I've been tinkering with my new RB450G for most of the weekend, and most everything works except for uPNP. I'm probably overlooking something but I have dug through the forums and the documentation and configured it to the best of my knowledge as it should be. No rules are created regardless of the app or computer used to initiate a uPNP handshake. Specifics below:

/ip firewall filter> print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; default configuration
chain=input action=accept protocol=icmp

1 chain=input action=accept src-address-list=192.168.0.0/24 in-interface=bridge

2 ;;; default configuration
chain=input action=accept connection-state=established in-interface=ether1-gateway

3 ;;; default configuration
chain=input action=accept connection-state=related in-interface=ether1-gateway

4 ;;; UPnP
chain=services action=accept protocol=udp dst-port=1900

5 ;;; UPnP
chain=services action=accept protocol=tcp dst-port=2828

6 ;;; accept localhost
chain=services action=accept dst-address=127.0.0.1 src-address-list=127.0.0.1

7 ;;; default configuration
chain=input action=drop in-interface=ether1-gateway

/ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; default configuration
chain=srcnat action=masquerade src-address=192.168.0.0/24 out-interface=ether1-gateway


/ip upnp> print
enabled: yes
allow-disable-external-interface: no
show-dummy-rule: yes


/ip upnp interfaces> print
Flags: X - disabled
# INTERFACE TYPE
0 ether1-gateway external
1 bridge internal


/interface> print
Flags: D - dynamic, X - disabled, R - running, S - slave
# NAME TYPE MTU L2MTU
0 R ether1-gateway ether 1500 1524
1 ether2-local ether 1500 1524
2 ether3-local ether 1500 1524
3 ether4-local ether 1500 1524
4 R ether5-local ether 1500 1524
5 R bridge bridge 1500 1524


/interface bridge> print
Flags: X - disabled, R - running
0 R name="bridge" mtu=1500 l2mtu=1524 arp=enabled mac-address=private protocol-mode=rstp priority=0x8000 auto-mac=yes
admin-mac=00:00:00:00:00:00 max-message-age=20s forward-delay=15s transmit-hold-count=6 ageing-time=5m


/interface bridge settings> print
use-ip-firewall: no
use-ip-firewall-for-vlan: no
use-ip-firewall-for-pppoe: no

If I'm overlooking something please enlighten me. I assume this is just operator error as I've rebuilt it from scratch three times with a few permutations of adding things to the NAT firewall list.

I seem to think I'm missing a rule that either allows multi-cast to allow a device to find the uPNP service, or a rule that allows the uPNP service to modify firewall table rules. I'm not sure how to proceed at this point. Any hints?

I realize this is probably a trivial problem, operator error, but could someone please take a look and or point me in the right direction? I've read through all the documentation on uPNP on the wiki for 4.x and 3.x documentation and looked at several forum posts about people having issues with uPNP and them enabling external and internal interfaces for it, which I have done.

I don't see what I'm missing. Can some kind soul with a handy helping of wisdom on the subject please share their magnificent knowledge on uPNP configuration for noobies?

Thanks in advanced to whichever kind soul sees fit to endow this poor Mikrotik noob with some helpful hints.

Anyone with a clue as to why this isn't working? Please? Pretty please with sugar on top?

Still no help?

I'm also a newbie but maybe I can try to help. What is your network configuration like? I can't tell from the configs which interfaces are bridged? Do you really need to have them bridged or can you just use the switch? In any case, if you want to have the multicast packets go from one interface to the other try adding PIM interfaces: http://wiki.mikrotik.com/wiki/Manual:Mu ... ed_example .

Perhaps post your firewall filter rules. It could be blocking the uPNP.

A quick test would be to disable all firewall rules, and try.