`MovieStar Spain Fiber Modem Move Internet and IPTV to AX3

My brother has an ax3 working fine off LAN port on movistar modem/router. It provides better wifi than the wifi provided by the modem router. We could leave well enough alone there, but he wants to see if most of the traffic responsibility can be hosted by the ax3. Specifically the internet and the IPTV. They are thinking of ditching the landline telephone component anyway and is not a factor since the ax3 does not have a telephone jack etc…

Reading darknate and mkx recent replies in other threads, it would seem appropriate now to try this as the MT RoS of late is helpful in this regard. The moviestar uses an older IGMPv2 standard and I note that in the settings there is IGMP snooping turned on, in the moviestar settings.

Other salient bits of information:
vlan6= internet ( although this thread is primarily about IPTV )
vlan2= iptv
THERE is no IPTV DHCP, as its a static setting with gateway.

Stuff gleaned from sources

  • need one bridge for all ports where in actuality there will only be two ports being used , two WLAN ports (ports 2-4 not used at the moment)
  • ether1 data going upstream will need to be tagged with vlan 6, vlan2 but untagged for all lan/wlan ports on router 2-4 (keeping ether5 for off bridge access)
  • hw acceleration needs to be turned off for ether1 (bridge port setting)
  • need to add a bridge filter rule to assign CoS for internet vlan of value ¨4¨ for vlan-internet-6 (output chain protocol vlan)
  • need to add a bridge filter rule to assign CoS for iptv vlan of value ¨1¨ for vlan-iptv-2 (output chain protocol vlan)
  • igmp snooping needs to be turned at the BRIDGE.
  • igmpproxy needs to be set to version2 at the BRIDGE
    -the default setting of Multicast Router as temporary query is fine.
    -the Multicast querier box below this should be left unchecked, as I am assuming the modem or something upstream is the actual querier.

Any other considerations I should be thinking of??
Admission: Never have dealt with multicast, IGMP, PIM etc, so am in the blind so to speak! I am going to attempt to muddle together some sort of config, which will obviously be piss poor, but more or less where I am heading in the future. Get your knives out. :slight_smile:

FIrst change. After reading the MT docs…
It would appear that on the Bridge Itself, I should ENABLE multicast querier and turn OFF multicast router.
On the interface bridge port (in this case WLAN ) going to a TPLINK extender connected by ethernet cable to the iptv set top box, I make PERMANENT the multicast Router option.

Additionally I would need something like to indicate flow is coming upstream from ether1 to devices connected to the bridge. Although I may have to indicate the VLAN2 not ether1
/routing igmp-proxy interface
add interface=ether1 (or better vlan-iptv-2 ??)upstream=yes
add interface=bridge1

And this because there is only one set top box…
/routing igmp-proxy
set quick-leave=yes

So far:
Relevant bits separated out…

/interface bridge
add admin-mac=xx auto-mac=no comment=defconf igmp-snooping=yes
multicast-querier=yes multicast-router=disabled name=bridge igmp-version=2 mld-version=1
vlan-filtering=yes

/interface vlan
add interface=bridge name=vlan-internet-6 vlan-id=6
add interface=bridge name=vlan-tv-2 vlan-id=2
/interface pppoe-client
add add-default-route=yes interface=vlan-internet-6 name=pppoe-out1 use-peer-dns=no
/interface bridge filter
add action=accept chain=output mac-protocol=vlan vlan-id=6 vlan-priority=4
add action=accept chain=output mac-protocol=vlan vlan-id=2 vlan-priority=1

/interface bridge port

add bridge=bridge comment= fast-leave=yes hw=no interface=wifi1
multicast-router=permanent

add bridge=bridge comment= fast-leave=yes hw=no interface=wifi2
multicast-router=permanent

/ip address
add address=192.168.1.2/24 interface=bridge network=192.168.1.0 { to be able to reach isp device after changing LAN over to MT }

/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp interface=bridge lease-time=10m name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment= fast-leave=yes hw=no interface=wifi1
    multicast-router=permanent
add bridge=bridge comment= fast-leave=yes hw=no interface=wifi2
    multicast-router=permanent
/interface list member
add comment=defconf interface=bridge list=LAN
add interface=pppoe-out1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
add address=192.168.1.2/24  interface=bridge network=192.168.1.0
/ip dhcp-client
add comment=defconf interface=ether1 disabled=yes
add address=192.168.88.0/24 comment=defconf dns-server=192.168.88.1 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes servers=1.0.0.1
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=accept chain=input comment="Admin access to configure router" log=yes src-address-list=Authorized
add action=accept chain=input comment="User access to dns services" dst-port=53,123 in-interface-list=LAN protocol=udp
add action=accept chain=input comment="User access to dns services" dst-port=53 in-interface-list=LAN protocol=tcp
add action=drop chain=input comment="Drop All Else"
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related hw-offload=yes
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=forward comment="Internet Access" in-interface-list=LAN out-interface-list=WAN
add action=accept chain=forward comment="Port Forwarding" connection-nat-state=dstnat disabled=yes
add action=drop chain=forward comment="Drop All Else"
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
/ip route
???????
???????
???????


As you can see at the end of the coded section I have question marks on any special routing, if required for especially IPTV traffic

Excellent article with correct menus, in terms of removing internet and IPTV from the moviestar device, but heck getting IPTV setup on Ax3 is seemingly too difficult?
https://www.redeszone.net/tutoriales/configuracion-routers/configurar-askey-rtf8115vw-movistar-bridge-puente/

Now this article points to at least an easy way to bridge the internet connection, going from many users to single user.
Basically an easy way to move the pppoe connection from the isp device to the connected device of your choice (the lan bridge on the device goes to all etherports and all IPTV and VOIP data get sent to LAN bridge untagged).
https://comunidad.movistar.es/t5/Soporte-Fibra-y-ADSL/HGU-Askey-RTF8115VW-modo-Bridge/m-p/4262034#M431954

With no ill effects on IPTV or telephone. Just might give this a try and see what happens LOL. Until such time I get better answers on how to setup up MT for IPTV