Site Tools


upnp_nat-pmp

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
upnp_nat-pmp [2021/06/18 03:15]
hogwild
upnp_nat-pmp [2021/06/23 12:07] (current)
hogwild clarity
Line 1: Line 1:
 ===== UPnP/NAT-PMP ===== ===== UPnP/NAT-PMP =====
  
-UPnP (Universal Plug and Play) is a controversial protocol which allows fully dynamic (automatic) port mapping from LAN IPs onto the Internet. It was developed with good intentions, but received heavy criticism for its poor security. With this protocol, each application program that uses the network maps its own ports automatically. In the screenshot below, you can see that the WhatsApp application has mapped certain ports on FreshTomato's WAN IP/Interface. Apple's implementation of the protocol is known as Bonjour.+UPnP (Universal Plug and Play) is a controversial protocol which allows fully dynamic (automatic) port mapping from LAN IPs onto the Internet. UPnP has been heavily criticized for its poor security. With this protocol, each application program that uses the network maps its own ports automatically. In the screenshot below, you can see that the WhatsApp application has mapped certain ports on FreshTomato's WAN IP/Interface.
  
-UPnP is the original implementation of this dynamic port-mapping protocol. NAT-PMP (NAT Port Mapping Protocol) is a newer, enhanced version of UPnP, designed for better compatbility with NAT (Network Address Translationrouting. NAT-PMP is part of Apple's Bonjour protocol, and is often used for streaming iTunes and other media.+UPnP is the original implementation of this dynamic port-mapping protocol. NAT-PMP (NAT Port Mapping Protocol) is a newer, enhanced version of UPnP, designed for better compatbility with Network Address Translation routing. NAT-PMP is part of Apple's Bonjour protocol, and is often used for streaming iTunes and other media.
  
 If you use dynamic port forwarding, you'll probably want to enable both protocols to maintain backward compatibility. If you use dynamic port forwarding, you'll probably want to enable both protocols to maintain backward compatibility.
Line 19: Line 19:
 **Secure Mode**: Allows only the "owner LAN IP" to trigger its own mapping/unmapping. In other words, the client could only map an incoming port to its own IP address, not to another IP address. **Secure Mode**: Allows only the "owner LAN IP" to trigger its own mapping/unmapping. In other words, the client could only map an incoming port to its own IP address, not to another IP address.
  
-**Enable on**: Can be enabled only on certain VLANs, when necessary.+**Enable on**: allows you to eanble UPnp/NATPMP only on certain VLANs, if needed.
  
 **Show in My Network Places**: If enabled, makes FreshTomato appear as a gateway in Windows' browsable LAN network (WORKGROUP or HOMEGROUP). **Show in My Network Places**: If enabled, makes FreshTomato appear as a gateway in Windows' browsable LAN network (WORKGROUP or HOMEGROUP).
  
-**Miniupnpd custom config:** allows you to specify custom configuration options not available via the GUI. In the image below UPnP requests/mappings are denied for a specific IP address only.\\  \\  \\  [[https://wiki.freshtomato.org/lib/exe/detail.php?id=upnp_nat-pmp&media=41c60df0025cd4247062abe372736c19.png|{{:41c60df0025cd4247062abe372736c19.png}}]]+**Miniupnpd custom config:** allows you to specify custom configuration options not available in the web interface. In the image belowUPnP requests/mappings are denied for a specific IP address only.\\  \\  \\  [[https://wiki.freshtomato.org/lib/exe/detail.php?id=upnp_nat-pmp&media=41c60df0025cd4247062abe372736c19.png|{{:41c60df0025cd4247062abe372736c19.png}}]]
  
  
upnp_nat-pmp.txt ยท Last modified: 2021/06/23 12:07 by hogwild