FRITZ!Box 7560 Service - Knowledge Base
Setting up automatic port sharing
By default, the FRITZ!Box's firewall blocks all incoming connections from the Internet. If some of the Internet applications (for example chat software, online games, file-sharing software) you use require port sharings for incoming connections from the Internet, then you can configure the FRITZ!Box so that the network device on which the Internet application is running can set up the necessary port sharing settings by itself if required.
The port sharings are only valid for the period of time during which the application requires them, and then the FRITZ!Box closes them again.
Requirements / Restrictions
- The FRITZ!Box must obtain a public IPv4 address or an IPv6 address from the Internet service provider.
Important:The FRITZ!Box is only accessible from the Internet over IPv6 when used on a DS-Lite ("Dual-Stack Lite") connection. When DS-Lite is active, the status "IPv4 over DS Lite" is displayed under "Connections" on the "Overview" page of the FRITZ!Box user interface.
- The Internet application must support the UPnP standard (Universal Plug and Play) or the Port Control Protocol (PCP according to RFC 6887).
Note:The manufacturer can provide you with information on the Internet application. If it does not support PCP or UPnP, configure static port sharing in the FRITZ!Box.
1 Configuring the FRITZ!Box for automatic port sharing
- Click "Home Network" in the FRITZ!Box user interface.
- Click "Home Network Overview" in the "Home Network" menu.
- Click on the "Network Connections" tab.
- Click the button (Edit) for the device you would like to configure.
- Enable the option "Permit independent port sharing".
- Click "OK" to save the settings.
2 Configuring the Internet application for automatic port sharing
- Configure the Internet application so that it uses PCP or UPnP. The manufacturer can provide you with information on how to configure it, for example consult the manual.
3 Configuring the computer's firewall
If the Internet application is installed on a computer with its own firewall (for example Windows firewall), you must also configure the firewall:
Important:If you allow devices to change their own port sharing settings, then malicious software on them can also cause ports to be shared, thus bypassing the FRITZ!Box's firewall. You should therefore set up a firewall on these devices for security reasons.
- Configure the computer's firewall according to the manufacturer's instructions so that the server service or Internet application can be accessed from the FRITZ!Box home network.
Now Internet applications can automatically open the required ports in the FRITZ!Box.
Ports currently enabled for port sharing are shown in the detailed information given for the respective network device under "Home Network > Home Network Overview > Network Connections" in the FRITZ!Box user interface. You can also find an overview of opened ports under "Internet > Permit Access > Port Sharing" and "Diagnostics > Security" in the user interface.