Setting up port forwarding has moved to the Xfinity website. Since then I can not enable port forwarding to devices, even with IPv6 completely disabled (why is this a thing???).
An alternative is to set up a DMZ. It does not work both on the Xfinity web site and the gateway's internal configuration.