UPNP not creating redirects

OpenWRT 18.06.2 on x86_64 mini-pc

Two Windows 10 PC's having connectivity issues with Apex Legends. Both machines can play Battlefield and other EA Origin titles without issue.

Considering UPNP to see the ports used and possibly create port forwards manually or stick with UPNP but limit its usage to only the two PC's playing Apex (all other devices would be blocked).

So far I both Win 10 PC's are sending SSDP discovery packets and responses with IPv4

_daemon.info miniupnpd[8386]: SSDP M-SEARCH from [::xxxx:192.168.1.194]:55107 ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1_
_daemon.debug miniupnpd[8386]: SendSSDPResponse(): 0 bytes to [::xxxx:192.168.1.194]:55107 ST: HTTP/1.1 200 OK_

I don't see the same with IPv6

Here is my config file

root@OpenWrt:~# cat /etc/config/upnpd

config perm_rule
        option action 'allow'
        option ext_ports '1024-65535'
        option int_ports '1024-65535'
        option comment 'PC-1'
        option int_addr '192.168.1.194/32'

config perm_rule
        option comment 'PC-2'
        option ext_ports '1024-65535'
        option int_ports '1024-65535'
        option action 'allow'
        option int_addr '192.168.1.196/32'

config perm_rule
        option action 'deny'
        option ext_ports '0-65535'
        option int_ports '0-65535'
        option comment 'Default deny'
        option int_addr '192.168.1.0/24'

config upnpd 'config'
        option download '1024'
        option upload '512'
        option internal_iface 'lan'
        option port '5000'
        option upnp_lease_file '/var/run/miniupnpd.leases'
        option enabled '1'
        option log_output '1'
        option uuid 'xxxx'

Any ideas why the port redirects are never created?

Because in IPv6 you don't have NAT.
You just need to create rules in the firewall to allow incoming traffic from wan to lan towards the IPv6 of your PC and the ports of the game.

1 Like

I apologize for not being clear...

I am trying to understand why UPNP is not creating IPv4 redirects. I am not concerned about IPv6 for the reasons you mentioned.

I hope someone can see something in my configuration file that may be off or recommend a step a may have missed

Remove the /32 from the internal addresses.
That should do the trick.
However be aware of the security risks.