when on vpn says not been granted remote access

[bandit8623 213]

hello,

connected via vpn and connecting via local ip address.  getting this error.  pretty annoyed as im out of town and cant manage my server when i want too. 

when actually local and using same local ip i have no problems. this is an admin account that does not have renote access,  but should be able to connect locally

Edited October 15, 2025 by bandit8623

[Luke 42077]

Right the VPN is likely causing it to appear as a remote connection. You should be able to see the remote ip address in the server log, which may help you correct the problem.

[bandit8623 213]

9 minutes ago, Luke said:

Right the VPN is likely causing it to appear as a remote connection. You sh.uld be able to see the remote ip address in the server log, which may help you correct the problem.

if im connecting via local ip address this is a bug.  it used to work just fine. not sure how server logs wil help i can share logs later this week,  but i have in the past been able to connect on this vpn connection. 

Edited October 15, 2025 by bandit8623

[Luke 42077]

Quote

if im connecting via local ip address this is a bug.

The address in the browser address bar is not the determining factor. It is the remote address of the socket connection from which the traffic is originating.

[bandit8623 213]

14 minutes ago, Luke said:

The address in the browser address bar is not the determining factor. It is the remote address of the socket connection from which the traffic is originating.

then you are forceing vpn users to route all traffic through vpn.  that really should not be needed. current vpn i can acces all my local systems ,  but cant via emby....

i dont have my vpn force all traffic through vpn as thats very inefficient

Edited October 15, 2025 by bandit8623

[yocker 1247]

 

1 hour ago, bandit8623 said:

hello,

connected via vpn and connecting via local ip address.  getting this error.  pretty annoyed as im out of town and cant manage my server when i want too. 

when actually local and using same local ip i have no problems. this is an admin account that does not have renote access,  but should be able to connect locally

VPN connections tend to get their own unique IP address range, you need to set it up in Emby to be seen as a local address.

This is for my VPN, it makes the VPN IP range be seen as local.

[Neminem 1518]

@bandit8623have you added you vpn ip range to you lan networks in emby?

I hade to do that, to get it to work.

I also needed to include Emby App to my vpn app's include list, when testing from my phone.

 

Edited October 15, 2025 by Neminem

[bandit8623 213]

15 minutes ago, Neminem said:

@bandit8623have you added you vpn ip range to you lan networks in emby?

I hade to do that, to get it to work.

I also needed to include Emby App to my vpn app's include list, when testing from my phone.

 

I'll check this once I'm back home. Thx

Just seems crazy to get to work when everything else just works but emby.  And I know it used to work fine... And my vpn hasn't changed.

[bandit8623 213]

19 minutes ago, yocker said:

 

VPN connections tend to get their own unique IP address range, you need to set it up in Emby to be seen as a local address.

This is for my VPN, it makes the VPN IP range be seen as local.

Correct this is what my vpn does.. but it should based on Internal or external IP connections in my opinion...

[yocker 1247]

1 minute ago, bandit8623 said:

Correct this is what my vpn does.. but it should based on Internal or external IP connections in my opinion...

I think the way Emby sees what is local and what is remote is by checking it's own IP range and treating that as local.
I don't think there would be any secure way of having it guess what other ranges are local.

[bandit8623 213]

13 minutes ago, yocker said:

I think the way Emby sees what is local and what is remote is by checking it's own IP range and treating that as local.
I don't think there would be any secure way of having it guess what other ranges are local.

How would an outside IP address connect to a local with no access?  I know you understand that.  It's silly then how emby is currently handle it. 

[yocker 1247]

4 minutes ago, bandit8623 said:

How would an outside IP address connect to a local with no access?  I know you understand that.  It's silly then how emby is currently handle it. 

Personally like the idea of being able to define what Emby sees as local and remote as i can control what VPN users have access to Emby without much setup.
If they want to access Emby they can do it like the other users.  

If you havn't opened for internet access to Emby and want everything to the treated as local you can enter "0.0.0.0/1".
With that everything will be seen as local, even people connecting from the internet if it has been setup.

[pwhodges 2012]

3 hours ago, bandit8623 said:

And I know it used to work fine... And my vpn hasn't changed.

But Emby may have.  They made changes after an exploit was discovered which was spoofing local access - i.e. you may now be having to do more for better security.

Paul

[bandit8623 213]

6 hours ago, pwhodges said:

But Emby may have.  They made changes after an exploit was discovered which was spoofing local access - i.e. you may now be having to do more for better security.

Paul

Sounds good. Seems overkill at this point.  I was fine with no 2fa since I had my vpn.  Now this extra stuff to get a VPN to work is over the top.  If someone is exploiting your firewall/ home network I would argue this is not embys job to police.  This is on the user/ host..

I'll give the info Neminem supplied a try later today when I'm home.

 

[bandit8623 213]

delayed testing this.  hotspot is too darn slow at my home.  

thanks for everyones help

[bandit8623 213]

On 10/15/2025 at 12:00 AM, Neminem said:

@bandit8623have you added you vpn ip range to you lan networks in emby?

I hade to do that, to get it to work.

I also needed to include Emby App to my vpn app's include list, when testing from my phone.

 

This fixed my problem.

thanks

[Neminem 1518]

Thanks for following up