Double NAT ports forward but Can't access off site

So I have a double NAT system with a modem and a router.  I set the PC Plex server port to 32400.  I forward port 32400 on my Modem to 192.168.0.XX (the static for my router).  I forward port 32400 on my router to 192.168.1.XX (the static for my pc runing plex server).  I hard reset everything, double check all port forwarding settings still in place.  Test = cannot connect.  Changed ports in all three places.  Test = cannot connect.  Reverted to port 32400 and then toggled UPnP on and off.  Test = cannot connect.  VERY FRUSTRATED.  What am I missing?

 

P.S.  I am port forwarding the same way for my NAS and for my Vera home automation system and both are working great.  Obviously on different port than the Plex ports tested. 

A few more information about your hardware could help giving suggestions. Anyway, from what you write it seems like you did things the right way.

Did you forward TCP?

Have you checked if you can see the service on the external port? => http://canyouseeme.org/

1 Like

The first problem is you have Double NAT.. that is usually the first sign something is wrong. Best suggestion, don't use double nat.

A few more information about your hardware could help giving suggestions. Anyway, from what you write it seems like you did things the right way.

Did you forward TCP?

Have you checked if you can see the service on the external port? => http://canyouseeme.org/

UDP and TCP forwarded.  Checked canyouseeme.org and port is open...not sure where to go from here.

Does you modem or router have built-in firewalls enabled?  You may need to open those up as well.  If there are firewall settings but no enable/disable option, it could be like my router which has an always on firewall so I have to include exceptions to allow Plex to work.

Does you modem or router have built-in firewalls enabled?  You may need to open those up as well.  If there are firewall settings but no enable/disable option, it could be like my router which has an always on firewall so I have to include exceptions to allow Plex to work.

None that I could find.  I'm thinking about maybe just bridging my modem to my Router.  Not sure of the ramifications though.

Just one thought because sometimes details make a big difference...

I had recently a problem with the server on a machine connected by cable to the router in a router behind router situation and the two routers connected to each other over WiFi.

The mobile devices were not able to connect to PMS though everything was on the same subnet,

devices could ping the server machine and vice versa,

the apps were listed as clients on the server and

I could access content on the server over SMB.

But no way to connect to PMS...

It was a big mistery until I realized that the router set to client mode was not allowing TCP connections between LAN and WLAN.

As soon as the server was connected to the router over WiFi as well everything started working.

You ever figure this out? Im having the same trouble. I can even access the web ui from the outside, so I know its routing just fine, but mobile wont touch it

SOLVED FOR ME:
I will refer as follows:
Server <=> Internal Router <=> External Router <=> Internet

Look in the UPnP table on your internal router. I found 2 entries, one with internal port 32400 with external port 25150 and a second with internal 32400 and external 28915. your plex server connects to their web service and tells it what port YOUR server is using externally (via UPnP), and when you log in at app.plex.tv it attempts to contact back to your server on the port(s) that your server set up via UPnP. In my case either 25150 or 28915. By setting up port forwarding on the external router for the external UPnP ports on the internal router everything works great! my final routing of ports looks like this:

Server <-32400-> Internal Router (UPnP) <-25150-> External Router (Port Forwarding) <-25150-> Internet
Server <-32400-> Internal Router (UPnP) <-28915-> External Router (Port Forwarding) <-28915-> Internet

NO setup was required on the internal router, UPnP did all the work, but you have to peek into it’s routing to get your external ports for setting up your external router.

@wsh01s said:
You ever figure this out? Im having the same trouble. I can even access the web ui from the outside, so I know its routing just fine, but mobile wont touch it

The web ui is from the plex.tv web site, not your server. mobile not touching it means routing is NOT just fine.

@ironlion27 said:
MovieFan wrote on November 7 2014, 7:02 PM: »

Does you modem or router have built-in firewalls enabled?  You may need to open those up as well.  If there are firewall settings but no enable/disable option, it could be like my router which has an always on firewall so I have to include exceptions to allow Plex to work.

None that I could find.  I’m thinking about maybe just bridging my modem to my Router.  Not sure of the ramifications though.

There are no ramifications to putting the Modem into Bridge mode it is the best way to set up a Modem to Router combo.
Especially where in most cases the Modem is controlled by the ISP and not the user.

Scratch the rest I said…I misread your original post.

Actually in some situations, depending on provider and the services being provided by the external router/cable modem, there could be issues with enabling bridge mode. For instance, Comcast’s Xfinty Home service uses the external router in ways that make it prohibitive to enable bridge mode unless they provided you with a secondary “sidecar” router.

Double NAT is manageable and isn’t always a “problem”. It is just slightly more complicated than the average home user can deal with. I’ve had this issue before and it seems intermittent for me without any changes to my set up. I have the external port forwarded from my external router to the wan port on my internal router and then from there to the machine. It works most of the time but ever so often it complains of no direct connection.

I have several services set up this way and PLEX is the only service that is ever problematic in any way. I would say it has something to do with the way it has to run through the intermediary and not anything to do with double NAT in general.

I would like to hear from them on this because some people don’t have a choice about their NAT setup. I, for one, don’t want my ISP able to see my entire internal network.

I know I am bumping the heck out of this zombie but it’s still an issue for many people out there.

First this isn’t a problem plex needs to address. They have already done everything they can by setting up connectivity with UPNP and providing us information about what port connectivity is needed in case upnp doesn’t work for some reason.

It is up to us to manage our home networks in a good way. I say that knowing most people don’t. A double NAT is never a good thing. It doesn’t break just plex but all external connectivity that uses UPNP. This is when the option to bridge the service provider modem is a must. That is exactly how the modem device should be setup if you aren’t going to use their router.

So there is no solution for those of us who have to live with double NAT? That’s what you’re saying. And quite frankly PLEX is providing a service they WANT people to use. If there are enough people out there having this issue then, you’re 100% correct, they don’t HAVE to address it but they should.

With that being said, we’re all entitled to our opinions but I must say your post provided no help or insight into a possible solution. We all know double NAT is not ideal in any situation but some of us have to live with it.

1 Like

@tnt533 said:
We all know double NAT is not ideal in any situation but some of us have to live with it.

Have you tried voicing your disapproval with the ISP? Are you in a situation wherein you can threaten to leave your current ISP for another ISP that will respond favorably to your concerns?

Many (certainly not most) ISPs will respond favorably when confronted by unhappy users, rectifying the double NAT. If you haven’t talked to them, it’s worth a shot. If you have and they know they have you over a barrel - my condolences.

@JuiceWSA said:

@tnt533 said:
We all know double NAT is not ideal in any situation but some of us have to live with it.

Have you tried voicing your disapproval with the ISP? Are you in a situation wherein you can threaten to leave your current ISP for another ISP that will respond favorably to your concerns?

Many (certainly not most) ISPs will respond favorably when confronted by unhappy users, rectifying the double NAT. If you haven’t talked to them, it’s worth a shot. If you have and they know they have you over a barrel - my condolences.

It’s a technological issue with the way they provide connectivity for their home security offering. They wont change it. I can request they provide a sidecar router that I may be able to connect through my router but they have not done sidecars for a few years or I can dump my router and turn the keys to my inside network over to them, which won’t happen, or I can find another media server I guess. They have literally millions and millions of customers and the vast majority of them do not care about double NAT.

Thank you for the thoughtful response though.

Yea, it’s a ‘technological’ issue in that they can put millions of users on a double NAT when they’re running out of IP addresses - or something - but if you make enough noise they can flip the switch for you.

Happens all the time actually.

Of course, if your ISP isn’t willing to cater to your situation after you explain it to them - you’re stuck, unfortunately. IF (and it’s a big one) Plex could do something about the problem it could take years so again - you’re stuck, unfortunately.

I guess the moral of this story is if it isn’t your ISP that’s making your life difficult, Plex is next in line to serve up a piping hot turdish casserole for your enjoyment.

:slight_smile:
Sorry, I know it’s not funny, but sometimes you just have to laugh when real life steps in and your options are… none.

There is no switch. I can enable bridge mode myself but then my home security system doesn’t work. They expect me to use their integrated modem/router as the sensors and touch-pads for my security system are run through it. They didn’t tell me to use my own router on the inside. The only “switch” they could throw is to provide as secondary router just for my security system. That may be an option.

I guess it just kind of kills me that I have to use UPNP in the first place when I am more than willing to do all the port forwarding manually myself. I am the only individual using the service remotely and I only serve 1 file at a time. It seems if I could just connect direct to my service without using PLEX’s intermediary then we wouldn’t be here in the first place.

I don’t have double NAT on my own network but I don’t get a public IP on the WAN side of my router so I do have double NAT its just my ISP is using one public IP for numerous users.

To get around it I route my Plex traffic through a VPN and works perfectly. Might be a bit overkill for you but it is a solution.

I don’t see why its not working though as you said you have other stuff working in a Double NAT environment. Plex is just another piece of software running on a computer. If you create a route for it should work fine. Its not that Plex won’t work with Double NAT you just need to make it work.

I would update your server, double check all IPs are correct and fixed, double check all the ports again and give it a go.

I would also plug the Plex server into the modem just as a test and see if you can get remote access to that point. It may be a firewall issue. If you can get it working there then move it behind your own router and you’ll narrow down the potential problem.

Finally got this to work!! So I what did to make this work is just an extra step to everything you have done. I put my internal router onto the DMZ (so go into your ISP Modem/Router and in the dmz setting put in the IP of your internal router.

When I did the port check on canyouseeme.org it was showing up as success.