Hello,
I have very simple config. ether1 is WAN port and here comes internet and tv from ISP. Other ports combined into on bridge and on other2 sits TV (it allows media casting like youtube and music) and on ether4 sits TV-box. Looking on connections into Torch I see that iptv traffic is not marked. TV box can see channel list, syncing time and show recommendation from ISP (that means it has access to internet). I've upgrade to 7.14 so I have IGMP Proxy out of box. Here my config, did I miss something:
Thanks
I have very simple config. ether1 is WAN port and here comes internet and tv from ISP. Other ports combined into on bridge and on other2 sits TV (it allows media casting like youtube and music) and on ether4 sits TV-box. Looking on connections into Torch I see that iptv traffic is not marked. TV box can see channel list, syncing time and show recommendation from ISP (that means it has access to internet). I've upgrade to 7.14 so I have IGMP Proxy out of box. Here my config, did I miss something:
Code:
# 2024-03-18 23:02:05 by RouterOS 7.14.1# software id = SHWC-BANU## model = CRS109-8G-1S-2HnD# serial number = D54E0D114A32/interface bridgeadd admin-mac=08:55:31:62:27:46 auto-mac=no comment=defconf igmp-snooping=yes \ igmp-version=3 mld-version=2 multicast-querier=yes name=bridge \ port-cost-mode=short/interface ethernetset [ find default-name=ether1 ] mac-address=30:EB:25:24:6E:CC/interface wirelessset [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX \ country=estonia disabled=no distance=indoors frequency=2432 installation=\ indoor mode=ap-bridge ssid=OhanaKii wireless-protocol=802.11/interface listadd comment=defconf name=WANadd comment=defconf name=LAN/interface lte apnset [ find default=yes ] ip-type=ipv4 use-network-apn=no/interface wireless security-profilesset [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\ dynamic-keys supplicant-identity=MikroTik/ip pooladd name=dhcp ranges=192.168.88.10-192.168.88.254/ip dhcp-serveradd address-pool=dhcp interface=bridge lease-time=1d10m name=defconf/portset 0 name=serial0/interface bridge filteradd action=drop chain=output out-interface=wlan1 packet-type=multicast/interface bridge portadd bridge=bridge comment=defconf ingress-filtering=no interface=ether2 \ internal-path-cost=10 path-cost=10add bridge=bridge comment=defconf ingress-filtering=no interface=ether3 \ internal-path-cost=10 path-cost=10add bridge=bridge comment=defconf ingress-filtering=no interface=ether4 \ internal-path-cost=10 path-cost=10add bridge=bridge comment=defconf ingress-filtering=no interface=ether5 \ internal-path-cost=10 path-cost=10add bridge=bridge comment=defconf ingress-filtering=no interface=ether6 \ internal-path-cost=10 path-cost=10add bridge=bridge comment=defconf ingress-filtering=no interface=ether7 \ internal-path-cost=10 path-cost=10add bridge=bridge comment=defconf ingress-filtering=no interface=ether8 \ internal-path-cost=10 path-cost=10add bridge=bridge comment=defconf ingress-filtering=no interface=sfp1 \ internal-path-cost=10 path-cost=10add bridge=bridge comment=defconf ingress-filtering=no interface=wlan1 \ internal-path-cost=10 path-cost=10/ip firewall connection trackingset udp-timeout=10s/ip neighbor discovery-settingsset discover-interface-list=LAN/ip settingsset max-neighbor-entries=8192/ipv6 settingsset disable-ipv6=yes max-neighbor-entries=8192/interface detect-internetset detect-interface-list=LAN/interface list memberadd comment=defconf interface=bridge list=LANadd comment=defconf interface=ether1 list=WAN/interface ovpn-server serverset auth=sha1,md5/ip addressadd address=192.168.88.1/24 comment=defconf interface=bridge network=\ 192.168.88.0/ip dhcp-clientadd comment=defconf interface=ether1/ip dhcp-server leaseadd address=192.168.88.251 client-id=1:be:86:fb:f1:c9:a0 mac-address=\ BE:86:FB:F1:C9:A0 server=defconfadd address=192.168.88.249 client-id=1:72:5b:69:25:b2:7e mac-address=\ 72:5B:69:25:B2:7E server=defconf/ip dhcp-server networkadd address=192.168.88.0/24 comment=defconf gateway=192.168.88.1/ip dnsset allow-remote-requests=yes/ip dns staticadd address=192.168.88.1 comment=defconf name=router.lan/ip firewall filteradd action=accept chain=input comment=\ "defconf: accept established,related,untracked" connection-state=\ established,related,untrackedadd action=accept chain=input in-interface=ether1 protocol=udpadd action=accept chain=forward in-interface=ether1 protocol=udpadd action=accept chain=input in-interface=ether1 protocol=igmpadd action=accept chain=forward in-interface=ether1 protocol=igmpadd action=drop chain=input comment="defconf: drop invalid" connection-state=\ invalid disabled=yesadd action=accept chain=input comment="defconf: accept ICMP" protocol=icmpadd action=accept chain=input comment=\ "defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1add action=drop chain=input comment="defconf: drop all not coming from LAN" \ disabled=yes in-interface-list=!LANadd action=accept chain=forward comment="defconf: accept in ipsec policy" \ ipsec-policy=in,ipsecadd action=accept chain=forward comment="defconf: accept out ipsec policy" \ ipsec-policy=out,ipsecadd action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ connection-state=established,related hw-offload=yesadd action=accept chain=forward comment=\ "defconf: accept established,related, untracked" connection-state=\ established,related,untrackedadd action=drop chain=forward comment="defconf: drop invalid" \ connection-state=invalid disabled=yesadd action=drop chain=forward comment=\ "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ connection-state=new disabled=yes in-interface-list=WAN/ip firewall natadd action=masquerade chain=srcnat comment="defconf: masquerade" \ ipsec-policy=out,none out-interface-list=WAN/lcdset time-interval=hour/routing bfd configurationadd disabled=no interfaces=all min-rx=200ms min-tx=200ms multiplier=5/routing igmp-proxy interfaceadd alternative-subnets=0.0.0.0/0 interface=ether1 upstream=yesadd interface=bridge/system clockset time-zone-name=Europe/Tallinn/system noteset show-at-login=no/tool mac-serverset allowed-interface-list=LAN/tool mac-server mac-winboxset allowed-interface-list=LAN
Statistics: Posted by kvitek79 — Mon Mar 18, 2024 11:18 pm