Free tools Windows power users keep installed
One-click scans. No signup required.
To configure RCON on an Arma 3 server, enable BattlEye in server.cfg, create the BattlEye configuration file that matches your server executable, set RConPassword and a free RConPort, restart the server, and connect with an RCON client. Keep the RCON port separate from Arma 3’s game-port range and allow it through the server firewall.
Godlike.Host offers hosted Arma 3 servers with its own game panel, SFTP access and free DDoS protection, if you would rather not host it yourself.
This guide covers dedicated servers using BattlEye, including the 64-bit executable, custom ports, hosted servers, and the common reasons an RCON connection fails.
As an Amazon Associate I earn from qualifying purchases.
Recommended Free Tools
What Arma 3 RCON does
RCON is BattlEye’s remote-console interface. After it is enabled, an administrator can authenticate from a separate tool and issue server-management commands without joining the game or opening the server’s local console. Typical uses include checking players, kicking or banning users, and monitoring a live server.
RCON is not the same as the Arma 3 game connection. Players connect to the game port and its associated ports; an RCON client connects to the BattlEye RCON port with a password. A client pointed at the game port, such as 2302 on a default installation, will not authenticate as RCON.
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
Before you edit anything
- Have file access to the dedicated-server directory and permission to restart the service.
- Know whether the server starts the 64-bit Arma 3 executable. That determines whether the file is named
beserver_x64.cfgorbeserver.cfg. - Identify the server’s game port and the public IP address or hostname that administrators will use.
- Choose an unused UDP port for RCON. Do not assume that a vendor’s stated default is free on your machine.
- Plan a strong, unique RCON password. An alphanumeric password is the safest compatibility choice because one hosting-tool guide warns that punctuation can confuse the BattlEye parser; that warning is not established as a universal Arma 3 rule.
Step 1: Enable BattlEye in server.cfg
Open the server’s active server.cfg and make sure BattlEye is enabled. A common entry is:
BattlEye = 1;Keep the setting in the main server configuration, not in the BattlEye RCON file. RCON will not work if BattlEye is disabled, even when the password file and firewall are correct. If your hosting panel exposes a BattlEye toggle instead of the file, enable the toggle and confirm that it writes the equivalent setting.
Save the file and note the exact directory in which the server starts. Hosted services sometimes expose several configuration folders; editing a template or an inactive profile has no effect on the running instance.
Step 2: Create the BattlEye configuration file
Choose the correct filename
Use beserver_x64.cfg when the server runs the x64 Arma 3 executable. Use beserver.cfg for a non-x64 executable. Both files normally belong in the server’s battleye folder.
| Server process | Filename | Usual location |
|---|---|---|
| 64-bit Arma 3 executable | beserver_x64.cfg |
battleye folder in the server directory |
| Non-x64 executable | beserver.cfg |
battleye folder in the server directory |
File extensions matter. On Windows, turn on “File name extensions” in File Explorer so you do not accidentally create beserver_x64.cfg.txt. On Linux, check the spelling and case with ls; a differently named file will not be loaded.
Add the minimum RCON settings
Put the password and port on separate lines with no equals sign. For example:
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteRank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
RConPassword ReplaceThisWithAUniquePassword
RConPort 2307The password in the example is only a placeholder; replace it before starting the server. The port number is an example as well. Choose a free port appropriate to your installation rather than copying 2307 blindly.
You may add other BattlEye settings supported by your build. A frequently shown example includes a ping limit:
RConPassword ReplaceThisWithAUniquePassword
RConPort 2307
MaxPing 200MaxPing is independent of whether RCON can log in. Add it only when you want BattlEye to enforce that limit and understand the effect on players with high latency.
Step 3: Select an RCON port that will not collide
Understand the default-port conflict
With the default Arma 3 game port of 2302, community discussions identify 2302 through 2305 as reserved for the game and related traffic. Other discussions include 2306, and a Bohemia Interactive developer note describes BattlEye traffic moving to a separate default port of 2306. The conservative choice is therefore to keep RCON out of 2302–2306 when those are the ports used by your server.
Do not connect RCON to 2302 simply because it is the game port. That is a common cause of an immediate failure.
Do not rely on one universal formula
Guides make different recommendations: one hosting guide uses game port plus four, a Steam guide increments the RCON port by 10 for each additional server, and a tooling page describes RCON as independent of the game port with 2306 as a default. These are deployment conventions, not a rule that applies to every build and host.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
For one server, pick a port that is demonstrably unused and outside the game’s assigned range. For several servers on the same machine, assign a different RCON port to each instance and record the mapping. Check the host’s reserved-port documentation when the game port is customized.
Check whether the port is free
Stop any service that might already be listening on the chosen port, or choose another one. On Linux, an administrator can inspect listeners with a command such as:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
ss -lunp | grep 2307On Windows, use:
netstat -ano -p udp | findstr 2307Replace 2307 with your selected port. These checks show local listeners; you must still allow the port through the host firewall and any upstream firewall or NAT device.
Step 4: Save, restart, and verify that BattlEye loaded the file
Stop the Arma 3 server cleanly, save the configuration file, and start the server again. A restart is required because BattlEye reads its settings during startup.
Watch the startup console and BattlEye log for evidence that BattlEye initialized. The exact log location varies by operating system, server wrapper, and host panel, so use the active instance’s log directory rather than a copied template. A successful startup should not be treated as proof that the intended file was read: if the server silently uses an old password or port, investigate the filename and directory before changing firewall rules.
When a launch parameter is suggested
Some hosting guides advise adding a launch parameter that points the server at its BattlEye folder when the default folder is not detected. This is a host- or wrapper-specific remedy rather than a confirmed universal Arma 3 requirement. Use it only when the server’s startup output shows that BattlEye is looking in the wrong directory, and follow the syntax documented for your particular wrapper. Do not add an unverified parameter merely because an RCON client cannot connect.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
Step 5: Open the right firewall path
Allow inbound UDP traffic on the selected RCON port at every layer that filters the server:
- Allow the port in the operating-system firewall on the game server.
- If the server is behind a router or NAT, forward that UDP port to the server’s private address.
- Open the corresponding port in a hosting provider’s network firewall or security group.
- Keep the Arma 3 game-port rules separate; opening the game port does not automatically open RCON.
Restrict the source address to your administration network when the firewall supports source-IP rules. If your administrators use changing addresses, a VPN or private management network is safer than exposing RCON to every Internet address. Never publish the RCON password in a server name, public configuration paste, or support screenshot.
Step 6: Connect with an RCON client
BattleWarden and BERCon are examples of clients that can connect to BattlEye RCON. In the client, create a connection using:
- Host: the server’s public IP address or DNS name, not the in-game nickname.
- Port: the exact number in
RConPort. - Password: the exact value in
RConPassword, including capitalization.
For a client running on the same machine, test the server’s local address first. From another network, use the public address and verify that NAT and upstream firewalls forward the selected UDP port. A connection that works locally but not remotely points to routing or firewall policy, not usually to the password file.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →After login, issue a harmless status or player-list command supported by your client to confirm that the session is authenticated. Avoid testing with destructive commands such as a global kick or ban.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Recommended configuration example
The following illustrates the separation between the main server configuration and the BattlEye file. Adapt the paths, password, and port to your installation.
server.cfg
------------
BattlEye = 1;
battleye/beserver_x64.cfg
-------------------------
RConPassword UseAUniqueAlphanumericSecret
RConPort 2307
MaxPing 200The example assumes the x64 executable and a free UDP port of 2307. It is not a claim that 2307 is available on your server or that MaxPing 200 is appropriate for every community.
Troubleshooting: RCON will not connect
Check the basics in order
- Confirm BattlEye is enabled in the active
server.cfg. - Confirm the filename matches the executable:
beserver_x64.cfgfor x64 orbeserver.cfgotherwise. - Confirm the file is inside the running instance’s
battleyefolder. - Confirm the client uses the same port and password, with no extra spaces or quotation marks.
- Confirm the selected port is not the game port and is not already in use.
- Confirm UDP, rather than only TCP, is allowed through the operating-system firewall, NAT, and hosting firewall.
- Restart the server after every configuration change.
- Read the current BattlEye and server startup logs for a rejected password, a bind error, or a file-load error.
Symptom: the client times out
A timeout usually indicates that packets are not reaching the RCON listener. Check the public address, UDP forwarding, security-group rules, and whether the server is actually listening on the chosen port. If the game itself is reachable but RCON times out, remember that the game and RCON rules are separate.
Symptom: the client immediately rejects the login
Re-enter the password manually and compare it with the file. Check capitalization and remove accidental quotation marks. Stop the server before editing so that a wrapper cannot overwrite the file during a restart.
Symptom: changing the file has no effect
Look for a generated file whose name begins with beserver_active. Forum users report that the running server can rename or generate such a file. If an old beserver_active... file remains while the server is stopped, back it up and remove the stale copy so the intended configuration can be loaded on the next start. Do not delete files while the server is running, and preserve a backup if you need to compare settings.
Symptom: only one of several servers accepts RCON
Each instance needs its own BattlEye configuration, password, and RCON port. Verify that the launch command for each instance points to the intended profile and battleye directory. Check for duplicate listeners and ensure the firewall forwards each external port to the correct private server address.
Symptom: local access works but remote access fails
This isolates the problem to the network path. Check the public address, NAT forwarding, provider firewall, and source-IP restrictions. If the server is behind carrier-grade NAT, ordinary port forwarding may not provide a reachable public endpoint; use a host with a public address or a private administration network.
Security practices for an exposed RCON service
- Use a long, unique password that is not used for the game panel, operating-system account, or any other service.
- Prefer alphanumeric characters if you need maximum compatibility with older BattlEye parsers, while recognizing that the symbol restriction is a vendor precaution rather than a documented universal limitation.
- Limit inbound RCON traffic by source IP or place it behind a VPN.
- Give the password only to trusted administrators and rotate it when staff access changes.
- Keep BattlEye, the server software, and the RCON client maintained according to their current release guidance.
- Review BattlEye and server logs for repeated failed logins or unexpected administrative commands.
- Do not store the password in public repositories, screenshots, chat transcripts, or shared panel notes.
Version and compatibility notes
The RConPort setting is documented for Arma 3 update 1.58.135656 and later. Community discussions also describe RCON changes around builds identified as 158.135170. Older guides may therefore describe different port behavior, especially the relationship between the game port and BattlEye traffic.
No specific 2026 RCON change is established here. If your server runs an older or unusual build, check the current Bohemia Interactive wiki and build notes for that version before relying on an old port formula. The file names, BattlEye requirement, and need for a free, reachable port remain the first checks, but a version-specific wrapper can change where files are read.
Quick Recap
A concise deployment checklist
BattlEye = 1;is enabled in the activeserver.cfg.- The correct
beserver_x64.cfgorbeserver.cfgexists in the activebattleyefolder. RConPasswordandRConPortare present on separate lines.- The chosen port is free, outside the server’s game-port range, and unique to this instance.
- Inbound UDP access is allowed through the host firewall, NAT, and provider security rules.
- The server has been restarted and its logs checked.
- The RCON client uses the correct public host, port, and password.
- No stale
beserver_active...file is overriding the intended configuration.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
