eyeball

← All guides

Two routers, one headache: double NAT

If your provider's box has its own Wi-Fi and you plugged your own router into it, your traffic crosses two routers. A forwarding rule on one carries the knock only as far as the other, where it dies. Plex stays unreachable and nothing tells you why.

How to tell

Look up your router's internet address on its status page. If it starts with 192.168, 10., or 172.16 through 172.31, there is another router in front of it. (If it starts with 100.64 through 100.127, that is CGNAT, a different guide.)

Three fixes, best first

1
Bridge the provider's boxLook for bridge mode or modem mode in its settings, or ask your provider to enable it. The box becomes a plain modem and your own router does all the routing. Cleanest fix by far.
2
Forward the port twiceOn the provider's box: forward 32400 to your router's WAN address. On your router: forward 32400 to the Plex machine. Reserve addresses on both, or it breaks when either one shifts.
3
DMZ your routerOn the provider's box, point its DMZ at your router's WAN address. Everything passes through to your router, which still firewalls normally.
Double NAT shows RFC 1918 space on your router's WAN; CGNAT shows 100.64.0.0/10. The fix paths differ, so check which one you actually have before touching anything.

Fix it once. I'll watch it from here.

I watch your Plex from the internet and send word the moment it breaks. The pay is nothing. The setup is one sign-in.

What does this mean?

Plex gives us a token so we can see where your servers are. That token is allowed to do more than look up an address. Keeping it means you trust us with it. We never see your password. Some people would rather we not keep it. This is for them.

That's fine. I still watch your servers. We never see your password. If your home internet moves, you may get an alert. Sign in once more and I pick up the new address.

🤓 Nerd details

The token is allowed to do more than look up an address. We use it to find your servers, then we delete our copy and ask Plex to deactivate the Eyeball device. Open Authorized Devices in Plex. Eyeball should be gone. If it is still listed, remove it there.

How Eyeball works