IPTV RB951G-2HnD

Hi, guys!
Hardware RB951G-2HnD
Software MikroTik RouterOS 5.22
This time Router has a default config, but in ether1-gateway i assign a static IP from provider subnet

[admin@MikroTik] > int pri
Flags: D - dynamic, X - disabled, R - running, S - slave 
 #     NAME                             TYPE               MTU L2MTU  MAX-L2MTU
 0  R  ether1-gateway                   ether             1500  1598       4074
 1  R  ether2-master-local              ether             1500  1598       4074
 2     ether3-slave-local               ether             1500  1598       4074
 3     ether4-slave-local               ether             1500  1598       4074
 4     ether5-slave-local               ether             1500  1598       4074
 5     wlan1                            wlan              1500  2290
 6  R  bridge-local                     bridge            1500  1598

but this static ip only for a test time, normally this ip will assign from DHCP server.
How you are look in this int. list ether1-gateway is provider link. In ether2-master-local my PC. Further in ether5-slave-local will link to IPTV box.
This topic only for answer: How to isolate any igmp and DHCP request + traffic for/from iptv box from home internet? But leave a possibility for see IPTV from PC and wifi via VLC. Because i dont want out igmp traffic for IPTV box to any PC and see a led activity in any local interfaces.
And last, I dont want use in router any IGMP-proxy software emulation i need rule this in hardware ala bridging… its possible?

note: Zyxel Keenetic have a option in interface general list where 1 or more interfaces can be isolate from Home network only use for WAN → IPTV

Have no any idea?
I see in Bridge section #Bridge Brouting Facility# but in my CLI i cannot find this command. Dear developers, do not ignore me, please help me to configure my IPTV.

Not really sure what you are trying to accomplish but I can think of a few different ways to do this.

You could create another bridge and separate the interface that the IPTV is on into that bridge. Create a another DHCP pool and server to service that bridge and create the route for the bridge.

You could also turn on “Use IP Firewall” under the bridge settings and create rules to filter out the traffic that you don’t wan’t.

Either way take a look at this for some ideas.
http://wiki.mikrotik.com/wiki/Packet_Flow

Hi!
Well, I add package igmp-proxy and this work well.
But if restart a IPTV box ip for IPTV box from provider DHCP can’t be assign. DHCP server of Mikrotik router for ether5-slave-local not work this work only in router 2-4 ports.

[admin@MikroTik] > ip fire fil pri
Flags: X - disabled, I - invalid, D - dynamic 
 0   ;;; default configuration
     chain=input action=accept protocol=icmp 

 1   ;;; default configuration
     chain=input action=accept connection-state=established 

 2   ;;; default configuration
     chain=input action=accept connection-state=related 

 3   chain=forward action=accept protocol=igmp



[admin@MikroTik] > interface bridge port print 
Flags: X - disabled, I - inactive, D - dynamic 
 #    INTERFACE              BRIDGE              PRIORITY  PATH-COST    HORIZON
 0    ether2-master-local    bridge-local            0x80         10       none
 1 I  wlan1                  bridge-local            0x80         10       none



[admin@MikroTik] > interface bridge print 
Flags: X - disabled, R - running 
 0  R name="bridge-local" mtu=1500 l2mtu=1598 arp=enabled mac-address=D4:CA:6D:6D:A2:11 protocol-mode=rstp priority=0x8000 auto-mac=no admin-mac=D4:CA:6D:6D:A2:11 max-message-age=20s forward-delay=15s 
      transmit-hold-count=6 ageing-time=5m 

 1  R name="iptv" mtu=1500 l2mtu=65535 arp=enabled mac-address=00:00:00:00:00:00 protocol-mode=none priority=0x8000 auto-mac=no admin-mac=00:00:00:00:00:00 max-message-age=20s forward-delay=15s transmit-hold-count=6 
      ageing-time=5m



[admin@MikroTik] > interface bridge settings print 
            use-ip-firewall: yes
   use-ip-firewall-for-vlan: no
  use-ip-firewall-for-pppoe: no



[admin@MikroTik] > interface bridge fil pri        
Flags: X - disabled, I - invalid, D - dynamic 
 0   chain=input action=accept in-interface=ether5-slave-local src-mac-address=xx:yy:zz:zz:xx:yy/FF:FF:FF:FF:FF:FF 

 1   chain=forward action=accept in-interface=ether5-slave-local



[admin@MikroTik] > interface print 
Flags: D - dynamic, X - disabled, R - running, S - slave 
 #     NAME                                                                                                                                                                        TYPE               MTU L2MTU  MAX-L2MTU
 0  R  ether1-gateway                                                                                                                                                              ether             1500  1598       4074
 1  R  ether2-master-local                                                                                                                                                         ether             1500  1598       4074
 2  R  ether3-slave-local                                                                                                                                                          ether             1500  1598       4074
 3     ether4-slave-local                                                                                                                                                          ether             1500  1598       4074
 4  R  ether5-slave-local                                                                                                                                                          ether             1500  1598       4074
 5     wlan1                                                                                                                                                                       wlan              1500  2290
 6  R  bridge-local                                                                                                                                                                bridge            1500  1598
 7  R  iptv                                                                                                                                                                        bridge            1500 65535

Why my IPTV box can’t get IP from provider DHCP?

What a mess..

Is there a specific reason you don’t want to route multicast and IGMP? Routed multicast is a best practice design for most IPTV networks - IGMP and IGMP proxy both work well in this setup.

Thank you for reply.
In this setup IGMP work well. But the IPTV box doesn’t receive the IP address from provider DHCP server.

I think you should add the interface towards your IPTV box and your ISP gateway to the IPTV bridge.
If and do DHCP-client/static assignment of your ISP to that bridge.
Than you IPTV box will get an IP from your ISP as well.

Hello friends! Pls help me reconfig firewall for IPTV on MikroTik RB951Ui-2HnD.
IGMP2.jpg
IGMP.jpg
firewall Lanet.jpg