How to Set Up Port Forwarding for Remote Desktop in 2025

Remote Desktop Protocol (RDP) allows you to access your computer from anywhere, making remote work and troubleshooting more convenient. 

However, poor connections can hinder direct connections, making establishing a stable remote session difficult. 

Configuring port forwarding on your router is one of the best ways to bypass these restrictions and ensure seamless access even if your ISP performs CGNAT.

What is Port Forwarding?

Port forwarding creates a direct line of communication between your device and external servers or networks. 

When you use programs like Remote Desktop Protocol (RDP) to control your computer from outside your home, it must connect through your router. By default, your router blocks most incoming connections to protect your devices.

Port forwarding tells your router to "open" a specific pathway (called a "port") for a particular program or device. This lets the RDP connection through, allowing you to control your computer from anywhere.

Before You Forward a Port 

• The IP address of your router 
• The IP address of your device (computer or console)
• Port numbers (UDP and TCP)

Default Ports for Remote Desktop

• TCP 3389: Used for Remote Desktop connections.
• UDP 3389: Improves performance by handling audio, video, and input responsiveness.

How to Open Ports for Remote Desktop Manually

1. Open your device's network settings and locate the "Default Gateway" or router IP (e.g., 192.168.1.1).
2. Log in using your router's admin username and password (check your router label or manual if you don't know these).
3. Find the section called "Port Forwarding" in the router settings.
4. Type the IP address of your gaming console into the appropriate field.
5. Add the remote desktop's TCP and UDP port numbers in the provided boxes. e.g.:

• Service Name: Remote desktop 
• Protocol: TCP/UDP
• Start Port: 3389
• End Port: 3389
• Device IP: Enter your gaming device's local IP (e.g., 192.168.1.100)

6. When you're finished, click Save and restart your router.

How to Open Ports for Remote Desktop Automatically 

Use PureVPN's port forwarding add-on to open specific or all ports on a router without any technical expertise or configuration setup. As you know, opening ports can be risky. PureVPN can help protect your device against DDoS attacks, hacking attempts, and phishing attacks. 

1. Sign in to the Member Area with your new username and password. 

2. Select Subscriptions.

3. Select Configure.

4. Select Enable all ports to open all ports and transfer data. 

5. Select Disable all ports to block every port and stop all internet traffic. 

6. Select Enable specific ports to allow all ports to be blocked, while opening some ports. 
7. Once you pick an option, select Apply Settings.

What is a Port? 

A port is a virtual endpoint enabling your in-home devices to redirect incoming data to specific services and applications. Every port has a unique number ranging from 0 to 65535 ports. Port 80 and port 443 are typically used for web traffic.  

Range

• 0-1023 are well-known ports for HTTP and HTTPS
• 1024-49151 are for specific applications only 
• 49152-65535 are for dynamic and private ports 
• TCP 3389 is for remote desktop protocol by default 

What is Remote Desktop Port Forwarding? 

It involves setting up a network's router, allowing external devices to remotely access a computer on a private network using Remote Desktop Protocol (aka RDP). You must set up your router to forward internet traffic on port 3389 and remotely control devices. 

Although RDP can be an easier way to open ports, it can expose your private network to external threats and malicious actors. 

Why is Opening Ports Behind CGNAT an Issue?  

ISPs perform CGNAT to save IPv4 exhaustion and network congestion, assigning a single IP to multiple consumers who are relying on the same network as you are. Top household routers like Starlink, Spectrum, and Xfinity are behind CGNAT to mitigate network load. 

The only downside is that you can't open ports on routers behind CGNAT (Carrier-Grade NAT). Even if you somehow port forward a router, chances are your IP address can get blocked or blacklisted. 

How to Open Ports on Routers Behind CGNAT

With PureVPN's Port Forwarding add-on and a dedicated IP, you can bypass CGNAT and set up port forwarding for remote desktops on routers like AT&T Fiber, Verizon Fios, Google Fiber, CenturyLink, and Optimum. Just follow these easy steps:

1. Login to the PureVPN.
2. Click the subscription tab.
3. Click Configure.
4. Apply your desired port settings.
5. Click Apply settings.

In Summary

Access your computer remotely without connectivity issues and bypass ISP restrictions with a PureVPN port forwarding add-on and dedicated IP address. Port forward routers like TP-Link, Ubiquiti, and ASUS today with a few clicks on your laptop!