In this How-To we are going to setup KPN on OPNsense on with iTV on the LAN interface.
Where we use 192.168.2.0/24 as our network, OPNsense admin can be visited on 192.168.2.1.
After install OPNsense go to
System > Firmware > Status

Click Check for updates if there are updates available scroll down the page and install them.
Go to
Interfaces > Other Types > VLAN

Create 2 VLANs on your WAN interface:
VLAN6
VLAN4
Go to
Interfaces > Assignments

Create a interface with VLAN tag: Parent: vtnet0 (wan), Tag: 4 call it IPTV_WAN
Change the WAN interface to Parent: vtnet0 (wan), Tag: 6
Save now.
Go to
Interfaces > WAN

Generic configuration
Set IPv4 Configuration Type: PPPoE
Set IPv6 Configuration Type: DHCPv6
Set MTU: 1492
PPPoE configuration
Set Username: kpn@internet
Set Password: kpn
DHCPv6 client configuration
Set Request only an IPv6 prefix: True
Set Prefix delegation size: 48
Set Send IPv6 prefix hint: False
Set Use IPv4 connectivity: True
Set Use VLAN priority: Disabled
Go to
Interfaces > IPTV_WAN

Basic configuration
Set Enable: True Enable Interface
Set Description: IPTV_WAN
Generic configuration
Set IPv4 Configuration Type: DHCP
DHCP client configuration
Set Configuration Mode: Advanced
Set Override MTU: True
Set Lease Requirements / Send Options: dhcp-class-identifier "IPTV_RG"
Set Lease Requirements / Request Options: subnet-mask, routers, broadcast-address, classless-routes
Go to
System > Firmware > Plugins

Install os-igmp-proxy
After installation of os-igmp-proxy refresh the page.
Go to
Services > IGMP Proxy

Here we are going to add 2 streams (Upstream and Downstream)
Add Upstream
Set Interface: IPTV_WAN
Set Type: Upstream Interface
Create 2 networks: 0.0.0.0 / 1 & 128.0.0.0 / 1
Add Downstream
Set Interface: LAN
Set Type: Downstream Interface
Create 1 networks: 192.168.2.0 / 24
Go to
Services > DHCPv4


Set Additional Options
60 / Text / IPTV_RG
28 / IP address or host / 192.168.2.255
Go to
Firewall > NAT > Outbound

Set Mode: Hybrid outbound NAT rule generation (automatically generated rules are applied after manual rules)

Create Rule: IPTV_WAN LAN net * * * IPTV_WAN address * NO
Go to
Firewall > Rules > IPTV_WAN

Create 3 rules
Rule 1:
Set Action: Pass
Set Quick: True
Set Interface: IPTV_WAN
Set Direction: in
Set TCP/IP Version: IPv4
Set Protocol: IGMP
Set Source: any
Set Destination: Single host or Network 224.0.0.0 / 4
Set Advanced Option: Show
Set allow options: True
Rule 2:
Set Action: Pass
Set Quick: True
Set Interface: IPTV_WAN
Set Direction: out
Set TCP/IP Version: IPv4
Set Protocol: IGMP
Set Source: any
Set Destination: Single host or Network 224.0.0.0 / 4
Set Advanced Option: Show
Set allow options: True
Rule 3:
Set Action: Pass
Set Quick: True
Set Interface: IPTV_WAN
Set Direction: in
Set TCP/IP Version: IPv4
Set Protocol: *
Set Source: any
Set Destination: Single host or Network 224.0.0.0 / 4
Go to
Firewall > Rules > LAN

Create 2 rules at top of the exisiting ones.
Rule 1:
Set Action: Pass
Set Quick: True
Set Interface: LAN
Set Direction: in
Set TCP/IP Version: IPv4
Set Protocol: IGMP
Set Source: LAN net
Set Destination: Single host or Network 224.0.0.0 / 4
Set Advanced Option: Show
Set allow options: True
Rule 2:
Set Action: Pass
Set Quick: True
Set Interface: LAN
Set Direction: in
Set TCP/IP Version: IPv4
Set Protocol: any
Set Source: LAN net
Set Destination: Single host or Network 213.75.112.0 / 21