# Traffic routing permissions

## Introduction <a href="#introduction" id="introduction"></a>

This article covers Meshnet’s traffic routing permission, how the feature works, and its limitations. Additionally, the article describes how to configure the traffic routing permission for each individual peer device in your Meshnet.

## Permission overview <a href="#permission-overview" id="permission-overview"></a>

The traffic routing feature allows you to route internet traffic through compatible devices on your Meshnet. Traffic routing is only possible through Meshnet devices running on:

* Windows
* Linux
* macOS (if you've downloaded your version of the app from the [NordVPN website](https://nordvpn.com/download/mac/))

For more information, see [Routing traffic in Meshnet](https://meshnet.nordvpn.com/~/changes/5hiVtBuK6qwLGxb0SjCm/features/routing-traffic-in-meshnet).

### What happens when traffic routing is enabled? <a href="#what-happens-when-traffic-routing-is-enabled" id="what-happens-when-traffic-routing-is-enabled"></a>

When the traffic routing permission is enabled, your Meshnet peers are allowed to route all of their internet traffic through your device. In essence, your device can act as a VPN server for your fellow user.

<figure><img src="https://3559400189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0cTezbT2vN0lurEio8Z5%2Fuploads%2FfcrJkrmKuOMEcK8FOMEw%2Ftraffic_routing.svg?alt=media&#x26;token=b88dfef4-df8c-44f5-b53a-c316dadd349e" alt="Traffic routing flow"><figcaption><p>Figure 1. Traffic routing flow</p></figcaption></figure>

As illustrated in Figure 1, a mobile device routes traffic via a home computer and accesses the internet using the PC's public IP.

### What happens when traffic routing is disabled? <a href="#what-happens-when-traffic-routing-is-disabled" id="what-happens-when-traffic-routing-is-disabled"></a>

With the traffic routing permission disabled, the peer cannot route their internet traffic through your device. Additionally, your device does not appear in the list of available host devices for traffic routing, even if it is capable of acting as a host.

## Changing permissions <a href="#changing-permissions" id="changing-permissions"></a>

If you want to change the status of the traffic routing permission, you can do so for each device individually. The Meshnet permission view also indicates whether your peer has enabled or disabled the permission for your device:

![The section "Sending files to the linked device" is highlighted](https://3559400189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0cTezbT2vN0lurEio8Z5%2Fuploads%2FCPvDDRbeLjl9cFC14ONc%2Fimage.png?alt=media\&token=603d5341-ee3d-497b-9a27-2deb8d6d6999)

{% hint style="warning" %}
**Caution**

Use traffic routing only with trusted devices to avoid potential misuse, as your browsing activity can be monitored on the device you are routing through.
{% endhint %}

### Manage traffic routing <a href="#manage-traffic-routing-on-windows" id="manage-traffic-routing-on-windows"></a>

To manage the traffic routing permission, proceed with the following instructions:

{% tabs %}
{% tab title="Windows" %}

1. Open the NordVPN app. [Log in](https://my.nordaccount.com/) if necessary.
2. On the left-side menu, select the Meshnet<img src="https://3559400189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0cTezbT2vN0lurEio8Z5%2Fuploads%2FxvxRyVglOq64BS4ArUK6%2Fmeshnet.svg?alt=media&#x26;token=accf346d-0d36-420d-a965-52ff921bb889" alt="" data-size="line"> tab.
3. Click the device that you want to alter the permissions for.
4. Under **Traffic routing permissions**, turn on or off the **Traffic routing through your device** toggle. <br>

   <div align="left"><figure><img src="https://3559400189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0cTezbT2vN0lurEio8Z5%2Fuploads%2Fyjtyo90dFlZ29McZqUUM%2Fwin_slider.png?alt=media&#x26;token=e854b526-d108-4a69-8157-efdef5a76af9" alt="Turning on Traffic routing through your device"><figcaption></figcaption></figure></div>

{% endtab %}

{% tab title="macOS" %}

1. Open the NordVPN app. [Log in](https://my.nordaccount.com/) if necessary.
2. On the left-side menu, select the Meshnet<img src="https://3559400189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0cTezbT2vN0lurEio8Z5%2Fuploads%2FxvxRyVglOq64BS4ArUK6%2Fmeshnet.svg?alt=media&#x26;token=accf346d-0d36-420d-a965-52ff921bb889" alt="" data-size="line"> tab.
3. Click the More button next to the device that you want to alter the permissions for.
4. Select the **Don't allow traffic routing through your device** or the **Allow traffic routing through your device** option. <br>

   <div align="left"><figure><img src="https://3559400189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0cTezbT2vN0lurEio8Z5%2Fuploads%2F7uXHSFlNf179Umo4Pl5k%2Fmac_routing_permission.png?alt=media&#x26;token=cc9da511-6152-47b6-88a0-1c9e68439669" alt="Turning off traffic routing through your device"><figcaption></figcaption></figure></div>

{% hint style="info" %}
**Note**

If you're using the App Store version of the app, the traffic routing permission will not be visible because this version does not support traffic routing.
{% endhint %}
{% endtab %}

{% tab title=" Linux" %}

1. Open the terminal.

2. Run the following command to list all of your Meshnet peers:<br>

   ```bash
   nordvpn meshnet peer list
   ```

3. Note the Nord name of the peer you want to alter permissions for.\
   &#x20;

   <div align="left"><figure><img src="https://3559400189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0cTezbT2vN0lurEio8Z5%2Fuploads%2FBM9hEKeiSqV93oZKBNV2%2Fimage.png?alt=media&#x26;token=5b97e931-56d1-411e-a7dc-2bdb3386c8e3" alt="Locating the Nord name of the peer device "><figcaption></figcaption></figure></div>

4. To either allow or disable the permission, use one of the following commands, replacing `<NordName>` with the peer’s Nord name or Meshnet IP:<br>

   ```bash
   nordvpn meshnet peer routing allow <NordName>
   nordvpn meshnet peer routing deny <NordName>
   ```

{% endtab %}
{% endtabs %}

If someone is routing their traffic via your device, you can see this information under their device name on the Meshnet page of your NordVPN application on Windows and macOS.

<div align="left"><figure><img src="https://3559400189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0cTezbT2vN0lurEio8Z5%2Fuploads%2FzL7hS0J1fnB3beqTjCNH%2Fwin_traffic_being_routed.png?alt=media&#x26;token=10234e9c-834f-4962-9342-b3a0cb843f3d" alt="Traffic is being routed through your device"><figcaption></figcaption></figure></div>

On Linux, currently, you can only check if traffic routing is allowed for any of the connected devices. To do this, run the following command:&#x20;

```bash
nordvpn meshnet peer list
```

## See also

* [Local network permissions](https://meshnet.nordvpn.com/~/changes/5hiVtBuK6qwLGxb0SjCm/features/explaining-permissions/local-network-permissions)
