Need Help. UPNP

That’s what I thought. I just installed skype and although it works I get no rules added.


Sent from my iPhone using Tapatalk

It does show here in Windows 7 as network device “MikroTik Router”. Using the icon, it’s possible to manually add/remove forwarded ports. Something is not completely right, because both addding and removing shows error, but the command completes correctly (dynamic rules appear/disapper on router).

For the device icon to appear, both “ssdpsrv” and “upnphost” services need to be enabled and running.

I get absolutely no rules that automatically appear and disappear. This is pretty frustrating because it seems so simple. The only place I get dynamic rules are in filter rules and mangle. None in the NAT section.


Sent from my iPhone using Tapatalk

How can I tell if those two services are running?


Sent from my iPhone using Tapatalk

Have you tried again with no MLPPP after fixing the filter rules with the pppoe devices instead of Modem1?

I am really puzzled, I checked a rather heterogeneous network with a mix of ios devices, android, windows phones, Xbox, PS3, Wii, Macs… and all are triggering the uPNP dynamic rules in Firewall > Nat without issues.

I haven’t tried but I can do that tonight.


Sent from my iPhone using Tapatalk

So I enabled logging of UPNP and did a reboot. On startup you see UPNP acquire the external IP address. After that you never see another UPNP log entry.


Sent from my iPhone using Tapatalk

About the services, just open list of services in Windows and check if they are running. I don’t know their exact English display name (right now I have only localized Windows here), but it will be something with SSDP and UPnP. You’ll see the short name when you open service properties.

Another thing you can check is firewall. When UPnP is enabled on router, it sends out about ten UDP packets to 239.255.255.250:1900. Obviously, your Windows firewall must not block them. There seem to be a rule for that enabled probably by default for private network profile, and another rule for domain and public profile, which is disabled. So check where your computer thinks it is.

If you would be comfortable with going deeper, packet sniffer is your friend. You should see those UDP packets to port 1900 and they will contain URL http://:/gateway.xml and a little later there should be attempts from your PC to connect to that and some other URIs on the same server. It’s all unencrypted and readable, so it should be possible to find something interesting there.

Oh, sorry I thought you meant services on the router. I know upnp is running on all four machines I have tried because they pick everything else on my network up. I have five other devices on my network that use UPNP and they all show up on my pc’s network discovery.


Sent from my iPhone using Tapatalk

OK, I feel like a complete and utter knob. I don’t know what changed but for some reason during my testing I thought I would try using one of my unused ports as an interface and see if it made a difference. So I assigned one of my unused ports as a slave to my local port and made it the internal interface for UPNP. I plugged my laptop in and bingo I saw it in network discovery. So I asked myself what is the difference. So for the hell of it I unplugged my network switch and plugged my laptop in. Still working, I was cheering for joy. I then started to work backwards I remove the slave interface and put it back to the way it was. Still working. I now started cursing because I already removed the switch and plugged my laptop in and it made no difference. So puzzled I plugged the switch back in and my laptop into the switch, no UPNP. I now asked my self maybe one of the settings didn’t take affect in the network switch because it never got cycled in the midst of all the settings being changed. So I unplugged my network switch and plugged it back in. While I waited for the switch to go through its lengthy boot up sequence I watched my laptop. As soon as the switch was booted I had UPNP, I jumped for joy, then not 30 seconds later UPNP disappeared. Now extremely puzzled I knew it must be something in the switch. So going page by page through my switch settings scratching my head I knew there must be something I missing. Then I stumbled across IGMP Snooping, it was disabled. I enabled it and rebooted the switch. I now had UPNP for 2 minutes instead of just 30 seconds. Now that I at least had a clue I started some more poking around. My switch has the ability to assign a multicast host port. So I assigned the host port to the same port as the mikrotik and once again rebooted. Finally I have stable UPNP operation. I’m sorry for wasting everyone’s time since it didn’t end up being mikrotik related. I don’t know how I missed it was working the first time I remove the switch from the equation. But at least now it is working. I had a full head of hair two days ago, now I’m bald.
Thanks again.

Glad you sorted it out!