I'm noob in terms of networks and networks administration please help.
First step is to have access to ONT device for management purpose all the time
config interface 'ont_leox'
option proto 'static'
option device 'eth1'
option ipaddr '192.168.100.5'
option netmask '255.255.255.0'
config interface 'orange'
option proto 'pppoe'
option device 'br-orange.35'
option username '***'
option password '***'
option ipv6 'auto'
config device
option type 'bridge'
option name 'br-orange'
list ports 'eth1'
option bridge_empty '1'
config bridge-vlan
option device 'br-orange'
option vlan '35'
list ports 'eth1:t'
firewall
config zone
option name 'wan'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
option mtu_fix '1'
list network 'wan'
list network 'wan6'
list network 'ont_leox'
list network 'orange'
dhcp
config dhcp 'ont_leox'
option interface 'ont_leox'
option start '100'
option limit '150'
option leasetime '12h'
option ignore '1'
config dhcp 'orange'
option interface 'orange'
option ignore '1'
Both both interfaces are under WAN firewall rules
- I need to be in vlan 35 to have internet in lucy I've mark vlan 35 as local is configured correctly?
- If interface orange is up I cannot communicate with interface ont_leox, how to fix it?
Next step is to get iptv service running. I know that I have o tag vlans 838 and 839 but I would like to have this pinned to only lan4 (physical 4-th port on switch) port so multicast wont spam my network and I wont expose my network to operator. lan4 port need to assign ip to 1 client. Unfortunately this does not work from so reason, can someone do review and tell me whats wrong?
config device
option type 'bridge'
option name 'orange_iptv'
list ports 'lan4'
option igmp_snooping '1'
option bridge_empty '1'
option macaddr '****
config bridge-vlan
option device 'orange_iptv'
option vlan '838'
list ports 'lan4:t'
config bridge-vlan
option device 'orange_iptv'
option vlan '839'
list ports 'lan4:t'
config interface 'orange_iptv'
option proto 'static'
option device 'orange_iptv'
option ipaddr '192.168.40.1'
option netmask '255.255.255.0'
firewall
config zone
option name 'orange_iptv'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
list network 'orange_iptv'
config forwarding
option src 'orange_iptv'
option dest 'wan'
config rule
option name 'orange_iptv_dns'
option family 'ipv4'
option src 'orange_iptv'
option dest_port '53'
option target 'ACCEPT'
config rule
option name 'orange_iptv dhcp'
option family 'ipv4'
list proto 'udp'
option src 'orange_iptv'
option dest_port '67-68'
option target 'ACCEPT'
dhcp
config dhcp 'orange_iptv'
option interface 'orange_iptv'
option start '2'
option limit '3'
option leasetime '12h'