BS ISO/IEC 29341-24-11:2017 - Page 2

Information technology. UPnP Device Architecture. Internet gateway device control protocol. Level 2. Wide area network internet protocol v6. Firewall control service | Status: Current, Under review

1 Scope This document specifies the characteristics of the UPnP networked service named WANIPv6FirewallControl, version 1. This service definition is compliant with UPnP Service Architecture 1.0[1]. This service supports the management IPv6 firewall pinholes in Internet gateway devices independent of the WAN access type (PPP, DHCP, …). It also supports access control to restrict operations to authorized control points and users. It enables UPnP control points to:

• • create and delete pinholes of limited duration that allow external communication from the WAN side of the gateway to reach devices on the LAN side
• • determine operational status of a pinhole

This service does not support:

• • retrieving detailed information about pinholes (such as associated external port or remaining lease duration)
• • outbound packet filtering
• • modification of security policies of a gateway device