ISO/IEC 29341-24-11:2017 PDF

Information technology — UPnP Device Architecture — Part 24-11: Internet gateway device control protocol — Level 2 — Wide area network internet protocol v6 — Firewall control service

First page of standard ISO/IEC 29341-24-11:2017

Open preview (PDF)

Title (English):

ISO/IEC 29341-24-11:2017

Information technology — UPnP Device Architecture — Part 24-11: Internet gateway device control protocol — Level 2 — Wide area network internet protocol v6 — Firewall control service

Document status:: Active
Format:: Electronic (PDF)
Number of pages:: 31
Publication date:: September 13, 2017
Edition:: ISO/IEC IS 29341 edition 1 version 1
ICS:: 35.200

Delivery type:

Full version25 €Read online 24h10 €Read online 72h15 €

Document language:

enru

Delivery time:Immediate download

Price:25 €

Description (English):

ISO/IEC 29341-24-11:2017 specifies the characteristics of the UPnP networked service named WANIPv6FirewallControl, version 1. This service definition is compliant with UPnP Service Architecture 1.0 [1]. This service supports the management IPv6 firewall pinholes in Internet gateway devices independent of the WAN access type (PPP, DHCP, ?). It also supports access control to restrict operations to authorized control points and users. It enables UPnP control points to: - create and delete pinholes of limited duration that allow external communication from the WAN side of the gateway to reach devices on the LAN side - determine operational status of a pinhole This service does not support: - retrieving detailed information about pinholes (such as associated external port or remaining lease duration) - outbound packet filtering - modification of security policies of a gateway device

Technical details

Technical committee: ISO/IEC JTC 1 - Information technology
SKU: ISO/IEC 29341-24-11:2017

Abstract

Overview

ISO/IEC 29341-24-11:2017 specifies the UPnP service definition WANIPv6FirewallControl (version 1) for Internet Gateway Devices (IGDs). Aligned with UPnP Service Architecture 1.0, this standard defines how UPnP control points manage IPv6 firewall pinholes on a gateway so that selected external (WAN) traffic can reach hosts on the LAN. The document covers service types, state variables, actions, eventing, behavior, a theory of operation and security considerations.

Key technical topics and requirements

Service model and state variables: Defines variables such as FirewallEnabled, InboundPinholeAllowed and types for IPv6 addresses, protocols, lease times and unique IDs used to identify pinholes.
Actions and control operations: Includes actions like GetFirewallStatus(), GetOutboundPinholeTimeout(), AddPinhole(), UpdatePinhole(), DeletePinhole(), GetPinholePackets() and CheckPinholeWorking() to create, refresh, query and remove pinholes.
Pinhole lifecycle and timing: Specifies creation and limited-duration lease semantics for inbound/outbound pinholes and mechanisms to refresh or delete them.
Eventing and moderation: Defines which state changes are evented to subscribed control points (e.g., firewall enablement and pinhole allowance).
Access control and security: Requires mechanisms to restrict operations to authorized control points and users; Annex B provides security considerations and recommended controls.
Scope limitations: Explicitly does not support detailed retrieval of pinhole attributes (external port or remaining lease duration), outbound packet filtering, or modification of a gateway’s security policies.

Practical applications and target users

This standard is intended for:

Gateway and router manufacturers implementing UPnP IGD IPv6 functionality in firmware.
Firmware and embedded software engineers who add automated port/pinhole control to IPv6-capable gateways.
Application developers and UPnP control point vendors (e.g., remote-management apps, P2P, VoIP, gaming services) that require dynamic inbound access through an IPv6 firewall.
System integrators and network architects designing home, SOHO or small-office networks that rely on UPnP for NAT/firewall traversal.
Security auditors and QA teams validating compliant behavior and access-control enforcement.

Benefits include automated, standardized management of IPv6 firewall pinholes (reducing manual configuration), predictable pinhole lifecycle management, and a common API for control points to check pinhole status.

Related standards

ISO/IEC 29341 (UPnP Device Architecture) core parts and service definitions (general UPnP architecture).
UPnP Service Architecture 1.0 (referenced normative framework for service definitions).

Keywords: UPnP, IPv6, WAN, firewall control, Internet gateway device, pinhole, ISO/IEC 29341, UPnP Device Architecture, gateway firmware, control point, access control.

Related standards

Mentioned in the description and other ISO standards

Abstract

Overview

Key technical topics and requirements

Service model and state variables: Defines variables such as FirewallEnabled, InboundPinholeAllowed and types for IPv6 addresses, protocols, lease times and unique IDs used to identify pinholes.
Actions and control operations: Includes actions like GetFirewallStatus(), GetOutboundPinholeTimeout(), AddPinhole(), UpdatePinhole(), DeletePinhole(), GetPinholePackets() and CheckPinholeWorking() to create, refresh, query and remove pinholes.
Pinhole lifecycle and timing: Specifies creation and limited-duration lease semantics for inbound/outbound pinholes and mechanisms to refresh or delete them.
Eventing and moderation: Defines which state changes are evented to subscribed control points (e.g., firewall enablement and pinhole allowance).
Access control and security: Requires mechanisms to restrict operations to authorized control points and users; Annex B provides security considerations and recommended controls.
Scope limitations: Explicitly does not support detailed retrieval of pinhole attributes (external port or remaining lease duration), outbound packet filtering, or modification of a gateway’s security policies.

Practical applications and target users

This standard is intended for:

Gateway and router manufacturers implementing UPnP IGD IPv6 functionality in firmware.
Firmware and embedded software engineers who add automated port/pinhole control to IPv6-capable gateways.
Application developers and UPnP control point vendors (e.g., remote-management apps, P2P, VoIP, gaming services) that require dynamic inbound access through an IPv6 firewall.
System integrators and network architects designing home, SOHO or small-office networks that rely on UPnP for NAT/firewall traversal.
Security auditors and QA teams validating compliant behavior and access-control enforcement.

Related standards

ISO/IEC 29341 (UPnP Device Architecture) core parts and service definitions (general UPnP architecture).
UPnP Service Architecture 1.0 (referenced normative framework for service definitions).

Keywords: UPnP, IPv6, WAN, firewall control, Internet gateway device, pinhole, ISO/IEC 29341, UPnP Device Architecture, gateway firmware, control point, access control.

ISO/IEC 29341-24-11:2017 PDF

Technical details

Abstract

Overview

Key technical topics and requirements

Practical applications and target users

Related standards

Related standards

Abstract

Overview

Key technical topics and requirements

Practical applications and target users

Related standards

Related standards

Information technology — UPnP Device Architecture — Part 4-13: Audio Video Device Control Protocol - Level 2…

Systems and software engineering — Software life cycle processes

Asset management — Vocabulary, overview and principles

Asset management — Asset management system — Requirements

Information technology — Radio frequency identification device conformance test methods — Part 2: Test method…

Information technology — Multimedia framework (MPEG-21) — Part 22: User Description

Milk — Determination of the lactoperoxidase activity — Photometric method (Reference method)

Carbonaceous materials for the production of aluminium — Cold and tepid ramming pastes — Expansion/shrinkage…