Hei! er i setup fasen med en Edgerouter 4 selv her nå.
SETUP:
Eth0 er koblet direkte til IPTV boks(nye)
Eth1 er LAN (alt annet på nettverket. skal ikke ha multicast)
Eth3 er fiber koblet direkte
Situasjon:
NRK osv fungerer men har ikke noe tilkobling til altibox sine tjenester på IPTV
Config:
IGMP-proxy
Kode
interface eth0 {
alt-subnet 0.0.0.0/0
role downstream
threshold 1
}
interface eth3.101 {
alt-subnet 0.0.0.0/0
role upstream
threshold 1
}
Interfaces
Kode
ethernet eth0 {
address 192.168.10.1/24
description IPTV
duplex auto
firewall {
in {
modify SOURCE_ROUTE
}
}
mtu 1500
speed auto
}
ethernet eth1 {
address 192.168.1.1/24
description LAN1
duplex auto
firewall {
in {
modify SOURCE_ROUTE
}
}
speed auto
}
ethernet eth2 {
address 10.0.0.1/24
description LAN2
duplex auto
speed auto
}
ethernet eth3 {
description "WAN IN SFP"
duplex auto
mac (altibox FMG mac)
speed auto
vif 100 {
description ALTIBOX_CONFIG
mtu 1500
}
vif 101 {
address dhcp
description "Altibox IPTV"
dhcp-options {
default-route no-update
default-route-distance 210
name-server update
}
}
vif 102 {
address dhcp
description "Altibox Internet"
firewall {
in {
name WAN_IN
}
local {
name WAN_LOCAL
}
}
}
}
DHCP server
Kode
shared-network-name IPTV {
authoritative disable
subnet 192.168.10.0/24 {
dns-server 109.247.114.4 (DHCP DNS #1 fra vlan 101 ETH3)
dns-server 92.220.228.70 (DHCP DNS #2 fra vlan 101 ETH3)
lease 86400
start 192.168.10.50 {
stop 192.168.10.100
}
}
}
Static Route:
Kode
route 172.21.0.0/16 {
next-hop 10.168.224.1 {
}
}
table 11 {
route 0.0.0.0/0 {
next-hop 10.168.224.1 {
}
}
}
table 12 {
route 0.0.0.0/0 {
next-hop 109.247.40.1 {
}
}
}
Firewall (for ruting av IPTV til VLAN 101 på ETH3)
Kode
rule 10 {
action modify
description "traffic from IPTV to ETH3.101"
modify {
table 11
}
source {
address 192.168.10.0/24
}
}
rule 20 {
action modify
description "traffic from LAN to ETH3.102"
modify {
table 12
}
source {
address 192.168.1.0/24
}
}
litt debug:
Kode
show ip route
IP Route Table for VRF "default"
S *> 0.0.0.0/0 [210/0] via 109.247.40.1, eth3.102
C *> 10.168.224.0/23 is directly connected, eth3.101
C *> 109.247.40.0/22 is directly connected, eth3.102
C *> 127.0.0.0/8 is directly connected, lo
S *> 172.21.0.0/16 [1/0] via 10.168.224.1, eth3.101
C *> 192.168.1.0/24 is directly connected, eth1
C *> 192.168.10.0/24 is directly connected, eth0
Kode
show ip multicast mfc
239.255.255.250 192.168.1.186 eth3.101 eth1 39 5.68KB 39
239.255.255.250 192.168.1.175 eth3.101 eth1 88 25.48KB 88
239.255.255.250 192.168.1.206 eth3.101 eth1 128 44.04KB 128
239.255.255.250 192.168.1.4 eth3.101 eth1 36 10.82KB 36
239.254.127.63 192.168.1.40 eth3.101 eth1 17 1.93KB 17
239.255.255.250 192.168.1.197 eth3.101 eth1 241 72.57KB 241
239.255.255.250 192.168.1.144 eth3.101 eth1 510 60.89KB 510
239.255.255.250 192.168.1.58 eth3.101 eth1 283 78.82KB 283
239.254.127.63 10.168.222.1 eth3.101 eth1 1 32.00b 0
noen ideer?
NAT config:
Kode
rule 5010 {
description "masquerade for WAN"
outbound-interface eth3.102
type masquerade
}
rule 5011 {
description "MASQ for ALTIBOX IPTV"
destination {
address 172.21.0.0/16
}
outbound-interface eth3.101
protocol all
type masquerade
}
NAT config:
Kode
rule 5010 {
description "masquerade for WAN"
outbound-interface eth3.102
type masquerade
}
rule 5011 {
description "MASQ for ALTIBOX IPTV"
destination {
address 172.21.0.0/16
}
outbound-interface eth3.101
protocol all
type masquerade
}
Sist endret av silentspy; 14. mars 2018 kl. 01:07.
Grunn: Automatisk sammenslåing med etterfølgende innlegg.