VLAN configuration (untagged and IPTV)

Hi,

I have a Mikrotik RouterBOARD 962UiGS-5HacT2HnT and is fairly new to using this product.

This is my preferred configuration:
Ether1 - Untagged internet + VLAN ID 845 (for IPTV) - Input from ISP
Ether 2 - Untagged internet - to computers
Ether 3 - Untagged internet - to computers
Ether 4 - Untagged internet + VLAN ID 845 (for IPTV) - to computers and IPTV
Ether 5 - Untagged internet - to computers
Wlan1 - Untagged internet - to computers
Wlan1 - Untagged internet - to computers
Also all computers should be able to acces each other.

In current configuration i get Untagged internet and VLAN ID 845 on ALL ports. That means that a laptop that is connected to the wlan1 recevies both untagged internet AND VLAN 845. I only want untagged internet on all ports except ether4.

The problem with current configuration is that VLAN 845 is sent out on all interfaces which eats up bandwidth. This is especially noticable when connected with wireless 2,4 GHz on b/g/n. Youtube is seen with low quality and lags with 1080p. After changing to 2,4 GHz to g/n it is less of a problem. Still the bandwitdh should not be used by VLAN 845.

Current configuration is using the same bridge and I have added VLAN 845 as a VLAN and added it to the same bridge as the other network. I have not managed to get my desired configuration as described above to work. Can anyone help me how this should be configured?

I have tried to read MANY posts, but not found any configuration like this described.

Going by the very scarce details you provide, this is your problem. You can use separate bridges for untagged traffic (i.e. bridge_local to which you add all ports) and VLAN 845 (i.e. bridge_iptv to which you add VLAN interfaces ether1.845 and ether4.845 → so these are VLAN interfaces with id 845 created for ether1 and 4 respectively). This should prevent traffic sent to all ports, probably caused by multicast used by IPTV.

My bet is you live in Sweden and have Telia as your IPTV?
If so its like me. I have removed all isp equipment and only use my own I however do not use MT equipment for IPTV. All outlets at home are connected to switches and I use vlan tagging in the switch to handle IPTV. I also get igmp shopping in the switch + TV is unaffected my issues with the router. You should be able to achieve the same using the switchchip in the MT equipment. Best is to avoid the cpu to handle the multicast and let the switchchip do this.

I tried to configure as you described. But when I move to bridge_iptv it does not work. I get internet on that port, but no IPTV. I suspect that the VLAN845 is sent tagged, but it needs to be untagged.

Yes, you are correct. I tried connecting like you have done, with a switch with VLAN. It works if i take Tagged VLAN845 from ISP and Untagged VLAN845 to IPTV. It does not work with Tagged VLAN845 to IPTV. Problem with this configuration is that I cannot send VLAN1 also to this port (on the other end is a dumb switch which is connected to HTPC and IPTV-box). This worked with MT and also Telias box.

I also tried with switch in MT, but didn´t manage to get this working. I don´t know if it is possible to set untagged traffic out for VLAN845..

The way I have done this in the switch is the following:
Port to ISP is configured to have VLAN2 untagged (this is the VLAN tag used to get internet to my router) and tagged VLAN 845
Port to router (WAN) is configured to have VLAN2 untagged. This lets my WAN router get a IP adress from ISP.
Port connecting to IPTV is set to untagged VLAN 845.

In your case you cannot have a “dumb” switch where you which to get both internet and IPTV to work. In my case I have a lot of switches at home. The main switch is a Zyxel which holds the connection to ISP and splits Internet and IPTV.
However to get both internet, guest internet and IPTV wired in all rooms in the house I have bought several of these.
https://www.webhallen.com/se-sv/natverk_och_smarta_hem/256562-d-link_dgs-1100-05-gigabit_switch_5-port-smart_managed&atcl=search:live
In each room where I have connected devices I have one of these. They are dirt cheap and allow me to set one port to my user network (VLAN1000) untagged and another port (VLAN 845) untagged for the IPTV. The port connected to the main Zyxel switch is configured to run tagged VLANs 1000 and 845. VLAN 1000 in my case is my usernet (LAN) connected to my LAN router.

I setup the VLAN-switching as described by magchiel and then I setup my D-Link DGS-1100-08 with VLAN-switching as you described, and now it is working! Thank you for the support! The problem was that i sent tagged VLAN to the IPTV, but it needed to be untagged. Thank you again :slight_smile:

The configuration seemed to produce some lag, with audio twitches every now and then. I tried configuring to use the VLAN switch, to see if it seems to be working without twitches.

Solved it? When does this lag occur?
Monitor CPU loads and total bandwidth used while watching and (fastly) switching channels to find out where the bottleneck lies. In my experience, especially during fast channel switching, the multicast snooping doesn’t keep up (more prominent in routed IPTV but also applies to bridged IPTV, however snooping then occurs at provider end) keeping multiple streams open of about 7.2 Mbit each. The older streams will slowly time out freeing up downstream bandwidth and routing/firewall resources, but during this brief period things are prone to congestion. Utilising the switch chip should help reducing overall CPU loads as Kindis points out above, but is only possible when using bridged IPTV (you seem to have bridged IPTV though). In routed scenarios (requiring the use of IGMP proxy) you’d want to enable FastTrack if using the firewall. Misconfiguration of firewall may also produce errors but should also impact image performance and isn’t applicable for bridged scenarios.

Unsure what you mean but I can cause this by using my internet to much. I do now use QoS in the switch and without the splitter from ISP (bredbandsswitch) IPTV is not prioritized in any way.
I have a 100 Mbit fiber at home with a 100 Mbit fiber converter to TP. If I max out my internet this causes stutter and other issues with the TV.
Solution is either to build QoS in the switches or ISP gives me a fiber to TP that can handle 1000 Mbit. I would like the latter one of those :slight_smile:

No, I have not solved the twitching yet. CPU is only about 1-10 % (720 MHz CPU) and memory is 100 MB free of 128 MB. So this should not be the problem.

The problem is not only just when switching channel, but also when just watching. The internet is not being used at any high rate otherwise.

I have turned on IGMP snooping on the managed switch closest to the IPTV, but I don´t expect this to increase any performance. Should I turn on some IGMP setting on the MT also? I suspect it is not need as I only send out VLAN845 to the only one correct trunk-port. VLAN 845 is only sent to IPTV port, and therefore IGMP Snooping should not be needed.

I also have 100 Mbit. I think you are right, QoS should be set up. Do you know how to build QoS for this when using the MT switch?

Also, in my managed switch i have set to “High Priority” for port 1 & 2 (input and IPTV). Port 3 (HTPC) is set to medium priority. When I

I suppose I could do like this article describes:
http://linux-sys-adm.com/how-to-prioritize-voip-traffic-in-mikrotik/

But not sure how I should get the source/dest IP-adress. It would be nice if it could be configured for the entire VLAN.

So I found the IP (224.0.0.252 of the multicastadress) and followed the guide, except step 9-12 and I set priority to 1 (instead of 2). Reason for skipping the last steps is because I want all remaining bandwidth to be available.

When running bandwitdth check I get 122 Mbit/s download (via 5GHz wifi) and 9 Mbit/s is also used for IPTV at same time.

Funny thing when monitoring BW under interfaces is that the usage is shifting between 0 bps → 17,6 Mbps → 9 Mbps → 0 bps → and loops like that.

Will be back with information of how it works after some use.

I am glad to say that everything is working properly! I tried watching HD-youtube and performing networkstest to load the internet connection. And there does´nt seem to be any lag :slight_smile:

Thank you both for the help!