Plex Port Forwarding: How to Set Up Remote Access and Work Around CGNAT

To set up Plex remote access with port forwarding, give your Plex server a fixed local IP address, forward TCP port 32400 on your router to that address, then turn on remote access in Plex with “Manually specify public port” and the same port number. Plex should then show remote access as fully accessible. If your provider uses CGNAT, as standard Starlink and most 5G home internet services do, port forwarding cannot work, so you will need Plex’s relay, a tunnel or a mesh VPN instead. Remote video playback of personal media also requires Plex Pass or a Remote Watch Pass.

Plex remote access at a glance

Item	Setting
Plex internal port	TCP 32400 (must stay 32400)
External port	32400 or any free port you choose
Server address	Reserve a fixed LAN IP (DHCP reservation)
Plex setting	Settings > Remote Access > Manually specify public port
Account requirement	Plex Pass (server owner or viewer) or Remote Watch Pass (viewer) for remote personal media
Blocked by	CGNAT, double NAT, a changed server IP

Step 1: Check for CGNAT first

Port forwarding only works if your router has a public IP address. Compare the WAN IP in your router with the IP a “what is my IP” site shows. If they do not match, or the router shows an address from 100.64 to 100.127, you are behind CGNAT. Our guide to checking whether your ISP uses CGNAT walks through it, and which ISPs use CGNAT lists providers.

Step 2: Reserve the server’s IP address

In your router’s app or admin page, find DHCP reservation (sometimes called address reservation or static lease) and pin your Plex server to its current local IP. Without this, the server can get a new address after a restart and your port forward will stop working.

Step 3: Forward the port on your router

1. Open port forwarding (sometimes under NAT, virtual servers or advanced settings).
2. Create a rule: protocol TCP, external port 32400 (or another free port), internal IP your Plex server, internal port 32400.
3. Save, and restart the router if it asks.

On ISP gateways the menu names vary; see our guides to port forwarding for common routers. If UPnP is on, Plex may open the port automatically, but a manual rule is more reliable; see what UPnP does.

Step 4: Turn on remote access in Plex

1. In Plex Web, open Settings, choose your server, then Remote Access.
2. Enable Manually specify public port and enter the external port you forwarded.
3. Select Retry or Apply. Plex should report the server as fully accessible outside your network.

Step 5: Test it

Turn off Wi-Fi on your phone and play something in the Plex app over cellular data. If it plays without Plex’s relay notice, remote access is working.

If you are behind CGNAT

• Plex relay: Plex can route streams through its relay when a direct connection fails, at limited quality.
• Tunnels or mesh VPNs: a tool that connects outward from your network avoids the need for an open port; see Cloudflare Tunnels and CGNAT.
• Starlink: standard residential service uses CGNAT; see how to port forward on Starlink for options.
• T-Mobile Home Internet: T-Mobile says its gateways do not support port forwarding, so use a relay or tunnel.
• Ask for a public IP: some providers add one on request or with a business plan.

Plex Pass and Remote Watch Pass

Plex requires an active Plex Pass on the server owner’s account or the viewer’s account, or a Remote Watch Pass on the viewer’s account, for remote video playback of personal media. Plex lists Remote Watch Pass at $2.99 a month or $29.99 a year as of June 1, 2026. Upload speed matters too: each remote stream uses your home upload, so cable and especially fiber plans with faster upload handle more viewers.