OPNsense Forum

English Forums => Tutorials and FAQs => Topic started by: sToRmInG on June 28, 2020, 08:23:31 pm

Title: HOW TO - Configure OPNsense for TV7 (init7) Multicast Stream
Post by: sToRmInG on June 28, 2020, 08:23:31 pm
I had a hard time figuring out that the Multicast IP to Multicast MAC translation doesn't properly work.
The issue itself is described here: https://github.com/opnsense/core/issues/3629

Therefore I decided to write a quick tutorial for init7 (https://www.init7.net) customers to properly configure Multicast on OPNsense for TV7.

Credits:

Note: the following step-by-step guide applies to init7's TV7 Multicast stream. The configuration might differ if you use this guide to achieve similar results for other Multicast streams.

1. Install plugin
To get Multicast to work on OPNsense we are going to use os-igmp-proxy.

2. Configure IGMP Proxy
To get started we need to configure IGMP Proxy.
This will do it for the IGMP Proxy config.
We will now move along to the Firewall Rules.

3. Firewall Rules

LAN
First we have to enable allow options on the default LAN rule Default allow LAN to any rule.

WAN
Now we have to properly configure the WAN rules to allow IGMP and Multicast traffic.
With the firewall properly configured, everything should be running fine, right?

Yes, that's where this GitHub issue comes into play.
We actually need one more rule.

Floating
We need to add a floating rule to fix the Multicast MAC address issue.

Every Multicast IP address resolves into a predefined Multicast MAC address
Here are some information about it including a calculator: http://www.dqnetworks.ie/toolsinfo.d/multicastaddressing.html

If the Multicast MAC address does not match the Multicast IP address one can only guess what the gateway will do with it.
Therefore we have to add a new floating rule:
With this rule in place we are able to properly receive the TV7 Multicast stream.
Title: Re: HOW TO - Configure OPNsense for TV7 (init7) Multicast Stream
Post by: hidalgo on December 19, 2020, 12:51:25 am
I just try to follow your how-to but didn’t get any stream. I’m running a pfSense 2.4.5; hope that’s not the issue here. I didn’t get nothing in the logs. So I don’t have any clue where to start the debugging.
I do not understand the last step about floating. What should I do there about MAC addresses?
Any hint is welcome.
Title: Re: HOW TO - Configure OPNsense for TV7 (init7) Multicast Stream
Post by: sToRmInG on May 10, 2021, 09:20:18 pm
Sorry for the delay in writing @hidalgo

For pfSense the "Floating step" shouldn't be necessary.
The linked articles from Philip Hofstetter and Philipp Häfelfinger should explain the pfSense configuration pretty well.
Title: Re: HOW TO - Configure OPNsense for TV7 (init7) Multicast Stream
Post by: mephistopheles on September 11, 2021, 10:26:00 pm
Worked great, thank you very much! What a time saver :D
Title: Re: HOW TO - Configure OPNsense for TV7 (init7) Multicast Stream
Post by: Morta on September 09, 2022, 03:42:49 pm
Hi

I got following error in debug and verbose mode

igmpproxy -d -v /usr/local/etc/igmpproxy.conf

Code: [Select]
adding VIF, Ix 0 Fl 0x0 IP 0xeaeac355 ixl1, Threshold: 1, Ratelimit: 0
adding VIF, Ix 1 Fl 0x0 IP 0x0101a8c0 bridge0, Threshold: 1, Ratelimit: 0
Joining group 224.0.0.2 on interface bridge0
Joining group 224.0.0.22 on interface bridge0
sendto to 224.0.0.1 on 192.168.1.1; Errno(13): Permission denied
RECV Membership query   from 192.168.1.1     to 224.0.0.1
RECV V3 member report   from 192.168.1.104   to 224.0.0.22
Inserted route table entry for 239.255.255.250 on VIF #1
Joining group 239.255.255.250 on interface ixl1
RECV V3 member report   from 192.168.1.104   to 224.0.0.22
Updated route entry for 239.255.255.250 on VIF #1
The IGMP message was local multicast. Ignoring.
RECV V3 member report   from 192.168.1.104   to 224.0.0.22
Updated route entry for 239.255.255.250 on VIF #1
RECV V3 member report   from 192.168.1.104   to 224.0.0.22
Updated route entry for 239.255.255.250 on VIF #1
RECV V2 member report   from 192.168.1.1     to 224.0.0.2
The IGMP message was from myself. Ignoring.
RECV V2 member report   from 192.168.1.1     to 224.0.0.22
The IGMP message was from myself. Ignoring.
sendto to 224.0.0.1 on 192.168.1.1; Errno(13): Permission denied
RECV Membership query   from 192.168.1.1     to 224.0.0.1
RECV V2 member report   from 192.168.1.1     to 224.0.0.22
The IGMP message was from myself. Ignoring.

How I can fix this error?

Code: [Select]
sendto to 224.0.0.1 on 192.168.1.1; Errno(13): Permission denied