Setup Triple VLANs on GL-MT6000

Hello,

I am currently using the MT6000, also known as FLINT2. I am trying to enable a triple VLAN configuration on one of the Ethernet ports, but I have not been able to get it to work.

I have followed the available documentation and tried various settings, but I still cannot make it function correctly. I would appreciate any guidance or step-by-step instructions on how to successfully set up a triple VLAN on this router.

Thank you for your help!

Hi,

Did you config the VLAN in the Luci for interface LAN like the scrennshot? Save and apply but it does not work?

Hi Bruce,

I have to configure 2 VLANs. My ISP router is in bridge mode with two VLANs (6 and 2).
I am able to conect to the VLAN 6 but as soon as I add the 2, Internet goes away. Is the MT6000 able to handle a triple VLAN on one ethernet port (the WAN port for example)?

To add more information (sorry for my bad drawing skills):

Hmm, it sounds vlan 6 is ment for isp wan and 2 for iptv or something?

If vlan 6 worked, and vlan 2 not, did that happen when you created the network interface?

In that case this is a conflict with the default gateway checkbox, if you edit the interface in luci click on advanced settings, there is a checkbox.

It should follow wan, or a other default gateway interface.

Correct, VLAN 6 is for Internet and VLAN 2 for IPTV (Movistar + Spain).
This is how everything was created and still no IPTV on the TV box.

1 Like

the pppoe connection isn't working, i'd recommend trying eth1.6 directly just to be sure its not a device issue but a user credential issue.

For the iptv i do see a dhcp lease so that is fine, though it is important you have the default gateway checkbox unchecked.

If it still doesn't work i think you need to enable igmp snooping on device br-lan, also make sure all the switches in your network are igmp snooping supported otherwise they may end up stripping the packets.

Then finally although im not sure if this is needed but looking to the type of setup it looks familiar with a old isp/iptv setup i used to run, you might also need to install igmpproxy.

with the following config in /etc/config/igmpproxy

click
config igmpproxy
        option quickleave 1

config phyint
        option network iptv
        option zone iptv # the upstream firewall zone for forward rules
        option direction upstream
        list altnet 0.0.0.0/0 # a description of allowed source addresses for multicast packets

config phyint
        option network lan
        option zone lan #the downstream firewall zone for forward rules
        option direction downstream

and firewall:

click
config rule
        option src 'iptv'
        option proto 'udp'
        option dest_ip '224.0.0.0/4'
        option target   'ACCEPT'

^ often it is not needed to again tag 6 and 2 on the lan ports like i see on your drawing, now igmpproxy sents it over lan and back to iptv, you can also replace lan by something else if you want these tvbox isolated.

Since it is a bridge mode it also depends what they imply what the bridge such as is, which raise me questions such as:

  • do vlan 2 and vlan 6 already get managed?, what if you change wan to dhcp client without a vlan does that work?

  • is the layer2 igmp also already managed and does not need a extra tag to vlan 2?

  • is the bridge mode only implied for the firewall, and they ment with bridge mode only to disable the firewall?

This is very important because sometimes bridge mode still manage alot :wink:

1 Like

Hi Charmi,

Were you able to do the Vlan configuration for Movistar?
If so, please can you share your configuration.

In my case, I have set up my own ONT and removed the HGU.

Thank you very much

No luck, I'm still stuck with that.

Please note that if you use the HGU in bridge mode, it does not pass VLANs, it only passes the Internet.

Didn't know about that. I would need to try again with my own ONT.
You can try the config that I sent on Jul 2024 and let's see if it works with you.
I had to do a bunch of things on the firewall and I believe I have the config file somewhere but I'd need to look for it.