, which shows the same WiFi equipment and Advanced settings menus. The old 10.0.0.1 admin page is no longer the reliable place to do it.

Why does Xfinity not show my PC in the device list?

The gateway only lists devices that are connected right now. Turn on the server PC, make sure it has an address from the gateway (not a manual static IP), wait a minute and reopen the screen.

Does Xfinity block game server ports?

Xfinity does not block common game ports. Some low ports used by email and file sharing are filtered on residential plans, which is why you should keep game servers on their normal high ports.

Do I need to forward ports for IPv6 on Xfinity?

The Xfinity port forwarding screen is for IPv4. Most game servers and players still connect over IPv4, so that is the one that matters.