A successful Java login only checks the Java tunnel. Bedrock clients use a separate route. Keep the public address and port from playit distinct from the local address and port Geyser listens on.
Check the tunnel type
- In the playit dashboard, set up a
Minecraft Bedrock (NetherNet)tunnel for Geyser. Keep the Java tunnel separate. Older forum replies about a UDP tunnel may describe the classic RakNet setup. - Open Configuration help → Geyser in the Bedrock tunnel and apply the generated settings to your Geyser config. Keep the token private. After saving and restarting, look for a message that Geyser registered with the external signaling service.
- In Bedrock, enter the tunnel's public hostname and its assigned port in the separate fields. Use the values from the Bedrock tunnel.
Isolate the failure
For classic UDP/RakNet, replace the example with your public hostname and port and run this from the server console. For NetherNet, check signaling registration and attempt a join from a current Bedrock client on a different network. A UDP probe alone cannot establish NetherNet reachability.
geyser connectiontest bedrock.example.net 19132
If Geyser logs a join attempt, inspect the next message for a version, Floodgate or whitelist error.