By default, the BBox2 does not expire the Universal Plug and Play entries. After some days, the box may become unresponsive, block some traffic, etc.  Again, the web interface in the latest firmware does not allow to change that. In a telnet session, the command is:

rg_conf_set upnp/rules_autoclean/enabled 1
save