Bonjour à tous,
Tout d'abords un grand merci à tous les contributeurs de ce forum.
Grace à vous, j’ai pu remplacer ma Livebox pour un ER4 très facilement, j’ai opté pour la config avec LAN+TV sur eth0, ONT sur eth1 et Livebox (pour le tel) sur eth2.
Tout fonctionne quasi parfaitement, j’ai juste un problème avec le Replay, j’ai bien une ip sur eth1.838 et les routes sont initialisées
eth1.838 Link encap:Ethernet HWaddr fc:ec:da:42:fc:74
inet addr:10.93.230.148 Bcast:10.93.231.255 Mask:255.255.252.0
inet6 addr: fe80::feec:daff:fe42:fc74/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1130 errors:0 dropped:0 overruns:0 frame:0
TX packets:4172 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:111753 (109.1 KiB) TX bytes:1035188 (1010.9 KiB)ubnt@ER4Home:~$ sudo route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 86.195.64.1 0.0.0.0 UG 0 0 0 eth1.832
10.93.228.0 0.0.0.0 255.255.252.0 U 0 0 0 eth1.838
80.10.117.120 10.93.231.254 255.255.255.254 UG 0 0 0 eth1.838
80.10.204.0 10.93.231.254 255.255.252.0 UG 0 0 0 eth1.838
81.253.206.0 10.93.231.254 255.255.255.0 UG 0 0 0 eth1.838
81.253.210.0 10.93.231.254 255.255.254.0 UG 0 0 0 eth1.838
81.253.214.0 10.93.231.254 255.255.254.0 UG 0 0 0 eth1.838
86.195.64.0 0.0.0.0 255.255.248.0 U 0 0 0 eth1.832
172.19.20.0 10.93.231.254 255.255.254.0 UG 0 0 0 eth1.838
172.20.224.167 10.93.231.254 255.255.255.255 UGH 0 0 0 eth1.838
172.23.12.0 10.93.231.254 255.255.252.0 UG 0 0 0 eth1.838
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 0 eth2.832
192.168.255.254 0.0.0.0 255.255.255.255 UH 0 0 0 eth1.840
193.253.67.88 10.93.231.254 255.255.255.248 UG 0 0 0 eth1.838
193.253.153.227 10.93.231.254 255.255.255.255 UGH 0 0 0 eth1.838
193.253.153.228 10.93.231.254 255.255.255.255 UGH 0 0 0 eth1.838J’ai accès aux menus des Replay mais dès que je sélectionne un contenu le décodeur a l’air de se figer, au mieux tout est très lent, 1 à 2 min pour avoir la 1ere pub et 3-4 min pour que le Replay démarre, au pire le decodeur reste planté ou affiche une erreur 'contenu indisponible (erreur V09)' au bout de plusieurs minutes
Un reboot, une réinitialisation du décodeur TV ne change rien, pas plus qu’un reboot de tous les équipements (ER4, switch, …).
Je n’utilise pas beaucoup le Replay, je n’ai remarqué le pb que quelques jours après avoir tout configuré, mais il me semble qu’au début le Replay fonctionnait normallement…
J’avoue ne pas trop savoir ou chercher, a moins que ce ne soit un pb coté Orange ?
Si quelqu’un a une idée je suis preneur.
Voici ma config complète :
firewall {
all-ping enable
broadcast-ping disable
ipv6-name WANv6_IN {
default-action drop
description "WANv6 inbound traffic forwarded to LAN"
rule 10 {
action accept
description "Allow established/related"
state {
established enable
related enable
}
}
rule 20 {
action drop
description "Drop invalid state"
state {
invalid enable
}
}
rule 30 {
action accept
description "Allow ICMPv6"
log disable
protocol icmpv6
}
}
ipv6-name WANv6_LOCAL {
default-action drop
description "WANv6 inbound traffic to the router"
rule 10 {
action accept
description "Allow established/related"
state {
established enable
related enable
}
}
rule 20 {
action drop
description "Drop invalid state"
state {
invalid enable
}
}
rule 30 {
action accept
description "Allow ICMPv6"
log disable
protocol icmpv6
}
rule 40 {
action accept
description "Allow DHCPv6"
destination {
port 546
}
protocol udp
source {
port 547
}
}
}
ipv6-name WANv6_OUT {
default-action accept
description "WANv6 outbound traffic"
rule 10 {
action accept
description "Allow established/related"
state {
established enable
related enable
}
}
rule 20 {
action reject
description "Reject invalid state"
state {
invalid enable
}
}
}
ipv6-receive-redirects disable
ipv6-src-route disable
ip-src-route disable
log-martians enable
name WAN_IN {
default-action drop
description "WAN to internal"
rule 10 {
action accept
description "Allow established/related"
log disable
protocol all
state {
established enable
invalid disable
new disable
related enable
}
}
rule 20 {
action drop
description "Drop invalid state"
log disable
protocol all
state {
established disable
invalid enable
new disable
related disable
}
}
}
name WAN_LOCAL {
default-action drop
description "WAN to router"
rule 1 {
action accept
description "Allow established/related"
state {
established enable
related enable
}
}
rule 3 {
action drop
description "Drop invalid state"
log disable
state {
invalid enable
}
}
}
receive-redirects disable
send-redirects enable
source-validation disable
syn-cookies enable
}
interfaces {
ethernet eth0 {
address 192.168.1.1/24
description LAN_ETH0
duplex auto
ipv6 {
dup-addr-detect-transmits 1
router-advert {
cur-hop-limit 64
link-mtu 0
managed-flag false
max-interval 600
other-config-flag false
prefix ::/64 {
autonomous-flag true
on-link-flag true
preferred-lifetime 14400
valid-lifetime 18000
}
reachable-time 0
retrans-timer 0
send-advert true
}
}
speed auto
}
ethernet eth1 {
description ISP
duplex auto
speed auto
vif 832 {
address dhcp
description ISP_DATA
dhcp-options {
client-option "send vendor-class-identifier "sagem";"
client-option "send user-class "+FSVDSL_livebox.Internet.softathome.Livebox3";"
client-option "send rfc3118-auth 00:00:00:00:00:00:00:00:00:00:00:<Ident_fti>;"
client-option "request subnet-mask, routers, domain-name-servers, domain-name, broadcast-address, dhcp-lease-time, dhcp-renewal-time, dhcp-rebinding-time, rfc3118-auth;"
default-route update
default-route-distance 210
global-option "option rfc3118-auth code 90 = string;"
name-server update
}
egress-qos "0:0 1:0 2:0 3:0 4:0 5:0 6:6 7:0"
firewall {
in {
ipv6-name WANv6_IN
name WAN_IN
}
local {
ipv6-name WANv6_LOCAL
name WAN_LOCAL
}
}
ipv6 {
address {
autoconf
}
dup-addr-detect-transmits 1
}
}
vif 838 {
address dhcp
description ISP_TV_VOD
dhcp-options {
client-option "send vendor-class-identifier "sagem";"
client-option "send dhcp-client-identifier 1:<@MAC Livebox>"
client-option "send user-class "\047FSVDSL_livebox.MLTV.softathome.Livebox3";"
client-option "request subnet-mask, rfc3442-classless-static-routes;"
default-route update
default-route-distance 210
name-server update
}
egress-qos "0:4 1:4 2:4 3:4 4:4 5:4 6:4 7:4"
}
vif 840 {
address 192.168.255.254/32
description ISP_TV_STREAM
egress-qos "0:5 1:5 2:5 3:5 4:5 5:5 6:5 7:5"
}
}
ethernet eth2 {
address 192.168.2.1/24
description LAN_ETH2
duplex auto
speed auto
vif 832 {
address 192.168.2.254/24
description Voip
}
}
ethernet eth3 {
disable
duplex auto
speed auto
}
loopback lo {
}
}
port-forward {
auto-firewall enable
hairpin-nat enable
lan-interface eth0
rule 1 {
description Plex
forward-to {
address 192.168.1.150
port 32400
}
original-port 32400
protocol tcp_udp
}
wan-interface eth1.832
}
protocols {
igmp-proxy {
disable-quickleave
interface eth0 {
alt-subnet 0.0.0.0/0
role downstream
threshold 1
}
interface eth1 {
role disabled
threshold 1
}
interface eth1.832 {
role disabled
threshold 1
}
interface eth1.838 {
role disabled
threshold 1
}
interface eth1.840 {
alt-subnet 0.0.0.0/0
role upstream
threshold 1
}
interface eth2 {
role disabled
threshold 1
}
}
}
service {
dhcp-server {
disabled false
global-parameters "option rfc3118-auth code 90 = string;"
global-parameters "option SIP code 120 = string;"
global-parameters "option Vendor-specific code 125 = string;"
hostfile-update disable
shared-network-name LAN {
authoritative disable
subnet 192.168.1.0/24 {
default-router 192.168.1.1
dns-server 192.168.1.1
lease 86400
ntp-server 192.168.1.1
start 192.168.1.5 {
stop 192.168.1.200
}
static-mapping DecodeurTV {
ip-address 192.168.1.5
mac-address 2c:39:96:5e:38:44
}
}
}
shared-network-name LIVEBOX {
authoritative enable
subnet 192.168.2.0/24 {
default-router 192.168.2.254
dns-server 80.10.246.136
dns-server 81.253.149.6
domain-name orange.fr
lease 86400
start 192.168.2.20 {
stop 192.168.2.50
}
static-mapping Livebox {
ip-address 192.168.2.10
mac-address <@MAC Livebox>
}
subnet-parameters "option rfc3118-auth 00:00:00:00:00:00:00:00:00:00:00:64:68:63:70:6c:69:76:65:62:6f:78:66:72:32:35:30;"
subnet-parameters "option SIP 0:6:73:62:63:74:33:67:3:50:55:54:6:61:63:63:65:73:73:11:6f:72:61:6e:67:65:2d:6d:75:6c:74:69:6d:65:64:69:61:3:6e:65:74:0;"
subnet-parameters "option Vendor-specific 00:00:05:58:0c:01:0a:00:00:00:00:00:ff:ff:ff:ff:ff;"
}
}
static-arp disable
use-dnsmasq disable
}
dns {
forwarding {
cache-size 1024
listen-on lo
listen-on eth0
listen-on eth2
name-server 80.10.246.136
name-server 81.253.149.6
}
}
gui {
http-port 80
https-port 443
listen-address 192.168.1.1
older-ciphers disable
}
nat {
rule 5001 {
description "MASQ: WAN"
log disable
outbound-interface eth1.832
protocol all
type masquerade
}
rule 5002 {
description "MASQ: ORANGE"
log disable
outbound-interface eth1.838
protocol all
type masquerade
}
}
ssh {
listen-address 192.168.1.1
port 22
protocol-version v2
}
unms {
disable
}
upnp2 {
listen-on eth0
nat-pmp enable
port 34651
secure-mode enable
wan eth1.832
}
}
system {
config-management {
commit-revisions 5
}
conntrack {
expect-table-size 4096
hash-size 4096
table-size 32768
tcp {
half-open-connections 512
loose disable
max-retrans 3
}
}
host-name ER4Home
login {
user ubnt {
authentication {
encrypted-password <pwd>
plaintext-password ""
}
full-name ""
level admin
}
}
name-server 1.1.1.1
name-server 8.8.8.8
ntp {
server 0.ubnt.pool.ntp.org {
}
server 1.ubnt.pool.ntp.org {
}
server 2.ubnt.pool.ntp.org {
}
server 3.ubnt.pool.ntp.org {
}
}
offload {
hwnat disable
ipsec enable
ipv4 {
forwarding enable
gre enable
vlan enable
}
ipv6 {
forwarding enable
vlan enable
}
}
package {
repository wheezy {
components "main contrib non-free"
distribution wheezy
password ""
url http://http.us.debian.org/debian
username ""
}
repository wheezy-security {
components main
distribution wheezy/updates
password ""
url http://security.debian.org
username ""
}
}
syslog {
global {
archive {
files 2
size 1024
}
facility all {
level err
}
facility protocols {
level warning
}
}
host 192.168.1.150 {
facility all {
level warning
}
}
}
task-scheduler {
task watchdog {
executable {
path /config/scripts/orange_watchdog.sh
}
interval 5m
}
}
time-zone Europe/Paris
traffic-analysis {
dpi enable
export enable
}
}
/* Warning: Do not remove the following line. */
/* === vyatta-config-version: "config-management@1:conntrack@1:cron@1:dhcp-relay@1:dhcp-server@4:firewall@5:ipsec@5:nat@3:qos@1:quagga@2:system@4:ubnt-pptp@1:ubnt-udapi-server@1:ubnt-unms@1:ubnt-util@1:vrrp@1:webgui@1:webproxy@1:zone-policy@1" === */
/* Release version: v1.10.1.5067768.180306.1010 */
Merci d'avance
Remplacer la LiveBox par un routeur