Eicon Networks SHIVA 1100, Administrator'S Manual, Page: 61 / 136

Universal plug and play gateway
System Administrator’s Guide 61
Universal plug and play gateway
The Universal Plug and Play (UPnP) Gateway allows UPnP capable applications and
devices to request port forwarding rules to be established on demand. This allows
some applications and devices that may not operate correctly behind the NAT firewall
to automatically work.
Warning: There is concern in the security community over the potential vulnerability
that UPnP gateways present. For maximum security disable the UPnP Gateway
feature.
Configuring the UPnP gateway
The UPnP Gateway needs to be run on a pair of interfaces, the external interface and
the internal interface.
The UPnP Gateway will send out notifications on the internal interface, advertising its
presence on the network. Any UPnP capable applications or devices that you require
to make use of the UPnP Gateway need to be connected to the Shiva VPN Gateway
via this interface. The UPnP Gateway will listen on this interface to requests from
UPnP capable applications and devices to establish port forwarding rules.
In response to these requests, the UPnP Gateway will establish port forwarding rules
to allow matching packets to be forwarded from the configured external interface
through to the internal interface.
Note: The port forwarding rules set up via the UPnP Gateway are temporary. Power
cycling the Shiva VPN Gateway will clear the list of configured UPnP port
forwarding rules, as will the event of either the internal or external interfaces
becoming unavailable.
The UPnP Gateway is intended for transitory application port forwarding, such as
those established by some versions of Microsoft Messenger for file transfers. For long
term port forwarding, we recommend configuring the necessary rules via the
Destination NAT features in Packet Filtering.
Should there be a conflict, rules established via Packet Filtering will have priority over
those established via the UPnP Gateway.
Otherwise, you may manually create filter rules through Rules.