IGMPProxy1.3 is not starting

[gliddie]

Last update for today:
My Media Receiver 401 is working with the latest version from Opnsense and the igmp proxy from that version.
==> IGMP V3 SSM must be working with that version from IGMP proxy.
Am just wathc ZDF HD, since 10 Minute and the picture is clear and stable.
Zapping works well.
Will now test it over a longer time period and see, if it stays stable.

By the way, I still receive the old IGMP V2 and V3 streams. So far Telekom did not change anything on my circuit, since I had plugged in the Media Receiver 401.

Will be back in a few days after testing it a longer time.

Have a nice weekend,
Gliddie

[gliddie]

Ok,

besides the usual Firewall rules for IGMP, nothing special is required for the Media Receiver 401.
Mine was not starting, as I had an NTP server handed out by my DHCP server.
The MR401 doesnt seam to like NTP servers, other then the Telekom ones.
After disable option 42 and 4 on my dhcp, the MR401 is booting fine now.

Conclusion:
The Media Receiver 401, which requires IMGP V3 SSM, does work with the actual Opnsense version and the igmp proxy which does come with the last version.

Things to consider:

• this igmp proxy version does not recognize virtual upstream interfaces.
  ==> If you have to tag your upstream interface with a VLAN, do that on the modem, infront of your opnsense box.
• Somehow there might be a conflict with the OpenVPN Server. igmp proxy does not start, if you run an Open VPN Site to Site tunnel. I dont have that issue with my IPsec Tunnel.
• The MR401 grabs his firmware files from an TFTP server at Telekom. ==> You will need to run a tftp proxy on Opnsense, if you like to be able to upgrade firmware. If you start your MR401 the first time, it will not boot up, if it cannot reach the TFTP server.

Ok. enough for today, Will give the box my wife for testing it a few days :-)


Have a nice weekend,
Gliddie

[frank_p]

Hi Giddie,

wow.... this is fabuoulus.
I will give it a try....weekend next week..
 thank you very much to figure it out.

how do you have set up the TFTP proxy on opnsense?

thanks  again.
I will let you know next week, the outcome of my results.

Frank

[gliddie]

Hello Frank,

II did plugin the MR401 to a Telekom router and did let it grab the firmware that way.
After that I plugged it back to my Opnsense box.

FreeBSD  comes with a tftp proxy, which we would need to enable. So opnsense could proxy the tftp queries to Telekoms server. There is no plugin for that in opnsense.

I haven't figured out yet how to get that tftp proxy up and running. Am working on it.
For the moment you would need to use a Fritz Box or Telekom router for the very first start.
After that you can remove these and begin using Opnsense with the MR401.

I'll be back soon...

Gliddie

[gliddie]

Hey,
I am now using the MR401 since 2 weeks.
Only firmware upgrades are not possible, since I am struggling with the tftp proxy.
Everything else has been working great.
No issues with watching TV.

Did you try it Frank?

[frank_p]

Hej great news !

i am waiting to one of my friends to connect the MR401 with his speedport. (I have no, since i am using a draytec 132 as endpoint for my VDSL line.
I think i can come back mid of August with results. As far as i have it, i will post it here.

Thanks Giddie,

Best regards
Frank

[franco]

FYI, upstream progress: https://github.com/pali/igmpproxy/pull/38

[gliddie]

That's good news. Thank you for the info.

[nivek1612]

Seems upstream are concentrating on the problems being due to PPPOE

Note I have the same issue but I'm not using a pppoe interface. I'm a VLAN Tagged interface to Orange France for their IPTV service, the connection is established over VLAN 838 PCP 4 using DHCP. So I believe this isn't just PPPOE related. Regressing to v1.2 of IGMProxy and all is well

I have added the above info to the upstream link

[franco]

Would someone with the issue please try this version?

# pkg add -f https://pkg.opnsense.org/FreeBSD:11:amd64/snapshots/igmpproxy-0.2.1_1,1.txz


Cheers,
Franco

[frank_p]

I found an different solution, outside the opnsense box. Means... i am out... sorry.

[franco]

Initially I wanted to push this update with 18.7.3 today but forgot to update the ports for building so this above version will be in 18.7.4. Further feedback until 18.7.4 is released is appreciated.


Cheers,
Franco

[Reiter der OPNsense]

Hello Franco,
igmpproxy-0.2.1_1,1 seems to solve the problem described here:
https://forum.opnsense.org/index.php?topic=9631.msg43820#msg43820
VLAN interfaces are now added by the IGMP proxy.

But behind my VLAN switch IPTV still doesn't work. I don't know if the problem is with my complex switch (which overwhelms me) or with the IGMP proxy. I will occasionally try a simpler switch.

Code: [Select]

root@OPNsense:~ # /usr/local/sbin/igmpproxy -d -vvvv /usr/local/etc/igmpproxy.conf
Searching for config file at '/usr/local/etc/igmpproxy.conf'
Config: Quick leave mode enabled.
Config: Got a phyint token.
Config: IF: Config for interface igb0.
Config: IF: Got upstream token.
Config: IF: Got ratelimit token '0'.
Config: IF: Got threshold token '1'.
Config: IF: Got altnet token 77.109.129.0/19.
Config: IF: Altnet: Parsed altnet to 77.109.129/19.
IF name : igb0
Next ptr : 0
Ratelimit : 0
Threshold : 1
State : 1
Allowednet ptr : 2082b000
Config: Got a phyint token.
Config: IF: Config for interface igb1_vlan101.
Config: IF: Got downstream token.
Config: IF: Got ratelimit token '0'.
Config: IF: Got threshold token '1'.
Config: IF: Got altnet token 192.168.101.0/24.
Config: IF: Altnet: Parsed altnet to 192.168.101/24.
IF name : igb1_vlan101
Next ptr : 0
Ratelimit : 0
Threshold : 1
State : 2
Allowednet ptr : 2082b020
Config: Got a phyint token.
Config: IF: Config for interface igb1_vlan99.
Config: IF: Got disabled token.
IF name : igb1_vlan99
Next ptr : 0
Ratelimit : 0
Threshold : 1
State : 0
Allowednet ptr : 0
Config: Got a phyint token.
Config: IF: Config for interface igb1_vlan103.
Config: IF: Got disabled token.
IF name : igb1_vlan103
Next ptr : 0
Ratelimit : 0
Threshold : 1
State : 0
Allowednet ptr : 0
Config: Got a phyint token.
Config: IF: Config for interface igb1_vlan10.
Config: IF: Got disabled token.
IF name : igb1_vlan10
Next ptr : 0
Ratelimit : 0
Threshold : 1
State : 0
Allowednet ptr : 0
Config: Got a phyint token.
Config: IF: Config for interface igb2.
Config: IF: Got disabled token.
IF name : igb2
Next ptr : 0
Ratelimit : 0
Threshold : 1
State : 0
Allowednet ptr : 0
Config: Got a phyint token.
Config: IF: Config for interface igb1.
Config: IF: Got disabled token.
IF name : igb1
Next ptr : 0
Ratelimit : 0
Threshold : 1
State : 0
Allowednet ptr : 0
buildIfVc: Interface igb0 Addr: xxx.xxx.xxx.xxx, Flags: 0xffff8843, Network: 85.195.255/24
buildIfVc: Interface igb1 Addr: 192.168.111.1, Flags: 0xffff8843, Network: 192.168.111/24
buildIfVc: Interface igb2 Addr: 192.168.102.1, Flags: 0xffff8843, Network: 192.168.102/24
buildIfVc: Interface lo0 Addr: 127.0.0.1, Flags: 0xffff8049, Network: 127/8
buildIfVc: Interface ovpns1 Addr: 10.0.8.1, Flags: 0xffff8051, Network: 10.0.8.1/32
buildIfVc: Interface ovpns2 Addr: 10.0.9.1, Flags: 0xffff8051, Network: 10.0.9.1/32
buildIfVc: Interface igb1_vlan99 Addr: 192.168.99.1, Flags: 0xffff8843, Network: 192.168.99/24
buildIfVc: Interface igb1_vlan101 Addr: 192.168.101.1, Flags: 0xffff8843, Network: 192.168.101/24
buildIfVc: Interface igb1_vlan103 Addr: 192.168.100.1, Flags: 0xffff8843, Network: 192.168.100/24
buildIfVc: Interface igb1_vlan10 Addr: 10.0.0.1, Flags: 0xffff8843, Network: 10.0.0/24
Found config for igb0
Found config for igb1
Found config for igb2
Found config for igb1_vlan99
Found config for igb1_vlan101
Found config for igb1_vlan103
Found config for igb1_vlan10
Found upstrem IF #0, will assing as upstream Vif 2
adding VIF, Ix 0 Fl 0x0 IP 0xeaffc355 igb0, Threshold: 1, Ratelimit: 0
        Network for [igb0] : 85.195.255/24
        Network for [igb0] : 77.109.129/19
adding VIF, Ix 1 Fl 0x0 IP 0x0165a8c0 igb1_vlan101, Threshold: 1, Ratelimit: 0
        Network for [igb1_vlan101] : 192.168.101/24
        Network for [igb1_vlan101] : 192.168.101/24
Got 262144 byte buffer size in 0 iterations
Joining all-routers group 224.0.0.2 on vif 192.168.101.1
joinMcGroup: 224.0.0.2 on igb1_vlan101
Joining all igmpv3 multicast routers group 224.0.0.22 on vif 192.168.101.1
joinMcGroup: 224.0.0.22 on igb1_vlan101
SENT Membership query   from 192.168.101.1   to 224.0.0.1
Sent membership query from 192.168.101.1 to 224.0.0.1. Delay: 10
Created timeout 1 (#0) - delay 10 secs
(Id:1, Time:10)
Created timeout 2 (#1) - delay 21 secs
(Id:1, Time:10)
(Id:2, Time:21)
RECV V2 member report   from 192.168.101.1   to 224.0.0.2
The IGMP message was from myself. Ignoring.
RECV V2 member report   from 192.168.101.1   to 224.0.0.22
The IGMP message was from myself. Ignoring.
RECV Membership query   from 192.168.101.1   to 224.0.0.1
RECV V2 member report   from 192.168.101.200 to 224.0.2.3
Should insert group 224.0.2.3 (from: 192.168.101.200) to route table. Vif Ix : 1
No existing route for 224.0.2.3. Create new.
No routes in table. Insert at beginning.
Inserted route table entry for 224.0.2.3 on VIF #1
Joining group 224.0.2.3 upstream on IF address xxx.xxx.xxx.xxx
joinMcGroup: 224.0.2.3 on igb0

Current routing table (Insert Route):
-----------------------------------------------------
#0: Dst: 224.0.2.3, Age:2, St: I, OutVifs: 0x00000002
-----------------------------------------------------
RECV V2 member report   from xxx.xxx.xxx.xxx  to 224.0.2.3
The IGMP message was from myself. Ignoring.
RECV V2 member report   from 192.168.101.30  to 224.0.0.251
Should insert group 224.0.0.251 (from: 192.168.101.30) to route table. Vif Ix : 1
No existing route for 224.0.0.251. Create new.
Found existing routes. Find insert location.
Inserting after route 224.0.2.3
Inserted route table entry for 224.0.0.251 on VIF #1
Joining group 224.0.0.251 upstream on IF address xxx.xxx.xxx.xxx
joinMcGroup: 224.0.0.251 on igb0

Current routing table (Insert Route):
-----------------------------------------------------
#0: Dst: 224.0.2.3, Age:2, St: I, OutVifs: 0x00000002
#1: Dst: 224.0.0.251, Age:2, St: I, OutVifs: 0x00000002
-----------------------------------------------------
RECV V2 member report   from xxx.xxx.xxx.xxx  to 224.0.0.251
The IGMP message was from myself. Ignoring.
RECV V2 member report   from 192.168.101.1   to 224.0.0.22
The IGMP message was from myself. Ignoring.
The IGMP message was local multicast. Ignoring.
About to call timeout 1 (#0)
Aging routes in table.

Current routing table (Age active routes):
-----------------------------------------------------
#0: Dst: 224.0.2.3, Age:1, St: I, OutVifs: 0x00000002
#1: Dst: 224.0.0.251, Age:1, St: I, OutVifs: 0x00000002
-----------------------------------------------------
RECV V2 member report   from 192.168.101.1   to 224.0.0.2
The IGMP message was from myself. Ignoring.
About to call timeout 2 (#0)
SENT Membership query   from 192.168.101.1   to 224.0.0.1
Sent membership query from 192.168.101.1 to 224.0.0.1. Delay: 10
Created timeout 3 (#0) - delay 10 secs
(Id:3, Time:10)
Created timeout 4 (#1) - delay 21 secs
(Id:3, Time:10)
(Id:4, Time:21)
RECV Membership query   from 192.168.101.1   to 224.0.0.1
RECV V2 member report   from 192.168.101.99  to 224.0.0.251
Should insert group 224.0.0.251 (from: 192.168.101.99) to route table. Vif Ix : 1
Updated route entry for 224.0.0.251 on VIF #1

Current routing table (Insert Route):
-----------------------------------------------------
#0: Dst: 224.0.2.3, Age:1, St: I, OutVifs: 0x00000002
#1: Dst: 224.0.0.251, Age:1, St: I, OutVifs: 0x00000002
-----------------------------------------------------
RECV V2 member report   from 192.168.101.200 to 224.0.2.3
Should insert group 224.0.2.3 (from: 192.168.101.200) to route table. Vif Ix : 1
Updated route entry for 224.0.2.3 on VIF #1

Current routing table (Insert Route):
-----------------------------------------------------
#0: Dst: 224.0.2.3, Age:1, St: I, OutVifs: 0x00000002
#1: Dst: 224.0.0.251, Age:1, St: I, OutVifs: 0x00000002
-----------------------------------------------------
RECV V2 member report   from 192.168.101.20  to 224.0.0.252
Should insert group 224.0.0.252 (from: 192.168.101.20) to route table. Vif Ix : 1
No existing route for 224.0.0.252. Create new.
Found existing routes. Find insert location.
Inserting after route 224.0.0.251
Inserted route table entry for 224.0.0.252 on VIF #1
Joining group 224.0.0.252 upstream on IF address xxx.xxx.xxx.xxx
joinMcGroup: 224.0.0.252 on igb0

Current routing table (Insert Route):
-----------------------------------------------------
#0: Dst: 224.0.2.3, Age:1, St: I, OutVifs: 0x00000002
#1: Dst: 224.0.0.251, Age:1, St: I, OutVifs: 0x00000002
#2: Dst: 224.0.0.252, Age:2, St: I, OutVifs: 0x00000002
-----------------------------------------------------
RECV V2 member report   from xxx.xxx.xxx.xxx  to 224.0.0.252
The IGMP message was from myself. Ignoring.
The IGMP message was local multicast. Ignoring.
About to call timeout 3 (#0)
Aging routes in table.

Current routing table (Age active routes):
-----------------------------------------------------
#0: Dst: 224.0.2.3, Age:2, St: I, OutVifs: 0x00000002
#1: Dst: 224.0.0.251, Age:2, St: I, OutVifs: 0x00000002
#2: Dst: 224.0.0.252, Age:1, St: I, OutVifs: 0x00000002
-----------------------------------------------------
RECV V2 member report   from 192.168.101.1   to 224.0.0.2
The IGMP message was from myself. Ignoring.
RECV Membership query   from 85.195.255.1    to 224.0.0.1
RECV V2 member report   from xxx.xxx.xxx.xxx  to 224.0.0.251
The IGMP message was from myself. Ignoring.
RECV V2 member report   from xxx.xxx.xxx.xxx  to 224.0.2.3
The IGMP message was from myself. Ignoring.
RECV V2 member report   from 192.168.101.1   to 224.0.0.22
The IGMP message was from myself. Ignoring.
RECV V2 member report   from xxx.xxx.xxx.xxx  to 224.0.0.252
The IGMP message was from myself. Ignoring.
About to call timeout 4 (#0)
SENT Membership query   from 192.168.101.1   to 224.0.0.1
Sent membership query from 192.168.101.1 to 224.0.0.1. Delay: 10
Created timeout 5 (#0) - delay 10 secs
(Id:5, Time:10)
Created timeout 6 (#1) - delay 115 secs
(Id:5, Time:10)
(Id:6, Time:115)
RECV Membership query   from 192.168.101.1   to 224.0.0.1
RECV V2 member report   from 192.168.101.20  to 224.0.0.252
Should insert group 224.0.0.252 (from: 192.168.101.20) to route table. Vif Ix : 1
Updated route entry for 224.0.0.252 on VIF #1

Current routing table (Insert Route):
-----------------------------------------------------
#0: Dst: 224.0.2.3, Age:2, St: I, OutVifs: 0x00000002
#1: Dst: 224.0.0.251, Age:2, St: I, OutVifs: 0x00000002
#2: Dst: 224.0.0.252, Age:1, St: I, OutVifs: 0x00000002
-----------------------------------------------------
RECV V2 member report   from 192.168.101.10  to 224.0.0.251
Should insert group 224.0.0.251 (from: 192.168.101.10) to route table. Vif Ix : 1
Updated route entry for 224.0.0.251 on VIF #1

Current routing table (Insert Route):
-----------------------------------------------------
#0: Dst: 224.0.2.3, Age:2, St: I, OutVifs: 0x00000002
#1: Dst: 224.0.0.251, Age:2, St: I, OutVifs: 0x00000002
#2: Dst: 224.0.0.252, Age:1, St: I, OutVifs: 0x00000002
-----------------------------------------------------
RECV V2 member report   from 192.168.101.1   to 224.0.0.22
The IGMP message was from myself. Ignoring.
RECV V2 member report   from 192.168.101.200 to 224.0.2.3
Should insert group 224.0.2.3 (from: 192.168.101.200) to route table. Vif Ix : 1
Updated route entry for 224.0.2.3 on VIF #1

Current routing table (Insert Route):
-----------------------------------------------------
#0: Dst: 224.0.2.3, Age:2, St: I, OutVifs: 0x00000002
#1: Dst: 224.0.0.251, Age:2, St: I, OutVifs: 0x00000002
#2: Dst: 224.0.0.252, Age:1, St: I, OutVifs: 0x00000002
-----------------------------------------------------
About to call timeout 5 (#0)
Aging routes in table.

Current routing table (Age active routes):
-----------------------------------------------------
#0: Dst: 224.0.2.3, Age:2, St: I, OutVifs: 0x00000002
#1: Dst: 224.0.0.251, Age:2, St: I, OutVifs: 0x00000002
#2: Dst: 224.0.0.252, Age:2, St: I, OutVifs: 0x00000002
-----------------------------------------------------
RECV V2 member report   from 192.168.101.1   to 224.0.0.2
The IGMP message was from myself. Ignoring.
About to call timeout 6 (#0)
SENT Membership query   from 192.168.101.1   to 224.0.0.1
Sent membership query from 192.168.101.1 to 224.0.0.1. Delay: 10
Created timeout 7 (#0) - delay 10 secs
(Id:7, Time:10)
Created timeout 8 (#1) - delay 115 secs
(Id:7, Time:10)
(Id:8, Time:115)
RECV Membership query   from 192.168.101.1   to 224.0.0.1
The IGMP message was local multicast. Ignoring.
RECV V2 member report   from 192.168.101.99  to 224.0.0.251
Should insert group 224.0.0.251 (from: 192.168.101.99) to route table. Vif Ix : 1
Updated route entry for 224.0.0.251 on VIF #1

Current routing table (Insert Route):
-----------------------------------------------------
#0: Dst: 224.0.2.3, Age:2, St: I, OutVifs: 0x00000002
#1: Dst: 224.0.0.251, Age:2, St: I, OutVifs: 0x00000002
#2: Dst: 224.0.0.252, Age:2, St: I, OutVifs: 0x00000002
-----------------------------------------------------
RECV V2 member report   from 192.168.101.1   to 224.0.0.2
The IGMP message was from myself. Ignoring.
RECV V2 member report   from 192.168.101.10  to 224.0.0.252
Should insert group 224.0.0.252 (from: 192.168.101.10) to route table. Vif Ix : 1
Updated route entry for 224.0.0.252 on VIF #1

Current routing table (Insert Route):
-----------------------------------------------------
#0: Dst: 224.0.2.3, Age:2, St: I, OutVifs: 0x00000002
#1: Dst: 224.0.0.251, Age:2, St: I, OutVifs: 0x00000002
#2: Dst: 224.0.0.252, Age:2, St: I, OutVifs: 0x00000002
-----------------------------------------------------
^Cselect() failure; Errno(4): Interrupted system call
Got a interrupt signal. Exiting.
clean handler called
Removing route entry for 224.0.2.3
Leaving group 224.0.2.3 upstream on IF address xxx.xxx.xxx.xxx
leaveMcGroup: 224.0.2.3 on igb0
Removing route entry for 224.0.0.251
Leaving group 224.0.0.251 upstream on IF address xxx.xxx.xxx.xxx
leaveMcGroup: 224.0.0.251 on igb0
Removing route entry for 224.0.0.252
Leaving group 224.0.0.252 upstream on IF address xxx.xxx.xxx.xxx
leaveMcGroup: 224.0.0.252 on igb0
All routes removed. Routing table is empty.
Shutdown complete....
root@OPNsense:~ #

[FillFeile]

Hey,
I am now using the MR401 since 2 weeks.
Only firmware upgrades are not possible, since I am struggling with the tftp proxy.
Everything else has been working great.
No issues with watching TV.

Did you try it Frank?

Hi @gilddie, Hi to everyone,
I'm currently not able to get the MagentaTV IPTV working on my BNG based FTTH connection. I run my OPNSense directly connected to the FTTH Modem with an VLAN 7 Tagged Interface which is used by my PPPoE based WAN interface. I have tried several FW-Rulesets and also configured the IGMP-Proxy but the IPTV stream starts to stuck after round about 30 seconds streaming.

Could someone post his detailed FW-Rulesset and IGMP-Proxy settings that he/she used to get IPTV working on a Telekom based link using a OPNSense FW?

Thanks for any help in advance - I can post a more detailed config of my current setup if needed,

Cheers,

FillFeile

[gliddie]

Hey,

To me it sounds like your network. Might be flooded by the Multicast packets.
Are you having a managed switch between your receiver and the firewall?
I highly recommend to use a managed switch which does support "IGMP Snooping"

Regards,
Gliddie

Gesendet von meinem S61 mit Tapatalk