Switch VLAN multicast strangeness

I am helping a friend set up his IPTV, and have some problems.
His main router is a RB2011UiAS-2HnD, and there is also a RB951G-2HnD.
From the ISP router/modem one cable gives us Internet (ETH1 untagged, VLAN102, VLAN102 is gateway), and one cable gives us IPTV (ETH9 untagged, VLAN101). So no VLAN issues on the gateway side of the router.

The two routerboards are connected with a trunk on RB2011 ETH10 to RB951G-ETH1, and I send 3 VLANS - vlan 10 (main internet), vlan 20 (guest net), and vlan 101 (IPTV) through this.
Everything works fine on VLAN 10 and 20, I can add untagged ports on the RB951 on both these VLANs.

But the big problem and strangeness is that If I configure a port on the RB951G as untagged VLAN101 and plug the IPTV decoder in this I get some pictures, some sound, Teletext and IPTV menu, but no consistant picture.
I can see that there is multicast traffic going out to the port (about 10mbit, thats the normal amount)…
The even stranger thing is that this worked fine for 1 day before it suddenly stopped.

If I plug in the IPTV decoder directly to ISP modem it works fine.
If I configure RB2011-ETH8 as untagged VLAN101 and plug the IPTV decoder in this it works fine.

So what can the difference be?

all VLAN is configured on the switch-chip.
VLANS 101 are only configured as follows:

RB2011:
VLAN is defined: Switch2 , VLAN101, ports eth9,eth10,eth8
ports:
ETH9 and ETH8 : secure, always strip, default vlan id 101.
ETH10: secure, add if missing.

RB951:
VLAN: Switch1, VLAN101, ports eth1,eth2,eth5
Ports:
ETH1: secure, add if missing
ETH2 and ETH5 : secure, always strip, default vlan id 101.


As you can see from config the only thing connected to untagged ports on VLAN101 is the IPTV cable from ISP and the IPTV decoder… (The extra ports on rb2011 and rb951 are just test-ports to see if this would matter…)

The internet firewall on RB2011 shouldn’t do anything, as the switch doesnt even know about the traffic ?
No filters/rules set on the switches.
Is there anything else I miss? Should ARP or MTU (1500/1598L2MTU on all interfaces) matter?
There is a multicast packet for routerOS, but this is only necessary for routing of multicast?

Just to add some more info -
when I Torch the master interface on the problem switch (RB951) (with filter on VLAN 101)
I see the exact same traffic as I see on the main swtitch.

Link to screenshot here..
https://imgur.com/ll6vURB

Feel like I’m talking to myself here…
Still, I post my findings.

I got a hold of another RB2011 and set this up exactly the same.
This works fine. WTH??
I then did a full reset on the RB951G and then copied the config. No go…

So…my conclusion is that there must be something different in the switch or switchports on the rb951G versus the rb2011.

The switch chip is the same, and i now have tried the exact same config as I had on the extra rb2011 I did the test on.

Other things I have tried:
Software vlan setup. THis doesn’t work as well, I get the same traffic (5-10mbit) out on the untagged port to IPTV decoder but no picture.
RouterOS version. I have upgraded to 6.35.1 and downgraded to latest bugfix (6.32.x?, cant remember). No go..

Please Help, I’m getting mad! :slight_smile: