Radio Registration Unsuccessful, could not access SmartLink Server Sunday Afternoon Question

  • 1
  • Question
  • Updated 2 years ago
  • Answered
Here I am..

With my Sunday Afternoon question, after many tries.....
My Flex 6600 connected directly to my PC through Ethernet cable
Router  UPnP open....
I wonder.....what am I doing wrong here

George, YV5WZ / PY3ZZZ
 
Photo of YV5WZ

YV5WZ

  • 419 Posts
  • 50 Reply Likes

Posted 2 years ago

  • 1
Photo of Mark Thomas

Mark Thomas

  • 52 Posts
  • 16 Reply Likes
Official Response
George,
The Flex 6600 needs to be connected either directly to your Internet router, or via a network switch/hub to your Internet router. Connecting the Flex to the PC and the PC to the Internet router (presumably via WiFi or another interface) isn't going to do the trick. -Mark KC3DRE
Photo of YV5WZ

YV5WZ

  • 419 Posts
  • 50 Reply Likes
Thanks Mark

Great !...I will connect it to a Bridge....

Thanks a lot!!

George
Photo of Stephen Hawkins NG0G

Stephen Hawkins NG0G

  • 110 Posts
  • 17 Reply Likes
Be very careful with UPnP.  It is for LAN use, not WAN.  It is not secure.  Some routers will let you turn in on, on the WAN side of the router.  Not a good idea.
Photo of Ed W2MKM

Ed W2MKM

  • 40 Posts
  • 3 Reply Likes
Stephen, please tell me a little more on the above .. I thought I might open UPnP at the primary cable modem/router (provided by Comcast) and that would pass it along down the line to the secondary router/wifi hub (Cisco E4200 V2) .. though no joy .. you recommending that I now turn off that UPnP at the primary Comcast router from a security standpoint .. I believe it came with that setting OFF .. 
Photo of Stephen Hawkins NG0G

Stephen Hawkins NG0G

  • 110 Posts
  • 17 Reply Likes
UPnP was designed for use inside your network, ie, on the LAN side of the router to let things like printers be easily discoverable.  It is not secure and should not be turned on, on the WAN side of the router.  See: http://www.kb.cert.org/vuls/id/922681 for more details.  Even on the LAN side of the router I would turn it on if, and only if, you find a case where you absolutely need it to talk to something that is inside your network, and you are absolutely sure that none of the devices inside your network harbor malware.  Also see:https://www.kb.cert.org/vuls/id/357851
  
(Edited)
Photo of Tim - W4TME

Tim - W4TME, Customer Experience Manager

  • 9198 Posts
  • 3558 Reply Likes
This is not true.  uPnP is implemented on Internet routers.  You do not need automatic port forwarding on a local LAN.

And it is as secure as any other port forwarding process as long as you know what applications or devices are utilizing uPnP.  If you are concerned, then use manual port forwarding.
(Edited)
Photo of Ed W2MKM

Ed W2MKM

  • 40 Posts
  • 3 Reply Likes
Appreciate the POV Stephen, Thanks ... given that UPnP is the proscribed method/protocol for enabling SmartLink .. do we have much choice?
Photo of Stephen Hawkins NG0G

Stephen Hawkins NG0G

  • 110 Posts
  • 17 Reply Likes
It probably won't be a problem.  If your computer is clean and both the computer and the Flex are inside your network, you are safe unless you have one of these routers https://www.kb.cert.org/vuls/id/357851
The big problem is if you turn on UPnP on the outward faceing side of the router.  I can't go much further then that on SmartLInk since I am a Unix / Linux guy.  I have not used windows since windows 98.  You should be able to see in the router setup which side of the router has UPnP turned on.  I hope I have helped.
(Edited)
Photo of Tim - W4TME

Tim - W4TME, Customer Experience Manager

  • 9198 Posts
  • 3558 Reply Likes
This CERT note was from 7 years ago.  The vulnerabilities have been addressed.
Photo of Stephen Hawkins NG0G

Stephen Hawkins NG0G

  • 110 Posts
  • 17 Reply Likes
Duly noted.  I still would not trust UPnP on the WAN side of the firewall.  Thats all I'm saying.  I checked with the security guy at the company I retired from and he told me he does not trust UPnP yet and would not allow it on his home network.  I don't either.