Internet Gateway Device Protocol
The Internet Gateway Device ( IGD ) - Port Control Protocol (PCP ) is a standardized device control protocol that is supported by some NAT routers. It is a common procedure to configure port forwarding automatically, but it has not yet been provided by the Internet Engineering Task Force ( IETF) recognized as the standard.
Application
Applications that use peer-to -peer networks, multiplayer games, and remote maintenance programs, such as remote desktop, or media sharing over a local network, need a way to communicate over your home or business gateways. Without IGD protocol gateway device must be manually configured to allow the passage of traffic an application from the Internet, which is very error prone and time consuming. With Universal Plug and Play ( UPnP) is specially designed for NAT, which can be made available on many operating systems today a solution.
IGD can facilitate the following tasks the user:
- Determination of the public ( external ) IP address
- Assigning a new public IP address
- Listing of existing port forwarding
- Adding and removing port forwardings
- Assign expiration times for redirects
About SSDP may be looking for, which can then be controlled using a network protocol such as SOAP, the host for available network devices. A search query is sent via HTTP and port 1900 to the multicast address 239.255.255.250:
M -SEARCH * HTTP/1.1 Host: 239.255.255.250:1900 ST: urn: schemas- upnp -org: device: Internet Gateway Device: 1 Man: " ssdp: discover " MX: 3 security risks
With the help of scripting languages on a website but also new risks and hazards of the IGD protocol can be brought about if the change in the configuration is allowed on the gateway device before. This would make it possible to make a computer or a whole network under the control of other users, which is often done with criminal intent. Many DSL routers, such as the widely used in Germany Fritz! Boxes that support this process, but the change in configuration usually has to be enabled by the user separately via the web interface, provided that the access to the device using a password has been previously backed up.