Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 19 replies
  • Answers 1 answer
  • Subscribers 29 subscribers
  • Views 91920 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Allow IPTV IGMP traffic on wan/lan networks

JaymilBhudia

How do I allow IGMP snooping on XG Firewall for BT Vision to view internet channels.



This thread was automatically locked due to age.
Parents
  • 0

    Hi Jaymil,

    Interesting question.

    You can simply create a Firewall Rule to allow IGMP Services. For your reference, I have attached the screenshots:

     

    For WAN/LAN communication you can create the same Firewall Rule vice versa, where Source = WAN Zone and Destination = LAN zone.

    Hope that helps.

  • 0 in reply to sachingurung

    I also have BT You View, I have just fitted Sophos XG and it stops the Internet based channels from working.  I setup from scratch and created two firewall policies to test, on all traffic in from anywhere to all networks, one all traffic out from all network to any where.  Still my BT Youview stops working.  The second I go back to my BT home hub it works fine.  

    I am connecting to the WAN via a BT Openreach modem using PPPoE

    I enabled logging for everything but when I enable a filter to check the IP address the YouView box I get no drops etc (may be a red herring?)

    Everything else looks good but I cant use the XG if I cant get my TV to work!

    Any help would be great, I am pretty technical so if you need log dumps, changes to be made/tried I would be happy to help out :)


    Ben

  • 0 in reply to BenMarchant

    Hi All,

    Can you create a Plain Firewall Rule i.e None Filter in Web protection and App protection "None" not allow all.

    Update me if this works.

    Thanks

    Sachin Gurung

  • 0 in reply to sachingurung

    hi

    I have done that and still  not  working.

    As soon as I connect youview box to home hub everything starts to work fine. 

    My  current setup is 

    homehub (dhcp turned off)

    port  1 to Sophos XG with  dccp/dns active 

    port  2 youview 

    only way to get it youview to work  

    so Sophos is 10.0.x.x and my wan is 192.168.x.x

    Therefore Local LAN gateway is sophos and sophos WAN gateway is BT Home Hub

  • 0 in reply to JaymilBhudia

    Hi Jaymil

    Doesn't the Youview box need to talk directly to the BT Homehub full stop?

    I think this might actually need to be a non-http based Business Application Rule with Natting involved for it to work. Ie. create rule that is reflexive and NATs communications from the homehub to the youview and the reflexive nature allows it back?

    There's some special love connection between the two units iirc

    Hope that helps?

    Emile

  • 0 in reply to Emile Belcourt

    I have a spare router (non BT homehub), I will try that on its own with the youview box tonight to see if the home hub is doing something 'clever' to make the internet content stream.

  • 0 in reply to BenMarchant

    Hi Ben,

    I haven't been on BT with a Youview box for a few years (or whatever the equivalent was) but they do some "smart" packet shaping on the homehub and other things so hopefully connecting it to another router will lay that one to rest.

    If you want any help with the Business Application Rule, let me know :)

    Cheers,

    Emile

  • 0 in reply to Emile Belcourt

    Thanks Emile

    It looks like it works with a Draytek, no home hub required

    Got this from a thread - 

    This is how I got BT YouView working on Draytek Vigor 2860, I think the same setting should work on other Draytek router

     1 Go to NAT and click on Open Ports, any Index number

    2 Enable Open Ports, enter the IP address of your YouView box and the port forwarding number, TCP/UDP 1024/8081

    3 Go to Applications and click on IGMP. Enable IGMP Proxy and Snooping

    4 Reboot router

    Does the XG have IGMP proxy and snooping settings?

    I have a Sonicwall TZ200 that I will try at home in the next few hours as well.

  • 0 in reply to BenMarchant

    I have had it working with a TP-Link Router and Pfsense. IGMP Proxy is the key.

  • 0 in reply to BenMarchant

    Hi Jaymil,

    You could use the XG as a Proxy for IGMP under System > System Services > Web Proxy but I highly doubt that would work

    But I think you need to actually turn on Multicast forwarding which is done by looking at this guide from Cyberoam (Sachin, may need this one updated for Sophos?): https://kb.cyberoam.com/default.asp?id=1021

    As far as I'm aware the XG is not an IGMP proxy (yet) but you can forward it to the appropriate place using that guide. Maybe that's what is needed to make Sachin's original suggestion work?

    You will need to find out what the IGMP source is however from BT.

    Hope this helps,

    Emile

Reply
  • 0 in reply to BenMarchant

    Hi Jaymil,

    You could use the XG as a Proxy for IGMP under System > System Services > Web Proxy but I highly doubt that would work

    But I think you need to actually turn on Multicast forwarding which is done by looking at this guide from Cyberoam (Sachin, may need this one updated for Sophos?): https://kb.cyberoam.com/default.asp?id=1021

    As far as I'm aware the XG is not an IGMP proxy (yet) but you can forward it to the appropriate place using that guide. Maybe that's what is needed to make Sachin's original suggestion work?

    You will need to find out what the IGMP source is however from BT.

    Hope this helps,

    Emile

Children
No Data