In this How-To we are going to setup KPN on OPNsense on with iTV on the LAN interface.
Where we use 192.168.2.0/24
as our network, OPNsense admin can be visited on 192.168.2.1
.
After install OPNsense go to
System > Firmware > Status
Click Check for updates
if there are updates available scroll down the page and install them.
Go to
Interfaces > Other Types > VLAN
Create 2 VLANs on your WAN interface:
VLAN6
VLAN4
Go to
Interfaces > Assignments
Create a interface with VLAN tag: Parent: vtnet0 (wan), Tag: 4
call it IPTV_WAN
Change the WAN interface to Parent: vtnet0 (wan), Tag: 6
Save now.
Go to
Interfaces > WAN
Generic configuration
Set IPv4 Configuration Type: PPPoE
Set IPv6 Configuration Type: DHCPv6
Set MTU: 1492
PPPoE configuration
Set Username: kpn@internet
Set Password: kpn
DHCPv6 client configuration
Set Request only an IPv6 prefix: True
Set Prefix delegation size: 48
Set Send IPv6 prefix hint: False
Set Use IPv4 connectivity: True
Set Use VLAN priority: Disabled
Go to
Interfaces > IPTV_WAN
Basic configuration
Set Enable: True
Enable Interface
Set Description: IPTV_WAN
Generic configuration
Set IPv4 Configuration Type: DHCP
DHCP client configuration
Set Configuration Mode: Advanced
Set Override MTU: True
Set Lease Requirements / Send Options: dhcp-class-identifier "IPTV_RG"
Set Lease Requirements / Request Options: subnet-mask, routers, broadcast-address, classless-routes
Go to
System > Firmware > Plugins
Install os-igmp-proxy
After installation of os-igmp-proxy
refresh the page.
Go to
Services > IGMP Proxy
Here we are going to add 2 streams (Upstream and Downstream)
Add Upstream
Set Interface: IPTV_WAN
Set Type: Upstream Interface
Create 2 networks: 0.0.0.0 / 1
& 128.0.0.0 / 1
Add Downstream
Set Interface: LAN
Set Type: Downstream Interface
Create 1 networks: 192.168.2.0 / 24
Go to
Services > DHCPv4
Set Additional Options
60 / Text / IPTV_RG
28 / IP address or host / 192.168.2.255
Go to
Firewall > NAT > Outbound
Set Mode: Hybrid outbound NAT rule generation (automatically generated rules are applied after manual rules)
Create Rule: IPTV_WAN LAN net * * * IPTV_WAN address * NO
Go to
Firewall > Rules > IPTV_WAN
Create 3 rules
Rule 1:
Set Action: Pass
Set Quick: True
Set Interface: IPTV_WAN
Set Direction: in
Set TCP/IP Version: IPv4
Set Protocol: IGMP
Set Source: any
Set Destination: Single host or Network
224.0.0.0 / 4
Set Advanced Option: Show
Set allow options: True
Rule 2:
Set Action: Pass
Set Quick: True
Set Interface: IPTV_WAN
Set Direction: out
Set TCP/IP Version: IPv4
Set Protocol: IGMP
Set Source: any
Set Destination: Single host or Network
224.0.0.0 / 4
Set Advanced Option: Show
Set allow options: True
Rule 3:
Set Action: Pass
Set Quick: True
Set Interface: IPTV_WAN
Set Direction: in
Set TCP/IP Version: IPv4
Set Protocol: *
Set Source: any
Set Destination: Single host or Network
224.0.0.0 / 4
Go to
Firewall > Rules > LAN
Create 2 rules at top of the exisiting ones.
Rule 1:
Set Action: Pass
Set Quick: True
Set Interface: LAN
Set Direction: in
Set TCP/IP Version: IPv4
Set Protocol: IGMP
Set Source: LAN net
Set Destination: Single host or Network
224.0.0.0 / 4
Set Advanced Option: Show
Set allow options: True
Rule 2:
Set Action: Pass
Set Quick: True
Set Interface: LAN
Set Direction: in
Set TCP/IP Version: IPv4
Set Protocol: any
Set Source: LAN net
Set Destination: Single host or Network
213.75.112.0 / 21