Setting up IPTV from Rostelecom on MikroTik routers
At one time, when I bought the MikroTik router, in addition to the basic Internet settings, I had the task of ensuring the operation of IPTV, until that moment I had D-link installed by Rostelecom. The very basic setting of Ineta on microtic took about 10 minutes, but I had to tinker with IPTV. All manuals read by me then did not take into account many points, to which I reached by picking up the settings of the long-suffering D-link, and without which it would not normally work in this circuit. In this article I want to indicate the universal instructions I received in this situation.
First of all, we will update the firmware to the latest. Connect to our router via Winbox, go to [System] -> [Packages] -> [Check for updates]. If a newer version of Routeros is installed than you have installed on your device, click Download & Install and the new version will be downloaded and the router will reboot.
After completing these steps, go here and select the packages that need to be downloaded for your device, in my case this is the haP series and I select the extra packages for the current version (6.43.4 at the time of this writing).
The archive will be downloaded from which you will need to unpack the multicast file, open the files item in the winbox and drag the file we have unpacked right there. After that, you need to restart our router (go to [System] -> [Reboot]).
After rebooting, the IGMP Proxy item should appear in the Routing section, if this did not happen, check the previous steps - whether we installed the required package (for the device we downloaded, the firmware versions). If successful, go ahead.
In the IGMP Proxy, on the first tab, click the [+] sign to create the so-called Upstream. In the interface item, we select the port where the cord from the provider is inserted, even if you are using a PPPoE connection, we choose the physical port, this is a very important point. We tick the Upstream checkbox and in the Alternative Subnets set 0.0.0.0/0 and click OK. Create a second rule for downstream. In the interface, select All, do not put a check mark upstream, no further action is required here, just click ok and that's it.
The next step is to configure the firewall. Go to [IP] -> [Firewall] and [+], create a new rule Chain-> forward, protocol-> udp, In interface-> ether1 (the port to which the provider cable is connected). Action-> accept.
Create a second rule for IGMP. The chain also remains forward, protocol-> igmp, In interface-> ether1, Action-> accept. We drag the created rules above forbidding.
Next, you need to block the passage of multicast traffic to the wireless network. Go to the [Bridge] -> Filters tab -> [+]. Select the chain Output, out. Interface -> wlan1 that is our desired wireless network. On the Advanced tab in the packet type, select multicast and on the Action tab, assign the action to drop, that is, a ban. Do not forget to click OK to save the settings.
And then perhaps the most important moment comes, if you have an Internet connection via PPPoE, then you need to add an 1.0.0.1 IP address with a 30-bit mask to the physical interface where the cable from the provider is connected. By the way, this was the problem when I first set up the Mikrotik, without this IP address, nothing worked, but I found out that it was him who needed to drive it by opening the D-link settings. Go to [IP] -> [Adresses] and [+] and add the following settings. If a direct connection is used without raising any tunnels (called IPoE), then the previous actions will suffice and skip this item.
I draw attention to a very important point, after all the actions that have been taken, it is necessary to restart the prefix if it was turned on and only then check the result of the settings. In case of problems, first of all I advise you to check the rules in the firewall.
The operator can also use a scheme using VLAN, in this case, you need to create a sub-interface with a vlan-th transmitting iptv on the port to which you have the cord from the provider, you can try to find out its number through technical support. We go to [interfaces] -> [VLAN] and press [+] to create a new one, specify its name, it is not essential and we need for convenience of administration, the VLAN ID needs to specify the one that the provider gives, for example, take 234 and in the interface port in which the provider cable is connected. Click OK.
Then we create a new bridge and add the created VLAN and the port to which your set-top box is connected, you must first remove this port from another bridge if it is connected to any other bridge.
In the properties of the bridge itself, I recommend setting STP to none if problems arise.
In principle, I described quite detailed instructions on this topic. That's all. If you have any questions and comments, write to the comments, ready to answer.
First of all, we will update the firmware to the latest. Connect to our router via Winbox, go to [System] -> [Packages] -> [Check for updates]. If a newer version of Routeros is installed than you have installed on your device, click Download & Install and the new version will be downloaded and the router will reboot.
After completing these steps, go here and select the packages that need to be downloaded for your device, in my case this is the haP series and I select the extra packages for the current version (6.43.4 at the time of this writing).
The archive will be downloaded from which you will need to unpack the multicast file, open the files item in the winbox and drag the file we have unpacked right there. After that, you need to restart our router (go to [System] -> [Reboot]).
After rebooting, the IGMP Proxy item should appear in the Routing section, if this did not happen, check the previous steps - whether we installed the required package (for the device we downloaded, the firmware versions). If successful, go ahead.
In the IGMP Proxy, on the first tab, click the [+] sign to create the so-called Upstream. In the interface item, we select the port where the cord from the provider is inserted, even if you are using a PPPoE connection, we choose the physical port, this is a very important point. We tick the Upstream checkbox and in the Alternative Subnets set 0.0.0.0/0 and click OK. Create a second rule for downstream. In the interface, select All, do not put a check mark upstream, no further action is required here, just click ok and that's it.
The next step is to configure the firewall. Go to [IP] -> [Firewall] and [+], create a new rule Chain-> forward, protocol-> udp, In interface-> ether1 (the port to which the provider cable is connected). Action-> accept.
Create a second rule for IGMP. The chain also remains forward, protocol-> igmp, In interface-> ether1, Action-> accept. We drag the created rules above forbidding.
Next, you need to block the passage of multicast traffic to the wireless network. Go to the [Bridge] -> Filters tab -> [+]. Select the chain Output, out. Interface -> wlan1 that is our desired wireless network. On the Advanced tab in the packet type, select multicast and on the Action tab, assign the action to drop, that is, a ban. Do not forget to click OK to save the settings.
And then perhaps the most important moment comes, if you have an Internet connection via PPPoE, then you need to add an 1.0.0.1 IP address with a 30-bit mask to the physical interface where the cable from the provider is connected. By the way, this was the problem when I first set up the Mikrotik, without this IP address, nothing worked, but I found out that it was him who needed to drive it by opening the D-link settings. Go to [IP] -> [Adresses] and [+] and add the following settings. If a direct connection is used without raising any tunnels (called IPoE), then the previous actions will suffice and skip this item.
I draw attention to a very important point, after all the actions that have been taken, it is necessary to restart the prefix if it was turned on and only then check the result of the settings. In case of problems, first of all I advise you to check the rules in the firewall.
The operator can also use a scheme using VLAN, in this case, you need to create a sub-interface with a vlan-th transmitting iptv on the port to which you have the cord from the provider, you can try to find out its number through technical support. We go to [interfaces] -> [VLAN] and press [+] to create a new one, specify its name, it is not essential and we need for convenience of administration, the VLAN ID needs to specify the one that the provider gives, for example, take 234 and in the interface port in which the provider cable is connected. Click OK.
Then we create a new bridge and add the created VLAN and the port to which your set-top box is connected, you must first remove this port from another bridge if it is connected to any other bridge.
In the properties of the bridge itself, I recommend setting STP to none if problems arise.
In principle, I described quite detailed instructions on this topic. That's all. If you have any questions and comments, write to the comments, ready to answer.
Source: https://habr.com/ru/post/437734/