I have some trouble with UPnP, RB2011LS-IN, fw. 5.22, absolute default config.
configuring UPnP as usual
[admin@MikroTik] > ip upnp set allow-disable-external-interface=no
[admin@MikroTik] > ip upnp interfaces add interface=sfp1-gateway type=external
[admin@MikroTik] > ip upnp set enable=yes
[admin@MikroTik] > ip upnp print
enabled: yes
allow-disable-external-interface: no
show-dummy-rule: yes
after “system reboot”
[admin@MikroTik] > ip upnp print
enabled: yes
allow-disable-external-interface: yes
show-dummy-rule: yes
notice, that allow-disable-external-interface on yes again. Why, is this a bug or feature?
okay, tried in another order:
[admin@MikroTik] > ip upnp set enable=yes
[admin@MikroTik] > ip upnp set allow-disable-external-interface=no
[admin@MikroTik] > ip upnp interfaces add interface=sfp1-gateway type=external
[admin@MikroTik] > ip upnp print
enabled: yes
allow-disable-external-interface: no
show-dummy-rule: yes
after “system reboot”
[admin@MikroTik] > ip upnp print
enabled: no
allow-disable-external-interface: no
show-dummy-rule: yes
now allow-disable-external-interface is still “no”, but upnp is disabled?! What a hell?
How to prevent users to disable external interface with UPnP. Somebody having idea?
If this is relevant, that sfp1 is disconnected and without module. As far I tried, even with working sfp1 interface, problem remains.
I have tried the same configuration on my RB2011 v5.22, whatever I’m doing,
/system reboot brings upnp enabled.
/ip upnp> print
enabled: yes
allow-disable-external-interface: no
show-dummy-rule: yes
Perhaps there is additional settings or configuration option used, that is specific to your configuration and disables upnp after reboot.
Perhaps there is additional settings or configuration option used, that is specific to your configuration and disables upnp after reboot.
now if you say, I do remember, that multicast package is installed.
Otherwise all config is default or whatever is it after “system reset-configuration”.
I tried again with brand new router (fw. 5.20) without any additional packages, exactly like it come from the box.
Ethernet connected to ETH6, original power supply, did ssh to 192.168.88.1, using putty.
And yet again “allow-disable-external-interface: yes” after reboot.
Exact copy/paste from the putty:
login as: admin
MMM MMM KKK TTTTTTTTTTT KKK
MMMM MMMM KKK TTTTTTTTTTT KKK
MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK
MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK
MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK
MMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKK
MikroTik RouterOS 5.20 (c) 1999-2012 http://www.mikrotik.com/
The following default configuration has been installed on your router:
----------------------------------------------------------------------------
NAT: enabled;
DHCP Client: enabled;
LAN Configuration:
LAN Port: bridge-local;
switch group: ether6 (master), ether7, ether8, ether9, ether10
(renamed with extensions '-master-local' and '-slave-local')
LAN IP: 192.168.88.1;
DHCP Server: enabled;
-------------------------------------------------------------------------------
You can type "v" to see the exact commands that are used to add and remove
this default configuration, or you can view them later with
'/system default-configuration print' command.
To remove this default configuration type "r" or hit any other key to continue.
If you are connected using the above IP and you remove it, you will be disconnected.
Confirming configuration
[admin@MikroTik] > ip upnp interfaces add interface=sfp1-gateway type=external
[admin@MikroTik] > ip upnp set allow-disable-external-interface=no
[admin@MikroTik] > ip upnp set enable=yes
[admin@MikroTik] > ip upnp pr
enabled: yes
allow-disable-external-interface: no
show-dummy-rule: yes
[admin@MikroTik] > system reboot
Reboot, yes? [y/N]:
y
system will reboot shortly
login as: admin
MMM MMM KKK TTTTTTTTTTT KKK
MMMM MMMM KKK TTTTTTTTTTT KKK
MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK
MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK
MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK
MMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKK
MikroTik RouterOS 5.20 (c) 1999-2012 http://www.mikrotik.com/
[admin@MikroTik] > ip upnp print
enabled: yes
allow-disable-external-interface: yes
show-dummy-rule: yes
[admin@MikroTik] >
Interesting, why you can’t replicate this behavior?
On what circumstances UPnP disables itself after reboot?
Is this possible, that something in our office network connected to ETH6 will force it to disable UPnP?
Although this is unlikely, because I have 50 or more such routers installed in several apartment buildings, and all (or most) of them having same problem. Customers complains was the initial reason of investigating this issue. Those routers having more complicated configuration, but result is same.
I have tried on v5.22 and v6.0rc6, upnp configuration is saved correctly (for example I tried on demo2.mt.lv router, check uptime).
/ip upnp> print
enabled: yes
allow-disable-external-interface: no
show-dummy-rule: yes
/system reboot
ip upnp> print
enabled: yes
allow-disable-external-interface: no
show-dummy-rule: yes