How to use UPNP on a bridge interface?

Started by qwertypro, March 03, 2023, 02:10:25 PM

Previous topic - Next topic
Hello Gents!

I would like to ask some help, because my configuration is not working.

I connected two interfaces with a bridge. igb0, igb1 -> bridge0
I set the two advanced options, as the manual said.
net.link.bridge.pfil_member 0
et.link.bridge.pfil_bridge 1
I have the outbound NAT rule for the application port.

I start the UPNP service on the bridge0 interface.
When I run an application from igb1, it can't register themself to UPNP service.

What do you think, what's the problem?
Thank you for help!
Have a nice weekend!

And you have assigned the bridge interface to LAN or OPT1 or similar?
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)

The detailed setup is:
igb0 - assigned
igb1 (lan) - assigned, enabled
igb0_vlan10 - assigned, enabled
igb1_vlan10 - assigned, enabled
bridge0 (igb0_vlan10 + igb1_vlan10) - assigned, enabled, static IP with DHCP enabled

When I'm connected the network, I got IP address via DHCP.
The application couldn't register themself to UPNP.

Firewall rules for UPnP in place?
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)

Not yet. I don't see  any blocked connection.
What kind of rule do you recommend? UDP 1900?

I don't know - I don't use UPnP for security reasons. Just trying to help by checking the stack from the bottom up. Your interface looks good. For the UPnP there should be documentation about the firewall rules needed.
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)

SOLVED!

We can find the miniupnp debug logs at System - Routes - Log File menu, but I don't see any interesting log.
I did a packet capture on the interface and I see the packets reaching the bridge0 interface.

I'm trying to figure out why the packet weren't processed and I find a misconfigured firewall rule on the interface... :D

Thank You pmhausen for the questions and for spend time on my problem!
Have a nice weekend!