Guide

Sky hub port forwarding: Sky Broadband Hub and Sky Max Hub

How you forward a port on Sky depends on which hub you have. The black Sky Broadband Hub uses a web page with “services” and “firewall rules”; the white Sky Max Hub is set up from the My Sky app. Neither can update a custom dynamic DNS name, so this guide covers that too.

Updated · Checked against Sky Community guides and threads for SR102, SR203 and SR213, September 2026 · 4 min read

Hub address
192.168.0.1
Black hub (SR203)
Advanced → Security → Services + Firewall Rules
White Sky Max Hub (SR213)
My Sky app → Broadband
Built‑in DDNS
SR213 none; older hubs a few fixed providers

Which Sky hub do you have?

  • Sky Broadband Hub – the black hub (model SR203, and older SR102 “Sky Hub” models). Configured in a browser at 192.168.0.1.
  • Sky Max Hub – the white hub (model SR213). Port forwarding is managed in the My Sky app, not in the browser.

The model number is on the label underneath. Before you start, check that your line has a public address: compare the hub’s broadband IP with ip.uk.app, or use the CGNAT check.

Sky Broadband Hub (black, SR203 and older)

These hubs split port forwarding into two steps: first you define a service (which ports and protocol), then a firewall rule that sends that service to a device.

  1. Go to http://192.168.0.1 and click Advanced. Sign in with username admin; the password is sky on older hubs unless it has been changed. Newer firmware may show a unique password on the hub’s label instead.
  2. Reserve an address: LAN IP Setup → Address Reservation → Add, pick your server from the list and save.
  3. Define the service: Security → Services → Add Custom Service. Give it a name (HTTPS), choose the type (TCP for web apps, UDP for WireGuard) and enter the start and finish port (for example 443 and 443). Apply.
  4. Allow it in: Security → Firewall Rules, and under Inbound Services click Add. Choose your service, set the action to ALLOW always, enter the server’s reserved address as the LAN server, leave WAN users as Any, and apply.

Tip

If you don’t see an Advanced section, make sure you are on the hub’s own page and not the Sky Broadband Shield or a status page. The forward only works once both the service and the inbound rule exist.

Sky Max Hub (white, SR213)

On the Sky Max Hub, port forwarding lives in the My Sky app. Sky Community members describe the steps as:

  1. First give the server a fixed address: in the hub’s list of connected devices, reserve the address the server currently has.
  2. In the My Sky app, open Broadband, then the Wi‑Fi settings tile, then Advanced Settings → Port Forwarding.
  3. Tap Add port forward rules, choose the server from the device list, and add the port numbers you need (for example 443).
  4. Tap Apply port forward rules and confirm.

Note

Sky updates the app regularly, so labels can move. What stays the same: you pick a connected device, add port numbers, and apply. Devices only appear in the list while they are connected to the hub.

Watch out

Synology and some other NAS systems can configure routers automatically with UPnP. The Sky Max Hub isn’t one they recognise, so add the rules by hand.

Dynamic DNS on Sky

The Sky Max Hub has no dynamic DNS setting at all, and the older black hubs support only a few fixed providers. For a custom name such as a uk.app one, run the updater on another always‑on device:

Create a DDNS token for your name in the uk.app dashboard and keep home.yourname.uk.app pointed at home; add CNAME records for each service name.

Using your own router with Sky

Sky hubs don’t offer a modem mode. On Sky full fibre the fibre box on the wall (ONT) has its own network socket, and you can connect a third‑party router to it; the router has to support Sky’s sign‑in method, which uses DHCP option 61 (a client identifier) rather than a username and password. On part‑fibre lines your router needs a VDSL modem. Check Sky Talk before removing the hub if your phone plugs into it.

Keeping the Sky hub in front of your own router or mesh system means double NAT: forward the port on both, or put the mesh system into access‑point mode.

IPv6

Sky has supplied IPv6 to home customers for years. Devices with global IPv6 addresses are reachable over IPv6 only if the hub’s IPv6 firewall lets them be, which is separate from IPv4 port forwarding. Publish an AAAA record only for services you have deliberately opened over IPv6.

Check it from outside

  1. Does the name point home? Look up home.yourname.uk.app with the DNS lookup and compare the A record with the address on ip.uk.app. After a change, the propagation checker shows which resolvers still have the old one.
  2. Is the port open from the internet? Run the open port checker against port 443. “Open” means your router forwards it and something answers. “Closed” or “timed out” means the forward, the device’s own firewall or CGNAT is in the way.
  3. Is the certificate right? The SSL checker shows whether the certificate covers the exact name, who issued it and when it expires.
  4. Test from outside for real. Turn Wi‑Fi off on your phone and open the address over mobile data. Testing from inside your own network can give misleading results.

A name for your next idea

Give your website, home server or next project a memorable address: yourname.uk.app. Choose your name and check availability before registering.

Find your name

Questions people ask

What is the Sky router admin password?

On older Sky hubs the default is username admin and password sky. Some newer hubs use a unique password printed on the label. The Sky Max Hub is managed from the My Sky app instead.

Can I port forward on the Sky Max Hub without the app?

Sky Community answers point to the My Sky app as the place for port forwarding on the SR213.

Does Sky use CGNAT?

Sky home broadband has traditionally used public dynamic IPv4 addresses. Check your line with the CGNAT check to be sure.

Sources and further reading

We check each guide against the vendor’s own documentation and support forums. If something has changed on your firmware, tell us.

Related guides

Double NATISP hub plus your own router or mesh? Fix it hereSynology NASCustom DDNS, Let’s Encrypt and the built‑in reverse proxyBT Smart HubPort forwarding on Smart Hub 2 and later, and DDNSStart here: choose a methodPort forward, VPN or tunnel – what fits your set-up

Partners