ISO/IEC 29341-24-11
Information technology - UPnP Device Architecture - Part 24-11: Internet gateway device control protocol - Level 2 - Wide area network internet protocol v6 - Firewall control service
Organization: | ISO |
Publication Date: | 1 September 2017 |
Status: | active |
Page Count: | 46 |
ICS Code (Interface and interconnection equipment): | 35.200 |
scope:
This document specifies the characteristics of the UPnP networked service named WANIPv6FirewallContr
This service supports the management IPv6 firewall pinholes in Internet gateway devices independent of the WAN access type (PPP, DHCP, …). It also supports access control to restrict operations to authorized control points and users. It enables UPnP control points to:
• create and delete pinholes of limited duration that allow external communication from the WAN side of the gateway to reach devices on the LAN side
• determine operational status of a pinhole
This service does not support:
• retrieving detailed information about pinholes (such as associated external port or remaining lease duration)
• outbound packet filtering
• modification of security policies of a gateway device