[theosaurus]

I dont know if this is possible, I searched the forum and read the wiki but was not able to solve this..
I apologize if this been answered millions of times already..

Asus RT-AC68U DD-WRT v3.0-r34760
Netgear R600v2 DD-WRT v3.0-r34578

Im using the asus as main router (operating mode Gateway) and the Netgear as accesspoint (operating mode router)
My ISP distributes IPTV with VLAN tagg 845, from the asus to the netgear I have one cable and in the netgear I have the tvbox, reciver,
apple-tv connected with cable.

What Im trying to figure out is how to achive both internet and iptv to be distrubted from the asus to netgear in one cable, and
in the netgear configure so all units works.
Not to forget the wifi, block multicast on both the asus and netgear.
I tried running the cmd on the netgear.
insmod ebtables
insmod ebtable_filter
insmod ebt_pkttype
ebtables -A FORWARD -o "interface to block" --pkttype-type multicast -j DROP
ebtables -A OUTPUT -o "interface to block" --pkttype-type multicast -j DROP

Not sure what interface to put, checking status -> wireless the interface for wireless is wl0 / wl1, have tried this and also eth1.
Running the cmd from Administration -> commands just gives me "processing, please wait" nothings happends, so I tried with telnet
and when checking with "ps" I see that the syntax is running.

[theosaurus]

Under administration -> commands I tried to add
insmod ebtables
insmod ebtable_filter
insmod ebt_pkttype
insmod ebt_ip
ebtables -A FORWARD -o eth1 -p ipv4 --pkttype-type multicast --ip-source ! 192.168.1.0/255.255.255.0 -j DROP
ebtables -A FORWARD -o eth2 -p ipv4 --pkttype-type multicast --ip-source ! 192.168.1.0/255.255.255.0 -j DROP

And save it to the Firewall and reboot, when rebooted I checked with ps via telnet and whats showing is:
ebtables -A FORWARD -o eth1 -p ipv4 --pkttype-type multicast --ip-source ! 192.168.1.0/255.255.255.0 -j DROP
ebtables -A FORWARD -o eth1 -p ipv4 --pkttype-type multicast --ip-source ! 192.168.1.0/255.255.255.0 -j DROP

eth1 shows up twice, and the wifi is not working.

Also tried "ebtables -L" but nothing happends, and I have to abort the command.

[theosaurus]

I flashed my routers with the builds from Kong so now:
RT-AC68U running v3.0-r33675M
R6300v2 running v3.0-r33675M

When I changed the firmware I was able to get ebtables working on the R6300v2, so when Im using my ISP gateway connected to the R6300 iptv works and wifi.

But I want to change the ISP gateway to the RT-AC68U, and Im trying to figure out how to tag one port with the VID for iptv (845) and also be able to use internet at the same port.

[Per Yngve Berg]

Don't use ebtales to control multicast. It's controlled by igmpproxy and disable the interfaces in igmpproxy.conf file.

Create a separate vlan for the IPTV device that is unbridged.

Using VID 865 is not easy with Broadcom routers. They only support vlan 0-16. You can load a module that shifts the 16 vlan window to a higher range.

You are better off with an Atheros base unit that supports all 4096 vlans.

[theosaurus]

I tried using igmprt but get "There must be at least 2 Vif's where one is upstream".
The conf file looks like this.
quickleave
phyint vlan2 upstream ratelimit 0 threshold 1
phyint br0 disabled
phyint eth0 disabled
phyint eth1 disabled
phyint eth2 disabled
phyint vlan1 disabled
phyint vlan3 downstream ratelimit 0 threshold 1
phyint lo disabled

On br0 I set Igmp snooping "ON".

Also tried to figure out how to create a separate vlan for the iptv.

For ex on the tab "VLAN" i changed port 4 to VLAN3,
It gives me on the tab "Network" a port that I can set as unbridged, but what to do from there? I tried running igmprt after the vlan3 was created.

In the stock firmare for ex you can set VID to 845, but that leaves me with that port only sendning iptv.

[Per Yngve Berg]

Good so far.

After un-bridging VLAN3, give it an IP address in a separate sub-net and create a DHCP server for it.

A device connected to that port should now pick up an IP address and communicate.

Next step will be making the cable between the two routers a tagged trunk with both VLAN1 and VLAN3


Post the output of "nvram set | grep vlan.*ports" on both routers.

Note that port 4 is usually the one that is numbered as 1 on the casing.

[theosaurus]

This is the output on the RT-AC68U that Im planing on using as a gateway.
"grep vlan.*ports*"
size: 32713 bytes (32823 left)
vlan2ports= 0 5u
vlan3ports=4t 5
vlan1ports=1 2 3 4t 5*

"grep port.vlans":
port5vlans=1 2 3 16
port3vlans=1 18 19 21
port1vlans=1 18 19 21
port4vlans=1 3 18 19 21
port2vlans=1 18 19 21
port0vlans=2 18 19 21

On the R6300v2 that Im using as a accesspoint I havent done any vlan settings just yet, but assuming I have to do the same there or is it only on the gateway and on the accesspoint I need to get the igmprt working?

[Per Yngve Berg]

That looks correct so far. The same VLAN trunk have to be set on the Netgear. The WAN port can be used here.

vlan3ports=0t 1 5
vlan1ports=0t 2 3 5*

[theosaurus]

Ok, on the accesspoint i set vlan like this:
vlan1ports=0t 1 2 3 5*
vlan2ports=4 5u
vlan3ports=0t 4 5

I have done this from cli, in the gui it looks diffrent, only thing checked on vlan 2 is the WAN port.

[Per Yngve Berg]

Do you get an IP address for VLAN3 from the Asus on a device connected to port 4 on the Netgear?

[theosaurus]

Yes, trying to solve how to tag with the VID 845 on the accesspoint, you mentioned there is a module that can be loaded to use higher range?

[Per Yngve Berg]

The VID have to be set on the Asus.

https://www.dd-wrt.com/phpBB2/viewtopic.php?t=86919

There are some files for latest build at the end of the topic.

If you want an easier solution, get a Netgear R7800 that support all 4096 VLANs or put a Smart Switch in front of the router.

[egc]

@quarkysg has made a patched robo switch which should support all vlans, I have not used it.
See: https://www.dd-wrt.com/phpBB2/viewtopic.php?p=1107870#1107870