HOWTO – Unifi USG and Wingo TV

Are you living in Switzerland and are consuming your Internet and TV from Wingo? Are you a bit more a tech geek than the standard user and are using a Unifi USG as a router? Then you probably will come across the following problem:

How to run Wingo TV while using the Unifi USG?

This article will describe how you need to configure your Unifi USG in order to be able to user your Wingo TV.

When you ask Wingo whether you can use an own router or not, Wingo says the following:

Ja, du kannst einen anderen Router für Wingo Internet verwenden. Für Wingo TV brauchst du einen Router, der über Multicast und IGMP verfügt.

https://www.wingo.ch/de/kann-ich-fuer-wingo-internet-meinen-eigenen-router-verwenden-0

Luckily, the Unifi USG has multicast and IGMP functionalities. In order to use Wingo TV, you need to configure both. Just follow those easy steps.

1. Create new firewall groups

First you need to create two firewall groups. This can be done over the Unifi Controller. Go to Settings > Internet Security > Firewall > Groups > Create New Group and create the following two groups:

2. Create new firewall rules

The second step is to create four new firewall rules in order to allow multicast and IGMP traffic.

WAN_In:
    Description: Allow IPTV Multicast UDP
    Enabled: true
    Rule Applied: Before Predefined Rules
    Action: Accept
    IPv4 Protocol: UDP
    Match all protocols except for this: false
    Source Type: Address/Port Group
    IPv4 Address Group: SCTV2_Source
    Port Group: Any
    MAC Address: none
    Destination Type: Address/Port Group
    IPv4 Address Group: IPTV_Source
    Port Group: Any

WAN_In:
    Description: Allow IGMP
    Enabled: true
    Rule Applied: Before Predefined Rules
    Action: Accept
    IPv4 Protocol: IGMP
    Match all protocols except for this: false
    Source Type: Address/Port Group
    IPv4 Address Group: Any
    Port Group: Any
    MAC Address: none
    Destination Type: Address/Port Group
    IPv4 Address Group: Any
    Port Group: Any

WAN_Local:
    Description: Allow IPTV Multicast UDP
    Enabled: true
    Rule Applied: Before Predefined Rules
    Action: Accept
    IPv4 Protocol: UDP
    Match all protocols except for this: false
    Source Type: Address/Port Group
    IPv4 Address Group: SCTV2_Source
    Port Group: Any
    MAC Address: none
    Destination Type: Address/Port Group
    IPv4 Address Group: IPTV_Source
    Port Group: Any

WAN_Local:
    Description: Allow IGMP
    Enabled: true
    Rule Applied: Before Predefined Rules
    Action: Accept
    IPv4 Protocol: IGMP
    Match all protocols except for this: false
    Source Type: Address/Port Group
    IPv4 Address Group: Any
    Port Group: Any
    MAC Address: none
    Destination Type: Address/Port Group
    IPv4 Address Group: Any
    Port Group: Any

3. Create config.gateway.json

Next you need to create the file config.gateway.json on your Unifi Controller. In order to do this, you need to connect to it using ssh.

ssh <username>@<IP of controller>

As a next step, create the file config.gateway.json under the path <unifi_base>/data/sites/site_ID . In the default configuration this is /usr/lib/unifi/data/sites/default/ . The file should contain the following:

{
  "protocols": {
    "igmp-proxy": {
      "interface": {
        "eth0.10": {
          "alt-subnet": [
            "0.0.0.0/0"
          ],
          "role": "upstream",
          "threshold": "1"
        },
        "eth1": {
          "alt-subnet": [
            "0.0.0.0/0"
          ],
          "role": "downstream",
          "threshold": "1"
        }
      }
    }
  }
}

4. Provisioning the Unifi USG

The last step is to force provisioning your Unifi USG. This can again be done over the Unifi Controller. Go to Devices > Unifi USG > Config > Manage Device > Force Provision.

Once provisioned, you should be able to watch TV using Wingo TV.