Where can I set up the UPnP for the Telecom optical modem? I enabled automatic port mapping, and both games and downloads were still NAT3. First, I figured out whether this cat was working

Last month, I helped my neighbor Lao Zhou watch PS5 multiplayer, and one question stumped me: The router's background UPnP was clearly on, the console had restarted, so how did it still show NAT3? I sat down in front of their weak current box and saw that the Tianyi gateway from China Telecom was still dialing by itself, and the router had another internal network. His UPnP was open, but unfortunately it was on the inner door, and the outer door was still closed. The "door opening pass" handed out by the game console couldn't reach the public network at all.

I've encountered this kind of situation more than once this year. The Telecom optical modem does have a UPnP setting, but whether you can touch it or not, you have to first see if the modem actually works. Don't jump straight in to 192.168.2.1 and randomly click the wrong direction; no matter how nicely you open the switch, it won't help. In this article, I'll clearly explain the path, permissions, and the troubleshooting sequence for several Tianyi gateways I've tried, and the "activated but still unused" checklist.

to get straight to the point: the optical modem UPnP is only responsible for "dialing" the optical modem; after bridging, it basically becomes just a decoration

most of the time, telecom optical modems are factory-installed in routing mode, with dialing done by the optical modem, and the public IP is attached to the modem's WAN. If you have another router at home, the optical modem sends the router a 192.168.2.x internal network address, and the router sends 192.168.x.x to your phone, computer, or game console. To get in from outside, you first have to go through the optical modem door, then the router door—this is what many call the two-layer NAT.

UPnP has a fixed rule: it only greets devices that "connect directly to that jump." When the software initiates a UPnP request, it can only hand the command to the router it is directly connected to. The optical modem dialing and router are connected to the home system below, while the host is directly connected to the router, so UPnP is only enabled on the inner router by default. Even if the inner door is open, the outer optical modem's door remains closed, and the outside still can't get in, so NAT3 won't disappear on its own.

conversely, if the modem has already switched to bridging and hands dial-up and public IP to your own router, then the modem will basically move back to the "opto-electric switch" position. Even if it still has an UPnP switch in the background, clicking it won't make much difference. At this point, you should be accessing the router's backend, not 192.168.2.1.

determining which type you belong to is simple: the incoming modem checks the WAN connection information in the backend. If the connection with the INTERNET label is R, it is usually in routing mode; If your router's WAN port has a public address, or if the optical modem page shows a bridge, then it counts as bridge. If you don't understand the menu, don't worry. I've taken it apart the backend menu map 192.168.2.1. First, identify where the status, network, and apps are, so you'll find the right points later.

Where exactly is the UPnP in

192.168.2.1 hidden: I checked both the regular account and the super admin twice

most Tianyi gateways' UPnP is not on the homepage or in WLAN; it resides under "Apps." The path looks like three segments: enter 192.168.2.1 in your browser to log in, then go to Apps in the left menu, go to UPnP Settings in Apps, check Enable and save. The Huawei HS8145V5 model is like this; The ZTE F7015T is also in applications, with some firmware components placed near the "Advanced NAT configuration"; TEWA's models sometimes call "apps" "everyday apps," but if you recognize the four letters UPnP, you won't go too far.

pitfalls aren't in the path, but in permissions. Using the useradmin account on the sticker on the back of the optical modem to enter, many machines don't show "Apps" at all, or they don't show up at all. I tried it on a Tianyi Gateway 4.0; the regular account menu was pitifully clean, only showing status, network, WLAN, security, and management, and no UPnP even after searching. After switching to Telecomadmin and logging in again, the apps section in the left menu will appear.

So if you find the path but don't notice it, don't suspect the firmware is broken—nine times out of ten, your account permissions have been revoked by China Telecom. If you want the telecomadmin password, the proper way is to install a maintenance master, the 10000 number, and the configuration file. How to use the script and avoid detours? I wrote about article about obtaining the super password . Once you get the super admin password, don't rush to change it everywhere. Send a conf backup before making changes. That's the usual rule.

If you're really worried, remember one thing: useradmin can change WiFi, check devices, restart, and all "open" features like UPnP, port mapping, and DMZ basically require super admins. If you spend half an hour searching through a regular account, it's not that you didn't find it, but that you haven't shown it at all.

you enable UPnP or NAT3, don't keep clicking save—check these three places

Old Zhou tapped "Enable UPnP" at least ten times that day, thinking it would be fixed the next moment each time. Actually, the last three places to look up are the ones I checked, and I've arranged them in this order.

first point: find out who actually holds the dial number. the optical modem is still dialing, but you only open the router's UPnP, meaning you only opened the inner door. Either enable UPnP for the optical modem, or directly switch to bridging and hand the door all over to the router. If you don't want to use the bridge, using UPnP via optical modem is the least active and quiet way; I want to manage all the rules in the future with my router, and then consider switching optical modem to bridge .

second point, check if the WAN port IP starts with 100.64. nowadays, many telecom home broadband providers have already hidden behind the operators' intranets, with optical modem WAN ports ranging from 100.64 to 100.127. This kind of address isn't a public address number; outsiders can't find you at all. No matter how seriously you open UPnP, it's useless. I helped someone check this, always letting the phone disconnect from WiFi and search for "local IP" with data, then check the WAN port IP on the optical modem. If the two don't match and the WAN port is 100.64 segment, first call the 10000 to apply for a public IP and avoid wasting time on UPnP.

third, check if the host IP is floating. Although UPnP does enable automatically, some firmware is poorly made; after reconnecting the device, the internal IP is changed, and the old mapping is still in the list and the wrong person is pointing to. Static binding to the console or NAS, or pinning an address in the router, can reduce supernatural issues by half.

the download port doesn't turn green, it could also be that UPnP isn't in the right place

some people don't play games, but the port check in the downloaded software always shows a yellow light or shows "Not open." My own qBittorrent once had an incident: the router turned on UPnP, the software log said port mapping was successful, but outside, the connection still wouldn't work. Later, when I turned on the light modem and UPnP, the light changed from yellow to green.

principle is exactly the same as in the game NAT3. BT downloads need to be seeded; others need to be able to connect to your port. If you have two layers of NAT, the software can only apply to the inner router; the outer optical modem won't recognize it, and the inbound connection will be disconnected outside. In optical modem router mode, if you want to save effort, just turn on UPnP first; If that doesn't work, fix the downloader's IP and manually forward the port via optical modem or router according to the port shown on the BT client. This is more stable than repeatedly switching to UPPs.

manual supplementation steps are the same as in the Tianyi Gateway Port Mapping : Avoid using 80 or 443 for external ports; try to choose high-level ports like 18080; If the protocol is uncertain, use TCP/UDP; Fill the internal IP with the fixed address of the downloader. One layer for the optical modem, one layer for the router—each layer should be paired with one layer. Too many rules can cause confusion, so I recommend manual fixing the device and letting the software run the mobile UPnP yourself.

another small detail: when the port shows "Not Open," turn off the computer firewall and test again to rule out local data blocking. Don't blame everything on the optical modem. I've seen people whose homes had optical modem bridges and router UPnP working fine, but Windows firewalls blocked BT tightly. It took a long time to figure it out.

UPnP and DMZ should not be opened at the same time; there should be only one decision-maker outside the gate

I want to highlight this sentence separately because so many people ask about it. UPnP is software that opens doors on demand, opening several designated ports at once; DMZ throws an entire device into an "unprotected" position, redirecting all incoming traffic to it. Both do make online play and download ports green, but the access rights are not on the same level.

the biggest problem with running it at the same time isn't the blue screen conflict, but that you won't be able to understand it. The mapping list between the optical modem and router would sometimes have an extra UPnP, sometimes a DMZ backup, so when a problem occurred, you had no idea which rule was at play. On a security note, DMZ means all ports of that machine are open; old cameras, old NAS, and smart devices with weak passwords are all unsuitable as DMZ hosts. To truly have a fixed number of ports open, DMZ the main device settings have a complete setup method, but the premise is that you first make sure you have a public IP at home.

my advice for ordinary families is straightforward: start with UPnP for game consoles and software downloads, stop once it's enough; Only a few fixed services require long-term external access and manual port forwarding; DMZ is the last method to use, and it only targets a device you can fully trust—don't use it on top of the User.

ending order: Taking the right seat, you can decide in two minutes which backend to go to

the issue isn't a big deal, but going in the wrong direction takes a lot of time. I pressed it into a table, and just tapped it twice to see clearly.

HTML89__ the super manager opens UPnP in the application, or enables both layers

order is simple: first check whether the optical modem is dialing or bridging, then the WAN port IP, and only then the UPnP switch. At this point, Old Zhou's family just turned on UPnP on the optical modem, and after reconnecting the PS5, it dropped from NAT3 to NAT2. That night, while gaming, he shouted so loudly that the whole building could hear it. Actually, most network problems are like this—it's not that the switch isn't on, but that the door is opened incorrectly. Recognize the door—anyone can click the next few steps.