What is UPnP?

What is UPnP?

UPnP is a set of networking protocols that lets devices find each other and use each other's services without manual setup. A smart TV finds a media server, a PC finds a network printer, and a game console asks the router to open the ports it needs. It is a different thing from Windows Plug and Play, which detects hardware connected to a PC.

How it works

• Discovery: devices announce themselves and search for services with SSDP (Simple Service Discovery Protocol), sent as multicast to 239.255.255.250 on UDP port 1900.
• Description and control: once found, a device describes its services in XML and accepts commands over HTTP.
• Port mapping: a router that supports the Internet Gateway Device (IGD) profile accepts requests from devices on the LAN to add a port forward. The router does not check who is asking or why.

Media streaming standards such as DLNA build on UPnP, and Windows network discovery uses SSDP to find devices on the local network.

Why it is convenient

Online games, voice and video chat, peer-to-peer applications and some remote access tools need inbound connections. Behind NAT, those connections fail unless the router has a matching port forward. UPnP creates the forward on demand, so users never have to open the router's admin page. On game consoles, a strict or moderate NAT type warning often means UPnP is off and no manual forward exists.

Why it is a risk

• No authentication: malware on any LAN device can open an inbound port to itself, exposing a service to the internet or setting up remote control.
• Changes no one sees: forwards appear without an administrator knowing; the router's UPnP mapping table is often the only place they show up.
• WAN exposure: some routers have had flaws that answered UPnP or SSDP requests from the internet side, which attackers have used to reconfigure routers and to reflect traffic in DDoS attacks.
• Exposed IoT: cameras and other smart devices sometimes use UPnP to make themselves reachable from the internet without the owner realizing it.

Best practice on a SOHO router

1. Disable UPnP unless a specific application needs it.
2. Create manual port forwards for the services that must accept inbound connections, pointing them at devices with reserved or static addresses.
3. If UPnP must stay on, keep the firmware updated, review the UPnP mapping table, and make sure UPnP is not reachable from the WAN side.

Troubleshooting cues

• A game or chat app reports strict NAT or cannot accept incoming connections after UPnP was disabled: add a manual port forward for the ports the vendor documents.
• Ports are open on the router that nobody configured: check the UPnP mapping table and scan the device that requested them.
• Two consoles on the same network conflict: both may want the same port, and UPnP can map a given external port to only one device.

UPnP on the CompTIA A+ exam

UPnP is on the Core 1 acronym list, and disabling it is one of the SOHO router security settings covered in Core 2, along with changing default passwords, updating firmware and disabling WPS. Know the trade-off: UPnP makes port forwarding automatic, and that same automation lets malicious software open ports. If a question asks which router setting lets applications open ports without an administrator, or which feature to turn off to harden a SOHO router against unwanted inbound connections, think UPnP.