Beste allemaal,
Ik heb sinds enkele dagen Glasvezel van KPN. Ik kom van Ziggo met het modem in bridge, maar dit kan bij KPN dus niet zo eenvoudig. In mijn mikrotik heb ik de configuratie gedaan zoals ik op meerdere plaatsen op dit forum lees en ook op netwerkje.com te vinden is.
Na enige pijn en moeite heb ik het internet en de ITV werkend gekregen. Helaas heb ik, wanneer ik 1 stream blijf kijken, iedere ~4:25 minuten een storing. Dus als ik binnen de 4 minuten wissel naar een andere zender doet de storing zich niet voor.
Deze storing wisselt elkaar om-en-om af:
- op de ITV: ‘stb-nmc-400’, of
- alleen een korte onderbreking van ~3-5 seconden
Ik heb dit een tijdje getimed door continue 1 zender te kijken
| timing | minuten | storing | oplossing |
|---|---|---|---|
| 1 | 04:42.16 | even een hapering | even wachten |
| 2 | 04:26.99 | stb-nmc-400 | zender wisselen |
| 3 | 04:26.57 | even een hapering | even wachten |
| 4 | 04:35.07 | stb-nmc-400 | zender wisselen |
| 5 | 04:27.03 | even een hapering | even wachten |
| 6 | 04:29.62 | stb-nmc-400 | zender wisselen |
Dit issue doet zich voor op beide decoders (Arris VIP5202) en beide decoders zitten achter een switch op verschillende poorten op mijn router. (Ether2 en Ether3)
Op de experiabox (v12) werkte de decoders beide prima, ook via de switches.
Vraag:
Kan iemand zien of er iets in mijn configuratie niet correct is? De timing van de storing kan ik nergens terug vinden maar doet me wel vermoeden dat er een aanwijsbare oorzaak/instelling is danwel zou moeten zijn
# mar/10/2022 12:03:39 by RouterOS 7.1
# software id = FKSN-PHQM
#
# model = 960PGS
# serial number = ---------------
/interface bridge
add admin-mac=CC:2D:E0:7B:3A:1D arp=proxy-arp auto-mac=no comment=defconf \
igmp-snooping=yes name=bridge-LAN protocol-mode=none
/interface ethernet
set r find default-name=ether1 ] loop-protect=off name=\
"ether1-Internet Acces" speed=100Mbps
set r find default-name=ether2 ] comment=\
"Aansluiting in de woonkamer t.b.v. televisiemeubel" name=\
ether2-Multimedia poe-out=off speed=100Mbps
set r find default-name=ether3 ] comment="Switch in meterkast met alle BHI" \
name="ether3-PoE Switch" poe-out=off speed=100Mbps
set r find default-name=ether4 ] comment=\
"Switch in de hal met de NAS/RPI/BLUEIRIS" name=ether4-IoT poe-out=off \
speed=100Mbps
set r find default-name=ether5 ] disabled=yes poe-out=off speed=100Mbps
set r find default-name=sfp1 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full disabled=yes
/interface vlan
add comment="KPN: https://netwerkje.com/routed-iptv VLAN4" interface=\
"ether1-Internet Acces" loop-protect=off name=vlan1.4 vlan-id=4
add comment="KPN: https://netwerkje.com/config-internetv6 VLAN6" interface=\
"ether1-Internet Acces" loop-protect=off mtu=1520 name=vlan1.6 vlan-id=6
/interface pppoe-client
add add-default-route=yes allow=pap comment="Voor KPN ipv6 internet access" \
disabled=no interface=vlan1.6 keepalive-timeout=20 max-mtu=1500 name=\
pppoe-client user=1234@provider
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface lte apn
set r find default=yes ] ip-type=ipv4
/interface wireless security-profiles
set r find default=yes ] supplicant-identity=MikroTik
/ip dhcp-client option
add code=60 name=option60-vendorclass value="'IPTV_RG'"
/ip dhcp-server option
add code=60 name=option60-vendorclass value="'IPTV_RG'"
add code=28 name=option28-broadcast value="'10.255.255.255'"
/ip dhcp-server option sets
add name=IPTV options=option60-vendorclass,option28-broadcast
/ip pool
add name=dhcp ranges=10.0.1.100-10.0.1.254
/ip dhcp-server
add address-pool=dhcp interface=bridge-LAN lease-time=1d name=dhcp-thuis
/ppp profile
set *0 only-one=yes use-compression=yes use-ipv6=no use-upnp=no
add name=default-ipv6 only-one=yes use-upnp=no
/routing bgp template
set default as=65530 disabled=yes name=default output.network=bgp-networks
/routing ospf instance
add name=default-v2
add name=default-v3 version=3
/routing ospf area
add disabled=yes instance=default-v2 name=backbone-v2
add disabled=yes instance=default-v3 name=backbone-v3
/user group
set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,pas\
sword,web,sniff,sensitive,api,romon,dude,tikapp,rest-api"
add name=read2 policy="read,api,!local,!telnet,!ssh,!ftp,!reboot,!write,!polic\
y,!test,!winbox,!password,!web,!sniff,!sensitive,!romon,!dude,!tikapp,!res\
t-api"
/interface bridge port
add bridge=bridge-LAN comment=defconf ingress-filtering=no interface=\
ether2-Multimedia
add bridge=bridge-LAN comment=defconf ingress-filtering=no interface=\
"ether3-PoE Switch"
add bridge=bridge-LAN comment=defconf ingress-filtering=no interface=\
ether4-IoT
add bridge=bridge-LAN comment=defconf ingress-filtering=no interface=ether5
add bridge=bridge-LAN comment=defconf ingress-filtering=no interface=sfp1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set max-neighbor-entries=8192
/interface detect-internet
set detect-interface-list=all
/interface list member
add comment=defconf interface=bridge-LAN list=LAN
add comment=defconf interface="ether1-Internet Acces" list=WAN
/ip address
add address=10.0.0.1/8 comment=defconf interface=bridge-LAN network=10.0.0.0
/ip cloud
set ddns-enabled=yes
/ip dhcp-client
add comment=defconf disabled=yes interface="ether1-Internet Acces"
add add-default-route=special-classless comment=\
"KPN: https://netwerkje.com/config-internetv6" default-route-distance=210 \
dhcp-options=option60-vendorclass interface=vlan1.4 use-peer-dns=no \
use-peer-ntp=no
/ip dhcp-server config
set store-leases-disk=immediately
/ip dhcp-server lease
add address=10.0.2.21 comment="Media: Decoder 1 KPN" dhcp-option-set=IPTV \
mac-address=00:02:9B:FA:43:9E server=dhcp-thuis
add address=10.0.2.26 comment="KPN decoder 2" dhcp-option-set=IPTV \
mac-address=00:02:9B:FA:F0:0A server=dhcp-thuis
/ip dhcp-server network
add address=10.0.0.0/8 comment=defconf dns-server=10.0.2.0,8.8.8.8 gateway=\
10.0.0.1 netmask=8
/ip dns
set allow-remote-requests=yes servers=10.0.2.0,8.8.8.8
/ip firewall address-list
add address=89f908aae8b3.sn.mynetname.net list=WAN-IP
/ip firewall filter
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input comment="defconf: accept ICMP" in-interface=\
pppoe-client protocol=icmp
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related hw-offload=yes
add action=accept chain=forward comment=\
"defconf: accept established,related, untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
connection-state=invalid
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new in-interface-list=WAN
add action=drop chain=input comment="drop DNS requests from WAN" disabled=yes \
dst-port=53 in-interface="ether1-Internet Acces" protocol=udp
add action=drop chain=input comment="drop DNS requests from WAN" disabled=yes \
dst-port=53 in-interface="ether1-Internet Acces" protocol=tcp
add action=accept chain=input comment=\
"KPN: https://netwerkje.com/config-internetv6" in-interface=\
"ether1-Internet Acces" protocol=icmp
add action=accept chain=input comment=\
"KPN: https://netwerkje.com/config-internetv6" connection-state=related
add action=accept chain=input comment=\
"KPN: https://netwerkje.com/config-internetv6" connection-state=\
established
add action=reject chain=input comment=\
"KPN: https://netwerkje.com/config-internetv6" in-interface=pppoe-client \
protocol=tcp reject-with=icmp-port-unreachable
add action=reject chain=input comment=\
"KPN: https://netwerkje.com/config-internetv6" in-interface=pppoe-client \
protocol=udp reject-with=icmp-port-unreachable
/ip firewall nat
add action=masquerade chain=srcnat comment="Needed for IPTV" dst-address=\
213.75.112.0/21 out-interface=vlan1.4
add action=masquerade chain=srcnat comment="Needed for IPTV" dst-address=\
217.166.0.0/16 out-interface=vlan1.4
add action=masquerade chain=srcnat comment="Hairpin NAT" dst-address=\
10.0.0.0/8 src-address=10.0.0.0/8
add action=masquerade chain=srcnat comment=\
"defconf: masquerade (NOT FOR KPN)" disabled=yes ipsec-policy=out,none \
out-interface-list=WAN src-address=10.0.0.0/8
add action=masquerade chain=srcnat comment=\
"KPN: https://netwerkje.com/config-internetv6" out-interface=pppoe-client \
src-address=10.0.0.0/8
add action=dst-nat chain=dstnat comment="WireGuard RPI" dst-address-list=\
WAN-IP dst-port=51820 protocol=udp to-addresses=10.0.2.0 to-ports=51820
add action=dst-nat chain=dstnat comment=Bitwarden dst-address-list=WAN-IP \
dst-port=7277 protocol=tcp to-addresses=10.0.2.1 to-ports=7277
add action=dst-nat chain=dstnat comment=Homeassistant dst-address-list=WAN-IP \
dst-port=443 protocol=tcp to-addresses=10.0.2.1 to-ports=8123
add action=dst-nat chain=dstnat comment="NAS NAT" dst-address-list=WAN-IP \
dst-port=444 protocol=tcp to-addresses=10.0.0.10 to-ports=443
add action=dst-nat chain=dstnat comment="8123 to 8123" disabled=yes \
dst-address-list=WAN-IP dst-port=8123 protocol=tcp to-addresses=10.0.0.12 \
to-ports=8123
add action=dst-nat chain=dstnat comment="port80 to 80 from_WAN to HASS" \
dst-address-list=WAN-IP dst-port=80 in-interface="ether1-Internet Acces" \
protocol=tcp to-addresses=10.0.2.1 to-ports=80
add action=dst-nat chain=dstnat comment="port80 to 80 from_WAN to NAS" \
disabled=yes dst-address-list=WAN-IP dst-port=80 in-interface=\
"ether1-Internet Acces" protocol=tcp to-addresses=10.0.0.10 to-ports=80
/ip upnp
set show-dummy-rule=no
/ipv6 address
# address pool error: pool not found: 0 (4)
add address=::1 from-pool=0 interface=bridge-LAN
/ipv6 dhcp-client
add add-default-route=yes comment=\
"KPN: https://netwerkje.com/config-internetv6" disabled=yes interface=\
pppoe-client pool-name=0 pool-prefix-length=48 request=prefix \
use-peer-dns=no
/ipv6 firewall filter
add action=accept chain=input connection-state=established in-interface=\
pppoe-client
add action=accept chain=input connection-state=related in-interface=\
pppoe-client
add action=accept chain=input comment="DHCPv6 for public addresses" \
dst-address=fe80::/64 dst-port=546 in-interface=pppoe-client log-prefix=\
DHCPv6 protocol=udp
add action=reject chain=input in-interface=pppoe-client reject-with=\
icmp-port-unreachable
add action=accept chain=forward connection-state=related in-interface=\
pppoe-client
add action=accept chain=forward connection-state=established in-interface=\
pppoe-client
add action=reject chain=forward in-interface=pppoe-client reject-with=\
icmp-no-route
/ipv6 nd
set r find default=yes ] disabled=yes
/routing igmp-proxy
set quick-leave=yes
/routing igmp-proxy interface
add alternative-subnets=0.0.0.0/0 comment=KPN interface=vlan1.4 upstream=yes
add comment=KPN interface=bridge-LAN
/system clock
set time-zone-name=Europe/Amsterdam
/system identity
set name=Rmpz_router
/system package update
set channel=long-term
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
