port forwarding for remote desktop

How to Configure Port Forwarding For Remote Desktop Port (RDP) in the UK

6 Mins Read

PUREVPNHow to Configure Port Forwarding For Remote Desktop Port (RDP) in the UK

Remote desktop allows you to access your computer system from a different computer or network. So, if you’d like to have full access to your main computer at all times, no matter where you are, you will need to set up remote desktop port forwarding on your home network.

How to Configure Remote Desktop Port Forwarding (RDP)?

As mentioned earlier, there are thousands of ports that allow for different services. The port responsible for the Windows Remote Desktop service is 3389, i.e., you need to forward it to port 3389. 

If you or the PC you are connecting to is behind a router, you will first need to change the router’s settings to forward port 3389 from the router to the PC you’re connecting to. Here is how to configure port forwarding For Remote Desktop

Figure out the IP address of the computer

To forward to port 3389, you need to find out the “address” of the computer you’re forwarding the port to.

Go to the computer system and click on the “Start” option. Then type “cmd” in the search bar and press Enter. Next, type “ipconfig / all” and look for the “IP Address label” of your system to see the address. Write down this number.

Log into your home internet router

Routers have web-accessible control panels that you can log into by simply opening a web browser and going to the router’s IP address. In most cases, this IP address is 192.168.1.1, but it may differ depending on what kind of router you’re using. 

To be entirely sure about the IP address, check out the user manual for your router.

Also, you can find out the IP address via your system. Click on the “Start” button, type “cmd,” and press Enter. Type “ipconfig / all” into the pop-up window. Look for the “Default Gateway” IP address – that’s your router’s IP address.

Enter your username and password to log in to the control panel of your router. If you have the router’s manual handy, you can use it to access information about this control panel as well.

Change the router settings

Inside the control panel of your router, look for the “Applications and Games,” “Port Forwarding,” “NAT” (Network Address Translation) section, and click on it.

This section’s name can vary depending on the router, but once you find it, you will see a list of text entry boxes. You are supposed to enter IP addresses and port numbers in these boxes.

Set the forwarding ports to be 3389. Then enter the IP address of your local PC as the network these ports should be forwarded to. Once done, save the settings and, if necessary, restart the router.

You can now connect to your PC from the outside world using the remote desktop port forwarding protocol

What is Port?

A port is a point to which a computer, a process, a service, or an application connects.

For example, when a user types in a website address in their browser and hits Enter, they are requesting a remote web server using the HTTPS/HTTP protocol, which a specific port handles on that server (port 443 for HTTPS and port 80 for HTTP).

As you may already know, every computer device has an IP address. There are two types of IP addresses: public (external) or private (internal). A public IP address is accessible to the outside world, whereas a private IP address is only used in internal networks.

Whenever you request to gather information from the Internet, your device’s private IP address is sent along with the public IP address of your router.

The Network Address Translation (NAT) is responsible for ensuring that the requested information reaches the right computer device within a network. It occurs at the network and transport layers, where the network traffic flow is channeled through the router so that numerous devices behind it can share a single IP address (public). 

This is where ports come in. Ports ensure that a computer knows which application the data packets are meant for based on the port number.

There are 65,536 ports available for Transmission Control Protocol (TCP) or User Datagram Protocol (UDP), and some of them come with pre-assigned uses. Ports are identified by port numbers, ranging from 0 to 65535. 

What is RDP – Remote Desktop Port Forwarding? 

When you connect to your personal computer (PC) by using a remote desktop client, you create a peer-to-peer connection. So, you will need direct access to the host (your PC). You will need to “enable the access” if you want to connect to your system from outside the network it is running on.

This can be quickly done via remote desktop port forwarding.

RDP port forwarding maps the port on your public IP address (router’s IP) to the port and IP of the computer you want to access. Port forwarding allows you to anything you want to do on your PC remotely, as though you were using the PC itself.

The precise steps for enabling port depend on which router you are using. For example, setting up RDP port forwarding on a TP-Link router differs slightly from configuring it on an Asus router. But the general steps remain the same.

Default RDP Port and Alternatives

Function Protocol Port
Standard RDP TCP 3389
Custom Port TCP 3390+

 

Changing the default port (3389) is a basic security practice to avoid automated scans and brute-force attacks.

Step-by-Step Guide to Port Forwarding for RDP

Step 1: Assign a Static IP to Your Computer

  • Go to Network Settings > Adapter Options > IPv4 Settings

  • Manually set an IP like 192.168.1.100

Step 2: Enable Remote Desktop

  • On Windows: Settings > System > Remote Desktop > Enable

  • Allow through Windows Firewall when prompted

Step 3: Log Into Your Router

  • Access via 192.168.1.1 or 192.168.0.1

  • Login with credentials (often on a sticker under the router)

Step 4: Add a Port Forwarding Rule

  • Service Name: RemoteDesktop

  • Port Range: 3389 (or your custom port)

  • Protocol: TCP

  • Local IP Address: Your computer’s static IP

  • Local Port: 3389

Step 5: Test the Connection

  • From a remote network, open Remote Desktop Connection

  • Type your-public-ip:3389

  • You should see a login screen for the target machine

Open Ports Behind CGNAT with PureVPN

If you’re struggling with port forwarding on a router behind CGNAT, our Port Forwarding add-on can help. Here is how to setup:

  1. Log into the PureVPN Member Area.
  2. Click the Subscriptions tab.
  3. Select Configure next to Port Forwarding.
  4. Choose Enable specific ports and input the ports you need to forward.
  5. Click Apply Settings to confirm your configuration.
  6. Connect to a Port Forwarding-supported server in the PureVPN app, and you are all set!

How to Secure Your RDP Setup

Port forwarding exposes your system to the public internet, which can be risky. Implement these precautions:

1. Change Default RDP Port

  • Modify via Registry: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp\PortNumber

2. Use Strong Passwords and 2FA

  • Enforce complex passwords
  • Use tools to verify for 2FA on RDP

3. Implement Firewall Rules

  • Allow RDP only from specific IP ranges
  • Use Windows Defender Firewall to limit exposure

4. Use VPN for Remote Access

  • Place RDP behind a VPN server
  • Only allow VPN users to initiate RDP sessions

5. Monitor RDP Logs

  • Use Event Viewer (eventvwr.msc) > Security logs
  • Watch for failed login attempts and lockouts

Common Issues and Troubleshooting

SymptomLikely CauseSolution
Can’t connect remotelyPort not forwardedRecheck router rules
Black screen or lagBandwidth issuesUse lower resolution or optimize settings
Connection refusedFirewall or port mismatchEnsure port 3389 is open
Public IP unreachableISP NAT or CG-NATUse VPN or reverse proxy

Frequently Asked Questions

What type of port forwarding service needs to be set up for remote desktop?

For remote desktop access, TCP port 3389 is typically used. This port needs to be forwarded from the router to the computer hosting the remote desktop service.

Is port forwarding for Remote Desktop safe?

Port forwarding for remote desktop can be safe if properly configured and secured. However, it also increases the security risk as it opens a port to the internet, making the computer hosting the remote desktop service more vulnerable to hacking attempts. To ensure safety, it is recommended to use a strong password for the remote desktop connection, use a VPN (Virtual Private Network), and keep the computer and router software up-to-date with security patches.

What ports do I need to open for Remote Desktop?

The default port used for Remote Desktop is TCP port 3389. This is the port that needs to be opened on the firewall and forwarded from the router to the computer hosting the Remote Desktop service. Opening this port enables remote access to the computer’s graphical user interface (GUI) over a network connection.

Can I RDP over Wi-Fi?

Yes, as long as the device is reachable over the network.

Does changing the RDP port improve security?

It reduces visibility from automated scans but is not a standalone security measure.

author

PureVPN

date

August 8, 2025

time

2 months ago

PureVPN is a leading VPN service provider that excels in providing easy solutions for online privacy and security. With 6000+ servers in 65+ countries, It helps consumers and businesses in keeping their online identity secured.

Have Your Say!!