Доброго времени суток всем

Имею DSL-2500U/BRU/D. (Прошивка RU_1.58 ). До последнего времени использовал модем в режиме роутера PPPoE на 0/8/35. По акции провайдера заинтересовался возможностью получить IPTV на ПК. Вариант с bridge на 0/8/36 и порт-маппингом не рассматривается, так как lan-port всего один Переезд на 2540U планируется в будущем, но схему с роутером менять не хочется.

Нашел следующий документ:
http://www.avtlg.ru/support/DSL-2500U_B ... 20IPTV.pdf
(на 0/8/36 поднимается MAC Encapsulation Routing (MER))

Прописал все как описано, в результате получил почти работающую схему - вроде есть Инет и IPTV. Но что непонятно - IPTV работает примерно 5 минут (если постоянно висеть на одном канале не переключаясь) и зависает. Проблем с коннектом нет, PPPoE работает стабильно. Если смотреть на IGMP то выходит такое:

60 14:49:04.197344 192.168.1.2 224.0.0.22 IGMP V3 Membership Report / Join group 224.11.10.58 for any sources
61 14:49:24.180379 192.168.1.1 224.0.0.1 IGMP V3 Membership Query, general
62 14:49:24.770702 192.168.1.2 224.0.0.22 IGMP V3 Membership Report / Join group 224.11.10.58 for any sources / Join group 239.255.255.250 for any sources
63 14:51:29.182179 192.168.1.1 224.0.0.1 IGMP V3 Membership Query, general
64 14:51:29.774383 192.168.1.2 224.0.0.22 IGMP V3 Membership Report / Join group 224.11.10.58 for any sources / Join group 239.255.255.250 for any sources
65 14:53:34.182912 192.168.1.1 224.0.0.1 IGMP V3 Membership Query, general
66 14:53:34.848875 192.168.1.2 224.0.0.22 IGMP V3 Membership Report / Join group 224.11.10.58 for any sources / Join group 239.255.255.250 for any sources
тут зависает IPTV (пакета Leave group 224.11.10.58 нет в логе, т.е. это не глюк IPTVplayer'a)
69 14:55:39.184395 192.168.1.1 224.0.0.1 IGMP V3 Membership Query, general
70 14:55:39.943888 192.168.1.2 224.0.0.22 IGMP V3 Membership Report / Join group 239.255.255.250 for any sources

Конфиг модема:

<psitree>
<SystemInfo>
<protocol autoScan="enable" igmpSnp ="disable" igmpMode ="disable" macFilterPolicy="forward" encodePassword="enable" upnp="enable" sipAlg="disable" />
<sysLog state="enable" displayLevel="WARNING" logLevel="WARNING" option="local" isDefaultCfg="No" serverIP="0.0.0.0" serverPort="514"/>
<snmp state="enable" readCommunity="public" writeCommunity="private" sysName="DSL-2500U" sysLocation="D-Link" sysContact="ADSL" trapIP="0.0.0.0"/>
<sysUserName value="admin"/>
<dns dynamic="enable" primary="192.168.1.1" secondary="192.168.1.1" domain="Home" host="Alpha"/>
<defaultGateway enblGwAutoAssign="disable" ifName="ppp_0_8_35_1" ipAddr="0.0.0.0"/>
</SystemInfo>
<AtmCfg>
<initCfg structureId="2" threadPriority="25" freeCellQSize="10" freePktQSize="200" freePktQBufSize="1600" freePktQBufOffset="32" rxCellQSize="10" rxPktQSize="200" txFifoPriority="64" aal5MaxSduLen="64" aal2MaxSduLen="0"/>
</AtmCfg>
<AtmCfgTd>
<td1 cat="UBR" PCR="0" SCR="0" MBS="0"/>
</AtmCfgTd>
<AtmCfgVcc>
<vccId9999 portId="0" vpi="0" vci="65534" tdId="0" aalType="AAL2" adminStatus="down" encap="unknown" qos="disable" instanceId="1509949447"/>
<vccId1 portId="0" vpi="8" vci="35" tdId="1" aalType="AAL5" adminStatus="up" encap="llc" qos="disable" instanceId="1509949444"/>
<vccId2 portId="0" vpi="8" vci="36" tdId="1" aalType="AAL5" adminStatus="up" encap="llc" qos="disable" instanceId="1509949447"/>
</AtmCfgVcc>
<SecCfg>
<qosMgmtCfg enableQos="disable" defaultDSCPMark="-1" defaultQueue="-1"/>
<srvCtrlList ftp="lan" http="lan" icmp="enable" snmp="lan" ssh="lan" telnet="lan" tftp="lan"/>
</SecCfg>
<Lan>
<entry9999 address="1.1.1.1" mask="255.255.255.0" dhcpServer="disable" confDhcpSrv="disable" leasedTime="0" startAddr="0.0.0.0" endAddr="0.0.0.0" subnetMask="0.0.0.0" instanceId="1509949448"/>
<entry1 address="192.168.1.1" mask="255.255.255.0" dhcpServer="enable" confDhcpSrv="enable" leasedTime="24" startAddr="192.168.1.2" endAddr="192.168.1.254" subnetMask="255.255.255.0" instanceId="1509949441"/>
</Lan>
<RouteCfg>
<ripGlobal state="disable" ripIfcTableSize="1"/>
<ripIfc tableSize="1">
<ripIfcEntry id="1" name="br0" state="disable" version="2" operation="active"/>
</ripIfc>
</RouteCfg>
<SNTPCfg>
<cfg state="disable" server1="clock.fmt.he.net" server2="none" timezone="Yakutsk"/>
</SNTPCfg>
<PMapCfg>
<pmap tableSize="1">
<pmapEntry id="1" groupName="Default" groupKey="1" groupStatus="1" ifList="eth0:1" vendorid0="" vendorid1="" vendorid2="" vendorid3="" vendorid4=""/>
</pmap>
<pmapFlt tableSize="1">
<pmapFltEntry id="1" instance="1" status="enable" bridgeRef="1" interfaceRef="eth0"/>
</pmapFlt>
</PMapCfg>
<ADSL>
<settings G.Dmt="enable" G.lite="enable" T1.413="enable" ADSL2="enable" AnnexL="enable" ADSL2plus="enable" AnnexM="enable" pair="inner" bitswap="enable" SRA="disable"/>
</ADSL>
<StaticIpCfg/>
<DDNSCfg/>
<EngDbgCfg/>
<pppsrv_0_8_35>
<ppp_conId1 userName="user" password="password" serviceName="" idleTimeout="0" ipExt="disable" superDMZ="0" nonDmzIpAddr="192.168.2.1" nonDmzIpMsk="255.255.255.0" auth="auto" useStaticIpAddr="0" localIpAddr="255.255.255.255" Debug="disable" pppAuthErrorRetry="enable" pppToBridge="enable" pppMtu="1492" pppKeepAlive="0" lcp_echo_interval="30" maxfail="0" ipfrag_high_thresh="4096" ipfrag_low_thresh="1024" ipfrag_time="5" />
</pppsrv_0_8_35>
<wan_0_8_35>
<entry1 vccId="1" vlanMuxId="-1" conId="1" name="PPPoE" protocol="PPPOE" encap="LLC" firewall="enable" nat="enable" fullcone="disable" igmp="disable" vlanId="-1" service="enable" instanceId="1509949445"/>
</wan_0_8_35>
<ipsrv_0_8_36>
<dhcpc_conId1 state="enable" dhcpcstaticgw="0" wanAddress="255.255.255.255" wanMask="255.255.255.255" superDMZ="0" nonDmzIpAddr="192.168.2.1" nonDmzIpMsk="255.255.255.0"/>
/>
</ipsrv_0_8_36>
<wan_0_8_36>
<entry1 vccId="2" vlanMuxId="-1" conId="1" name="br_0_8_36" protocol="MER" encap="LLC" firewall="disable" nat="disable" fullcone="enable" igmp="enable" vlanId="-1" service="enable" instanceId="1509949448"/>
</wan_0_8_36>
</psitree>


Прошу поделиться мнением, что может быть не так - чтобы бодаться с провайдером надо иметь веские основания

Для точности снял дебаг-лог с модема:

Jan 1 00:00:39 user debug syslog: echo "1024" > /proc/sys/net/ipv4/ip_conntrack_max
Jan 1 00:00:39 user debug syslog: echo 2000 > /proc/sys/net/ipv4/netfilter/ip_conntrack_generic_timeout
Jan 1 00:00:39 user debug syslog: echo 600 > /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_timeout_established
Jan 1 00:00:39 user debug syslog: echo 1400 > /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_timeout_fin_wait
Jan 1 00:00:39 user debug syslog: echo 30 > /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_timeout_time_wait
Jan 1 00:00:39 user debug syslog: echo 4096 > /proc/sys/net/ipv4/ipfrag_high_thresh
Jan 1 00:00:39 user debug syslog: echo 1024 > /proc/sys/net/ipv4/ipfrag_low_thresh
Jan 1 00:00:39 user debug syslog: echo 5 > /proc/sys/net/ipv4/ipfrag_time
Jan 1 00:00:39 user debug syslog: iptables -t nat -D PREROUTING -i br0 -d 192.168.1.1 -p udp --dport 53 -j DNAT --to 128.9.0.107 2>/dev/null
Jan 1 00:00:40 user debug syslog: iptables -t nat -D POSTROUTING -o ppp_0_8_35_1 -s 192.168.1.0/255.255.255.0 -j MASQUERADE 2>/dev/null
Jan 1 00:00:40 user crit kernel: eth0 Link UP.
Jan 1 00:00:40 user info kernel: br0: port 1(eth0) entering learning state
Jan 1 00:00:40 user info kernel: br0: topology change detected, propagating
Jan 1 00:00:40 user info kernel: br0: port 1(eth0) entering forwarding state
Jan 1 00:00:40 user debug syslog: iptables -t nat -A POSTROUTING -o ppp_0_8_35_1 -s 192.168.1.0/255.255.255.0 -j MASQUERADE
Jan 1 00:00:40 user debug syslog: iptables -t nat -D PREROUTING -i br0 -d 192.168.1.1 -p udp --dport 53 -j DNAT --to 80.73.85.251 2>/dev/null
Jan 1 00:00:40 user debug syslog: iptables -t nat -A PREROUTING -i br0 -d 192.168.1.1 -p udp --dport 53 -j DNAT --to 80.73.85.251
Jan 1 00:00:40 user debug syslog: /bin/dnsprobe &
Jan 1 00:00:40 user debug syslog: upnp -L br0 -W ppp_0_8_35_1 -D
Jan 1 00:00:40 user notice dnsprobe[498]: dnsprobe started!
Jan 1 00:00:40 user warn dnsprobe[498]: No Secondary DNS server found
Jan 1 00:00:40 user debug syslog: iptables -t filter -I OUTPUT -o ppp_0_8_35_1 -d 239.255.255.250 -j DROP 2>/dev/null
Jan 1 00:00:42 user debug syslog: iptables -I INPUT 1 -p icmp --icmp-type echo-request -i ppp_0_8_35_1 -j ACCEPT
Jan 1 00:00:42 user debug syslog: echo 4096 > /proc/sys/net/ipv4/ipfrag_high_thresh
Jan 1 00:00:42 user debug syslog: echo 1024 > /proc/sys/net/ipv4/ipfrag_low_thresh
Jan 1 00:00:42 user debug syslog: echo 5 > /proc/sys/net/ipv4/ipfrag_time
Jan 1 00:00:43 user debug syslog: /bin/igmp nas_0_8_36 &
Jan 1 00:00:43 user debug syslog: iptables -t nat -D PREROUTING -i br0 -d 192.168.1.1 -p udp --dport 53 -j DNAT --to 80.73.85.251 2>/dev/null
Jan 1 00:00:43 user notice igmp[530]: igmp started!
Jan 1 00:00:43 user debug syslog: iptables -t nat -A PREROUTING -i br0 -d 192.168.1.1 -p udp --dport 53 -j DNAT --to 80.73.85.251
Jan 1 00:00:44 user debug syslog: /bin/dnsprobe &
Jan 1 00:00:44 user notice dnsprobe[538]: dnsprobe started!
Jan 1 00:00:44 user warn dnsprobe[538]: No Secondary DNS server found
Jan 1 00:00:45 user debug syslog: kill -SIGTERM 530
Jan 1 00:00:45 user debug syslog: /bin/igmp nas_0_8_36 &
Jan 1 00:00:47 user notice igmp[544]: igmp started!
Jan 1 00:00:48 user notice igmp[544]: setsockopt - MRT_ADD_VIF
Jan 1 00:00:48 user notice igmp[544]: setsockopt - MRT_ADD_VIF
Jan 1 00:01:26 user debug igmp[563]: iptables -D FORWARD -i nas_0_8_36 -d 239.255.255.250 -j DROP 2>/dev/null
Jan 1 00:01:26 user debug igmp[565]: iptables -t filter -I FORWARD 1 -i nas_0_8_36 -d 239.255.255.250 -j ACCEPT 2>/dev/null

запускаю IPTVplayer, подключаю канал Россия2 (224.11.10.25)

Jan 1 00:05:19 user notice igmp[544]: setsockopt- MRT_DEL_MFC
Jan 1 00:05:20 user notice igmp[544]: setsockopt- MRT_DEL_MFC
Jan 1 00:05:36 user debug igmp[567]: iptables -D FORWARD -i nas_0_8_36 -d 224.11.10.25 -j DROP 2>/dev/null
Jan 1 00:05:36 user debug igmp[569]: iptables -t filter -I FORWARD 1 -i nas_0_8_36 -d 224.11.10.25 -j ACCEPT 2>/dev/null

примерно через 5 минут зависает изображение на IPTVplayer.

переключаю на канал 7ТВ (224.11.10.24)

Jan 1 00:11:22 user debug igmp[571]: iptables -D FORWARD -i nas_0_8_36 -d 224.11.10.24 -j DROP 2>/dev/null
Jan 1 00:11:22 user debug igmp[573]: iptables -t filter -I FORWARD 1 -i nas_0_8_36 -d 224.11.10.24 -j ACCEPT 2>/dev/null
Jan 1 00:11:22 user notice igmp[544]: perror:setsockopt - IP_DROP_MEMBERSHIP
Jan 1 00:11:22 user debug igmp[575]: iptables -t filter -I FORWARD 1 -i nas_0_8_36 -d 224.11.10.25 -j DROP 2>/dev/null
Jan 1 00:11:22 user debug igmp[577]: iptables -t filter -D FORWARD -i nas_0_8_36 -d 224.11.10.25 -j ACCEPT 2>/dev/null
Jan 1 00:11:22 user notice igmp[544]: setsockopt- MRT_DEL_MFC
Jan 1 00:11:22 user notice igmp[544]: setsockopt IP_MSFILTER
Jan 1 00:11:23 user notice igmp[544]: perror:setsockopt - IP_DROP_MEMBERSHIP
Jan 1 00:11:23 user notice igmp[544]: setsockopt- MRT_DEL_MFC

переключаю на канал канал Россия2 (224.11.10.25)

Jan 1 00:11:27 user debug igmp[579]: iptables -D FORWARD -i nas_0_8_36 -d 224.11.10.25 -j DROP 2>/dev/null
Jan 1 00:11:27 user debug igmp[581]: iptables -t filter -I FORWARD 1 -i nas_0_8_36 -d 224.11.10.25 -j ACCEPT 2>/dev/null
Jan 1 00:11:27 user notice igmp[544]: perror:setsockopt - IP_DROP_MEMBERSHIP
Jan 1 00:11:27 user debug igmp[583]: iptables -t filter -I FORWARD 1 -i nas_0_8_36 -d 224.11.10.24 -j DROP 2>/dev/null
Jan 1 00:11:27 user debug igmp[585]: iptables -t filter -D FORWARD -i nas_0_8_36 -d 224.11.10.24 -j ACCEPT 2>/dev/null
Jan 1 00:11:27 user notice igmp[544]: setsockopt- MRT_DEL_MFC
Jan 1 00:11:27 user notice igmp[544]: setsockopt IP_MSFILTER
Jan 1 00:11:28 user notice igmp[544]: perror:setsockopt - IP_DROP_MEMBERSHIP
Jan 1 00:11:28 user notice igmp[544]: setsockopt- MRT_DEL_MFC

примерно через 5 минут снова зависает изображение на IPTVplayer.

Ради интереса переконфигурил 8/36 с MER на bridge и снял логи работы IPTVPlayer:

1 02:20:27.747429 192.168.1.2 224.0.0.22 IGMP V3 Membership Report / Join group 224.11.10.24 for any sources
2 02:20:28.486262 192.168.1.2 224.0.0.22 IGMP V3 Membership Report / Join group 224.11.10.24 for any sources
3 02:20:32.120108 192.168.1.2 224.0.0.22 IGMP V3 Membership Report / Leave group 224.11.10.24
4 02:20:32.726985 192.168.1.2 224.0.0.22 IGMP V3 Membership Report / Join group 224.12.10.150 for any sources
5 02:20:33.041041 192.168.1.2 224.0.0.22 IGMP V3 Membership Report / Leave group 224.11.10.24
6 02:20:33.541047 192.168.1.2 224.0.0.22 IGMP V3 Membership Report / Join group 224.12.10.150 for any sources
7 02:21:38.339870 192.168.1.1 224.0.0.1 IGMP V2 Membership Query, general
8 02:21:42.191811 192.168.1.2 224.12.10.150 IGMP V2 Membership Report / Join group 224.12.10.150
9 02:21:48.206578 192.168.1.2 239.255.255.250 IGMP V2 Membership Report / Join group 239.255.255.250
10 02:23:44.991475 192.168.1.1 224.0.0.1 IGMP V2 Membership Query, general
11 02:23:46.932524 192.168.1.2 224.12.10.150 IGMP V2 Membership Report / Join group 224.12.10.150
12 02:23:52.943393 192.168.1.2 239.255.255.250 IGMP V2 Membership Report / Join group 239.255.255.250
...
20 02:30:07.168505 192.168.1.2 224.12.10.150 IGMP V2 Membership Report / Join group 224.12.10.150
21 02:30:15.186240 192.168.1.2 239.255.255.250 IGMP V2 Membership Report / Join group 239.255.255.250
22 02:30:28.447318 192.168.1.2 224.0.0.2 IGMP V2 Leave Group 224.12.10.150

IPTV работает стабильно (не рвется) и вот что интересно - судя по логу IGMP в bridge идет по версии 2, а в случае с MER - по версии 3. Собственно может в этом и есть проблема? Пакет Membership Report / Join group версии 3 тупо не понимается железкой провайдера? (Huawei вроде)

Уточнился у провайдера - стоит Huawei's SmartAX MA5600. Судя по описанию - Supports IGMP V1/V2, IGMP Proxy, and IGMP Snooping. Про версию 3 ни слова.
Получается IGMP Proxy у 2500U не хочет работать на версии 2, а провайдер не понимает версию 3. Замкнутый круг