Enable Universal Plug and Play by turning on Network Discovery in Windows and enabling the UPnP toggle in your router’s admin interface. Both steps are necessary for the protocol to work.
Setting UPnP loose on your network takes exactly two actions: unlocking Network Discovery on Windows and flipping the UPnP switch inside your router’s admin panel. Skip either one and nothing happens. This guide walks through both sides, covers the major router brands, and flags the settings that quietly break UPnP without telling you.
UPnP is the zero-configuration protocol that lets devices on your local network find each other and open the ports they need — no manual forwarding, no IT background required. That convenience makes it the standard for gaming consoles, media servers, and smart home gear. Enabling it takes about three minutes once you know where the switches live.
What Is UPnP And Why Would You Enable It?
Universal Plug and Play is a set of networking protocols built on TCP/IP, HTTP, XML, and SOAP that lets devices automatically discover and communicate without human configuration. A PlayStation talks to a router; a media server announces itself to the living room TV — no one types an IP address.
Gamers enable UPnP to resolve “UPnP Not Successful” errors on Xbox and PlayStation, which locks NAT to Strict or Moderate and breaks multiplayer matchmaking. Media streamers enable it so Plex, Jellyfin, or DLNA servers show up automatically. Anyone tired of manually forwarding ports for every new device enables it to save time. On the flip side: UPnP requires zero authentication and is a known security concern — more on that later.
Step 1: Enable Network Discovery In Windows
Windows blocks UPnP traffic by default unless Network Discovery is turned on. Flip this setting first — it’s the same toggle regardless of whether you’re on Windows 7, 8, 10, or 11. Microsoft’s official guidance confirms this as the starting point for enabling UPnP on any supported version of Windows.
- Open Control Panel.
- Click Network and Internet > Network and Sharing Center.
- In the left pane, click Change advanced sharing settings.
- Under Network Discovery, select Turn on network discovery.
- Click Save changes.
The critical catch most people miss: your active network profile must be set to Private, not Public. Public profiles block local UPnP traffic through Windows Firewall. To check or change it, open Settings > Network & Internet > Wi-Fi (or Ethernet) and confirm the network type is Private.
Once Network Discovery is on and the profile is Private, your PC can discover UPnP devices on the local network and be discovered by them. You’ll see media servers and network devices appear in File Explorer under Network.
Enabling UPnP On Your Router: The Exact Menu Path
This is the second half of the setup, and the half most people skip or miss because router interfaces differ by brand. The general process is the same across models: log into the admin panel, find the UPnP section, and toggle it on.
How To Log Into Your Router
Open Command Prompt and run ipconfig. Look for the Default Gateway address — typically 192.168.1.1 or 192.168.0.1. Type that IP into a browser’s address bar. Log in with the admin credentials printed on the router’s sticker or set when the network was first configured.
Finding UPnP By Brand
Router manufacturers bury the UPnP toggle in different menus, but the pattern is consistent once you know where to look.
TP-Link (standard routers): Advanced > NAT Forwarding > UPnP. Access via http://tplinkwifi.net for Wi-Fi routers or http://tplinkmodem.net for DSL and 4G/5G modem routers.
TP-Link Deco (MESH systems): Open the Deco app, tap More > Advanced > NAT Forwarding > UPnP.
Linksys: Administration tab > UPnP > toggle ON. Save Settings.
Netgear: Administration tab > UPnP > toggle ON. Apply, then reboot: Maintenance > Reboot.
Fritz!Box: Home page > Home Network > Network > Network Settings > Check Transmit status information over UPnP. Then, for each device: Internet > Permit Access > Port Sharing > tick Independent Port Sharing for the specific device.
After saving the change and rebooting the router, the UPnP section shows a status like “UPnP is enabled” or a green indicator. On Windows, check the Network folder in File Explorer — devices that broadcast via UPnP should appear within a minute or two.
| Router Brand | UPnP Settings Location | Reboot Required? |
|---|---|---|
| TP-Link (standard) | Advanced > NAT Forwarding > UPnP | Yes |
| TP-Link Deco (MESH) | Deco app > More > Advanced > NAT Forwarding > UPnP | Yes |
| Linksys | Administration tab > UPnP | Yes |
| Netgear | Administration tab > UPnP | Yes |
| Fritz!Box | Home Network > Network > Network Settings (global); Internet > Permit Access > Port Sharing (per-device) | Yes |
| ISP TP-Link (E/H models) | Advanced > NAT Forwarding > UPnP (via tplinkwifi.net) | Yes |
| ISP TP-Link (V/N/M models) | Advanced > NAT Forwarding > UPnP (via tplinkmodem.net) | Yes |
How To Verify UPnP Is Working
The fastest check is inside your router’s admin panel. Most routers show UPnP status on the same page where you enabled it — a table listing active UPnP entries with device names and port mappings means it’s live.
On Windows, open the Network folder in File Explorer with Network Discovery enabled. Any UPnP device on the LAN — media servers, network storage, smart TVs — should populate automatically.
On Xbox, go to Settings > General > Network settings > Test NAT type. A result of “Open” with no “UPnP Not Successful” message confirms everything is configured correctly.
What About The UPnP Device Host Service?
Windows runs a background service called the UPnP Device Host (upnphost) that handles discovery and device registration. It should already be set to Automatic and Running on any default Windows installation, but if Network Discovery is on and devices still don’t show up, check here.
Press Win+R, type services.msc, and press Enter. Scroll to UPnP Device Host. If the status is empty, right-click it and select Start. Set the startup type to Automatic if it isn’t already. Some enterprise security benchmarks (CIS Level 1) recommend disabling this service — on a personal network used for gaming or streaming, leave it running.
Common Mistakes That Break UPnP
UPnP only works when every gate is open. Here are the ones people miss most.
Network profile set to Public. The single most common cause. Windows Firewall blocks UPnP traffic on Public networks. Change it to Private.
Assuming the router has UPnP enabled by default. Many modern TP-Link and Netgear routers ship with UPnP disabled starting in 2024. You must toggle it on.
Skipping the router reboot. Most routers cache the old configuration until a restart applies the change. Save, then reboot.
Windows Firewall blocking the ports. UPnP on Windows relies on Port 1999/UDP and Port 2869/TCP. If a third-party firewall or corporate security policy blocks those, UPnP will fail regardless of the router setting.
Fritz!Box per-device requirement. Flipping the global UPnP switch isn’t enough on Fritz!Box routers. Each device needs Independent Port Sharing enabled separately.
| Mistake | What Happens | Fix |
|---|---|---|
| Network profile is Public | Windows blocks all UPnP traffic | Switch to Private in Settings > Network & Internet |
| Router UPnP disabled by default | UPnP toggle is OFF in the admin panel | Enable it via Advanced > NAT Forwarding > UPnP |
| No router reboot after enabling | Changes haven’t applied | Reboot the router from the admin panel |
| Port 1999/UDP or 2869/TCP blocked | Firewall stops UPnP traffic at the OS level | Check Windows Firewall and any third-party firewall rules |
| Fritz!Box: global enable without per-device permission | UPnP appears on but devices can’t open ports | Enable Independent Port Sharing for each device |
Is UPnP Safe To Use In 2026?
UPnP has zero authentication built in. Any device connected to your network — including one infected with malware — can request a port be opened without approval. That makes it a genuine attack surface, and security advisories from UpGuard and others classify it as dangerous when left on unnecessarily.
The safe approach: enable UPnP only when you actively need it for gaming, streaming, or device discovery on the LAN. Disable it when the session ends. For consoles, UPnP is the cleanest way to achieve an Open NAT, but the alternative is manual port forwarding, which is secure but tedious.
If you don’t game, don’t run a media server, and don’t have smart home gear that relies on local discovery, leave UPnP off. The zero-authentication risk isn’t worth the convenience. For most home networks, the best compromise is to turn UPnP on when you need it — for a game session or new device setup — and turn it back off when you’re done.
Final Setup Checklist
Walk through these steps in order, and UPnP will be active within five minutes.
- Confirm Windows network profile is set to Private.
- Turn on Network Discovery in Control Panel > Advanced sharing settings.
- Log into your router admin panel.
- Find the UPnP toggle in the brand-specific location.
- Set it to Enabled and save the change.
- Reboot the router from the admin panel.
- Verify success via the router’s status page or an Xbox NAT test.
References & Sources
- Microsoft Learn. “How to enable UPnP.” Official Microsoft guidance on enabling UPnP via Network Discovery and Network Location in Windows.
- TP-Link Support. “How to enable UPnP on TP-Link routers.” Router-specific instructions for standard TP-Link, Deco, and ISP-customized models.
- UpGuard. “What is UPnP? Security risks and how to disable it.” Security analysis of UPnP’s zero-authentication risks and port exposure.
- Surfshark. “What is UPnP (Universal Plug and Play)?” General guide on UPnP functionality and router access steps.
- Xbox Support. “Fix ‘UPnP Not Successful’ errors.” Xbox NAT type testing and UPnP troubleshooting for Open NAT.
- Proton VPN. “What is UPnP?” Router-specific UPnP settings for Linksys, Netgear, Fritz!Box, and TP-Link.
