IoT Hue Lightbulb needs UPnP???

[sfx2000]

Some additional insight here...

https://community.spiceworks.com/to...orts-and-network-setup-for-philips-hue-bridge

1) The Hue Bridge uses uPNP for auto discovery - so, yep, need uPNP to be enabled - don't like that, then don't use Hue, simply put

2) HomeKit works for those who do iOS things - and HomeKit is fairly secure there.

@^Tripper^ - ATV's are not useless...

 

[HuskyHerder]

device like an Appletv or a ... iPad to act as a hub.

Don't forget about the HomePod.

I just bought my first one for $249 (Target sale) and I like it so much, I gave my surround sound to my son. Let me say its way better as a hub than an iPad or Apple TV ever had time to be. But that's just my opinion over the last 4 days .

 

[sfx2000]

Don't forget about the HomePod.

I just bought my first one for $249 (Target sale) and I like it so much, I gave my surround sound to my son. Let me say its way better as a hub than an iPad or Apple TV ever had time to be. But that's just my opinion over the last 4 days .

Had not considered HomePod, but makes sense as it's Airplay2, and runs iOS like ATV (4th Gen) and ATV 4K...

Homebridge is something to look at perhaps...

https://github.com/nfarina/homebridge

 

[^Tripper^]

Some additional insight here...

https://community.spiceworks.com/to...orts-and-network-setup-for-philips-hue-bridge

1) The Hue Bridge uses uPNP for auto discovery - so, yep, need uPNP to be enabled - don't like that, then don't use Hue, simply put

2) HomeKit works for those who do iOS things - and HomeKit is fairly secure there.

@^Tripper^ - ATV's are not useless...

Hue can use upnp for auto discovery but it’s not a requirement as I understand it? (According to the developer docs from Phillips)

As for the ATV, I agree it’s not useless, the quotation marks was in reference to the post before mine.

 

[RMerlin]

Just an idea: enable UPnP, but set the allowed internal port range to only 65535 (one single port). It should allow UPnP to run, but no client would be able to forward any port unless that port is 65535.

 

[Zonkd]

Some additional insight here...

https://community.spiceworks.com/to...orts-and-network-setup-for-philips-hue-bridge

1) The Hue Bridge uses uPNP for auto discovery - so, yep, need uPNP to be enabled - don't like that, then don't use Hue, simply put...

Great find thanks @sfx2000

Hue can use upnp for auto discovery but it’s not a requirement as I understand it? (According to the developer docs from Phillips)

Where can I read the docs @^Tripper^ ? Following that link on spiceworks says I must first login with a developer account to access. http://www.developers.meethue.com/documentation/getting-started

Just an idea: enable UPnP, but set the allowed internal port range to only 65535 (one single port). It should allow UPnP to run, but no client would be able to forward any port unless that port is 65535.

To limit internal port availability as you suggest, what if another client on the network had UPnP enabled? Is there any chance it could block the Hue or conflict? I control the router but I don't have stewardship of the other clients on my network. We have a shared WiFi network so they and their friends can join as required.

What does everyone else think of the option to leave UPnP on but only allow 65535?

 

[skeal]

What does everyone else think of the option to leave UPnP on but only allow 65535?

Best idea so far. You get to use UPNP and limit the port selection to 1 port, easy to check and verify.

 

[^Tripper^]

Where can I read the docs @^Tripper^ ? Following that link on spiceworks says I must first login with a developer account to access. http://www.developers.meethue.com/documentation/getting-started

You could sign up as a developer, it costs nothing and its an interesting read to learn about the hue.. or here you go, the relevant section about how upnp is just one of the few but not the only way available to discover the hue in your setup and use it;

 

[ColinTaylor]

Guys, you are conflating two different types of UPnP. The UPnP option on the router is the IGD that does NAT traversal of the firewall.

To discover devices on your local network you use the SSDP part of UPnP. This is nothing to do with the router as it uses multicast. This is option 1 in the previous post.

Option 2 in the previous post refers to their broker server at www.meethue.com/api/nupnp where the local IP addresses of your devices are registered on a publicly accessible server.

 

[Zonkd]

Guys, you are conflating two different types of UPnP. The UPnP option on the router is the the IGD that does NAT traversal of the firewall.

To discover devices on your local network you use the SSDP part of UPnP. This is nothing to do with the router as it uses multicast. This is option 1 in the previous post.

Option 2 in the previous post refers to their broker server at www.meethue.com/api/nupnp where the local IP addresses of your devices are registered on a publicly accessible server.

I’ll have to take time and read deeper on this before I understand any of it. Will do when I’ve got my thinking cap on.

Are you telling me it is possible for them to control the hue from anywhere (at home or remotely) without enabling UPnP on my router?

 

[ColinTaylor]

Are you telling me it is possible for them to control the hue from anywhere (at home or remotely) without enabling UPnP on my router?

I don't know, I don't use IoT devices. I just wanted to point out that the word "UPnP" covers many separate things and the option on the router applies to only one of them.

Quite what their "broker service" does, I don't know. If I had to guess I'd say maybe it's used by the app when you want to control devices and you're outside your home. It appears to just provide a current list of the IP addresses being used by your devices.

 

[^Tripper^]

When you use the standard hue app there is an option called “out of home control”. When selected, you’re asked to log in to your "meethehue account". Once done, you can control your hue lights regardless of location. All this assumes you have already paired your hue app with your bridge in the first place (which involves being on the same network and physically pressing the button on the bridge to pair) AND you have setup a "meethehue" account to which you have to log in. What this means is that yes, you can control your hue from anywhere IF you have paired your app AND you log in to your "meethehue account". This works even with UPNP on your router turned off.

And thank you ColinTaylor for explaining UPNP, I've learned something new again. This forum sometimes feels like an online networking class taught by gurus (which is brilliant!)

 

[preacher65]

This works even with UPNP on your router turned off.

Not to imply that this needs confirming, but just to confirm anyway as I've just done it myself. Disabling UPNP is one of the first things I do on a new router, and I only installed the Hue lights and bridge a few days ago. I can remotely control my lights in exactly the way @^Tripper^ has described without upnp ever being used.

 

[Zonkd]

Not to imply that this needs confirming, but just to confirm anyway as I've just done it myself. Disabling UPNP is one of the first things I do on a new router, and I only installed the Hue lights and bridge a few days ago. I can remotely control my lights in exactly the way @^Tripper^ has described without upnp ever being used.

Thanks to you and everyone for confirming this several times to be sure.

The only remaining question is whether UPnP is required for the Amazon Echo to discover and control the Hue. He wants voice control for it. If anyone is able to test their Hue and Echo to confirm I’d appreciate it!

 

[JemTheWire]

Confirmed.

uPNP turned off in my AC88U.

All my Echo DOTs (Alexa), are able to control my HUE lights.

“Alexa, turn on lounge lights” and ‘she’ does.

HTH

 

[Zonkd]

Confirmed.

uPNP turned off in my AC88U.

All my Echo DOTs (Alexa), are able to control my HUE lights.

“Alexa, turn on lounge lights” and ‘she’ does.

HTH

Thanks this is a huge help to me. Now I have proof it shouldn’t be affecting his lightbulb I’ll insist UPnP be disabled. Fingers crossed roommate is agreeable on this.

SNB forums ftw.

 

[Striker317]

Thanks this is a huge help to me. Now I have proof it shouldn’t be affecting his lightbulb I’ll insist UPnP be disabled. Fingers crossed roommate is agreeable on this.

SNB forums ftw.

Just turn it off and see if roommate complains.

Your apparent need for “network settings” consensus is misguided at best!

You own the router, you make the decisions.

 

[Zonkd]

Confirmed.

uPNP turned off in my AC88U.

All my Echo DOTs (Alexa), are able to control my HUE lights.

“Alexa, turn on lounge lights” and ‘she’ does.

HTH

Sorry 1 more question, does it make a difference that he isn’t using a Hue bridge? It’s just come to my attention they exist as an optional hub accessory to add extra control features... I don’t know anymore than that. See website link below. Are you using a bridge? Or does the amazon echo serve that purpose? How does it work?

https://huehomelighting.com/what-is-the-hue-bridge-is-it-needed/

 

[JemTheWire]

Yes. I am using a Hue Bridge.

But I have no idea if that makes a difference. It could I guess.

 

[Zonkd]

Yes. I am using a Hue Bridge.

But I have no idea if that makes a difference. It could I guess.

Hmmm. Ok I’m uncertain again.