I have a RB3011UiAS with RouterOS v7.6, and I have an IGMP Proxy configuration with ether1 as upstream, and bridge as downstream.
After some time, I get the following error, and my IPTV not working anymore until I don’t disable the downstream settings and reenable it:
Leave multicast group failed on ether1 - telekom group=239.255.255.250:
My configuration:
[admin@MikroTik] > /routing/igmp-proxy/export
# nov/10/2022 19:47:09 by RouterOS 7.6
# software id = 37BV-L28B
#
# model = RB3011UiAS
# serial number = 783D07722B8F
/routing igmp-proxy
set quick-leave=yes
/routing igmp-proxy interface
add alternative-subnets=0.0.0.0/0 interface="ether1 - telekom" upstream=yes
add interface=bridge
The interesting part for me that after the error the downstream interface (bridge) querier value will be set to false.
I’m experiencing IGMP proxy issues as well (v7.6/v7.7beta6) on hAP ax². It proxies the downstream request just fine and starts forwarding multicast traffic, but whenever the upstream router sends a Membership Query it goes unanswered. This means the multicast stream will drop out after ~4 min because upstream assumes nobody cares anymore.
Config is simple and ported from a working (!) setup on hAP ac:
21:54:16 firewall,info IGMP input: in:vlan-iptv out:(unknown 0), connection-state:new src-mac 18:4a:6f:99:1c:f2, proto 2, 10.xx.yy.1->224.0.0.1, prio 7->0, len 36
Yet there’s no response from the IGMP Proxy at all - whereas I believe it should at least print a debug log message upon receiving such messages (I enabled logs for IGMP Proxy and other verbose logging shows up fine).
The incoming query doesn’t make it to the IGMP Proxy somehow? Looks like it might be similar to the problem TS is having?
@mecseid: try using the packet sniffer to see if it’s the same in your case - or add a log rule like mine and enable verbose igmp-proxy logging.
EDIT: also submitted as ticket SUP-98496, but I haven’t got a reply yet
Hey @Quasar,
Sorry for the late response, I didn’t get any notification about your post (looks like I’m a newbie to using this forum engine properly ).
I will add the log rule and enable the debug messages for igmp-proxy, and will check what happens.
Meanwhile, do you have any news about SUP-98496, or do you know v7.5 contains this issue as well?
(As I saw http://forum.mikrotik.com/t/v7-7beta-testing-is-released/161807/1 the IGMP Proxy not working with v7.7beta8 ).
I managed to debug and solve my issue, turns out it was (ever so subtle) user error.
I had an (unrelated) IPsec policy which happened to match on the IGMP querier source address. As a result, IGMP queries passed the firewall but are then still dropped due to the policy.
Unfortunately that means your issue is different to mine. The debugging steps might still be helpful - I suspect in your case the query also doesn’t make it to the IGMP proxy; perhaps it’s as simple as lacking a firewall rule to allow IGMP on the INPUT chain?