IGMP proxy, EPG/menu issues on STB

RouterOS General
1

Hello,

There are lot of topic about IPTV, I read lot of them, unfortunately cannot find answer to issues occurred in my case.
So, I am trying to setup IPTV via IGMP proxy, my setup is following:
hardware: CRS109-8G-1S-2HnD
ROS: 6.44.6
from ISP i get:
internet traffic - no vlan, DHCP
IPTV traffic - vlan6, DHCP
STB connected to my LAN and gets IP from my local DHCP server which is running on this CRS.

Internet in LAN - OK, also STB is able to communicate via IGMP proxy. There is no need to clone MAC of STB to ether1-vlan6.
But I have issue:
EPG and menu on STB do not working. How STB gets EPG and menu, is it part of IGMP? Do I need manual MFC records?
Or could it be related to masquerade of STB packets in firewall NAT? Do I need to force STB traffic to masquerade under ether1-vlan6?

This is stripped router config (removed DHCP and etc):

/interface bridge
add igmp-snooping=yes name=bridge1-lan protocol-mode=none

/interface vlan
add interface=ether1-gw name=ether1-vlan6 vlan-id=6

/interface bridge filter
add action=drop chain=output comment="drop multicast to WiFi" out-interface=wlan1 packet-type=multicast

/interface bridge port
add bridge=bridge1-lan interface=ether2
add bridge=bridge1-lan interface=ether3
add bridge=bridge1-lan interface=ether4
add bridge=bridge1-lan interface=ether5
add bridge=bridge1-lan interface=ether6
add bridge=bridge1-lan interface=ether7
add bridge=bridge1-lan interface=ether8

/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge1-lan network=192.168.88.0

# Get two IP's, ether1-gw -> for internet, ether1-vlan6 -> for IGMP Proxy
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=ether1-gw
add add-default-route=no dhcp-options=hostname,clientid disabled=no interface=ether1-vlan6

# Position in the list of firewall rules: top
/ip firewall filter
add action=accept chain=input comment="PTV" disabled=no in-interface=ether1-vlan6 protocol=igmp
add action=accept chain=input comment="IPTV" disabled=no in-interface=ether1-vlan6 protocol=udp
add action=accept chain=forward comment="IPTV" disabled=no  protocol=udp

/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface=ether1-gw

/routing igmp-proxy
set quick-leave=yes

/routing igmp-proxy interface
add alternative-subnets=0.0.0.0/0 interface=ether1-vlan6 upstream=yes
add interface=bridge1-lan

Thanks in advance.

2

Depends on STB model … STB I received from my ISP uses normal internet connection to download EPG … so I have to provide both untagged internet service (part of my LAN subnet) and tagged multicasts.

3

According MAC - my STB is by Motorola.
Well, I have situation when STB is in the local network, so it is able to access normal internet as well as video traffic via IGMP proxy.
If I locate STB only in untagget vlan6 - then no problems exists. It points me, that STB should access EPG not via normal internet but via vlan6.
In my case, I guess, default route sends all of traffic (include STB traffic) to ether1-gw.
I can set for DHCP client on vlan6 to “Add default Route = special classless”, I can get routes, but that do not help because of default route still are sending STB non-video traffic to normal internet. How to route all STB traffic from LAN to vlan6 instead of ether1-gw?
I think this is similar case when router has two ISP’s. The idea is to have two masquerade rules, like sample below.
Rule must be located before masquerade to ether1-gw. But I am not sure about IGMP proxy, hope this rule will have no influence for video traffic. Will test that later.
Note: STB should have static DHCP lease.

/ip firewall nat
add action=masquerade chain=srcnat comment="STB traffic" ipsec-policy=out,none src-address=192.168.88.254 out-interface=ether1-vlan6

@mkx
Could you describe how you provide tagged traffic to STB - is it based on IGMP proxy?

4

My setup is such that IPTV multicast VLAN is switched/bridged between participating ports (WAN and STB ports) while internet is routed. Hence I don’t need IGMP proxy … I’ve played with IGMP snooping but it breaks IPv6 so I had to disable it.

5

I didn’t succeed with IGMP proxy, STB still won’t work, even in case when whole traffic is routed to vlan6.
Thanks for spent time.