Orange ont setup,step by step, need help

I'm noob in terms of networks and networks administration please help.

First step is to have access to ONT device for management purpose all the time

config interface 'ont_leox'
	option proto 'static'
	option device 'eth1'
	option ipaddr '192.168.100.5'
	option netmask '255.255.255.0'

config interface 'orange'
	option proto 'pppoe'
	option device 'br-orange.35'
	option username '***'
	option password '***'
	option ipv6 'auto'

config device
	option type 'bridge'
	option name 'br-orange'
	list ports 'eth1'
	option bridge_empty '1'

config bridge-vlan
	option device 'br-orange'
	option vlan '35'
	list ports 'eth1:t'

firewall
config zone
	option name 'wan'
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	option masq '1'
	option mtu_fix '1'
	list network 'wan'
	list network 'wan6'
	list network 'ont_leox'
	list network 'orange'

dhcp
config dhcp 'ont_leox'
	option interface 'ont_leox'
	option start '100'
	option limit '150'
	option leasetime '12h'
	option ignore '1'

config dhcp 'orange'
	option interface 'orange'
	option ignore '1'

Both both interfaces are under WAN firewall rules

  1. I need to be in vlan 35 to have internet in lucy I've mark vlan 35 as local is configured correctly?
  2. If interface orange is up I cannot communicate with interface ont_leox, how to fix it?

Next step is to get iptv service running. I know that I have o tag vlans 838 and 839 but I would like to have this pinned to only lan4 (physical 4-th port on switch) port so multicast wont spam my network and I wont expose my network to operator. lan4 port need to assign ip to 1 client. Unfortunately this does not work from so reason, can someone do review and tell me whats wrong?

config device
	option type 'bridge'
	option name 'orange_iptv'
	list ports 'lan4'
	option igmp_snooping '1'
	option bridge_empty '1'
	option macaddr '****

config bridge-vlan
	option device 'orange_iptv'
	option vlan '838'
	list ports 'lan4:t'

config bridge-vlan
	option device 'orange_iptv'
	option vlan '839'
	list ports 'lan4:t'

config interface 'orange_iptv'
	option proto 'static'
	option device 'orange_iptv'
	option ipaddr '192.168.40.1'
	option netmask '255.255.255.0'

firewall

config zone
	option name 'orange_iptv'
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	list network 'orange_iptv'

config forwarding
	option src 'orange_iptv'
	option dest 'wan'

config rule
	option name 'orange_iptv_dns'
	option family 'ipv4'
	option src 'orange_iptv'
	option dest_port '53'
	option target 'ACCEPT'

config rule
	option name 'orange_iptv dhcp'
	option family 'ipv4'
	list proto 'udp'
	option src 'orange_iptv'
	option dest_port '67-68'
	option target 'ACCEPT'

dhcp

config dhcp 'orange_iptv'
	option interface 'orange_iptv'
	option start '2'
	option limit '3'
	option leasetime '12h'