Remote Access - I'm at a loss

Server Version#: Version 1.43.3.10828
Player Version#: N/A
Windows version: Win 11 10.0.26200 Build 26200
Asus Router RT-BE58U

I can’t get Remote Access to work, and I THINK I’ve followed the steps I could find in the Forum and FAQs. Maybe I missed something?

Server Static IP - SET! It’s on Static IP
Port Forwarding - router has this set up! Plex has this setup!
UPnP and NAT are enabled
Modem is in BRIDGE mode
Server and router have been rebooted / restarted
Yet no matter what I do, Plex will BRIEFLY show that Remote Access is working, and a minute later it switches to show that it’s not. I’m at a loss. What am I missing? Please and thank you!

In the screenshot of your router’s port forwarding rule I see that you have the source IP field redacted. Does that mean you have a value set there? If so, that is likely the problem. Setting a source IP in a port forwarding rule indicates that the rule should only match when the inbound traffic is from that particular IP.

Try changing that back to its default (it might be any or 0.0.0.0. Whatever indicates that it should accept traffic from any IP address for that rule.

Your second screenshot has a warning about being DoubleNAT. You mentioned the modem is in bridge mode, how did you confirm that’s working/setup properly? Does your router report its WAN ip as your public ip or is it a 192.x or 10.x ip?

Do you know if your ISP uses CGNAT? Is that WAN ip between 100.64.0.0 - 100.127.255.255? Does it match the ip at https://canyouseeme.org/ ?

Also, it’s safe to share your internal private IPs, don’t need to hide them. Only redact your public ip from screenshots.

Disable UPnP as well, you won’t use it since your creating your own rule and it’s a security issue in general.

ISP Info

To add to @veeejay’s post…

Contact your ISP and ask if they use CG-NAT addressing. If so, ask if they can provide a public, IPv4 address that supports port forwarding.

Login to the router and select the Network Map. Look at the WAN IP. If it is 100.64.x.x to 100.127.x.x, then your ISP is definitely using CG-NAT addressing.

Router Config

Disable DNS Rebind Protection. It can cause problems with Plex establishing secure connections. See How to Use Secure Server Connections.

Port Forward

To add to @pshanew’s post…

Here’s a port forward example from an ASUS router. As @pshanew mentions, the Source IP should be blank.

The internal IP address, which there is no need to blank out, is the IP address of the Plex Media Server.

In this example the public port is 42445 (I had two servers at the time). Not a problem to use 32400.

OK, I removed the public IP address from Port Forwarding. Still no luck! Still not showing up outside my network

That’s just one piece of the puzzle. You’ll need to check @veeejay’s and @FordGuy61’s advice as well. A double-NAT will break remote access.

Aha! I checked the Network Map. Sure enough, I found 100.65.x.x

Yet when I check CanYouSeeMe.Org, it shows a 2xx.x.x.x IP instead, the same one Plex sees on the Remote Access config screen

Will call the ISP and see if they can make it right.

Otherwise, I’ve since disabled IP rebinding too. And disabled UPnP. Thanks for all the tips!!!

If your ISP won’t take you off CGNAT and they give you an IPv6 address that allows incoming traffic, you can setup remote access using ipv6 now with the latest server version. Cellular internet (5G and similar) providers usually don’t allow it from what I’ve seen.

This may limit you to connecting only when you’re on a client/network with an ipv6 address, maybe someone can confirm or correct me on that piece.

You can check if you have an ipv6 address here: https://test-ipv6.com/

Looks like IPv6 is going to be the best workaround as I can’t get “NO NAT” on IpV4 without paying through the nose. Should be easy enough. I’ll have to Google how to do it for my router. My ISP confirms their modem itself supports IPv6, just need to set it up on my router and on the Plex Server itself. A project for tomorrow

Hi all. I’ve since gone the route of Private Internet Access VPN with a Dedicated IP.. I’ve gone into my router and set up port forwarding to my dedicated IP via internal 8443 and external port 52778. My WAN IP is still on NAT as that’s what my ISP offers, though my Plex box has PIA installed and using the dedicated IP and forwarded port. What else am I missing? Still can’t get the #%#$%^&%$^ Remote Access to work!

Do not configure port forwarding in the router. Configure the port forward in the VPN instead. The VPN tunnel passes through the router to the tunnel endpoint. The traffic in the tunnel (i.e. Plex) cannot see the port forward in the router.

The VPN and port forward must be established before starting Plex Media Server and activating remote access.

The public IP displayed in Plex Remote Access Settings should match the public IP of the VPN.

The port number configured in Plex Remote Access Settings must match the port forward in the VPN.

I do not use PIA VPN, so no idea how to configure its port forwarding. A quick Google search kicked out this page: https://vpnalert.com/guides/private-internet-access-plex/.

I worked with PIA support and have my VPN configured on my Plex box (win 11), and port forwarding enabled. I removed any reference to port forwarding on my router. My router is connected to the ISP’s modem and my ISP has me on NAT.

I manually set the port 45996 in Plex as that’s the port that PIA VPN has given me.

Plex does NOT see the correct public IP as defined by PIA VPN

PIA vpn was getting to be a huge PIA alright, with dynamic port forwarding, yikes.

So now I’m on AirVPN. Much easier for me. But still not working. I forwarded the port using the AirVPN website, and made sure Plex was pointing to that port. Still no dice. I’m lost. I’m floundering. Any Plex Devs kicking around?