Virgin Media Port Forwarding: Hub 5, Hub 4 & Hub 3 Setup and Fixes
Set up port forwarding on a Virgin Media Hub 3, 4, 5 or 5x: login, menu path, modem mode, blocked ports, and what to do when Hub 5 rules do not open.
Quick Answer
To port forward on Virgin Media, open 192.168.0.1, sign in with the password on the Hub, and go to Advanced settings > Security > Port forwarding. Add a rule with your device’s fixed local IP, the port and the protocol (TCP, UDP or both). The path is the same on the Hub 3, Hub 4 and Hub 5. If you use your own router, put the Hub in modem mode and forward on your router instead. Virgin Media blocks ports 135, 137–139 and 445 network-wide. If a Hub 5 rule never opens, a VPN with port forwarding (Proton VPN or PureVPN) bypasses the Hub.
Virgin Media port forwarding is set up in the Hub’s web page: go to 192.168.0.1, sign in with the password printed on the Hub, then open Advanced settings > Security > Port forwarding and add a rule that sends the port to your device’s local IP. The path is the same on the Hub 3, Hub 4 and Hub 5.
The menu is the easy part. Most failed attempts come from the device’s IP changing, a second router causing double NAT, Hub 5 rules that save but never open, or ports Virgin Media blocks network-wide. This guide covers each one, plus what to do when the Hub will not cooperate.
Virgin Media Hub Port Forwarding Settings
The model name is printed on the Hub and shown at the top of its web page.
Virgin Media Hub 5
- Login:
- 192.168.0.1 (password on the sticker under the Hub)
- Port forwarding:
- Advanced settings > Security > Port forwarding > Add rule
- Modem mode:
- Available. In modem mode the Hub has no port forwarding menu; forward on your own router instead.
- Watch out:
- Community threads report rules that save but never open, and forwarding of port 443 failing where a Hub 4 worked. Try a different external port, delete and recreate the rule, or move to modem mode with your own router.
How to Port Forward on a Virgin Media Hub
- 1
Give the device a fixed local IP
Find its current address (ipconfig on Windows, network settings on a console) and either reserve it in the Hub’s DHCP settings or set a static IP on the device outside the Hub’s DHCP range. Otherwise the rule points at nobody after the next reboot.
- 2
Sign in to the Hub
Open http://192.168.0.1 on a device connected to the Hub and enter the settings password from the sticker (or the one you changed it to).
- 3
Open Advanced settings > Security > Port forwarding
Choose Add rule. Enter the local IP, the external and internal port (or range), and the protocol: TCP, UDP or both. Use the exact protocol your game or app documents.
- 4
Save and apply
Click Add rule / Apply and check the rule appears in the list and is enabled. If the Hub 5 shows it but nothing changes, see the troubleshooting section below.
- 5
Allow the port on the device
Windows Defender Firewall, a NAS firewall or the server software itself can still drop the connection. Add an inbound rule for the same port.
- 6
Test from outside your network
Use mobile data or our NAT checker. Testing your own public IP from inside the house can fail even when the rule works, because not every Hub supports NAT loopback.
Check the result with our NAT checker. Common ports:
| Service | Port(s) | Protocol |
|---|---|---|
| Minecraft Java server | 25565 | TCP |
| Minecraft Bedrock server | 19132 | UDP |
| Plex Media Server | 32400 | TCP |
| Xbox (Open NAT) | 3074 | UDP & TCP |
| Arma 3 server | 2302–2306 | UDP |
| qBittorrent | The port shown in Tools > Options > Connection | TCP & UDP |
Using Your Own Router: Modem Mode and Double NAT
If you have a mesh system or gaming router plugged into the Hub, and the Hub is still in router mode, every connection goes through two NAT layers. Forwarding a port on only one of them fails. You have two clean options:
Put the Hub in modem mode (recommended)
In the Hub settings choose Modem mode and connect your router to the Hub’s first Ethernet port. The Hub then passes the public IP straight to your router, and all port forwarding is done on your router.
The Hub’s own page usually moves to 192.168.100.1 and loses its Wi-Fi and port forwarding menus. See our TP-Link, ASUS or eero guides for the router side.
Keep router mode and forward twice
Forward the port on the Hub to your router’s WAN IP, then forward it again on your router to the device. It works, but games and consoles may still report Moderate or Strict NAT, and UPnP cannot open both layers.
On a Hub 5x without modem mode this is the only local option.
Virgin Media Port Forwarding Not Working? Check These
The port is on Virgin Media’s blocked list
Hub 5 rule saved but the port is still closed
The device got a new local IP
Double NAT behind a mesh or second router
Your public IP changed
Nothing is listening on the port
Is it CGNAT? Virgin Media cable and fibre broadband normally gives the Hub its own public IPv4, so CGNAT is rarely the problem. Compare the WAN IP on the Hub’s status page with the public IP from our NAT checker: if they differ, or the WAN IP starts with 100.64–100.127, something upstream is translating your traffic. Mobile and 5G home broadband typically uses CGNAT; see port forwarding behind CGNAT.
Skip the Hub With a Port-Forwarding VPN
If a Hub 5 or Hub 5x keeps ignoring your rules, you cannot use modem mode, or you are on mobile broadband, a VPN with port forwarding gives you an open port that does not depend on the Hub at all. Traffic leaves your PC through an outbound tunnel and comes back on a port the VPN server forwards to you. It also keeps your home IP out of game server lists and torrent swarms.
Proton VPN
- Port forwarding on all paid plans (Windows, Linux; macOS in early access)
- Skips the Hub 5 firewall and any double NAT behind it
- One random port; it usually changes when you reconnect
- Hides your Virgin Media IP from peers and players
- 30-day money-back guarantee
2-year plan
PureVPN
- Pick the exact ports instead of a random one
- Optional dedicated IP that does not change like a Virgin Media IP can
- Useful on a Hub 5x without modem mode or on mobile broadband
- Apps for Windows, macOS, Linux and routers
- 31-day money-back guarantee
5-year plan·$1.69/mo $12.95/mo
This page contains affiliate links. If you sign up through them, NAT Checker may earn a commission at no extra cost to you.
Rule of thumb: if your app lets you type in any port (qBittorrent, Soulseek), Proton’s random port is enough. If the server needs a fixed port or a range (Minecraft 25565, Arma 3 2302–2306, an NVR), choose PureVPN. Other providers are compared in our VPN port forwarding guide.
Related Guides
Sources (checked October 30, 2026):
- • Virgin Media: Blocked internet ports (TCP/UDP 135, 137–139, 445)
- • Virgin Media Community forum threads on Hub 4, Hub 5 and Hub 5x port forwarding and modem mode (user reports, not official policy)
- • Proton VPN: Port forwarding and PureVPN: Port forwarding