要打開Windows 11防火牆中的端口，需根據(jù)使用場景選擇圖形界面或命令行方法：1. 使用圖形界面時，打開Windows Defender Firewall，進入高級設(shè)置，創(chuàng)建入站規(guī)則，選擇端口類型（TCP/UDP），輸入端口號，允許連接，選擇適用網(wǎng)絡profile 並命名規(guī)則；2. 使用命令行時，可通過管理員權(quán)限的CMD運行netsh命令或PowerShell運行New-NetFirewallRule命令添加規(guī)則；3. 驗證端口是否打開，可使用telnet、Get-NetTCPConnection或外部工具檢測，操作完成後應僅保留必要端口以保障安全。

Opening ports in Windows 11 firewall is useful when you're running a server, using remote desktop, hosting a game, or running certain apps that need specific network access. Here's how to do it properly using the built-in Windows Defender Firewall.

1. Open a Port Using Windows Defender Firewall (GUI Method)

This is the easiest way if you're not comfortable with command-line tools.

Steps:

• Press Windows S , type "Firewall" , and select "Windows Defender Firewall" .
• Click on "Advanced settings" on the left (you'll need admin rights).
• In the new window, right-click "Inbound Rules" and choose "New Rule..." .
• Select "Port" → Click Next .
• Choose TCP or UDP (or both if needed), then enter the specific port(s):
  • Example: 3389 for Remote Desktop, 80 for HTTP, 3000 for dev servers.
  • You can enter a single port ( 3000 ) or a range ( 3000-3010 ).
• Click Next .
• Select "Allow the connection" → Next .
• Choose when the rule applies (Domain, Private, Public) — usually check all unless you have security concerns.
• Click Next , then give the rule a name (eg, "Open Port 3000 for Node.js").
• Optionally add a description, then click Finish .

? Tip: For better security, only enable the rule on Private networks unless you need external access.

2. Open a Port Using Command Line (netsh or PowerShell)

Use this method for automation or scripting.

Using netsh (Legacy but still works):

Open Command Prompt as Administrator and run:

 netsh advfirewall firewall add rule name="Open Port 3000" dir=in action=allow protocol=TCP localport=3000

Replace 3000 with your desired port and TCP with UDP if needed.

Using PowerShell (Recommended):

Run PowerShell as Administrator:

 New-NetFirewallRule -DisplayName "Open Port 8080" -Direction Inbound -Protocol TCP -LocalPort 8080 -Action Allow

You can also restrict the rule further:

 New-NetFirewallRule -DisplayName "Allow TCP 3389 Private Only" -Direction Inbound -Protocol TCP -LocalPort 3389 -Action Allow -Profile Private

3. Verify the Port Is Open

After opening the port, test it:

• Use telnet (if enabled):

   telnet your-ip-address 3000

• Or use PowerShell to check listening ports:

   Get-NetTCPConnection -LocalPort 3000

• From another device, use tools like nmap or online port checkers to verify external accessibility.

?? Note: Opening ports can be a security risk. Only open what you need, and consider using a router/firewall for public exposure.

Final Notes

• Always run tools as Administrator when modifying firewall rules.
• If the app still can't connect, check your router's port forwarding and antivirus software , which might have its own firewall.
• Close unused ports later with:

   Remove-NetFirewallRule -DisplayName "Open Port 3000"

  Basically, just pick the method you're comfortable with — GUI for one-offs, PowerShell for automation.

  以上是如何在Windows 11防火牆中打開端口的詳細內(nèi)容。更多資訊請關(guān)注PHP中文網(wǎng)其他相關(guān)文章！