USG FLEX 100 - UPnP

robin_bockman
robin_bockman Posts: 4
First Comment First Anniversary
in Security
Latesta firmware, does not hold it's setting during reboot, looks ok in the interface but you have to disable and then enable it again to restore upnp functionality, it have been the same during the last 3-4 firmwares, a bug?

All Replies

  • Zyxel_Vic
    Zyxel_Vic Posts: 282  Zyxel Employee
    25 Answers First Comment Friend Collector Seventh Anniversary
    Hi @robin_bockman
    To your description, do you mean that the device won't keep the upnp created port forwarding rule after rebooting? And can you share how did you test the upnp functionality?
  • robin_bockman
    robin_bockman Posts: 4
    First Comment First Anniversary
    Correct, Plex server can't find a way out if you don't disable and enable the upnp setting, a restart of the plex server will not help
  • Zyxel_Vic
    Zyxel_Vic Posts: 282  Zyxel Employee
    25 Answers First Comment Friend Collector Seventh Anniversary
    Hi @robin_bockman
    I saw something strange when playing with UPnP function and we're now checking on this. Will keep you posted when we get further information about it.
  • robin_bockman
    robin_bockman Posts: 4
    First Comment First Anniversary
    Thanks, everything looks good in the interface, it just does not work until you turn it off and on
  • Zyxel_Vic
    Zyxel_Vic Posts: 282  Zyxel Employee
    25 Answers First Comment Friend Collector Seventh Anniversary
    Hi @robin_bockman
    Did some further checking with different App (utorrent), after rebooting the device, the port forwarding rule seems still exists. See the screenshot below:




    Another possibility is that the host didn't send the SSDP packet again after the device rebooted. Can you capture the SSDP packet for us to check further?
  • infosecwest
    infosecwest Posts: 13  Freshman Member
    First Comment
    edited February 2023
    Am presently debugging an issue with FaceTime Video through a USG FLEX 100.

    Looks like an issue with UPNP: (received this from upnpc)

    ...

    List of UPNP devices found on the network :

     desc: http://192.168.4.1:41188/rootDesc.xml

     st: urn:schemas-upnp-org:device:InternetGatewayDevice:1


    Found a (not connected?) IGD : http://192.168.4.1:41188/ctl/IPConn

    No valid UPNP Internet Gateway Device found.

  • robin_bockman
    robin_bockman Posts: 4
    First Comment First Anniversary
    Well, the problem still exists in latest firmware for me
  • Zyxel_Vic
    Zyxel_Vic Posts: 282  Zyxel Employee
    25 Answers First Comment Friend Collector Seventh Anniversary
    Hi @robin_bockman
    Long time no see in here.
    We had released a new version on the forum. Can you verify with it?
    Here it is the download link: ZLD V5.35WK06 Firmware release — Zyxel Community
    By the way, as mentioned in the previous reply "Another possibility is that the host didn't send the SSDP packet again after the device rebooted. Can you capture the SSDP packet for us to check further?", can you have check if this host/application did send SSDP packets after rebooting?

    @infosecwest
    Can you help to capture packets and pm to me when you're doing upnpc testing? We'd like to check what may going wrong during the upnp communication.

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）