leider versuche ich schon seit einiger Zeit eine Lösung für T-Entertain für einen DSL 16000 Anschluss zu finden.
Die Anleitung von Herrn Demmler habe ich mir durch gelesen.
Leider habe ich dabei ein "größeres" Problem, er schreibt von igmp Paketen die gedropt werden sollen bei entsprechender ACL, genau diese Pakete sehe ich nicht.
Ich habe auch schon versucht ein VLAN 8 auf dem ausgehen Interface anzulegen und IP auf DHCP gestellt und bekommen wie in einem andern Post hier im Forum keine IP auf VLAN 8.
Auf dem Dialer habe ich keinen Multicast Treffic nur UDP/TCP.
Ich hoffe Ihr hab eine Idee was ich ggf. ändern kann um mit meinem Cisco IPTV sehen zu können.
Ich nehme stark an dass ich im Zielnetz bin. Wenn ich die AVM Box als Router nutze klappt IPTV.
sei so gut und poste uns mal deine config. Allerdings muss ich Dir sagen, dass ich da Probleme sehe, denn hier im Forum gibt es dazu viele Hinweise, das es nicht mehr Funktioniert...mit Cisco Routern.
die helper IP ist noch meine alte ca ein gutes halbes Jahr alt. Im Moment sehe ich, wie gesagt nur IGMP Traffic von innen nach außen.
version 12.4
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
no service password-encryption
service linenumber
service sequence-numbers
!
hostname Router
!
boot-start-marker
boot-end-marker
!
logging buffered 102400
!
no aaa new-model
clock timezone CET 1
clock summer-time CEST recurring last Sun Mar 2:00 last Sun Oct 3:00
ip cef
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.0.1 192.168.0.223
ip dhcp excluded-address 192.168.0.227 192.168.0.254
!
ip dhcp pool LAN
network 192.168.0.0 255.255.255.0
default-router 192.168.0.80
dns-server 192.168.0.80
lease 7
!
!
no ip domain lookup
ip domain name matrix.local
ip multicast-routing
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
multilink bundle-name authenticated
!
crypto pki trustpoint TP-self-signed-1874146871
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1874146871
revocation-check none
rsakeypair TP-self-signed-1874146871
!
!
crypto pki certificate chain TP-self-signed-1874146871
certificate self-signed 01
quit
!
!
username admin privilege 15 password 0 q1w2e3
archive
log config
hidekeys
!
!
!
!
!
!
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
pppoe enable group 1
pppoe-client dial-pool-number 1
no cdp enable
!
interface FastEthernet0/1
description ### LAN Interface ###
ip address 192.168.0.80 255.255.255.0
ip pim sparse-mode
ip nat inside
ip virtual-reassembly
ip igmp helper-address 217.0.119.78
ip igmp version 3
ip igmp explicit-tracking
ip igmp query-interval 15
ip igmp proxy-service
duplex auto
speed auto
!
interface Dialer1
description ### Dialer DSL ###
bandwidth 16384
ip address negotiated
ip access-group PUBLIC-DSL in
ip mtu 1492
ip pim sparse-mode
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip tcp adjust-mss 1452
ip igmp version 3
ip igmp proxy-service
no ip mroute-cache
dialer pool 1
dialer idle-timeout 0
dialer persistent
keepalive 20
no cdp enable
ppp authentication pap callin
ppp pap sent-username password
ppp ipcp dns request
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer1
!
!
no ip http server
ip http secure-server
ip dns view default
dns forwarding
dns forwarding source-interface FastEthernet0/1
ip dns server
ip pim rp-address 217.0.119.78
ip nat translation tcp-timeout 3600
ip nat translation udp-timeout 3600
ip nat inside source route-map check->NAT interface Dialer1 overload
!
ip access-list extended PUBLIC-DSL
permit tcp any any established
permit udp any eq domain any
permit udp host 195.145.119.188 eq ntp any
permit udp host 192.53.103.108 eq ntp any
permit igmp host 217.0.119.78 any
permit icmp host 217.0.119.78 any
permit udp any eq 8767 any
permit ip any 224.0.0.0 15.255.255.255
permit udp any any
permit udp any gt 40000 any
permit icmp any any echo-reply
deny ip any any log
permit udp any gt 1023 any
!
logging 192.168.0.5
access-list 123 permit ip 192.0.0.0 0.255.255.255 any
snmp-server community public RO
snmp-server trap-source FastEthernet0/1
snmp-server enable traps config
snmp-server host 192.168.0.5 public config snmp
!
!
!
route-map check->NAT permit 10
match ip address 123
!
!
!
!
control-plane
!
!
!
line con 0
exec-timeout 60 0
password cisco
logging synchronous
login
line aux 0
line vty 0 4
exec-timeout 60 0
password cisco
logging synchronous
login
transport input telnet ssh
!
scheduler allocate 20000 1000
ntp clock-period 17178627
ntp server 192.53.103.108
end
diese Konfig ist schon etwas älter aber grob genau die die ich wieder erstellt hatte. Nur sehe ich keinen IGMP Traffic als incoming.
Mit auf VLAN8 bekam ich gar keinen Traffic.
version 12.4
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
no service password-encryption
service linenumber
service sequence-numbers
!
hostname Router
!
boot-start-marker
boot-end-marker
!
logging buffered 102400
!
no aaa new-model
clock timezone CET 1
clock summer-time CEST recurring last Sun Mar 2:00 last Sun Oct 3:00
ip cef
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.0.1 192.168.0.223
ip dhcp excluded-address 192.168.0.227 192.168.0.254
!
ip dhcp pool LAN
network 192.168.0.0 255.255.255.0
default-router 192.168.0.80
dns-server 192.168.0.80
lease 7
!
!
no ip domain lookup
ip domain name matrix.local
ip multicast-routing
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
multilink bundle-name authenticated
!
crypto pki trustpoint TP-self-signed-1874146871
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1874146871
revocation-check none
rsakeypair TP-self-signed-1874146871
!
!
crypto pki certificate chain TP-self-signed-1874146871
certificate self-signed 01
quit
!
!
username admin privilege 15 password 0 q1w2e3
archive
log config
hidekeys
!
!
!
!
!
!
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
pppoe enable group 1
pppoe-client dial-pool-number 1
no cdp enable
!
interface FastEthernet0/1
description ### LAN Interface ###
ip address 192.168.0.80 255.255.255.0
ip pim sparse-mode
ip nat inside
ip virtual-reassembly
ip igmp helper-address 217.0.119.78
ip igmp version 3
ip igmp explicit-tracking
ip igmp query-interval 15
ip igmp proxy-service
duplex auto
speed auto
!
interface Dialer1
description ### Dialer DSL ###
bandwidth 16384
ip address negotiated
ip access-group PUBLIC-DSL in
ip mtu 1492
ip pim sparse-mode
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip tcp adjust-mss 1452
ip igmp version 3
ip igmp proxy-service
no ip mroute-cache
dialer pool 1
dialer idle-timeout 0
dialer persistent
keepalive 20
no cdp enable
ppp authentication pap callin
ppp pap sent-username password
ppp ipcp dns request
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer1
!
!
no ip http server
ip http secure-server
ip dns view default
dns forwarding
dns forwarding source-interface FastEthernet0/1
ip dns server
ip pim rp-address 217.0.119.78
ip nat translation tcp-timeout 3600
ip nat translation udp-timeout 3600
ip nat inside source route-map check->NAT interface Dialer1 overload
!
ip access-list extended PUBLIC-DSL
permit tcp any any established
permit udp any eq domain any
permit udp host 195.145.119.188 eq ntp any
permit udp host 192.53.103.108 eq ntp any
permit igmp host 217.0.119.78 any
permit icmp host 217.0.119.78 any
permit udp any eq 8767 any
permit ip any 224.0.0.0 15.255.255.255
permit udp any any
permit udp any gt 40000 any
permit icmp any any echo-reply
deny ip any any log
permit udp any gt 1023 any
!
logging 192.168.0.5
access-list 123 permit ip 192.0.0.0 0.255.255.255 any
snmp-server community public RO
snmp-server trap-source FastEthernet0/1
snmp-server enable traps config
snmp-server host 192.168.0.5 public config snmp
!
!
!
route-map check->NAT permit 10
match ip address 123
!
!
!
!
control-plane
!
!
!
line con 0
exec-timeout 60 0
password cisco
logging synchronous
login
line aux 0
line vty 0 4
exec-timeout 60 0
password cisco
logging synchronous
login
transport input telnet ssh
!
scheduler allocate 20000 1000
ntp clock-period 17178627
ntp server 192.53.103.108
end
VLAN8 bei T-Entertain IPTV DSL 1600
