DeVpn
What You Need
-
Your router's admin page — usually
192.168.1.1or192.168.0.1 - Router admin password — usually on a sticker on the bottom of your router
-
Port to forward:
UDP 51820 - Your node's local IP — shown on your provider dashboard, or on the node's touchscreen
Try UPnP First (Easiest Option)
Many routers support automatic port forwarding via UPnP. If yours does, you won't need to do anything manually.
Open your router's admin page
Go to 192.168.1.1 (or your router's IP) in a web browser and log in.
Find the UPnP setting
Look under Advanced, NAT, or Firewall settings. The option is usually called "UPnP" or "Universal Plug and Play".
Enable UPnP and save
Toggle it on, click Save/Apply, then restart your DeVpn node.
Check your dashboard
Wait 5 minutes, then check your provider dashboard. If the status shows "Direct Connection", you're done!
If UPnP doesn't work or your router doesn't support it, follow the manual guide for your router brand below.
Router-Specific Guides
Click your router brand below for step-by-step instructions. Every guide uses the same settings: Protocol: UDP, Port: 51820, Internal IP: your node's local IP.
Access Router Admin
Open https://192.168.1.1 in your browser, or use the My Fios app.
Default login: admin / password on the router sticker.
Navigate to Port Forwarding
- Click the Firewall tab at the top
- Click Port Forwarding in the left sidebar
Add the Rule
- Select your DeVpn node from the device list (look for
raspberrypior its IP) - Protocol: UDP
- Port: 51820
- Click Add, then Apply
Access Router Admin
Open https://10.0.0.1 in your browser, or use the Xfinity app on your phone.
Default password is on the router sticker. Username is usually admin.
Via the Xfinity App (Recommended)
- Open the Xfinity app and sign in
- Tap WiFi tab at the bottom
- Tap View WiFi equipment
- Tap Advanced settings
- Tap Port forwarding
- Tap Add Port Forward
- Select your DeVpn node, choose Manual Setup
- Protocol: UDP, Port: 51820
- Tap Save
Via Web Interface
- Go to
https://10.0.0.1 - Navigate to Advanced → Port Forwarding
- Click Add Port Forward
- Select your device, Protocol: UDP, Port: 51820
- Click Save
Xfinity's "Advanced Security" feature can block port forwards. If your rule doesn't work, disable Advanced Security in the Xfinity app under WiFi → View WiFi equipment → Advanced settings.
Access Router Admin
Open https://192.168.1.254 in your browser.
The access code/password is printed on a sticker on the side of the gateway.
Navigate to Port Forwarding
- Click the Firewall tab
- Click NAT/Gaming
- Select your DeVpn node from the Device dropdown
Add the Rule
- Click Custom Services, then Add
- Service Name: DeVpn
- Protocol: UDP
- Port Range: 51820 to 51820
- Click Save
- Check the box next to your new "DeVpn" service and click Save again
Access Router Admin
Open https://192.168.1.1 in your browser.
Default login: admin / admin (or check the router sticker).
Navigate to Port Forwarding
The exact menu path depends on your Spectrum router model:
- Newer models: Advanced → Port Forwarding
- Older models: Firewall → Virtual Servers / Port Forwarding
- Sagemcom models: Advanced → Security → Port Forwarding
Add the Rule
- Click Add or Create Rule
- Device: select your DeVpn node (or enter its IP)
- Protocol: UDP
- External Port: 51820
- Internal Port: 51820
- Click Apply or Save
Spectrum often provides a modem/router combo. If you use your own router behind it, you may need to put the Spectrum device in bridge mode or port forward on both devices.
Access Router Admin
Open https://192.168.1.1 or https://routerlogin.net in your browser.
Default login: admin / password
Navigate to Port Forwarding
- Click Advanced tab at the top
- Click Advanced Setup in the left sidebar
- Click Port Forwarding / Port Triggering
- Make sure Port Forwarding radio button is selected
Add the Rule
- Click Add Custom Service
- Service Name: DeVpn
- Protocol: UDP
- External Port Range: 51820
- Internal Port Range: 51820
- Internal IP Address: enter your node's local IP
- Click Apply
Access Router Admin
Open https://192.168.0.1 or https://tplinkwifi.net in your browser.
Default login: admin / admin
Navigate to Port Forwarding
- Click Advanced at the top
- Click NAT Forwarding in the left sidebar
- Click Port Forwarding (or Virtual Servers on older firmware)
Add the Rule
- Click Add
- Service Name: DeVpn
- Device: select your node or enter its IP
- External Port: 51820
- Internal Port: 51820
- Protocol: UDP
- Click Save
Access Router Admin
Open https://192.168.1.1 or https://router.asus.com in your browser.
Default login: admin / admin
Navigate to Port Forwarding
- Click WAN in the left sidebar
- Click the Virtual Server / Port Forwarding tab at the top
- Set Enable Port Forwarding to Yes
Add the Rule
- Service Name: DeVpn
- Port Range: 51820
- Local IP: enter your node's local IP
- Local Port: 51820
- Protocol: UDP
- Click the + button to add, then click Apply
Access Router Admin
Open https://192.168.1.1 in your browser.
Default login: no username / admin (or check the router sticker)
Navigate to Port Forwarding
- Click Security in the left sidebar (or top menu)
- Click Apps and Gaming
- Click Single Port Forwarding (or Port Range Forwarding)
Add the Rule
- Application Name: DeVpn
- External Port: 51820
- Internal Port: 51820
- Protocol: UDP
- Device IP: enter your node's local IP
- Check the Enabled box
- Click Save Settings
Access Settings
Google Wifi and Nest Wifi are managed through the Google Home app on your phone (iOS or Android). There is no web interface.
Set Up Port Forwarding
- Open the Google Home app
- Tap Wifi (or Favorites → Wifi)
- Tap the Settings gear icon
- Tap Advanced networking
- Tap Port management
- Tap the + button to add a new rule
- Select your DeVpn node from the device list
- Internal Port: 51820
- External Port: 51820
- Protocol: UDP
- Tap Save
Access Settings
Eero is managed through the Eero app on your phone (iOS or Android). There is no web interface.
Set Up Port Forwarding
- Open the Eero app
- Tap Settings (gear icon, bottom right)
- Tap Network Settings
- Scroll down and tap Port Forwarding
- Tap Add a port forwarding rule
- Select your DeVpn node from the device list
- Enter a description: DeVpn
- Port: 51820
- Protocol: UDP
- Tap Save
If your Eero is behind an ISP modem/router (like Verizon or AT&T), you may need to set up port forwarding on both devices, or put the ISP device in bridge mode.
Any Other Router (Generic Guide)
If your router isn't listed above, follow these general steps:
Find your router's admin IP
On Windows: open Command Prompt, type ipconfig, look for Default Gateway.
On Mac/Linux: open Terminal, type ip route | grep default or netstat -rn.
Common IPs: 192.168.1.1, 192.168.0.1, 10.0.0.1
Log into the router admin page
Type the gateway IP in your browser. The admin username and password are usually on a sticker on the router itself.
Find the port forwarding section
Look for any of these menu names: Port Forwarding, Virtual Server, NAT, Gaming, or Firewall. It's usually under "Advanced" settings.
Add the port forwarding rule
Protocol: UDP
External Port: 51820
Internal Port: 51820
Internal IP: your node's local IP
Name/Description: DeVpn (optional)
Save and check your dashboard
Save the rule, then restart your DeVpn node or wait 5 minutes. Check your provider dashboard — the status should update to "Direct Connection".
Troubleshooting
- Wait 5 minutes for the next automatic connectivity check, or restart your node to trigger one immediately
- Make sure you used UDP, not TCP. WireGuard only uses UDP. This is the most common mistake.
- Verify the internal IP matches your node's actual current IP. Some routers reassign IPs on reboot. Consider setting a static IP or DHCP reservation for your node in your router settings.
- Try rebooting your router — some routers don't apply port forwarding rules until restarted
Some ISPs share a single public IP among many customers using CGNAT. This makes port forwarding impossible from your end.
- How to check: Look at your router's WAN IP. If it starts with
100.64through100.127, you're on CGNAT. - Common CGNAT ISPs: T-Mobile Home Internet, some apartment/condo buildings, some rural/satellite ISPs
- Solution: Call your ISP and request a public IP address (sometimes called a "real IP" or "static IP"). Some ISPs offer this for free, others charge $5-10/month.
CGNAT cannot be fixed on your end. No amount of port forwarding or router configuration will work. You must contact your ISP or switch to one that provides a public IP.
If you have both an ISP modem/router combo AND your own router, you have "double NAT". VPN traffic needs to pass through both devices.
- Option 1 (Best): Put your ISP device in bridge mode. This turns it into a simple modem and lets your router handle everything. Search "[your ISP] bridge mode" for instructions.
- Option 2: Set up port forwarding on both devices. Forward UDP 51820 on the ISP device to your personal router's IP, then forward UDP 51820 on your router to your node's IP.
Most home internet connections use dynamic IPs, which can change periodically. This is normal and your DeVpn node handles it automatically:
- Your node reports its current public IP to DeVpn every 30 seconds via heartbeats
- UPnP port mappings are renewed every 30 minutes
- If your IP changes, VPN users are seamlessly reconnected to your new address
No action needed on your part.
Very rare, but some ISPs block specific ports. You can check by running a port scan tool online after setting up the forwarding rule. If port 51820 is blocked:
- Try calling your ISP and asking them to unblock it
- Contact us — we may be able to configure your node to use a different port
Still Need Help?
Email us with your provider ID and router model — we'll help you get set up.
support@devpn.org