PMS not maintaining a secure remote connection

Plex Media Server
1

Server Version#:1.42.2
Player Version#: android
<If providing server logs please do NOT turn on verbose logging, only debug logging should be enabled>

I have recently installed PMS on Ugreen NAS via docker.

I also have it on the same account on my Shield TV. Both are on my home network via the same router.

The Shield TV connects and maintains a secure connection as seen on my andriod app.

The NAS keeps losing the remote connection and only connects via relay. I look through the logs of the docker container and it shows that the po

[PMS LOG.zip (15.9 KB)

rt connect was successful. Eventually the remote host closes the connection on plex and I get the message that the server isn’t accessible remotely.

I did the static ip for the NAS and went the troubleshooting but nothing is working. Please help.

2

You provided the Web logs. Those aren’t useful.

You need to go to Settings - Server - Troubleshooting (Lower left corner) - Download Logs (middle of the page)

It will give you a zip file

Please make certain you’ve captured DEBUG logs
(too many folks turn it off but that makes diagnosing problem impossible)

4

Yes, those are the logs I’m looking for.

Right away, I see a Double NAT is detected.

Dec 08, 2025 17:12:19.422 [140117269125944] DEBUG - [EventSourceClient/pubsub/45.56.91.127:443] PubSub: Got notified of reachability for async identifier 9ad27941-a7ab-408d-812e-f0515de55ad0: 0 for 45.132.159.126:29954 (responded in 5087 ms)
Dec 08, 2025 17:12:19.422 [140117269125944] DEBUG - [EventSourceClient/pubsub/45.56.91.127:443] MyPlex: reachability check - current mapping state: 'Mapped - Publishing'.
Dec 08, 2025 17:12:19.422 [140117269125944] ERROR - [EventSourceClient/pubsub/45.56.91.127:443] MyPlex: mapping failed due to potential double NAT configuration
Dec 08, 2025 17:12:19.422 [140117269125944] DEBUG - [EventSourceClient/pubsub/45.56.91.127:443] MyPlex: mapping state set to 'Mapped - Not Published (Double NAT)'.

PMS cannot automatically handle the port forwarding in a double-NAT configuration because it can’t talk to the outermost router or change the container’s network configuration.

Is the container networking set to Bridge mode?
For Remote Access to work the best / easiest, HOST networking is recommended.

HOST removes the extra NAT layer. The container runs using the host’s IP address and ports.

If you have two routers, either move the NAS from behind (or just remove) the second router. Two routers is not really needed in a home environment.

5

thanks you!

I just confirmed it’s set as HOST. any other ideas?

7

Finding new errors (which is getting better) :slight_smile:

Looks like PMS cannot read the directory where /Movies or /TVShows is mapped from. It looks like it can read below that point but check it.

Dec 08, 2025 20:12:30.049 [139797038414648] ERROR - [Notify] Failed to add watch for “/Movies” (13: Permission denied)

Dec 08, 2025 20:12:30.142 [139797038414648] ERROR - [Notify] Failed to add watch for “/TVShows” (13: Permission denied)

Now it’s telling PMS to “back off” (code 422)

Dec 08, 2025 20:12:30.753 [139797070215992] DEBUG - [HttpClient/HCl#23] HTTP/1.1 (0.1s) 422 response from POST https://plex.tv/servers.xml?auth_token=xxxxxxxxxxxxxxxxxxxx (reused)
Dec 08, 2025 20:12:30.753 [139796989152056] DEBUG - MyPlex: Published Mapping State response was 422
Dec 08, 2025 20:12:30.753 [139796989152056] DEBUG - MyPlex: Got response for ad9527036ba262719b7c37243d9a0896c4ecec02 ~ registered :0
Dec 08, 2025 20:12:30.753 [139796989152056] DEBUG - MyPlex: updating mapped state - current state: 'Not Mapped'
Dec 08, 2025 20:12:30.753 [139796989152056] DEBUG - MyPlex: mapping state set to 'Not Mapped'.
Dec 08, 2025 20:12:30.760 [139797096221496] DEBUG - [EventSourceClient/pubsub/45.56.91.127:443] Read HTTP reply header.

Stop Plex for 15-20 minutes and then restart it.
If you stop/start PMS too frequently, Plex.tv tells PMS to “Calm Down”. 422 means “I’m not listening to you until you calm down” (sound familiar? haha)

Further down your logs, I still see “Double NAT”

Dec 08, 2025 20:12:41.907 [139797096221496] DEBUG - [EventSourceClient/pubsub/45.56.91.127:443] MyPlex: reachability check - current mapping state: 'Mapped - Publishing'.
Dec 08, 2025 20:12:41.907 [139797096221496] ERROR - [EventSourceClient/pubsub/45.56.91.127:443] MyPlex: mapping failed due to potential double NAT configuration
Dec 08, 2025 20:12:41.907 [139797096221496] DEBUG - [EventSourceClient/pubsub/45.56.91.127:443] MyPlex: mapping state set to 'Mapped - Not Published (Double NAT)'.

Do you have two routers or a WiFI + Router paired together with the NAS over the WiFI ?

8

i have spectrum supplied cable modem and private tp link router. NAS connected via ethernet cable, not WIFI. Two separate boxes. Checking the directories

9

Two routers , unless you configured one in Bridge mode, will create the Double NAT you are seeing.

Most of us (myself included) have only one router.
If we have two routers, we put one in Bridge mode (turn off the router functions) so it acts like a switch.

Which router models do you have? I’ll look up the documentation and see if I can see what’s going on with them

10

only one router:TP-Link WiFi 6 Internet Gaming Router - Tri Band High-Speed ax Router, Wireless Smart VPN Router for a Large Home, 2.5G WAN, 8 Gigabit LAN Ports (Archer AX10000)

Cable modem is from the Internet service provider.

It’s strange to me that the Shield TV server works without issues on the same network connected to the same router. Very confusing to me.

11

Thank you!

I found it! The VPN on the router was the issue.. turned off the switch and it is working.

12

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.