Hallo allemaal,
ik ben sinds kort overgestapt op een MikroTik L009UiGS-RM router ter vervaning van de experia v10. Maar sindsdien merk ik dat beide mijn diw7022 iptv ontvanger langzaam wisselt van zender. Dit was met de v10 zeker niet het geval. Voorheen liepen beide iptv ontvangers zelfs via een unifi Toughswitch pro die geen IMGP ondersteund, en toen werkte het feilloos.
De huidige setup is als volgt:
-Tussen NT en Mtik Lan kabel op ETH01
-Unifi switch op ETH02
-DIW7022 op ETH07 en ETH08
Ik heb de configuratie gevolgd van EIGENROUTER.NL, en de adres reeksen aanepast naar eigen wens. Zie onderstaand.
Internet
/interface vlan
add interface=ether1 name=vlan1.6 vlan-id=6
Now we make the pppoe connection with KPN
/interface pppoe-client
add add-default-route=yes allow=pap disabled=no interface=vlan1.6 \
keepalive-timeout=20 max-mru=1500 max-mtu=1500 name=pppoe-client \
password=kpn profile=default user=kpn
We will now add the bridge interface for the LAN
/interface bridge
add name=local arp=proxy-arp
Add the necessary ports to your bridge
/interface bridge port
add bridge=local interface=ether2
Set the gateway address for the LAN. You can change this to your needs.
/ip address
add address=10.0.0.1/24 interface=local
Set DNS forwarders. In this example we will be using Google DNS. We will also use the Mikrotik as DNS server for the LAN.
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
Configure a basic firewall. For proper hardening, refer to this Mikrotik article: Mikrotik Router Hardening. The following filter rules only cover the input chain on the pppoe-client. This means the LAN side is not hardened.
/ip firewall filter
add action=accept chain=input in-interface=pppoe-client protocol=icmp
add action=accept chain=input connection-state=established,related
add action=drop chain=input in-interface=pppoe-client
Configure outbound NAT
/ip firewall nat
add action=masquerade chain=srcnat out-interface=pppoe-client
Configure a DHCP server for the LAN. If you changed anything in the IP Address section above, also change the values here to match.
/ip pool
add name=thuisnetwerk ranges=192.168.2.50-192.168.2.254
/ip dhcp-server
add address-pool=thuisnetwerk authoritative=yes interface=local \
lease-time=8h name=dhcp-home
/ip dhcp-server network
add address=192.168.2.0/24 dns-server=192.168.2.1 domain=home.local gateway=\
192.168.2.1
Now, if you connect your device to ether2, you should get an IP address via DHCP in the 192.168.2.0/24 range, and you will have internet access. We recommend updating the Mikrotik device to the latest Stable version of Routeros 6 or 7. You can do this at System > Packages > Check for Updates. Also update the firmware at System > RouterBOARD > Upgrade. Both updates require a restart.
TV configuratie
Add a VLAN interface with VLAN id 4 and add it to ether1. We are assuming that ether1 is the port that connects to your NTU or (bridged) Modem.
/interface vlan
add interface=ether1 name=vlan1.4 vlan-id=4
Turn on igmp-snooping on the bridge interface. The command below adds a bridge. If you already have a bridge that you want to use for this, only set igmp-snooping on it to yes.
/interface bridge
add arp=proxy-arp igmp-snooping=yes name=local protocol-mode=none
Add DHCP Options
/ip dhcp-server option
add code=60 name=option60-vendorclass value="'IPTV_RG'"
add code=28 name=option28-broadcast value="'192.168.2.255'"
/ip dhcp-server option sets
add name=IPTV options=option60-vendorclass,option28-broadcast
Configure the dhcp client and its options
/ip dhcp-client option
add code=60 name=option60-vendorclass value="'IPTV_RG'"
/ip dhcp-client
add add-default-route=special-classless default-route-distance=210 dhcp-options=option60-vendorclass disabled=no \
interface=vlan1.4 use-peer-dns=no use-peer-ntp=no
Configure the IGMP Proxy
/routing igmp-proxy interface
add alternative-subnets=0.0.0.0/0 interface=vlan1.4 upstream=yes
add interface=local
/routing igmp-proxy
set quick-leave=yes
Add firewall rules
/ip firewall nat
add action=masquerade chain=srcnat comment="IPTV" dst-address=213.75.0.0/16 out-interface=vlan1.4
add action=masquerade chain=srcnat comment="IPTV" dst-address=217.166.0.0/16 out-interface=vlan1.4
add action=masquerade chain=srcnat comment="IPTV" dst-address=10.207.0.0/20 out-interface=vlan1.4
/ip firewall filter
add action=accept chain=input comment="IPTV IGMP" dst-address=224.0.0.0/4 in-interface=vlan1.4 protocol=igmp
The DHCP options for the existing DHCP Server don't "just work", you have to select them in the DHCP Network. See IP > DHCP Server > Networks and double click your existing network. Add the option set to it with the dropdown menu.
Note that IPTV will only work on ports that you add to the bridge interface "local" in Bridge > Ports. Not on switches behind the Mikrotik router. Keep this in mind when budgetting interfaces to client devices or switches or any other device that might need an ethernet connection.
Dit is precies wat ik gedaan heb, alle funties werken alleen het wisselen van kanaal duurt dus erg lang. Hopelijk is er iemand die me kan vertellen waar het mis gaat. alvast bedankt