Port Mapping and Network Optimization

Port mapping lets other BitTorrent peers initiate connections to your computer. It can improve the pool of peers you can exchange data with, especially while seeding. It does not guarantee higher speeds: the torrent still needs available peers and bandwidth.

What the Downloads indicator means#

Indicator	Meaning
Spinner + NAT mapping	Motrix is preparing mappings or retrying automatically
NAT mapped	The gateway accepted the mappings; this does not prove that the ports are reachable from the internet
Gray dot + NAT mapping	Automatic mapping was not established after retries; open the menu for an explanation and Retry
No indicator	Automatic mapping is off, stopped, or its status has not loaded

The menu includes Network settings and Network guide. Retry counts stay inside the menu. The Dashboard’s NAT tile retains detailed states, mapping information, and diagnostics for troubleshooting.

Improve your network#

Start with the part you control. Multiple NAT layers do not inevitably make mapping fail, but a mapping on the nearest router may leave an upstream router blocking incoming connections.

1. Keep one home router doing NAT#

Check whether both your modem or optical network terminal (ONT) and your own router are operating in router mode. A common double-NAT arrangement is:

ISP → ONT (router/NAT) → Personal router (NAT) → Computer

If your ISP supports it, use bridge mode for the ONT’s internet connection and let your main router handle the internet connection, NAT, and DHCP:

ISP → ONT (bridge) → Main router (NAT) → Switch / AP → Computer

Ask your ISP how to configure bridge mode for your model. Before changing it, back up settings and confirm the connection type, any PPPoE credentials, and VLAN requirements for internet, IPTV, or phone service. Avoid factory-resetting the ONT or deleting service profiles. See TP-Link’s bridge-mode example for the configuration details involved; its DSL menus are not universal ONT instructions.

Cannot change the ONT? Keep it as the router and put your own router or Mesh system into Access Point (AP) mode, following its manufacturer’s instructions:

ISP → ONT (router/NAT) → Personal router / Mesh (AP) → Computer

A switch, access point, or Mesh satellite operating as a bridge does not add a NAT layer just because traffic passes through it. Changing the Wi-Fi name alone does not change the operating mode. See TP-Link’s router/AP mode explanation.

2. Check whether the upstream NAT belongs to your ISP#

Open your router’s Internet/WAN IPv4 address page. Compare it with the public IPv4 reported by an IP-checking service using the same connection. Do not compare IPv4 with IPv6 or a home WAN address with a VPN exit address.

WAN IPv4 range	What to investigate
10.x.x.x, 172.16.x.x–172.31.x.x, 192.168.x.x	A private network upstream: this may be your own ONT/router or your ISP’s network
100.64.x.x–100.127.x.x	Shared address space commonly used for carrier-grade NAT (CGNAT)
A public IPv4 matching the external check	No address mismatch found; firewalls or ISP port policies can still prevent incoming connections

The shared range is defined by RFC 6598. A private WAN address alone does not identify who operates the upstream NAT; check the outermost router you control before asking your ISP.

Bridging your ONT cannot remove ISP-side CGNAT. Ask whether the ISP offers public IPv4 with incoming connections allowed, or an inbound-port service. A dynamic public IPv4 can be sufficient; a static address is not inherently required. Router manufacturers also recommend checking the WAN address when port forwarding does not work.

Some providers support managed inbound mappings through PCP. This requires provider support; enabling UPnP on your home router cannot by itself configure an ISP’s NAT.

3. Use IPv6 where available#

IPv6 offers a separate path to peers that also have IPv6, even when IPv4 is behind CGNAT. Your ISP, router, and computer must have working IPv6 connectivity and a globally routable address; a link-local address beginning with fe80: is not enough.

Motrix’s Enable DHT setting enables both IPv4 and IPv6 DHT in its engine. Private torrents can disable DHT for that task. See the aria2 IPv6 DHT reference.

IPv6 does not need the same IPv4 address translation, but router and computer firewalls may still filter incoming connections. Allow the required BT/DHT traffic to this computer while keeping the firewall enabled. RFC 6092 describes this distinction. An IPv4 mapping or STUN result does not establish whether IPv6 works, and IPv6 cannot make an IPv4-only peer reachable over IPv6.

4. Configure the ports on the correct path#

On a trusted home network, enable a supported mapping protocol on the router. In Settings → Network → NAT mapping, turn on Enable port mapping and leave Preferred protocol at auto. Motrix tries PCP, NAT-PMP, then UPnP. Wait for the download engine to become ready before retrying.

For manual forwarding, reserve the computer’s LAN address in the router, then use the actual ports from Settings → BitTorrent:

Motrix setting	Forward to the computer
BT listen port	TCP on the configured port
DHT listen port	UDP on the configured port

Keep those ports stable and avoid conflicts with other computers or torrent clients. If two routers still perform NAT, each needs a corresponding forwarding rule through to the next device. A rule on the inner router alone is insufficient. Once manual forwarding works, you can turn off automatic mapping.

Allow Motrix’s incoming traffic in the computer’s firewall too. Do not expose the RPC control port or router administration to improve BT connectivity, and do not place the whole computer in a router’s DMZ as a shortcut.

Using a VPN? If BT traffic goes through the tunnel, incoming connections depend on the VPN provider’s port-forwarding support and assigned port. A mapping on the home router does not configure the VPN exit. Likewise, an outbound HTTP/SOCKS proxy is not an inbound-port service. On managed, guest, or mobile networks, ask the administrator/provider which options are available.

Verify the result#

The Dashboard’s NAT tile shows the state, detected NAT type, external IP, mappings, and a health grade. Enable NAT starts discovery; Force remap renews or rebuilds mappings; Run diagnostic requests a check. Scheduled diagnostics are configured in Network settings. Mapping leases are renewed automatically while mapping is active.

Use these results for different questions:

• Active / NAT mapped: the gateway accepted mapping requests. An upstream NAT, firewall, or VPN may still block inbound traffic.
• STUN NAT type: a description of the UDP behavior observed by that test, not a verdict on every BT port. Open does not prove TCP reachability; Symmetric does not by itself prove CGNAT; Blocked can also mean that the test received no response. The limitations of cone/symmetric labels are discussed in RFC 4787.
• External port probe: evidence for the address, protocol, and port actually tested. Keep Motrix running with the relevant listener active. A TCP-only checker does not test the UDP DHT port; a timeout can also come from the probe service.

STUN and external probing contact the configured third-party services. Their endpoint lists are editable in Network settings. Diagnostics help locate a problem; they do not change your ISP’s network or guarantee a download speed.

If mapping works but a torrent remains slow, check its peers and seed availability in BitTorrent settings and review your speed limits.