# Remote access permissions

## Introduction <a href="#introduction" id="introduction"></a>

This article covers Meshnet’s remote access permission, its functionality while enabled or disabled, and the impact it has on your Meshnet. The article also provides instructions on how to grant or deny the remote access permission for each of your Meshnet peer devices.

## Permission overview <a href="#permission-overview" id="permission-overview"></a>

Once you enable Meshnet, the devices treat each other as members of a shared private network. The purpose of the remote access permission is to control whether a Meshnet peer can reach your device. The devices can communicate with each other via the Meshnet IP address or the Nord name. By default, [remote access](https://nordvpn.com/meshnet/remote-access/) is enabled for all of your Meshnet devices, but you can modify this setting in[ the Meshnet permission menu](#changing-permissions).

### What happens when remote access is enabled? <a href="#what-happens-when-remote-access-is-enabled" id="what-happens-when-remote-access-is-enabled"></a>

Your device accepts incoming connections from a Meshnet peer. The connections can be initiated from the same local network or from the outside.

<figure><img src="https://3559400189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0cTezbT2vN0lurEio8Z5%2Fuploads%2Fpr3OqqjM21Efrzu1DWq3%2Fremote_on.svg?alt=media&#x26;token=2c23e1f9-f299-495d-8fb3-5c12bb8ff716" alt="Remote access enabled"><figcaption><p>Figure 1. Remote access enabled</p></figcaption></figure>

As illustrated in the model above, data can be exchanged in both directions. This two-way communication between the devices enables a wide range of use cases, including but not limited to:

* [Sharing files and folders](https://meshnet.nordvpn.com/~/changes/Ppg3bMoVHwMks6LohjqQ/how-to/remote-files-media-access/set-up-folder-sharing)
* [Connecting to hosted game servers](https://meshnet.nordvpn.com/~/changes/Ppg3bMoVHwMks6LohjqQ/how-to/gaming)
* [Reaching web servers](https://meshnet.nordvpn.com/~/changes/Ppg3bMoVHwMks6LohjqQ/how-to/joint-projects/nginx-web-server-access)

### What happens when remote access is disabled? <a href="#what-happens-when-remote-access-is-disabled" id="what-happens-when-remote-access-is-disabled"></a>

Your device does not accept connections from a Meshnet peer. If a connection is attempted (for example, using the `ping` command), it will fail because the recipient will not receive it.

<figure><img src="https://3559400189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0cTezbT2vN0lurEio8Z5%2Fuploads%2FFgxYViWPu75bgWuL2DVL%2Fremote_off.svg?alt=media&#x26;token=d5fda897-61e9-4358-aa82-d7cbaa272d2c" alt="Remote access disabled"><figcaption><p>Figure 2. Remote access disabled</p></figcaption></figure>

Having the remote access permission disabled will prevent the peer from accessing any shared folders or services on your device.

## Changing permissions <a href="#changing-permissions" id="changing-permissions"></a>

If you want to change the status of the remote access permission, you can do so for each device individually. The Meshnet permission view also indicates whether your peer has enabled or disabled the permission for your device:

![The section "Remote access permissions to the linked device" is highlighted](https://3559400189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0cTezbT2vN0lurEio8Z5%2Fuploads%2F9d2MvVqKkxuJCU6nQgk8%2Fimage.png?alt=media\&token=f33c7dfc-3beb-4ee8-b397-fc8b0e48dae7)

### Manage remote access <a href="#manage-remote-access-on-windows" id="manage-remote-access-on-windows"></a>

To manage the remote access permission, proceed with the following instructions:

{% tabs %}
{% tab title="Windows" %}

1. Open the NordVPN app. [Log in](https://my.nordaccount.com/) if necessary.
2. On the left-side menu, select the Meshnet<img src="https://3559400189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0cTezbT2vN0lurEio8Z5%2Fuploads%2FxvxRyVglOq64BS4ArUK6%2Fmeshnet.svg?alt=media&#x26;token=accf346d-0d36-420d-a965-52ff921bb889" alt="" data-size="line"> tab.
3. Click the device that you want to alter the permissions for.
4. Under **Remote access permissions**, turn on or off the **Remote access to your device** toggle. <br>

   <div align="left"><figure><img src="https://3559400189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0cTezbT2vN0lurEio8Z5%2Fuploads%2F3tCMPoIkqP9S00TrsDxe%2Fwin_change_permission.png?alt=media&#x26;token=96304492-9515-4494-bc87-91fbafe1ebba" alt="Turning on Remote access to your device"><figcaption></figcaption></figure></div>

{% endtab %}

{% tab title="iOS and Android" %}

1. Open the NordVPN app. [Log in](https://my.nordaccount.com/) if necessary.
2. Tap Meshnet<img src="https://3559400189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0cTezbT2vN0lurEio8Z5%2Fuploads%2FxvxRyVglOq64BS4ArUK6%2Fmeshnet.svg?alt=media&#x26;token=accf346d-0d36-420d-a965-52ff921bb889" alt="" data-size="line"> at the bottom of the screen.
3. Select **Manage devices**.
4. Tap the **Permissions** area under the device that you want to alter the permissions for.\
   \ <img src="https://3559400189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0cTezbT2vN0lurEio8Z5%2Fuploads%2FS7W7atKWRP5iCChmUGV9%2Fandroid_permissions_section.png?alt=media&#x26;token=4c657526-c4f8-470a-b2a5-bb4e56a74007" alt="Selecting Permissions" data-size="original">\
   &#x20;
5. Under **Remote access permissions**, turn on or off **Remote access to your device**. \
   \
   &#x20;![Turning on Remote access to your device](https://3559400189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0cTezbT2vN0lurEio8Z5%2Fuploads%2FsjN17pwGawXJUB2IhLUX%2Fandroid_change_permission_edited.png?alt=media\&token=13e15697-c625-4796-a81e-4e0057ea52cd)<br>
   {% endtab %}

{% tab title="macOS" %}

1. Open the NordVPN app. [Log in](https://my.nordaccount.com/) if necessary.
2. On the left-side menu, select the Meshnet tab<img src="https://3559400189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0cTezbT2vN0lurEio8Z5%2Fuploads%2FxvxRyVglOq64BS4ArUK6%2Fmeshnet.svg?alt=media&#x26;token=accf346d-0d36-420d-a965-52ff921bb889" alt="" data-size="line">.
3. Click the More![](https://3559400189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0cTezbT2vN0lurEio8Z5%2Fuploads%2FiMrhaiu2oc54oaBtys4Q%2FUnion.svg?alt=media\&token=45120839-d8fb-4d66-9098-f902c30901c4) button next to the device that you want to alter the permissions for.
4. Select the **Don't allow remote access to your device** or the **Allow remote access to your device** option. <br>

   <div align="left"><figure><img src="https://3559400189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0cTezbT2vN0lurEio8Z5%2Fuploads%2F6k0t3moeshtK9TuWslRI%2Fmac_remote_permission.png?alt=media&#x26;token=b1e91d18-1faf-4e5e-a115-d0652f54873f" alt="Turning off Remote access to your device"><figcaption></figcaption></figure></div>

{% endtab %}

{% tab title="Linux" %}

1. Open the terminal.

2. Run the following command to list your Meshnet peers:<br>

   ```bash
   nordvpn meshnet peer list
   ```

3. Note the Nord name of the peer you want to alter permissions for.

   &#x20;

   <div align="left"><figure><img src="https://3559400189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0cTezbT2vN0lurEio8Z5%2Fuploads%2FXbvUES2sJ7VTVSarAKYZ%2Fimage.png?alt=media&#x26;token=9520af6d-546d-47ae-8069-8e9907e680e3" alt="An example of entering a device&#x27;s Nord name"><figcaption></figcaption></figure></div>

4. To either allow or disable the permission, use one of the following commands, replacing `<NordName>` with the peer’s Nord name or Meshnet IP: <br>

   ```bash
   nordvpn meshnet peer incoming allow <NordName>
   nordvpn meshnet peer incoming deny <NordName>
   ```

{% endtab %}
{% endtabs %}
