{"id":142,"date":"2021-01-30T19:26:32","date_gmt":"2021-01-30T19:26:32","guid":{"rendered":"http:\/\/networkdynamics.nl\/?p=142"},"modified":"2021-01-30T19:45:17","modified_gmt":"2021-01-30T19:45:17","slug":"using-a-dedicated-router-for-kpn-itv","status":"publish","type":"post","link":"https:\/\/networkdynamics.nl\/?p=142","title":{"rendered":"Using a dedicated router for KPN iTV"},"content":{"rendered":"\n<p>Well, as you probably have read on my other posts, I am some sort enthusiast to use my KPN internet and iTV subscription with my own gear (and not with the Experiabox that KPN included with my subscription). So that said, I also know that there are some difficulties where I can run in to. One of them was to successfully route the iTV traffic (which is multicast) through a FortiGate firewall. It works, yes, but I found that there are some &#8220;side-effects&#8221; which I didn&#8217;t like. One of the most annoying thing is that the internet-performance drops dramatically when both TV receivers are actively requesting a multicast stream. Mwa, that&#8217;s definitely not what I want :-(.<\/p>\n\n\n\n<p>So I decided to split functionality over 2 devices; Internet traffic is routed through my FortiGate firewall, while multicast traffic is routed through a dedicated router (in my case this is a Mikrotik router). Be aware that if you want to use a router for the iTV multicast traffic, that it has to support some features to get it working.<\/p>\n\n\n\n<p>Let&#8217;s begin with some graphics the show what I have build. See the basic drawings below:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"827\" height=\"887\" src=\"http:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/logical-setup.png\" alt=\"\" class=\"wp-image-154\" srcset=\"https:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/logical-setup.png 827w, https:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/logical-setup-280x300.png 280w, https:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/logical-setup-768x824.png 768w\" sizes=\"auto, (max-width: 827px) 100vw, 827px\" \/><\/figure>\n\n\n\n<p>I have a separate vlan where the TV-receivers reside. This vlan is directly routed through my Mikrotik router which handles the multicast traffic. The reason why the FortiGate is also present in the vlan, is that the receivers need internet-access for some services (such as Netflix). In my case, I made the FortiGate the DHCP server for this vlan, and points the default-gateway to the Mikrotik router.<\/p>\n\n\n\n<p>Physically, I needed to handle the vlan ID&#8217;s which are present on my NTU. These ID&#8217;s are vlan 4 (for iTV) and vlan 6 (for internet). Vlan 5 is for telephony services, which I don&#8217;t use.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"874\" height=\"830\" src=\"http:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/physical-setup.png\" alt=\"\" class=\"wp-image-155\" srcset=\"https:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/physical-setup.png 874w, https:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/physical-setup-300x285.png 300w, https:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/physical-setup-768x729.png 768w\" sizes=\"auto, (max-width: 874px) 100vw, 874px\" \/><\/figure>\n\n\n\n<p>I configured pppoe on my FortiGate on the wan1 interface, which is connected to a port on the Mikrotik router in vlan 6. I don&#8217;t need to configure a subinterface on the FortiGate, because it is a native vlan port on the Mikrotik where I connect my FortiGate wan port. With this configuration, I keep the public IP address directly associated on my FortiGate&#8217;s wan port. Great!<\/p>\n\n\n\n<p>The Mikrotik router is having a subinterface in vlan 4, where it is running a DHCP client to get an IP address from the KPN network. For this to work, you have to sent 2 options in the DHCP request.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table  class=\"has-subtle-pale-green-background-color has-background table table-hover\" ><thead><tr><th>DHCP client option<\/th><th>Value<\/th><\/tr><\/thead><tbody><tr><td>60<\/td><td>IPTV_RG<\/td><\/tr><tr><td>55 (parameter 121)<\/td><td>CLASSLESS_ROUTE<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p><strong>Option 60<\/strong> is mandatory, otherwise you will not get an IP address at all.<\/p>\n\n\n\n<p><strong>Option 55<\/strong> is a special one, which gets the route-information for the KPN network. If you have a Mikrotik router, this step is easy because the options can simple be enabled in the configuration with the &#8220;special classless&#8221; option.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"714\" height=\"356\" src=\"http:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/option60.png\" alt=\"\" class=\"wp-image-147\" srcset=\"https:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/option60.png 714w, https:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/option60-300x150.png 300w\" sizes=\"auto, (max-width: 714px) 100vw, 714px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"732\" height=\"715\" src=\"http:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/dhcp-client-options.png\" alt=\"\" class=\"wp-image-146\" srcset=\"https:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/dhcp-client-options.png 732w, https:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/dhcp-client-options-300x293.png 300w, https:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/dhcp-client-options-60x60.png 60w\" sizes=\"auto, (max-width: 732px) 100vw, 732px\" \/><\/figure>\n\n\n\n<p>The learned prefix from KPN is printed below.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"576\" height=\"495\" src=\"http:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/kpn-route.png\" alt=\"\" class=\"wp-image-158\" srcset=\"https:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/kpn-route.png 576w, https:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/kpn-route-300x258.png 300w\" sizes=\"auto, (max-width: 576px) 100vw, 576px\" \/><\/figure>\n\n\n\n<p>For the multicast to work, I had to take care about firewalling (nat-masquerade) and IGMP proxying as well.<\/p>\n\n\n\n<p>For your convenience, I have published my Mikrotik configuration on Github <a href=\"https:\/\/github.com\/pbazelmans\/KPN\/blob\/main\/mikrotik_config_for_kpn_itv.cfg\" target=\"_blank\" rel=\"noreferrer noopener\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Well, as you probably have read on my other posts, I am some sort enthusiast to use my KPN internet and iTV subscription with my own gear (and not with the Experiabox that KPN included with my subscription). So that said, I also know that there are some difficulties where I can run in to. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18,14,15,17],"tags":[],"class_list":["post-142","post","type-post","status-publish","format-standard","hentry","category-fortigate","category-kpn","category-kpn-interactive-tv","category-mikrotik"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Using a dedicated router for KPN iTV - Pee.Bee.Es<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/networkdynamics.nl\/?p=142\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Using a dedicated router for KPN iTV - Pee.Bee.Es\" \/>\n<meta property=\"og:description\" content=\"Well, as you probably have read on my other posts, I am some sort enthusiast to use my KPN internet and iTV subscription with my own gear (and not with the Experiabox that KPN included with my subscription). So that said, I also know that there are some difficulties where I can run in to. [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/networkdynamics.nl\/?p=142\" \/>\n<meta property=\"og:site_name\" content=\"Pee.Bee.Es\" \/>\n<meta property=\"article:published_time\" content=\"2021-01-30T19:26:32+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-01-30T19:45:17+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/logical-setup.png\" \/>\n<meta name=\"author\" content=\"peter\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"peter\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/networkdynamics.nl\/?p=142\",\"url\":\"https:\/\/networkdynamics.nl\/?p=142\",\"name\":\"Using a dedicated router for KPN iTV - Pee.Bee.Es\",\"isPartOf\":{\"@id\":\"https:\/\/networkdynamics.nl\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/networkdynamics.nl\/?p=142#primaryimage\"},\"image\":{\"@id\":\"https:\/\/networkdynamics.nl\/?p=142#primaryimage\"},\"thumbnailUrl\":\"http:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/logical-setup.png\",\"datePublished\":\"2021-01-30T19:26:32+00:00\",\"dateModified\":\"2021-01-30T19:45:17+00:00\",\"author\":{\"@id\":\"https:\/\/networkdynamics.nl\/#\/schema\/person\/950dc6fa890f7e89ca07f5219f910bfc\"},\"breadcrumb\":{\"@id\":\"https:\/\/networkdynamics.nl\/?p=142#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/networkdynamics.nl\/?p=142\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/networkdynamics.nl\/?p=142#primaryimage\",\"url\":\"https:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/logical-setup.png\",\"contentUrl\":\"https:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/logical-setup.png\",\"width\":827,\"height\":887},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/networkdynamics.nl\/?p=142#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/networkdynamics.nl\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Using a dedicated router for KPN iTV\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/networkdynamics.nl\/#website\",\"url\":\"https:\/\/networkdynamics.nl\/\",\"name\":\"Pee.Bee.Es\",\"description\":\"A tiny blog with a bit of networking\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/networkdynamics.nl\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/networkdynamics.nl\/#\/schema\/person\/950dc6fa890f7e89ca07f5219f910bfc\",\"name\":\"peter\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/networkdynamics.nl\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/af489b1ac40f471a937d0df5a8250c4bd6798e691b989ac873e30b9a6323192b?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/af489b1ac40f471a937d0df5a8250c4bd6798e691b989ac873e30b9a6323192b?s=96&d=mm&r=g\",\"caption\":\"peter\"},\"sameAs\":[\"http:\/\/networkdynamics.nl\"],\"url\":\"https:\/\/networkdynamics.nl\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Using a dedicated router for KPN iTV - Pee.Bee.Es","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/networkdynamics.nl\/?p=142","og_locale":"en_US","og_type":"article","og_title":"Using a dedicated router for KPN iTV - Pee.Bee.Es","og_description":"Well, as you probably have read on my other posts, I am some sort enthusiast to use my KPN internet and iTV subscription with my own gear (and not with the Experiabox that KPN included with my subscription). So that said, I also know that there are some difficulties where I can run in to. [&hellip;]","og_url":"https:\/\/networkdynamics.nl\/?p=142","og_site_name":"Pee.Bee.Es","article_published_time":"2021-01-30T19:26:32+00:00","article_modified_time":"2021-01-30T19:45:17+00:00","og_image":[{"url":"http:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/logical-setup.png","type":"","width":"","height":""}],"author":"peter","twitter_card":"summary_large_image","twitter_misc":{"Written by":"peter","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/networkdynamics.nl\/?p=142","url":"https:\/\/networkdynamics.nl\/?p=142","name":"Using a dedicated router for KPN iTV - Pee.Bee.Es","isPartOf":{"@id":"https:\/\/networkdynamics.nl\/#website"},"primaryImageOfPage":{"@id":"https:\/\/networkdynamics.nl\/?p=142#primaryimage"},"image":{"@id":"https:\/\/networkdynamics.nl\/?p=142#primaryimage"},"thumbnailUrl":"http:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/logical-setup.png","datePublished":"2021-01-30T19:26:32+00:00","dateModified":"2021-01-30T19:45:17+00:00","author":{"@id":"https:\/\/networkdynamics.nl\/#\/schema\/person\/950dc6fa890f7e89ca07f5219f910bfc"},"breadcrumb":{"@id":"https:\/\/networkdynamics.nl\/?p=142#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/networkdynamics.nl\/?p=142"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/networkdynamics.nl\/?p=142#primaryimage","url":"https:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/logical-setup.png","contentUrl":"https:\/\/networkdynamics.nl\/wp-content\/uploads\/2021\/01\/logical-setup.png","width":827,"height":887},{"@type":"BreadcrumbList","@id":"https:\/\/networkdynamics.nl\/?p=142#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/networkdynamics.nl\/"},{"@type":"ListItem","position":2,"name":"Using a dedicated router for KPN iTV"}]},{"@type":"WebSite","@id":"https:\/\/networkdynamics.nl\/#website","url":"https:\/\/networkdynamics.nl\/","name":"Pee.Bee.Es","description":"A tiny blog with a bit of networking","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/networkdynamics.nl\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/networkdynamics.nl\/#\/schema\/person\/950dc6fa890f7e89ca07f5219f910bfc","name":"peter","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/networkdynamics.nl\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/af489b1ac40f471a937d0df5a8250c4bd6798e691b989ac873e30b9a6323192b?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/af489b1ac40f471a937d0df5a8250c4bd6798e691b989ac873e30b9a6323192b?s=96&d=mm&r=g","caption":"peter"},"sameAs":["http:\/\/networkdynamics.nl"],"url":"https:\/\/networkdynamics.nl\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/networkdynamics.nl\/index.php?rest_route=\/wp\/v2\/posts\/142","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/networkdynamics.nl\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/networkdynamics.nl\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/networkdynamics.nl\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/networkdynamics.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=142"}],"version-history":[{"count":11,"href":"https:\/\/networkdynamics.nl\/index.php?rest_route=\/wp\/v2\/posts\/142\/revisions"}],"predecessor-version":[{"id":162,"href":"https:\/\/networkdynamics.nl\/index.php?rest_route=\/wp\/v2\/posts\/142\/revisions\/162"}],"wp:attachment":[{"href":"https:\/\/networkdynamics.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=142"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/networkdynamics.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=142"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/networkdynamics.nl\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=142"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}