OPNsense Forum

English Forums => General Discussion => Topic started by: qwertypro on March 03, 2023, 02:10:25 PM

Title: How to use UPNP on a bridge interface?
Post by: qwertypro on March 03, 2023, 02:10:25 PM
Hello Gents!

I would like to ask some help, because my configuration is not working.

I connected two interfaces with a bridge. igb0, igb1 -> bridge0
I set the two advanced options, as the manual said.
net.link.bridge.pfil_member 0
et.link.bridge.pfil_bridge 1
I have the outbound NAT rule for the application port.

I start the UPNP service on the bridge0 interface.
When I run an application from igb1, it can't register themself to UPNP service.

What do you think, what's the problem?
Thank you for help!
Have a nice weekend!
Title: Re: How to use UPNP on a bridge interface?
Post by: Patrick M. Hausen on March 03, 2023, 02:28:33 PM
And you have assigned the bridge interface to LAN or OPT1 or similar?
Title: Re: How to use UPNP on a bridge interface?
Post by: qwertypro on March 03, 2023, 03:42:57 PM
The detailed setup is:
igb0 - assigned
igb1 (lan) - assigned, enabled
igb0_vlan10 - assigned, enabled
igb1_vlan10 - assigned, enabled
bridge0 (igb0_vlan10 + igb1_vlan10) - assigned, enabled, static IP with DHCP enabled

When I'm connected the network, I got IP address via DHCP.
The application couldn't register themself to UPNP.
Title: Re: How to use UPNP on a bridge interface?
Post by: Patrick M. Hausen on March 03, 2023, 03:49:42 PM
Firewall rules for UPnP in place?
Title: Re: How to use UPNP on a bridge interface?
Post by: qwertypro on March 03, 2023, 06:23:58 PM
Not yet. I don't see  any blocked connection.
What kind of rule do you recommend? UDP 1900?
Title: Re: How to use UPNP on a bridge interface?
Post by: Patrick M. Hausen on March 03, 2023, 06:44:54 PM
I don't know - I don't use UPnP for security reasons. Just trying to help by checking the stack from the bottom up. Your interface looks good. For the UPnP there should be documentation about the firewall rules needed.
Title: Re: How to use UPNP on a bridge interface?
Post by: qwertypro on March 04, 2023, 06:26:42 PM
SOLVED!

We can find the miniupnp debug logs at System - Routes - Log File menu, but I don't see any interesting log.
I did a packet capture on the interface and I see the packets reaching the bridge0 interface.

I'm trying to figure out why the packet weren't processed and I find a misconfigured firewall rule on the interface... :D

Thank You pmhausen for the questions and for spend time on my problem!
Have a nice weekend!