What's new

AX88U IPTV behind a netgear switch

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!


New Around Here

- My fiber network ISP (Movistar Spain) uses VID 6 for Internet and VID 2 for IPTV, and VID 3 for VOIP (but I do not care about it)
- I have an Asus AX88U router which has an hardware limitation with IGMP proxy and VLAN usage for IPTV at the same time. https://www.snbforums.com/threads/d...roxy-cannot-co-exist-with-iptv-function.59839

So I bought the Netgear GS105Ev2 as mentioned in this comment by @miroco https://www.snbforums.com/threads/d...o-exist-with-iptv-function.59839/#post-524386 in order to enable IGMP snooping and proxy on my AX88U, leveraging the VLAN untagging to the GS105Ev2

So here I am asking questions in order to make this work, I am quite a newbie in networking, I need to understand better how to make this work

Previous setup that works

- the ISP router is managing the VID 6 and VID 2
- AX88U (router mode) has IGMP snooping enabled so I can watch the TV remotely over WIFI, that works wonderfully

ISP Router - AX88U - IPTV.png

What I want to achieve

I want to replace the ISP router, basically

GS105Ev2 - AX88U - IPTV.png

The VLAN untagging is done by the GS105Ev2, I successfully setup WAN PPOE on the AX88U and using Internet correctly.
What I miss now is how to make the IPTV work without using VLAN

I think that this should be possible using bridge on eth1/LAN4 using some commands found here https://wu.renjie.im/blog/network/ax88u-vlan/

My beginning of attempt to do that... But I am seriously lacking network knowledge:

brctl delif br0 eth1
brctl addbr br2
brctl addif br2 eth1
ifconfig br2 $PUBLIC_IP netmask $PUBLIC_NETMASK

What I miss are surely the routes and the iptables rules.

I extracted from the "Movistar Triple VLAN"profile in LAN > IPTV those routes:
# route -e
Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
default         UG        0 0          0 ppp0      *          U         0 0          0 vlan2
$DNS1  UGH       0 0          0 ppp0
$DNS2  UGH       0 0          0 ppp0       *            U         0 0          0 lo     *          U         0 0          0 vlan6   UG        0 0          0 vlan2 UG        0 0          0 vlan2 UG        0 0          0 vlan2   UG        0 0          0 vlan2    *        U         0 0          0 br0   *      UH        0 0          0 ppp0       *            U         0 0          0 br0

On the above the 172.* routes are dynamically created somehow, but I can't find which script/process created it
It looks like the WAN IP is static but also using DHCP, how can I do that too in my scripts? ifconfig dhcp does not work....

I tried udhcpc but that does not seem to work

# udhcpc -i br2
udhcpc: sending discover
udhcpc: sending discover
udhcpc: sending discover
udhcpc: sending discover

# ifconfig vlan2
vlan2     Link encap:Ethernet  HWaddr FC:34:97:84:94:81
          inet addr: $PUBLIC_IP  Bcast:  Mask:
          RX packets:190 errors:0 dropped:0 overruns:0 frame:0
          TX packets:32 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:18620 (18.1 KiB)  TX bytes:1508 (1.4 KiB)

Relevant part of iptables-save

# iptable-save

.... 8< ... snip

-A INPUT -d -p igmp -j ACCEPT
-A INPUT -d -p udp -m udp ! --dport 1900 -j ACCEPT
-A INPUT -s -i ppp0 -j DROP
-A INPUT -s -i ppp0 -j DROP
-A INPUT -s -i vlan2 -j ACCEPT
-A INPUT -p udp -m udp --dport 520 -j ACCEPT
-A INPUT -p udp -m udp --sport 67 --dport 68 -j ACCEPT
-A INPUT -p icmp -j INPUT_ICMP
-A INPUT -j logdrop
-A FORWARD -d -p udp -j ACCEPT
-A FORWARD -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD ! -i br0 -o ppp0 -j other2wan
-A FORWARD ! -i br0 -o vlan6 -j other2wan
-A FORWARD ! -i br0 -o vlan2 -j other2wan
-A FORWARD -i br0 -o br0 -j ACCEPT
-A FORWARD -m state --state INVALID -j logdrop
-A FORWARD -m conntrack --ctstate DNAT -j ACCEPT
-A FORWARD -m state --state NEW -j OVPN
-A FORWARD -i br+ -p tcp -m tcp --dport 853 -j DNSFILTER_DOT
-A FORWARD -j logdrop
-A OUTPUT -p udp -m udp --dport 53 -m u32 --u32 "0x0>>0x16&0x3c@0x8>>0xf&0x1=0x0" -j OUTPUT_DNS
-A OUTPUT -p tcp -m tcp --dport 53 -m u32 --u32 "0x0>>0x16&0x3c@0xc>>0x1a&0x3c@0x8>>0xf&0x1=0x0" -j OUTPUT_DNS
-A DNSFILTER_DOT ! -d -j REJECT --reject-with icmp-port-unreachable
-A INPUT_ICMP -p icmp -m icmp --icmp-type 8 -j RETURN
-A INPUT_ICMP -p icmp -m icmp --icmp-type 13 -j RETURN
-A INPUT_PING -i ppp0 -p icmp -j logdrop
-A INPUT_PING -i vlan2 -p icmp -j logdrop


1. The TV box need to access to internet AND the IPTV at the same time otherwise on-demand content cannot be viewed
2. How do I get the dynamic routes 172.* ? Through dhcp?
3. What am I missing here?

Thank you for anybody who could help me with that.

Similar threads

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!