Fiber IPTV settings on N66U without ISP router

[live4ever]

Hi everyone, just wondering how I might setup my Merlin N66U for TV (currently I have it running ONT>N66U with PPPoE no TV yet)?

Here is the ISP router WAN setup for TV (VLAN6) and internet (VLAN4):

Here are my current settings for Merlin-N66U (internet works perfect):

Would all I have to do is plug the STB ethernet into LAN port 4 of the N66U with these settings?

Thanks for any help.

 

[Hawk]

IT should work, I have similar setup with different provider and it works.

 

[live4ever]

Ok I finally got setup with Fiber + IPTV from the ISP (delay due to COVID) - and adding VLAN6 via the GUI kind of works.

My ISP does "Routed IPTV" not "Bridged" (like above) - so I get the multicast streams but the Arris VIP5662W can't access the internet for on demand and catch-up features. The VIP5662W gets a lan IP from the ZyXEL router (192.168.250.x) and IPTV Gateway seems to be 10.131.112.1

From the ONT (Calix GigaPoint 803G) the provider router could be either a ZyXEL VMG4325-B10A or a Calix Gigacenter 844E - I have both working, but the static routes and interface settings are more exposed on the ZyXEL (don't have access on to the
"Support" tab on 844e).

Internet setup through gui PPPoE and VLAN4 - works great (get over +900mbps on old N66U).

Following some threads on here for KPN fiber I've tried to setup the IPTV portion with modified jffs scripts. But the VIP5662W gets an IP from the IPTV getway (varies with 10.131.112.x).

wan-start:

#!/bin/sh

# Setup VLAN6 on the CPU
/usr/sbin/robocfg vlan 6 ports "0t 4 8t"
# Add VLAN6 as a physical interface
/sbin/vconfig add eth0 6
# set vlan priority
vconfig set_egress_map  vlan6 5 5
# Request an IP-address and setup static routes
udhcpc -i vlan6 -O msstaticroutes -O staticroutes -V dslforum.org -s /jffs/scripts/vlan6.script -p /var/run/vlan6.pid -b -O33 -O249

robocfg show:

Switch: enabled gigabit
Port 0: 1000FD enabled stp: none vlan: 2 jumbo: off mac: 48:77:46:de:de:45
Port 1:   DOWN enabled stp: none vlan: 1 jumbo: off mac: 00:00:00:00:00:00
Port 2: 1000FD enabled stp: none vlan: 1 jumbo: off mac: f0:1f:af:01:37:23
Port 3:   DOWN enabled stp: none vlan: 1 jumbo: off mac: 00:00:00:00:00:00
Port 4:   DOWN enabled stp: none vlan: 6 jumbo: off mac: c8:52:61:e9:04:df
Port 8: 1000FD enabled stp: none vlan: 1 jumbo: off mac: f8:32:e4:ac:c0:30
VLANs: BCM53115 enabled mac_check mac_hash
   1: vlan1: 1 2 3 4 8t
   2: vlan2: 0 8u
   4: vlan4: 0t 8t
   6: vlan6: 0t 4 8t

vlan6.script:

#!/bin/sh

set_classless_routes() {
   local max=128
   local type
   while [ -n "$1" -a -n "$2" -a $max -gt 0 ]; do
     [ ${1##*/} -eq 32 ] && type=host || type=net
     echo "udhcpc: adding route for $type $1 via $2"
     /sbin/route add -$type "$1" gw "$2" dev "$interface"
     max=$(($max-1))
     shift 2
   done
}


case "$1" in
   deconfig)
     /sbin/ifconfig $interface 0.0.0.0
     ;;

   leasefail|nak)
     echo "Failed to obtain lease..."
     ;;

   renew|bound)
     /sbin/ifconfig $interface $ip $BROADCAST $NETMASK
     [ -n "$staticroutes" ] && set_classless_routes $staticroutes
     [ -n "$msstaticroutes" ] && set_classless_routes $msstaticroutes
     ;;
esac

exit 0

Need some help with the firewall/nat for the static routes pulled in by udhcpc:

udhcpc (v1.20.2) started
Sending discover...
Sending select for 10.131.112.132...
Lease of 10.131.112.132 obtained, lease time 3600
udhcpc: adding route for net 172.31.0.0/16 via 10.131.112.1
udhcpc: adding route for net 192.168.103.0/24 via 10.131.112.1
udhcpc: adding route for net 10.1.3.0/24 via 10.131.112.1
udhcpc: adding route for net 10.1.4.0/24 via 10.131.112.1

route:

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
172.17.106.13   *               255.255.255.255 UH    0      0        0 ppp0
192.168.103.0   10.131.112.1    255.255.255.0   UG    0      0        0 vlan6
192.168.80.0    *               255.255.255.0   U     0      0        0 br0
10.1.4.0        10.131.112.1    255.255.255.0   UG    0      0        0 vlan6
10.1.3.0        10.131.112.1    255.255.255.0   UG    0      0        0 vlan6
172.31.0.0      10.131.112.1    255.255.0.0     UG    0      0        0 vlan6
10.0.0.0        *               255.0.0.0       U     0      0        0 vlan6
127.0.0.0       *               255.0.0.0       U     0      0        0 lo
default         172.17.106.13   0.0.0.0         UG    0      0        0 ppp0

Routing on Zyxel:

Routing table:

IGMP groups on Zyxel:

So I need to give the Arris VIP5662W internet access somehow otherwise the accessing inactive/on demand content gives an error.


Thanks in advance (can gladly provide any more info required).

 

[live4ever]

Update - got it running on pfsense first and did some packet captures on the vlan6 dhcp interface and got some hints on how to do the firewall script.

So now I got it working on several Asus-Merlin routers:
RT-N66U
RT-AC68U
and just today on the RT-AC86U (HND based) with a custom mcpd.conf

 

[live4ever]

firewall-start:

#!/bin/sh

#Accept multicast

iptables -I INPUT -p udp -d 224.0.0.0/4 -j ACCEPT
iptables -I INPUT -p igmp -d 224.0.0.0/4 -j ACCEPT
iptables -I FORWARD -p udp -d 224.0.0.0/4 -j ACCEPT

#Masquerade

iptables -t nat -I POSTROUTING -d 172.31.0.0/255.255.0.0 -o vlan6 -j MASQUERADE
iptables -t nat -I POSTROUTING -d 192.168.103.0/255.255.255.0 -o vlan6 -j MASQUERADE
iptables -t nat -I POSTROUTING -d 10.1.3.0/255.255.255.0 -o vlan6 -j MASQUERADE
iptables -t nat -I POSTROUTING -d 10.1.4.0/255.255.255.0 -o vlan6 -j MASQUERADE
iptables -A FORWARD -s 172.31.0.0/16 -i vlan6 -j ACCEPT
iptables -A FORWARD -s 10.1.3.0/24 -i vlan6 -j ACCEPT
iptables -A FORWARD -s 10.1.4.0/24 -i vlan6 -j ACCEPT
iptables -A FORWARD -s 192.168.103.0/24 -i vlan6 -j ACCEPT

mcpd.conf in /jffs/config

##### IGMP configuration #####
igmp-default-version 3
igmp-query-interval 20
igmp-query-response-interval 100
igmp-last-member-query-interval 10
igmp-robustness-value 2
igmp-max-groups 25
igmp-max-sources 25
igmp-max-members 25
igmp-fast-leave 1
igmp-admission-required 0
igmp-admission-bridging-filter 0
igmp-proxy-interfaces vlan6
igmp-snooping-interfaces br0
igmp-mcast-interfaces vlan6
#
#Begin MLD configuration
#
mld-default-version 2
mld-query-interval 125
mld-query-response-interval 10
mld-last-member-query-interval 10
mld-robustness-value 2
mld-max-groups 10
mld-max-sources 10
mld-max-members 10
mld-fast-leave 1
mld-admission-required 0
mld-admission-bridging-filter 0
mld-proxy-enable 1
mld-snooping-enable 1
mld-proxy-interfaces vlan6
mld-snooping-interfaces br0
mld-mcast-interfaces vlan6
#
#End MLD configuration
#
##### MCAST configuration #####
igmp-mcast-snoop-exceptions 239.255.255.250/255.255.255.255 224.0.255.135/255.255.255.255
mld-mcast-snoop-exceptions ff05::0001:0003/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff