Enabling igmp snooping in the switch of R7800

Post new topic   Reply to topic    DD-WRT Forum Index -> Atheros WiSOC based Hardware
Goto page 1, 2  Next
Author Message
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6870
Location: Romerike, Norway

PostPosted: Sun Dec 10, 2017 0:53    Post subject: Enabling igmp snooping in the switch of R7800 Reply with quote
I enabled igmp snooping with the commands:

swconfig dev switch0 set igmp_snooping 1
swconfig dev switch0 set igmp_v3 1

It made the IP-TV multicast stream stop every 10 minutes. Have to change channel to get video back. I suspect a icmp handshake do not occur.

Without it the stops do not occur, but the multicast is sent to all ports in the vlan.

Is this a feature that is implemented in dd-wrt?
Sponsor
tatsuya46
DD-WRT Guru


Joined: 03 Jan 2010
Posts: 7568
Location: YWG, Canada

PostPosted: Sun Dec 10, 2017 1:57    Post subject: Reply with quote
on /Networking.asp page under bridging is igmp snooping on?

on /Firewall.asp page is filter multicast unchecked?

_________________
LATEST FIRMWARE(S)

BrainSlayer wrote:
we just do it since we do not like any restrictions enforced by stupid cocaine snorting managers

[x86_64] Haswell i3-4150/QCA9984/QCA9882 ------> r55797 std
[QUALCOMM] DIR-862L --------------------------------> r55797 std
▲ ACTIVE / INACTIVE ▼
[QUALCOMM] WNDR4300 v1 --------------------------> r50485 std
[BROADCOM] DIR-860L A1 ----------------------------> r50485 std


Sigh.. why do i exist anyway.. | I love you Anthony.. never forget that.. my other 99% that ill never see again..

Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6870
Location: Romerike, Norway

PostPosted: Sun Dec 10, 2017 16:11    Post subject: Reply with quote
It's off for br0, but vlan3 where the set-top box is located is not member of br0.

If my teory is correct, when enabling snooping on the switch the igmpproxy is bypassed and the multicast is sent directly from the wan port to the lan port with the set-top box.
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6870
Location: Romerike, Norway

PostPosted: Sun Dec 10, 2017 23:27    Post subject: Reply with quote
The cause of the issue is the mix of IGMP v3 and v2.

My ISP uses v3, but their set-top box does not. I also have a Netgear switch that also only supports v2.

When snooping is not turned on on the switch, I see v3 conversation between my router and the upstream router. When enabling, v2 queries go between lan nodes, but no v3 answer goes to the upstream server.
no.25
DD-WRT Novice


Joined: 20 Dec 2015
Posts: 25

PostPosted: Sun Mar 04, 2018 18:09    Post subject: Reply with quote
Per Yngve Berg wrote:
The cause of the issue is the mix of IGMP v3 and v2


Same problem here. When I enable it, IGMPv3 SSM tv-stations don't play anymore and I can see that the communication changes from IGMPv3 to IGMPv2 (which isn't SSM capable).

Wired connection with igmp snooping turned on in /Networking.asp and
swconfig dev switch0 set igmp_snooping 0
swconfig dev switch0 set igmp_v3 0
are doing fine.

But wireless IGMPv3 SSM doesn't work. Do I have to manually create a config file for igmprt?

Any ideas?
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6870
Location: Romerike, Norway

PostPosted: Sun Mar 04, 2018 19:18    Post subject: Reply with quote
Multicast over wifi is a totally different scenario.

Is the wifi interface unbridged?

Check the content of the igmpproxy.conf file.

Broadcoms have a "Optimize Multicast Traffic" Option that I cannot find on Atheros.

Another issue is that mulitcast over wifi is sent with the basic speed 6Mbit/s. Not enough for a 15Mbit/s HD channel.


http://www.wi-fiplanet.com/tutorials/article.php/3650766/Getting-the-Most-out-of-Multicasting.htm
no.25
DD-WRT Novice


Joined: 20 Dec 2015
Posts: 25

PostPosted: Sun Mar 11, 2018 21:48    Post subject: Reply with quote
Thank you Per Yngve Berg for the answer.

Per Yngve Berg wrote:
Is the wifi interface unbridged?

Wifi interface is bridged.

Per Yngve Berg wrote:
Check the content of the igmpproxy.conf file.

I cannot find a igmpproxy.conf in /etc. Do I have to create one with the default values shown at https://github.com/mirror/dd-wrt/blob/master/src/router/igmp-proxy/igmpproxy.conf ?

Maybe this is the reason, why turning on igmp snooping via cli doesn't work?
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6870
Location: Romerike, Norway

PostPosted: Sun Mar 11, 2018 22:17    Post subject: Reply with quote
The file is in /tmp

to control Multicast, the interface must be unbridged.
mac913
DD-WRT Guru


Joined: 02 May 2008
Posts: 1848
Location: Canada

PostPosted: Wed Mar 13, 2019 7:40    Post subject: Reply with quote
New to Atheros with the R7800s I have been able to translate my Broadcom R7000 network configuration to the Atheros R7800. The only issue is Multicasting with IGMP to my ISP TVBoxes, both are wired and was working with the R7000. For now I do have ISP Router connected for the TVBoxes to stream correctly til I can get the R7800 working with them.

These TVBoxes are connected on VLAN15 through my switches and I tried many configurations on the R7800 but the stream dies after about 10sec. I had to stop "playing around" since the family wasn't happy with the interruptions. There must be some conflict with the GUI and CLI swconfig. Does anyone have a working configuration I can test?

TIA

_________________
Home Network on Telus 1Gb PureFibre - 10GbE Copper Backbone
2x R7800 - Gateway & WiFi & 3xWireGuard - DDWRT r53562 Std k4.9

Off Site 1

R7000 - Gateway & WiFi & WireGuard - DDWRT r54517 Std
E3000 - Station Bridge - DDWRT r49626 Mega K4.4

Off Site 2

R7000 - Gateway & WiFi - DDWRT r54517 Std
E2000 - Wired ISP IPTV PVR Blocker - DDWRT r35531


YAMon 3.4.6 | DNSCrypt-Proxy V2
mac913
DD-WRT Guru


Joined: 02 May 2008
Posts: 1848
Location: Canada

PostPosted: Thu Mar 14, 2019 14:57    Post subject: Reply with quote
With build 38840M I was getting boot loops when I enabled IGMP Snooping on br0 under Networking. Also tried enabling IGMP Snooping in the switch and caused IPv6 to stop working.

I updated both R7800s to build 39000M and the same problem enabling IGMP Snooping in the switch caused IPv6 to stop working, I left it disabled. I did set up an Unbridged I/F eth1.15 and enabled IGMP Snooping on br0 under the Network (no boot loop like 38840M). The other problem under DNSMasq I setup DHCP for eth1.15 and devices didn't get an assigned IP addresses, is it a problem with the I/F name eth1.15 which has a "dot" in it? Normally I assign all my I/F to bridges (br1,br2,etc) like I've done with the R7000 Broadcom and use DNSMasq to setup DHCP for bridges (br1,br2,etc) like I currently do with the R7800s. So I tried using DHCPD under Networking and again devices not getting IP Addresses, conflict with DNSmasq?

_________________
Home Network on Telus 1Gb PureFibre - 10GbE Copper Backbone
2x R7800 - Gateway & WiFi & 3xWireGuard - DDWRT r53562 Std k4.9

Off Site 1

R7000 - Gateway & WiFi & WireGuard - DDWRT r54517 Std
E3000 - Station Bridge - DDWRT r49626 Mega K4.4

Off Site 2

R7000 - Gateway & WiFi - DDWRT r54517 Std
E2000 - Wired ISP IPTV PVR Blocker - DDWRT r35531


YAMon 3.4.6 | DNSCrypt-Proxy V2
Mile-Lile
DD-WRT Guru


Joined: 24 Feb 2013
Posts: 1634
Location: Belgrade

PostPosted: Thu Mar 14, 2019 21:45    Post subject: Reply with quote
ssh to your router and type:

Code:
cat /tmp/dnsmasq.conf


do you have some doubled directives?

ddwrt implementation of DNSMasq doesn't have "custom config" anymore, like in old days... Now it's called "Additional Dnsmasq Options"... you can just add "some options" not complete config... Multiple DHCP Server on networking.asp is dnsmasq too...

so if you are not getting IPs on bridge it's either dnsmasq fault or firewall...

I stumbled on similar problem recently that's why I jumped in your post...
mac913
DD-WRT Guru


Joined: 02 May 2008
Posts: 1848
Location: Canada

PostPosted: Fri Mar 15, 2019 0:29    Post subject: Reply with quote
I don't understand your commit about DNSMasq and not complete configs?

I don't have conflicts with my DNSMasq config file and it's working fine with br0,br1,b2,b3 & br6 (on Gateway Router). With previous Router R7000 with KONGAC 37985M, IGMP Proxy & Snooping was working but was limited to br0 which was fine.

Currently I have the R7800 (with build 39000M) working with same configuration but without IGMP. Maybe these newer builds broke IGMP.

In anycase I going to leave the ISP Router in for IGMP services to the TVBoxes. It's less of a headache when dealing with ISP Support since they like to "see" their devices online.

I've been working and I succuesfully updated my scripts on my AP router to run 2 openvpn clients and will be monitoring it.

_________________
Home Network on Telus 1Gb PureFibre - 10GbE Copper Backbone
2x R7800 - Gateway & WiFi & 3xWireGuard - DDWRT r53562 Std k4.9

Off Site 1

R7000 - Gateway & WiFi & WireGuard - DDWRT r54517 Std
E3000 - Station Bridge - DDWRT r49626 Mega K4.4

Off Site 2

R7000 - Gateway & WiFi - DDWRT r54517 Std
E2000 - Wired ISP IPTV PVR Blocker - DDWRT r35531


YAMon 3.4.6 | DNSCrypt-Proxy V2
mac913
DD-WRT Guru


Joined: 02 May 2008
Posts: 1848
Location: Canada

PostPosted: Fri Oct 04, 2019 23:18    Post subject: Reply with quote
I was using the ISP Router for ONLY their IPTV services plus Bridge-Mode enabled to give the R7800 gateway a Public Address.

After having issues with the ISP Router, I removed it. I added a gigabit switch to the ONT Modem (only one port active of 4) to get 2 Pubic Addresses, one to the R7800 for Internet services and the other to the E3000 to handle the IGMP for wired 4K IPTV services.

_________________
Home Network on Telus 1Gb PureFibre - 10GbE Copper Backbone
2x R7800 - Gateway & WiFi & 3xWireGuard - DDWRT r53562 Std k4.9

Off Site 1

R7000 - Gateway & WiFi & WireGuard - DDWRT r54517 Std
E3000 - Station Bridge - DDWRT r49626 Mega K4.4

Off Site 2

R7000 - Gateway & WiFi - DDWRT r54517 Std
E2000 - Wired ISP IPTV PVR Blocker - DDWRT r35531


YAMon 3.4.6 | DNSCrypt-Proxy V2
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 6447
Location: UK, London, just across the river..

PostPosted: Sat Oct 05, 2019 19:01    Post subject: Reply with quote
may be im too off topic got this in my R7800 to filter multicast on wi-fi via ebtables...

in start up scipt
insmod ebtables
insmod ebtable_filter
insmod ebt_pkttype

firewall script
ebtables -A FORWARD -o "ath0" --pkttype-type multicast -j DROP
ebtables -A OUTPUT -o "ath0" --pkttype-type multicast -j DROP

i got this long time ago, it was ok i haven't checked R7800 since than... there was a problem with multicast that i fixed with it...
p.s. you could use it for eth or br if so...

_________________
Atheros
TP-Link WR740Nv1 ---DD-WRT 55630 WAP
TP-Link WR1043NDv2 -DD-WRT 55723 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55779 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55819 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55779 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913


Last edited by Alozaros on Sat Oct 05, 2019 20:08; edited 1 time in total
mac913
DD-WRT Guru


Joined: 02 May 2008
Posts: 1848
Location: Canada

PostPosted: Sat Oct 05, 2019 19:27    Post subject: Reply with quote
Good info.

Since I monitor data usage with YAMon3, I prefer to break up data and iptv services. In the past the ISP has reported incorrect data usage. Two months ago they reported nearly 3TB of usage plus the whole family was on vacation for 2 weeks and our normal monthly usage is under 300GB/month. YAMon3 showed only 115GB for that month. Either their router was hacked or they measured iptv as data, either way their router had to go.

ISP Routers more likely have backdoors for tech access and they can push firmware at any time and cause issues with your setup or security, don't like it!! But if I call the ISP for Network issues their Router/Equipment will need to be up and running before I call them (this will only be required til they fix their issue and back to my secure setup).

_________________
Home Network on Telus 1Gb PureFibre - 10GbE Copper Backbone
2x R7800 - Gateway & WiFi & 3xWireGuard - DDWRT r53562 Std k4.9

Off Site 1

R7000 - Gateway & WiFi & WireGuard - DDWRT r54517 Std
E3000 - Station Bridge - DDWRT r49626 Mega K4.4

Off Site 2

R7000 - Gateway & WiFi - DDWRT r54517 Std
E2000 - Wired ISP IPTV PVR Blocker - DDWRT r35531


YAMon 3.4.6 | DNSCrypt-Proxy V2
Goto page 1, 2  Next Display posts from previous:    Page 1 of 2
Post new topic   Reply to topic    DD-WRT Forum Index -> Atheros WiSOC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum