Stumped on upnp setup?

bluetrepidation · Thu Aug 09, 2012 5:05 am

Hello all!

I'm running router OS 5.18 with the following config:

add disabled=no interface=ether1-gateway type=external
add disabled=no interface=ether2-master-local type=internal
add disabled=no interface=vlan_guest type=internal

Now I have an access point with a windows client that I'm running the following Microsoft test on: http://www.microsoft.com/windows/using/ ... fault.mspx If I run this test on the private network which uses untagged interface ether2-master-local the test passes. If I hop on my guest network which is tagged to the vlan_guest interface that test fails.

My question is, is this a firewall or interface problem? The guest vlan does run on top of ether2-master-local so do I really need to define it in the upnp setup again? Obviously the vlan_guest is fire walled off from the router less the following rules:

add action=accept chain=input disabled=no dst-port=53 in-interface=vlan_guest protocol=udp
add action=accept chain=input disabled=no dst-port=1900 in-interface=vlan_guest protocol=udp
add action=accept chain=input disabled=no dst-port=2828 in-interface=vlan_guest protocol=tcp

I did try adding a new input chain rule to allow all traffic from vlan_guest but this didn't help at all. Am I using the correct chain? Or should this be in the forward chain? I'm going to guess that my firewall rules are OK but upnp isn't liking the vlan setting? I can see the input rule for port 1900 is incrementing so there is some kind of communication happening with the client.

Hopefully there is a RouterOS guru that can point me in the right direction.

Otherwise I'm been able to buy two RouterBoards for two SOHO setups. I have everything running smoothly including VPNs. Very impressive router for the $. Thanks for such a nice product.

A.J.