Router reference guide for UPnP settings with HTS. Panasonic Corporation Connected Solutions Company. Version:1.0 1st April, 2018

Size: px

Start display at page:

Download "Router reference guide for UPnP settings with HTS. Panasonic Corporation Connected Solutions Company. Version:1.0 1st April, 2018"

Abraham Wilkerson
6 years ago
Views:

1 Router reference guide for UPnP settings with HTS Panasonic Corporation Connected Solutions Company Version:1.0 1st April, 2018

2 1. Routers list of UPnP availability Model Get External IP Port FWD Connect WebMC SIP EXT. SIP trunk Max PFWD by UPnP(*1) Supplement BELKIN F9K1004 D-Link DIR-825 D-Link DSR-500 Linksys E1200 NetGear WNDR4300 Xiaomi Mi Wifi Mini ASUS RT-AC68U MikroTik hexlite RB750r2 TP-Link AC-1750 Dray Tek Vigor ~ 1024~ MAX 2channels 7 Can not confirmed port forward table in WEB screen. Max port forwarding numbers 7 ports. More than 1000 Can not confirmed port forward table in WEB screen. Need to disable SIP-ALG More than 1000 SIP-ALG Disable by Default 255 Can not confirmed port forward table in WEB screen. SIP-ALG Disable by Default More than 1000 UDP123 Port of NTP can t forward from outside. Need to disable SIP-ALG More than 1000 Not accept TCP 443, HTS HTTPs port should be change to 1024 or more. (*2) 256 Not accept TCP 443, HTS HTTPs port should be change to 1024 or more. Need to disable SIP-ALG More than 1000 Model RB750GL Also confirmed Need to disable SIP-ALG 64 Need to disable NAT Boost Need to disable SIP-ALG 29 SIP-ALG Disable by Default *1 Maximum port forward entry numbers confirmed by UPnP test tool. *2 We found an unstable behavior while our Lab testing, sometime second remote terminal rejected register by the router, sometime HTS couldn t get router WAN IP address. 1

3 2. UPnP function of HTS HTS is support UPnP functions by the Version or later. Port forwarding of SIP, RTP and Web-MC ports are automatically add into the router which is support UPnP functions, when you Enable the SIP trunk, the Remote Extension and Remote Web-MC on the HTS. Remote Web-MC available :443 Router WAN IP address : 443 One SIP trunk available : 5060 Router WAN IP address : : Router WAN IP address : : Router WAN IP address : One Remote Extension available at the same unit : Router WAN IP address : : Router WAN IP address : One more Remote Extension add to the same unit : Router WAN IP address : : Router WAN IP address : One Voice call occupied two ports for both the even port of RTP and odd port of RTCP. One Video call occupied four ports. 2

3. How to activate an UPnP functions PBX Configuration -> 7.SIP Extension Property NAT Traversal : UPnP@ UPnP@ can get public IP address at Router WAN side.

4 3. How to activate an UPnP functions PBX Configuration -> 7.SIP Extension Property NAT Traversal : UPnP@ UPnP@ can get public IP address at Router WAN side. UPnP@-Port Forward for Remote WebMC (HTTPs) : Enable xxx.xxx UPnP@-Port Forward for Remote SIP Extension : Enable UPnP@-Port Forward for SIP Trunk : Enable 3

30443) How to enable the Remote Web Maintenance Remote Web Maintenance : Check = Enable Web Maintenance

5 3. HTS UPnP active port confirmation It should be change to another port number except 443 like below when UPnP can t make port forward to TCP443 port. (e.g.30443) How to enable the Remote Web Maintenance Remote Web Maintenance : Check = Enable Web Maintenance Password for Remote Access : Click = Edit (Enter new password) Click = Apply *New Password (must be 8-16 characters including numeric character and alpha character) 4

xxx.xxx.xxx is public WAN IP address of near end router at HTS site.

6 3. HTS UPnP active port confirmation How to connect to Web Maintenance console from remote site Open web browser -> Enter URL xxx.xxx.xxx.xxx:30443 xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx is public WAN IP address of near end router at HTS site. You can confirm the UPnP status after working the UPnP port forward functions like below. 5

7 4. BELKIN F9K1004 Advanced -> UPnP -> Both check box already check by default It doesn t have conformation method for port forwarding table by UPnP. Model : Wireless N Router with VPN Hardware version Application version

8 4. BELKIN F9K1004 Note: BELIKN F9K1004 UPnP function has a limitation which is maximum forwarding ports up to 7 ports by UPnP functions. Https TCP 443 SIP UDP 5060 RTP UDP RTP UDP RTP UDP RTP UDP RTP UDP

9 5. D-Link DIR-825 Firmware Version : 2.10NA UPnP Default = Enable ADVANCED-> ADVANCED NETWORK -> UPnP -> Enable UPnP -> Check (Default) It doesn t have conformation method for port forwarding table by UPnP. 8

10 5. D-Link DIR-825 ADVANCED-> FIREWALL SETTING -> APPLICATION LEVEL GATEWAY(ALG) CONFIGURATION -> SIP-ALG= Uncheck SIP 9

11 6. D-Link DSR-500 UPnP Default = OFF Network -> LAN -> UPnP -> Activate UPnP = ON Firmware Version : 2.02BD02C_WW 10

12 6. D-Link DSR-500 Activate UPnP = ON (Default=Off) You can confirm UPnP Port Map list by click on the refresh icon. Note: DSR-500 UPnP function is not able to accept TCP 443 port forwarding therefore HTS have to change a https web server port to different port like in HTS Application server settings. 11

13 6. D-Link DSR-500 Security -> Firewall - > ALGs SIP ALG = Off (Default) 12

7. Linksys E1200 Administration -> Management -> UPnP -> Enabled (Default) Firmware Version: FW:2.0.09.

14 7. Linksys E1200 Administration -> Management -> UPnP -> Enabled (Default) Firmware Version: FW: It doesn t have conformation method for port forwarding table by UPnP. SIP-ALG Disable by Default 13

15 8. NETGEAR WNDR4300 ADVANCED -> Advanced Setup -> UPnP -> Check Turn UPnP On(Default) Apply (You can conform the port forwarding table by UPnP.) Firmware Version: FW:

16 8. NETGEAR WNDR4300 ADVANCED -> Setup -> WAN Setup -> Check Disable SIP ALG -> Apply SIP ALG is Enable by default. 15

9. Xiaomi Mi Wifi Mini 高级设置 -> 其他 -> UPnP 状态 -> ON (Default) Firmware Version: FW:2.18.15 You can confirm UPnP Port Map list on the same screen.

17 9. Xiaomi Mi Wifi Mini 高级设置 -> 其他 -> UPnP 状态 -> ON (Default) Firmware Version: FW: You can confirm UPnP Port Map list on the same screen. Note: Xiaomi UPnP function is not able to accept TCP 443 port forwarding therefore HTS have to change https web server port to different port like in HTS Application server settings. 16

18 10. ASUS RT-AC68U WAN -> Internet Connection -> Enable UPnP = Yes (Default) Firmware Version: _

Note: ASUS UPnP function is not able to accept TCP 443 port forwarding

19 10. ASUS RT-AC68U Advanced Settings-> System Log -> Port Forwarding (Refresh) You can confirm the Port Forwarding table. Note: ASUS UPnP function is not able to accept TCP 443 port forwarding therefore HTS have to change https web server port to different port like in HTS Application server settings. 18

10. ASUS RT-AC68U Disable the SIP-ALG function The RT-AC68U is enabled ALG functions by default settings, hence you should be disabled it according

20 10. ASUS RT-AC68U Disable the SIP-ALG function The RT-AC68U is enabled ALG functions by default settings, hence you should be disabled it according to SIP Passthrough. 1) Select WAN from the Advanced Settings 2) Click NAT Passthrough 3) Select SIP Passthrough Mode : Disable 4) Click Apply

21 10. ASUS RT-AC68U Disable the SIP-ALG function Disable SIP-ALG functions is also need to enter the CLI commands by telnet connection as below step. 2 Step1 1) Select Administration 2) Select System 3) Check Enable Telnet : Yes

22 10. ASUS RT-AC68U Disable the SIP-ALG function Step2 Enter the SIP-ALG disable command by CLI mode. Open the terminal software like a Tera Term. 1) Display login prompt 2) Enter login ID (Same as WEB login) : admin 3) Enter password (same as WEB login) : pana0101 4) Display : admin@rt-ac68u:/tmp/home/root# 5) Enter : nvram get fw_pt_sip 6) Display : 1 7) Enter : nvram set fw_pt_sip=0 8) Enter : nvram commit 9) Enter : nvram get fw_pt_sip 10) Display : 0 11) Enter : reboot The router will booting up after few minutes. RT-AC68U login: admin Password: pana0101 admin@rt-ac68u:/tmp/home/root# admin@rt-ac68u:/tmp/home/root# nvram get fw_pt_sip 1 admin@rt-ac68u:/tmp/home/root# nvram set fw_pt_sip=0 admin@rt-ac68u:/tmp/home/root# nvram commit admin@rt-ac68u:/tmp/home/root# nvram get fw_pt_sip 0 admin@rt-ac68u:/tmp/home/root# reboot 21

23 11. Mikro Tik RB750 UPnP Enable IP -> UPnP Enable : Check Allow To Disable External Interface : Check Show Dummy Rule = Check Click Apply Click Interface Model : Router BOARD 750 r2 Factory Firmware Current Firmware 3.33 Upgrade Firmware 3.29 Package Version Model : Router BOARD 750GL Factory Firmware Current Firmware 3.33 Upgrade Firmware 3.33 Package Version

24 11. Mikro Tik RB750 Enabled = check Interface= ether1(wan) Type= external Click Apply Enabled = check Interface= ether2(lan) Type= internal Click Apply Click OK 23

25 11. Mikro Tik RB750 IP -> Firewall -> NAT You can confirm current NAT table. 24

26 11. Mikro Tik RB750 SIP-ALG Disable IP -> Firewall -> Service Ports -> SIP Enable (Default) : Click D (change to E) You should disable SIP ALG as below 25

27 12. TP-LINK AC-1750 UPnP Enable Advanced -> NAT Forwarding -> UPnP -> UPnP = ON (Default) Firmware Version : Build rel.37754(4a50) You can confirm the Port Forwarding table. 26

28 12. TP-LINK AC-1750 SIP-ALG Disable (Default=Enable) Advanced -> NAT Forwarding -> -ALG - > Enable SIP ALG : uncheck(disable) 27

29 12. TP-LINK AC-1750 NAT Boost Disable (Default=Enable) Advanced -> System Tools-> System Parameters - > NAT Boost : uncheck(disable) 28

30 13. Dray Tek Vigor 2860 UPnP Enable Applications -> UPnP -> Enable UPnP Service= Check (Default : Uncheck) 29

31 13. Dray Tek Vigor 2860 Diagnostics -> NAT Session Table You can confirm current NAT Active Session Table which are not all forwarded ports by click Refresh. 30

32 13. Dray Tek Vigor 2860 SIP-ALG NAT -> ALG -> Uncheck Enable ALG (Default) 31

33 32

How to open ports in the DSL router firmware version 2.xx and above

How to open ports in the DSL router firmware version 2.xx and above This example shows how to open port 3389 (which is used by Remote Desktop service) in the DSL router running firmware version 2.xx or