API tools faq
paste
Guest User

MEO/ALTICE IPTV NOT WORKING

a guest
Jan 14th, 2019
164
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.39 KB | None | 0 0
raw download clone embed print report
  1. firewall {
  2. all-ping enable
  3. broadcast-ping disable
  4. group {
  5. network-group MEO_IPTV_DESTINATION {
  6. description ""
  7. network 232.0.0.0/8
  8. network 235.0.0.0/8
  9. network 239.0.0.0/8
  10. }
  11. network-group MEO_IPTV_NETWORKS {
  12. description ""
  13. network 10.0.0.0/8
  14. network 195.0.0.0/8
  15. network 213.0.0.0/8
  16. network 194.0.0.0/8
  17. }
  18. }
  19. ipv6-receive-redirects disable
  20. ipv6-src-route disable
  21. ip-src-route disable
  22. log-martians enable
  23. name WAN_IN {
  24. default-action drop
  25. description "WAN to internal"
  26. rule 10 {
  27. action accept
  28. description "Allow Multicast"
  29. destination {
  30. group {
  31. network-group MEO_IPTV_DESTINATION
  32. }
  33. }
  34. log disable
  35. protocol udp
  36. source {
  37. group {
  38. network-group MEO_IPTV_NETWORKS
  39. }
  40. }
  41. }
  42. rule 20 {
  43. action accept
  44. description "Allow IGMP"
  45. log disable
  46. protocol igmp
  47. }
  48. rule 30 {
  49. action accept
  50. description "Allow established/related"
  51. state {
  52. established enable
  53. related enable
  54. }
  55. }
  56. rule 40 {
  57. action drop
  58. description "Drop invalid state"
  59. state {
  60. invalid enable
  61. }
  62. }
  63. }
  64. name WAN_LOCAL {
  65. default-action drop
  66. description "WAN to router"
  67. rule 10 {
  68. action accept
  69. description "Allow Multicast UDP"
  70. destination {
  71. group {
  72. network-group MEO_IPTV_DESTINATION
  73. }
  74. }
  75. log disable
  76. protocol udp
  77. source {
  78. group {
  79. network-group MEO_IPTV_NETWORKS
  80. }
  81. }
  82. }
  83. rule 20 {
  84. action accept
  85. description "Allow IGMP"
  86. log disable
  87. protocol igmp
  88. }
  89. rule 30 {
  90. action accept
  91. description "Allow established/related"
  92. state {
  93. established enable
  94. related enable
  95. }
  96. }
  97. rule 40 {
  98. action drop
  99. description "Drop invalid state"
  100. state {
  101. invalid enable
  102. }
  103. }
  104. }
  105. receive-redirects disable
  106. send-redirects enable
  107. source-validation disable
  108. syn-cookies enable
  109. }
  110. interfaces {
  111. ethernet eth0 {
  112. duplex auto
  113. speed auto
  114. vif 12 {
  115. address dhcp
  116. description Internet
  117. firewall {
  118. in {
  119. name WAN_IN
  120. }
  121. local {
  122. name WAN_LOCAL
  123. }
  124. }
  125. }
  126. }
  127. ethernet eth1 {
  128. description Local
  129. duplex auto
  130. speed auto
  131. }
  132. ethernet eth2 {
  133. description Local
  134. duplex auto
  135. speed auto
  136. }
  137. ethernet eth3 {
  138. description IPTV
  139. duplex auto
  140. speed auto
  141. }
  142. ethernet eth4 {
  143. description Local
  144. duplex auto
  145. poe {
  146. output off
  147. }
  148. speed auto
  149. }
  150. loopback lo {
  151. }
  152. switch switch0 {
  153. address 192.168.1.1/24
  154. description Local
  155. mtu 1500
  156. switch-port {
  157. interface eth1 {
  158. }
  159. interface eth2 {
  160. }
  161. interface eth3 {
  162. }
  163. interface eth4 {
  164. }
  165. vlan-aware disable
  166. }
  167. }
  168. }
  169. protocols {
  170. igmp-proxy {
  171. interface eth0 {
  172. role disabled
  173. threshold 1
  174. }
  175. interface eth0.12 {
  176. alt-subnet 0.0.0.0/0
  177. role upstream
  178. threshold 1
  179. }
  180. interface eth1 {
  181. role disabled
  182. threshold 1
  183. }
  184. interface eth3 {
  185. alt-subnet 0.0.0.0/0
  186. role downstream
  187. threshold 1
  188. }
  189. }
  190. }
  191. service {
  192. dhcp-server {
  193. disabled false
  194. hostfile-update disable
  195. shared-network-name IPTV {
  196. authoritative disable
  197. disable
  198. subnet 192.168.100.0/24 {
  199. default-router 192.168.100.1
  200. lease 86400
  201. start 192.168.100.2 {
  202. stop 192.168.100.100
  203. }
  204. }
  205. }
  206. shared-network-name LAN {
  207. authoritative enable
  208. subnet 192.168.1.0/24 {
  209. default-router 192.168.1.1
  210. dns-server 192.168.1.1
  211. lease 86400
  212. start 192.168.1.38 {
  213. stop 192.168.1.243
  214. }
  215. }
  216. }
  217. static-arp disable
  218. use-dnsmasq disable
  219. }
  220. dns {
  221. forwarding {
  222. cache-size 150
  223. listen-on switch0
  224. }
  225. }
  226. gui {
  227. http-port 80
  228. https-port 443
  229. older-ciphers enable
  230. }
  231. nat {
  232. rule 5010 {
  233. description "masquerade for WAN"
  234. outbound-interface eth0.12
  235. type masquerade
  236. }
  237. }
  238. ssh {
  239. port 22
  240. protocol-version v2
  241. }
  242. }
  243. system {
  244. }
  245. ntp {
  246. server 0.ubnt.pool.ntp.org {
  247. }
  248. server 1.ubnt.pool.ntp.org {
  249. }
  250. server 2.ubnt.pool.ntp.org {
  251. }
  252. server 3.ubnt.pool.ntp.org {
  253. }
  254. }
  255. syslog {
  256. global {
  257. facility all {
  258. level notice
  259. }
  260. facility protocols {
  261. level debug
  262. }
  263. }
  264. }
  265. time-zone UTC
  266. }
  267.  
  268.  
  269. /* Warning: Do not remove the following line. */
  270. /* === vyatta-config-version: "config-management@1:conntrack@1:cron@1:dhcp-relay@1:dhcp-server@4:firewall@5:ipsec@5:nat@3:qos@1:quagga@2:suspend@1:system@4:ubnt-pptp@1:ubnt-udapi-server@1:ubnt-unms@1:ubnt-util@1:vrrp@1:webgui@1:webproxy@1:zone-policy@1" === */
  271. /* Release version: v1.10.8.5142457.181120.1809 */
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!