Hello, maybe someone will be able to help me.
My network in this case is: FIBER—>Optical Network Transmiter—>HAPAC2---->TV Decoder
I’m trying to use mikrotik router instead of my ISP router, almost everything is set up, everything is working via LAN, internet is also working via WiFi, but I have a problem to set-up IPTV via WIFI.
IPTV currently working fine on LAN3 - it is in bridge with WLAN2, but on WLAN2 IPTV not working
All I know is that IPTV needs VLAN35, 839, 838 and standard internet connection.
What I’m missing?
terface bridge
add name=LAN
add name=TV
add name=TV_Bridge
add name=VOD
/interface ethernet
set [ find default-name=ether1 ] comment="Internet ETH1 - Orange" name=ORANGE
set [ find default-name=ether2 ] comment="Internet ETH2 - UPC" name=UPC
set [ find default-name=ether3 ] comment="Interface TV Orange" name=ether3-tv
set [ find default-name=ether4 ] comment="Interface WAN#3"
set [ find default-name=ether5 ] comment="Interface LAN"
/interface vlan
add interface=ORANGE mtu=1492 name=vlan-orange vlan-id=35
add interface=ORANGE name=vlan-tv vlan-id=839
add interface=ORANGE name=vlan-vod vlan-id=838
/interface pppoe-client
add add-default-route=yes comment="Interface Diall Out PPPOE" disabled=no \
interface=vlan-orange keepalive-timeout=disabled name=pppoe-orange \
password=xx! use-peer-dns=yes user=\
bez_ochrony-xx@neostrada.pl
/interface list
add name=iptv
add name=internet
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk eap-methods="" group-ciphers=\
tkip,aes-ccm management-protection=allowed mode=dynamic-keys name=profile1 \
supplicant-identity="" unicast-ciphers=tkip,aes-ccm wpa-pre-shared-key=\
xx wpa2-pre-shared-key=xx
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce \
disabled=no frequency=2432 mode=ap-bridge security-profile=profile1 ssid=\
MikroTik wps-mode=push-button-virtual-only
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-Ceee \
disabled=no frequency=5200 mode=ap-bridge security-profile=profile1 ssid=\
MikroTik5 vlan-id=839 vlan-mode=use-tag wps-mode=push-button-virtual-only
add disabled=no keepalive-frames=disabled mac-address=76:4D:28:DC:31:DC \
master-interface=wlan1 multicast-buffering=disabled name=wlan3 \
security-profile=profile1 ssid=UPC247918647 wds-cost-range=0 \
wds-default-cost=0 wps-mode=disabled
add disabled=no keepalive-frames=disabled mac-address=76:4D:28:DC:31:DE \
master-interface=wlan2 multicast-buffering=disabled name=wlan5 ssid=\
UPC507918647 wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
/ip dhcp-client option
add code=60 name=vendor-class-identifier value="'sagemcom'"
add code=61 name=dhcp-client-identifier value=0x01xxxxxx
add code=77 name=user-class value="0x2646535644534c5f66756e626f78322e4d4c54562e7\
36f66746174686f6d652e46756e626f7832"
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=pool-net ranges=192.168.1.10-192.168.1.199
add name=pool-iptv ranges=192.168.2.10-192.168.2.20
/ip dhcp-server
add address-pool=pool-net disabled=no interface=LAN lease-time=3d name=dhcp-net
add address-pool=pool-iptv disabled=no interface=TV_Bridge lease-time=3d name=\
dhcp-iptv
/queue tree
add name=out-queue parent=ORANGE queue=default
add name=in-queue parent=TV_Bridge queue=default
add name=in-queue-iptv packet-mark=iptv parent=in-queue queue=default
add name=out-queue-iptv packet-mark=iptv parent=out-queue queue=default
/interface bridge filter
add action=mark-packet chain=input comment="Mark packets IPTV" in-interface=\
vlan-vod new-packet-mark=iptv
add action=mark-packet chain=input in-interface=vlan-tv new-packet-mark=iptv
add action=set-priority chain=output comment="Set 802.1p for IPTV out packets" \
new-priority=4 out-interface=vlan-vod passthrough=yes
add action=set-priority chain=output new-priority=5 out-interface=vlan-tv \
passthrough=yes
/interface bridge port
add bridge=TV interface=vlan-tv
add bridge=VOD interface=vlan-vod
add bridge=LAN interface=ether5
add bridge=LAN interface=ether4
add bridge=LAN interface=wlan1
add bridge=TV_Bridge interface=wlan2
add bridge=TV_Bridge interface=*11
add bridge=TV_Bridge interface=ether3-tv
add bridge=LAN interface=wlan5
/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-vlan=yes
/interface list member
add interface=VOD list=iptv
add interface=TV list=iptv
add interface=TV_Bridge list=iptv
add interface=UPC list=internet
add interface=pppoe-orange list=internet
/ip address
add address=192.168.1.1/24 comment=LAN interface=LAN network=192.168.1.0
add address=192.168.2.1/24 interface=TV_Bridge network=192.168.2.0
add address=192.168.3.1/24 interface=TV network=192.168.3.0
/ip dhcp-client
add default-route-distance=210 dhcp-options=\
vendor-class-identifier,dhcp-client-identifier,user-class,hostname \
disabled=no interface=VOD
add disabled=no interface=UPC
/ip dhcp-server lease
add address=192.168.1.100 comment=Serwer mac-address=AA:BB:CC:DD:EE:FF server=\
dhcp-net
/ip dhcp-server network
add address=192.168.1.0/24 dns-server=194.204.159.1,194.204.152.34 gateway=\
192.168.1.1 netmask=24
add address=192.168.2.0/24 gateway=192.168.2.1 netmask=24
/ip firewall filter
add action=drop chain=input comment="Drop Invalid Connections" \
connection-state=invalid
add action=drop chain=forward comment="Drop Invalid Connections" \
connection-state=invalid
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related
add action=accept chain=input comment="Accept IPTV packets" in-interface-list=\
iptv
add action=accept chain=forward in-interface=TV_Bridge out-interface=\
pppoe-orange
add action=accept chain=forward in-interface=TV_Bridge out-interface=VOD
add action=accept chain=forward in-interface=TV out-interface=TV_Bridge
add action=accept chain=forward connection-state=established,related \
in-interface=VOD
add action=drop chain=forward comment="Drop all other IPTV packets" \
in-interface-list=iptv
add action=accept chain=input comment=\
"Accept Related or Established Connections" connection-state=\
established,related
add action=accept chain=forward comment="Accept New Connections" \
connection-state=new
add action=accept chain=forward comment=\
"Accept Related or Established Connections" connection-state=\
established,related
add action=accept chain=input comment="Forwarded Ports TCP/UDP" dst-port=80 \
protocol=tcp
add action=accept chain=input dst-port=1194 protocol=udp
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new in-interface-list=internet
/ip firewall nat
add action=masquerade chain=srcnat
add action=masquerade chain=srcnat out-interface=VOD
add action=dst-nat chain=dstnat comment="Port forwarding to serwer host" \
dst-port=80 in-interface-list=internet protocol=tcp to-addresses=\
192.168.1.100 to-ports=80
add action=dst-nat chain=dstnat dst-port=1194 in-interface-list=internet \
protocol=udp to-addresses=192.168.1.100 to-ports=1194
add action=masquerade chain=srcnat out-interface=UPC
add action=dst-nat chain=dstnat comment=6672 dst-port=6672 in-interface=UPC \
protocol=udp to-addresses=192.168.252.12 to-ports=6672
add action=dst-nat chain=dstnat comment=61455 dst-port=61455 in-interface=UPC \
protocol=udp to-addresses=192.168.252.12 to-ports=61455
add action=dst-nat chain=dstnat comment=61457 dst-port=61457 in-interface=UPC \
protocol=udp to-addresses=192.168.252.12 to-ports=61457
add action=dst-nat chain=dstnat comment=61456 dst-port=61456 in-interface=UPC \
protocol=udp to-addresses=192.168.252.12 to-ports=61456
/ip service
set telnet disabled=yes
set ssh disabled=yes
set www-ssl disabled=no
set api disabled=yes
set api-ssl disabled=yes
/ip upnp
set enabled=yes
/ip upnp interfaces
add interface=ether5 type=internal
add interface=UPC type=external
/routing igmp-proxy
set quick-leave=yes
/routing igmp-proxy interface
add alternative-subnets=0.0.0.0/0 interface=TV upstream=yes
add alternative-subnets=0.0.0.0/0 interface=TV_Bridge
/system clock
set time-zone-name=Europe/Warsaw
/system ntp client
set enabled=yes primary-ntp=80.50.231.226 secondary-ntp=194.146.251.100
/tool graphing interface
add interface=LAN
add interface=ORANGE
add interface=VOD
add interface=TV
add interface=UPC
Hello, I would like to ask if you managed to get a connection on the WiFi interface?
GreenFirefly:
Hello, maybe someone will be able to help me.
My network in this case is: FIBER—>Optical Network Transmiter—>HAPAC2---->TV Decoder
I’m trying to use mikrotik router instead of my ISP router, almost everything is set up, everything is working via LAN, internet is also working via WiFi, but I have a problem to set-up IPTV via WIFI.
IPTV currently working fine on LAN3 - it is in bridge with WLAN2, but on WLAN2 IPTV not working
All I know is that IPTV needs VLAN35, 839, 838 and standard internet connection.
What I’m missing?
terface bridge
add name=LAN
add name=TV
add name=TV_Bridge
add name=VOD
/interface ethernet
set [ find default-name=ether1 ] comment="Internet ETH1 - Orange" name=ORANGE
set [ find default-name=ether2 ] comment="Internet ETH2 - UPC" name=UPC
set [ find default-name=ether3 ] comment="Interface TV Orange" name=ether3-tv
set [ find default-name=ether4 ] comment="Interface WAN#3"
set [ find default-name=ether5 ] comment="Interface LAN"
/interface vlan
add interface=ORANGE mtu=1492 name=vlan-orange vlan-id=35
add interface=ORANGE name=vlan-tv vlan-id=839
add interface=ORANGE name=vlan-vod vlan-id=838
/interface pppoe-client
add add-default-route=yes comment="Interface Diall Out PPPOE" disabled=no \
interface=vlan-orange keepalive-timeout=disabled name=pppoe-orange \
password=xx! use-peer-dns=yes user=\
bez_ochrony-xx@neostrada.pl
/interface list
add name=iptv
add name=internet
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk eap-methods="" group-ciphers=\
tkip,aes-ccm management-protection=allowed mode=dynamic-keys name=profile1 \
supplicant-identity="" unicast-ciphers=tkip,aes-ccm wpa-pre-shared-key=\
xx wpa2-pre-shared-key=xx
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce \
disabled=no frequency=2432 mode=ap-bridge security-profile=profile1 ssid=\
MikroTik wps-mode=push-button-virtual-only
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-Ceee \
disabled=no frequency=5200 mode=ap-bridge security-profile=profile1 ssid=\
MikroTik5 vlan-id=839 vlan-mode=use-tag wps-mode=push-button-virtual-only
add disabled=no keepalive-frames=disabled mac-address=76:4D:28:DC:31:DC \
master-interface=wlan1 multicast-buffering=disabled name=wlan3 \
security-profile=profile1 ssid=UPC247918647 wds-cost-range=0 \
wds-default-cost=0 wps-mode=disabled
add disabled=no keepalive-frames=disabled mac-address=76:4D:28:DC:31:DE \
master-interface=wlan2 multicast-buffering=disabled name=wlan5 ssid=\
UPC507918647 wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
/ip dhcp-client option
add code=60 name=vendor-class-identifier value="'sagemcom'"
add code=61 name=dhcp-client-identifier value=0x01xxxxxx
add code=77 name=user-class value="0x2646535644534c5f66756e626f78322e4d4c54562e7\
36f66746174686f6d652e46756e626f7832"
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=pool-net ranges=192.168.1.10-192.168.1.199
add name=pool-iptv ranges=192.168.2.10-192.168.2.20
/ip dhcp-server
add address-pool=pool-net disabled=no interface=LAN lease-time=3d name=dhcp-net
add address-pool=pool-iptv disabled=no interface=TV_Bridge lease-time=3d name=\
dhcp-iptv
/queue tree
add name=out-queue parent=ORANGE queue=default
add name=in-queue parent=TV_Bridge queue=default
add name=in-queue-iptv packet-mark=iptv parent=in-queue queue=default
add name=out-queue-iptv packet-mark=iptv parent=out-queue queue=default
/interface bridge filter
add action=mark-packet chain=input comment="Mark packets IPTV" in-interface=\
vlan-vod new-packet-mark=iptv
add action=mark-packet chain=input in-interface=vlan-tv new-packet-mark=iptv
add action=set-priority chain=output comment="Set 802.1p for IPTV out packets" \
new-priority=4 out-interface=vlan-vod passthrough=yes
add action=set-priority chain=output new-priority=5 out-interface=vlan-tv \
passthrough=yes
/interface bridge port
add bridge=TV interface=vlan-tv
add bridge=VOD interface=vlan-vod
add bridge=LAN interface=ether5
add bridge=LAN interface=ether4
add bridge=LAN interface=wlan1
add bridge=TV_Bridge interface=wlan2
add bridge=TV_Bridge interface=*11
add bridge=TV_Bridge interface=ether3-tv
add bridge=LAN interface=wlan5
/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-vlan=yes
/interface list member
add interface=VOD list=iptv
add interface=TV list=iptv
add interface=TV_Bridge list=iptv
add interface=UPC list=internet
add interface=pppoe-orange list=internet
/ip address
add address=192.168.1.1/24 comment=LAN interface=LAN network=192.168.1.0
add address=192.168.2.1/24 interface=TV_Bridge network=192.168.2.0
add address=192.168.3.1/24 interface=TV network=192.168.3.0
/ip dhcp-client
add default-route-distance=210 dhcp-options=\
vendor-class-identifier,dhcp-client-identifier,user-class,hostname \
disabled=no interface=VOD
add disabled=no interface=UPC
/ip dhcp-server lease
add address=192.168.1.100 comment=Serwer mac-address=AA:BB:CC:DD:EE:FF server=\
dhcp-net
/ip dhcp-server network
add address=192.168.1.0/24 dns-server=194.204.159.1,194.204.152.34 gateway=\
192.168.1.1 netmask=24
add address=192.168.2.0/24 gateway=192.168.2.1 netmask=24
/ip firewall filter
add action=drop chain=input comment="Drop Invalid Connections" \
connection-state=invalid
add action=drop chain=forward comment="Drop Invalid Connections" \
connection-state=invalid
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related
add action=accept chain=input comment="Accept IPTV packets" in-interface-list=\
iptv
add action=accept chain=forward in-interface=TV_Bridge out-interface=\
pppoe-orange
add action=accept chain=forward in-interface=TV_Bridge out-interface=VOD
add action=accept chain=forward in-interface=TV out-interface=TV_Bridge
add action=accept chain=forward connection-state=established,related \
in-interface=VOD
add action=drop chain=forward comment="Drop all other IPTV packets" \
in-interface-list=iptv
add action=accept chain=input comment=\
"Accept Related or Established Connections" connection-state=\
established,related
add action=accept chain=forward comment="Accept New Connections" \
connection-state=new
add action=accept chain=forward comment=\
"Accept Related or Established Connections" connection-state=\
established,related
add action=accept chain=input comment="Forwarded Ports TCP/UDP" dst-port=80 \
protocol=tcp
add action=accept chain=input dst-port=1194 protocol=udp
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new in-interface-list=internet
/ip firewall nat
add action=masquerade chain=srcnat
add action=masquerade chain=srcnat out-interface=VOD
add action=dst-nat chain=dstnat comment="Port forwarding to serwer host" \
dst-port=80 in-interface-list=internet protocol=tcp to-addresses=\
192.168.1.100 to-ports=80
add action=dst-nat chain=dstnat dst-port=1194 in-interface-list=internet \
protocol=udp to-addresses=192.168.1.100 to-ports=1194
add action=masquerade chain=srcnat out-interface=UPC
add action=dst-nat chain=dstnat comment=6672 dst-port=6672 in-interface=UPC \
protocol=udp to-addresses=192.168.252.12 to-ports=6672
add action=dst-nat chain=dstnat comment=61455 dst-port=61455 in-interface=UPC \
protocol=udp to-addresses=192.168.252.12 to-ports=61455
add action=dst-nat chain=dstnat comment=61457 dst-port=61457 in-interface=UPC \
protocol=udp to-addresses=192.168.252.12 to-ports=61457
add action=dst-nat chain=dstnat comment=61456 dst-port=61456 in-interface=UPC \
protocol=udp to-addresses=192.168.252.12 to-ports=61456
/ip service
set telnet disabled=yes
set ssh disabled=yes
set www-ssl disabled=no
set api disabled=yes
set api-ssl disabled=yes
/ip upnp
set enabled=yes
/ip upnp interfaces
add interface=ether5 type=internal
add interface=UPC type=external
/routing igmp-proxy
set quick-leave=yes
/routing igmp-proxy interface
add alternative-subnets=0.0.0.0/0 interface=TV upstream=yes
add alternative-subnets=0.0.0.0/0 interface=TV_Bridge
/system clock
set time-zone-name=Europe/Warsaw
/system ntp client
set enabled=yes primary-ntp=80.50.231.226 secondary-ntp=194.146.251.100
/tool graphing interface
add interface=LAN
add interface=ORANGE
add interface=VOD
add interface=TV
add interface=UPC
Don’t be so optimistic
I asked this question several times and in different ways, but none of them answered me except one person, and all his attempts were failures
rplant
June 11, 2024, 12:13am
4
Hi,
On the wifi, I would enable multicast helper (ideally to full, but perhaps dhcp would be more compatible)
and probably enable multicast buffering.
Also on the bridge enable igmp snooping.
See if that helps.
Hi,
On the wifi, I would enable multicast helper (ideally to full, but perhaps dhcp would be more compatible)
and probably enable multicast buffering.
Also on the bridge enable igmp snooping.
See if that helps.
I use wave2 on my mikrotik