Enabling UPnP requires turning on Network Discovery in Windows and toggling UPnP on inside your router’s administration settings.
Universal Plug and Play, or UPnP, lets devices on your home network automatically open the ports they need. A game console can tell the router “I need port 3074 open” without you manually entering forwarding rules. For the system to work, you need to enable UPnP in two separate places: your Windows operating system and your router. Enable one without the other, and it won’t work.
What Exactly Is UPnP and Why Should You Enable It?
UPnP is a network protocol that allows devices to discover each other and establish services automatically. When a device like an Xbox or a smart camera needs to accept incoming connections from the internet, UPnP dynamically opens the path through the router’s firewall. Disabling it blocks this automatic port forwarding, which breaks some online multiplayer games, printer discovery, and remote home security camera access. If you rely on any of those features, leaving UPnP disabled means you’ll need to set up manual port forwarding for every single device or service.
Enabling UPnP on Windows: The OS-Level Step
Windows handles UPnP through a service called Network Discovery. If your PC’s network profile is set to Public, the firewall blocks UPnP traffic completely. You must switch it to Private and enable the feature.
Enable UPnP via Windows Settings:
- Open Settings and go to Network & internet.
- Select Advanced network settings.
- Click Advanced sharing settings.
- Under Network Discovery, choose Turn on network discovery.
- Confirm your network profile is set to Private, not Public.
- Click Save changes.
If you prefer the older Control Panel route: open Control Panel > Network and Internet > Network and Sharing Center > Change advanced sharing settings.
How To Enable UPnP on Your Router
This is where the actual port forwarding permission happens. The exact menu label varies by manufacturer, but the logic is the same across every model.
General Router Setup:
- Connect your computer to the router via Wi-Fi or Ethernet.
- Open a browser and enter the router’s IP address (most commonly
192.168.1.1or192.168.0.1). - Log in with the admin username and password (often printed on a sticker on the router itself).
- Look for a UPnP or NAT Forwarding section in the advanced settings.
- Toggle UPnP to On and save the change.
- Reboot the router if the setting doesn’t take effect immediately.
| Router Brand | Admin Panel Location | UPnP Setting Path |
|---|---|---|
| TP-Link | 192.168.1.1 or tplinkwifi.net |
Advanced > NAT Forwarding > UPnP |
| Netgear | 192.168.1.1 |
Administration > UPnP |
| Linksys | 192.168.1.1 |
Administration > UPnP |
| Deco (Mesh) | Deco App | More > Advanced > NAT Forwarding > UPnP |
| Google Fiber | 192.168.1.1 |
Network > Advanced > Port Forwarding > UPnP |
| ASUS | 192.168.1.1 |
WAN > Internet Connection > Enable UPnP |
| Xfinity (Comcast) | 10.0.0.1 |
Gateway > Connection > UPnP |
Why Enable It on Both Windows and the Router?
A common mistake is toggling UPnP in the router and assuming the job is done. Windows has its own firewall that enforces Network Discovery separately. If your PC is on a Public network—which happens often with Ethernet connections—the firewall blocks UPnP requests even if the router is open. The router controls the network door, but Windows decides whether your PC is allowed to use it.
The Security Question Everyone Should Know
UPnP is a convenience feature, but security researchers at UpGuard and SecurityScorecard have flagged it as a real risk. Because UPnP allows internal devices to open ports without user verification, a compromised smart bulb or webcam could tell the router to open a path for an attacker.
Best practice: Enable UPnP only when you need it—set it up for a gaming session or a printer install, then disable it. If you need permanent access to a device, set up a manual port forward that you control explicitly. Many modern routers, including TP-Link models, ship with UPnP disabled by default for exactly this reason.
| Problem | Likely Cause | The Fix |
|---|---|---|
| Xbox says “UPnP Not Successful” | UPnP off on router or Windows set to Public network | Enable UPnP in router; switch Windows network to Private |
| App can’t connect after enabling UPnP | Router needs a reboot to apply the new setting | Unplug the router for 30 seconds and plug it back in |
| UPnP option missing from router menu | Firmware is outdated or the model blocks it | Update firmware; if absent, use manual port forwarding |
| “Network Discovery” keeps turning back off | Windows Firewall or Group Policy overrides it | Run services.msc and start “SSDP Discovery” and “UPnP Device Host” |
| Multiple devices can’t negotiate ports | Several apps request the same port; UPnP can’t map it | Close conflicting apps or set manual port ranges per device |
How To Confirm UPnP Is Working
The quickest test is an Xbox, PlayStation, or PC game that relies on UPnP. On Xbox, go to Settings > General > Network settings > Test NAT type. If it says “Open” or “UPnP Successful,” the protocol is live. On your router admin dashboard, you should also see a table of active UPnP mappings under the same menu where you enabled the feature.
If the test fails, run through the checklist: confirm the Windows network is Private, reboot the router, and verify you saved the UPnP setting in the correct admin section.
References & Sources
- Microsoft Q&A. “How to enable upnp” Details the Windows Network Discovery path.
- TP-Link Support. “UPnP on TP-Link Routers and Deco” Official configuration steps for TP-Link hardware.
- Open Connectivity Foundation. “UPnP Device Architecture 2.0” Current specification released April 2020.
- UpGuard. “What is UPnP? Yes, It’s Still Dangerous in 2026” Analysis of CVE listings and security risks.
- SecurityScorecard. “What Is UPnP and Why Is It a Security Risk?” Overview of UPnP vulnerability landscape.
- Proton VPN. “What is UPnP and why should you disable it?” Brand-specific router settings and security advice.
- Xbox Support. “UPnP Not Successful” Troubleshooting strict NAT on Xbox consoles.
- Wikipedia. “Universal Plug and Play” Device applicable list and protocol overview.
