[people/pmueller/ipfire-2.x.git] / html / cgi-bin / zoneconf.cgi

#!/usr/bin/perl
###############################################################################
#                                                                             #
# VLAN Management for IPFire                                                  #
# Copyright (C) 2019 Florian Bührle <fbuehrle@ipfire.org>                     #
#                                                                             #
# This program is free software: you can redistribute it and/or modify        #
# it under the terms of the GNU General Public License as published by        #
# the Free Software Foundation, either version 3 of the License, or           #
# (at your option) any later version.                                         #
#                                                                             #
# This program is distributed in the hope that it will be useful,             #
# but WITHOUT ANY WARRANTY; without even the implied warranty of              #
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
# GNU General Public License for more details.                                #
#                                                                             #
# You should have received a copy of the GNU General Public License           #
# along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
#                                                                             #
###############################################################################

use strict;
use Scalar::Util qw(looks_like_number);

require '/var/ipfire/general-functions.pl';
require "${General::swroot}/lang.pl";
require "${General::swroot}/header.pl";
require "${General::swroot}/network-functions.pl";

###--- HTML HEAD ---###
my $extraHead = <<END
<style>
	table#zoneconf {
		width: 100%;
		border-collapse: collapse;
		border-style: hidden;
		table-layout: fixed;
	}

	/* row height */
	#zoneconf tr {
		height: 4em;
	}
	#zoneconf tr.half-height {
		height: 2em;
	}
	#zoneconf tr.half-height > td {
		padding: 2px 10px;
	}

	/* section separators */
	#zoneconf tr.divider-top {
			border-top: 2px solid $Header::bordercolour;
	}
	#zoneconf tr.divider-bottom {
			border-bottom: 2px solid $Header::bordercolour;
	}

	/* table cells */
	#zoneconf td {
		padding: 5px 10px;
		border-left: 0.5px solid $Header::bordercolour;
		text-align: center;
	}

	/* grey header cells */
	#zoneconf td.heading {
		background-color: lightgrey;
		color: white;
	}	
	#zoneconf td.heading.bold::first-line {
		font-weight: bold;
		line-height: 1.6;
	}

	/* narrow left column with background color */
	#zoneconf tr > td:first-child {
		width: 11em;
	}
	#zoneconf tr.nic-row > td:first-child {
			background-color: darkgray;
	}
	#zoneconf tr.nic-row {
		border-bottom: 0.5px solid $Header::bordercolour;
	}
	#zoneconf tr.option-row > td:first-child {
			background-color: gray;
	}

	/* alternating row background color */
	#zoneconf tr {
		background-color: $Header::table2colour;
	}
	#zoneconf tr:nth-child(2n+3) {
		background-color: $Header::table1colour;
	}

	/* special cell colors */
	#zoneconf td.green {
		background-color: $Header::colourgreen;
	}

	#zoneconf td.red {
		background-color: $Header::colourred;
	}

	#zoneconf td.blue {
		background-color: $Header::colourblue;
	}

	#zoneconf td.orange {
		background-color: $Header::colourorange;
	}

	#zoneconf td.topleft {
		background-color: $Header::pagecolour;
	}

	input.vlanid {
		width: 4em;
	}
	input.stp-priority {
		width: 5em;
	}

	#submit-container {
		width: 100%;
		padding-top: 20px;
		text-align: right;
		color: red;
	}

	#submit-container.input {
		margin-left: auto;
	}
</style>

<script src="/include/zoneconf.js"></script>
END
;
###--- END HTML HEAD ---###

### Read configuration ###
my %ethsettings = ();
my %vlansettings = ();
my %cgiparams = ();

my $restart_notice = "";

&General::readhash("${General::swroot}/ethernet/settings",\%ethsettings);
&General::readhash("${General::swroot}/ethernet/vlans",\%vlansettings);

&Header::getcgihash(\%cgiparams);
&Header::showhttpheaders();

# Get all network zones that are currently enabled
my @zones = Network::get_available_network_zones();

# Get all physical NICs present
opendir(my $dh, "/sys/class/net/");
my @nics = ();

while (my $nic = readdir($dh)) {
	if (-e "/sys/class/net/$nic/device") { # Indicates that the NIC is physical
		push(@nics, [&Network::get_nic_property($nic, "address"), $nic, 0]);
	}
}

closedir($dh);

@nics = sort {$a->[0] cmp $b->[0]} @nics; # Sort nics by their MAC address

# Name the physical NICs
# Even though they may not be really named like this, we will name them ethX or wlanX
my $ethcount = 0;
my $wlancount = 0;

foreach (@nics) {
	my $nic = $_->[1];

	if (-e "/sys/class/net/$nic/wireless") {
		$_->[1] = "wlan$wlancount";
		$_->[2] = 1;
		$wlancount++;
	} else {
		$_->[1] = "eth$ethcount";
		$ethcount++;
	}
}

### START PAGE ###
&Header::openpage($Lang::tr{"zoneconf title"}, 1, $extraHead);
&Header::openbigbox('100%', 'center');

### Evaluate POST parameters ###

if ($cgiparams{"ACTION"} eq $Lang::tr{"save"}) {
	my %VALIDATE_nic_check = ();
	my $VALIDATE_error = "";

	# Loop trough all known zones to ensure a complete configuration file is created
	foreach (@Network::known_network_zones) {
		my $uc = uc $_;
		my $slave_string = "";
		my $zone_mode = $cgiparams{"MODE $uc"};
		my $VALIDATE_vlancount = 0;
		my $VALIDATE_zoneslaves = 0;

		$ethsettings{"${uc}_MACADDR"} = "";
		$ethsettings{"${uc}_MODE"} = "";
		$ethsettings{"${uc}_SLAVES"} = "";
		$vlansettings{"${uc}_PARENT_DEV"} = "";
		$vlansettings{"${uc}_VLAN_ID"} = "";
		$vlansettings{"${uc}_MAC_ADDRESS"} = "";

		# If RED is not in DHCP or static mode, we only set its MACADDR property
		if ($uc eq "RED" && ! $cgiparams{"PPPACCESS"} eq "") {
			foreach (@nics) {
				my $mac = $_->[0];

				if ($mac eq $cgiparams{"PPPACCESS"}) {
					$ethsettings{"${uc}_MACADDR"} = $mac;

					# Check if this interface is already accessed by any other zone
					# If this is the case, show an error message
					if ($VALIDATE_nic_check{"ACC $mac"}) {
						$VALIDATE_error = $Lang::tr{"zoneconf val ppp assignment error"};
					}

					$VALIDATE_nic_check{"RESTRICT $mac"} = 1;
					last;
				}
			}

			# skip NIC/VLAN assignment and additional zone options for RED in PPP mode
			next;
		}

		foreach (@nics) {
			my $mac = $_->[0];
			my $nic_access = $cgiparams{"ACCESS $uc $mac"};

			next unless ($nic_access);

			if ($nic_access ne "NONE") {
				if ($VALIDATE_nic_check{"RESTRICT $mac"}) { # If this interface is already assigned to RED in PPP mode, throw an error
					$VALIDATE_error = $Lang::tr{"zoneconf val ppp assignment error"};
					last;
				}

				if ($zone_mode ne "BRIDGE" && $VALIDATE_zoneslaves > 0 && $nic_access ne "") {
					$VALIDATE_error = $Lang::tr{"zoneconf val zoneslave amount error"};
					last;
				}

				$VALIDATE_nic_check{"ACC $mac"} = 1;
				$VALIDATE_zoneslaves++;
			}

			if ($nic_access eq "NATIVE") {
				if ($VALIDATE_nic_check{"NATIVE $mac"}) {
					$VALIDATE_error = $Lang::tr{"zoneconf val native assignment error"};
					last;
				}

				$VALIDATE_nic_check{"NATIVE $mac"} = 1;

				if ($zone_mode eq "BRIDGE") {
					$slave_string = "${slave_string}${mac} ";
				} else {
					$ethsettings{"${uc}_MACADDR"} = $mac;
				}
			} elsif ($nic_access eq "VLAN") {
				my $vlan_tag = $cgiparams{"TAG $uc $mac"};

				if ($VALIDATE_nic_check{"VLAN $mac $vlan_tag"}) {
					$VALIDATE_error = $Lang::tr{"zoneconf val vlan tag assignment error"};
					last;
				}

				$VALIDATE_nic_check{"VLAN $mac $vlan_tag"} = 1;
				
				# check VLAN tag range: 1..4094 (0, 4095 are reserved)
				unless (looks_like_number($vlan_tag) && ($vlan_tag >= 1) && ($vlan_tag <= 4094)) {
					$VALIDATE_error = $Lang::tr{"zoneconf val vlan tag range error"};
					last;
				}

				my $rnd_mac = &Network::random_mac();

				$vlansettings{"${uc}_PARENT_DEV"} = $mac;
				$vlansettings{"${uc}_VLAN_ID"} = $vlan_tag;
				$vlansettings{"${uc}_MAC_ADDRESS"} = $rnd_mac;

				if ($zone_mode eq "BRIDGE") {
					$slave_string = "${slave_string}${rnd_mac} ";
				}

				$VALIDATE_vlancount++; # We can't allow more than one VLAN per zone
			}
		}

		if ($VALIDATE_vlancount > 1) {
			$VALIDATE_error = $Lang::tr{"zoneconf val vlan amount assignment error"};
			last;
		}

		chop($slave_string);

		if ($zone_mode eq "BRIDGE") {
			$ethsettings{"${uc}_MODE"} = "bridge";
			$ethsettings{"${uc}_SLAVES"} = $slave_string;
		} elsif ($zone_mode eq "MACVTAP") {
			$ethsettings{"${uc}_MODE"} = "macvtap";
		}

		# STP options
		# (this has already been skipped when RED is in PPP mode, so we don't need to check for PPP here)
		$ethsettings{"${uc}_STP"} = "";
		my $stp_enabled = $cgiparams{"STP-$uc"} eq "on";
		my $stp_priority = $cgiparams{"STP-PRIORITY-$uc"};

		if($stp_enabled) {
			unless($ethsettings{"${uc}_MODE"} eq "bridge") { # STP is only available in bridge mode
				$VALIDATE_error = $Lang::tr{"zoneconf val stp zone mode error"};
				last;
			}
			unless (looks_like_number($stp_priority) && ($stp_priority >= 1) && ($stp_priority <= 65535)) { # STP bridge priority range: 1..65535
				$VALIDATE_error = $Lang::tr{"zoneconf val stp priority range error"};
				last;
			}
			$ethsettings{"${uc}_STP"} = "on"; # network-hotplug-bridges expects "on"
			$ethsettings{"${uc}_STP_PRIORITY"} = $stp_priority;
		}
	}

	# validation failed, show error message and exit
	if ($VALIDATE_error) {
		&Header::openbox('100%', 'left', $Lang::tr{"error"});

		print "$VALIDATE_error<br><br><a href='$ENV{'SCRIPT_NAME'}'>$Lang::tr{'back'}</a>\n";

		&Header::closebox();
		&Header::closebigbox();
		&Header::closepage();

		exit 0;
	}

	# new settings are valid, write configuration files
	&General::writehash("${General::swroot}/ethernet/settings",\%ethsettings);
	&General::writehash("${General::swroot}/ethernet/vlans",\%vlansettings);

	$restart_notice = $Lang::tr{'zoneconf notice reboot'};
}

### START OF TABLE ###

&Header::openbox('100%', 'left', $Lang::tr{"zoneconf nic assignment"});

print <<END
<form method='post' enctype='multipart/form-data'>
	<table id="zoneconf">
	<tr class="divider-bottom">
		<td class="topleft"></td>
END
;

# Fill the table header with all activated zones
foreach (@zones) {
	my $uc = uc $_;

	# If the red zone is in PPP mode, don't show a mode dropdown
	if ($uc eq "RED") {
		my $red_type = $ethsettings{"RED_TYPE"};

		unless (Network::is_red_mode_ip()) {
			print "\t\t<td class='heading bold $_'>$uc ($red_type)</td>\n";

			next; # We're done here
		}
	}

	my %mode_selected = ();
	my $zone_mode = $ethsettings{"${uc}_MODE"};

	if ($zone_mode eq "") {
		$mode_selected{"DEFAULT"} = "selected";
	} elsif ($zone_mode eq "bridge") {
		$mode_selected{"BRIDGE"} = "selected";
	} elsif ($zone_mode eq "macvtap") {
		$mode_selected{"MACVTAP"} = "selected";
	}

	print <<END
		<td class='heading bold $_'>$uc<br>
			<select name="MODE $uc" data-zone="$uc" onchange="changeZoneMode(this)">
				<option value="DEFAULT" $mode_selected{"DEFAULT"}>$Lang::tr{"zoneconf nicmode default"}</option>
				<option value="BRIDGE" $mode_selected{"BRIDGE"}>$Lang::tr{"zoneconf nicmode bridge"}</option>
				<option value="MACVTAP" $mode_selected{"MACVTAP"}>$Lang::tr{"zoneconf nicmode macvtap"}</option>
			</select>
		</td>
END
;
}

print "\t</tr>\n";

# NIC assignment matrix
foreach (@nics) {
	my $mac = $_->[0];
	my $nic = $_->[1];
	my $wlan = $_->[2];

	print "\t<tr class='nic-row'>\n";
	print "\t\t<td class='heading bold'>$nic<br>$mac</td>\n";

	# Iterate through all zones and check if the current NIC is assigned to it
	foreach (@zones) {
		my $uc = uc $_;
		my $highlight = "";

		if ($uc eq "RED") {
			# VLANs/Bridging is not possible if the RED interface is set to PPP, PPPoE, VDSL, ...
			unless (Network::is_red_mode_ip()) {
				my $checked = "";

				if ($mac eq $ethsettings{"${uc}_MACADDR"}) {
					$checked = "checked";
					$highlight = $_;
				}

				print <<END
		<td class="$highlight">
			<input type="radio" name="PPPACCESS" value="$mac" data-zone="RED" data-mac="$mac" onchange="highlightAccess(this)" $checked>
		</td>
END
;
				next; # We're done here
			}
		}

		my %access_selected = ();
		my $zone_mode = $ethsettings{"${uc}_MODE"};
		my $zone_parent_dev = $vlansettings{"${uc}_PARENT_DEV"};  # ZONE_PARENT_DEV is set if this zone accesses any interface via a VLAN
		my $field_disabled = "disabled"; # Only enable the VLAN ID input field if the current access mode is VLAN
		my $zone_vlan_id = "";

		# If ZONE_PARENT_DEV is set to a NICs name (e.g. green0 or eth0) instead of a MAC address, we have to find out this NICs MAC address
		$zone_parent_dev = &Network::get_mac_by_name($zone_parent_dev);

		# If the current NIC is accessed by the current zone via a VLAN, the ZONE_PARENT_DEV option corresponds to the current NIC
		if ($mac eq $zone_parent_dev) {
			$access_selected{"VLAN"} = "selected";
			$field_disabled = "";
			$zone_vlan_id = $vlansettings{"${uc}_VLAN_ID"};
		} elsif ($zone_mode eq "bridge") { # If the current zone is in bridge mode, all corresponding NICs (Native as well as VLAN) are set via the ZONE_SLAVES option
			my @slaves = split(/ /, $ethsettings{"${uc}_SLAVES"});

			foreach (@slaves) {
				# Slaves can be set to a NICs name so we have to find out its MAC address
				$_ = &Network::get_mac_by_name($_);

				if ($_ eq $mac) {
					$access_selected{"NATIVE"} = "selected";
					last;
				}
			}
		} elsif ($mac eq $ethsettings{"${uc}_MACADDR"}) { # Native access via ZONE_MACADDR is only set if the zone does not access a NIC via a VLAN and the zone is not in bridge mode
			$access_selected{"NATIVE"} = "selected";
		}

		$access_selected{"NONE"} = ($access_selected{"NATIVE"} eq "") && ($access_selected{"VLAN"} eq "") ? "selected" : "";
		my $vlan_disabled = ($wlan) ? "disabled" : "";

		# If the interface is assigned, hightlight table cell
		if ($access_selected{"NONE"} eq "") {
			$highlight = $_;
		}
		
		print <<END
		<td class="$highlight">
			<select name="ACCESS $uc $mac" data-zone="$uc" data-mac="$mac" onchange="highlightAccess(this)">
				<option value="NONE" $access_selected{"NONE"}>- $Lang::tr{"zoneconf access none"} -</option>
				<option value="NATIVE" $access_selected{"NATIVE"}>$Lang::tr{"zoneconf access native"}</option>
				<option value="VLAN" $access_selected{"VLAN"} $vlan_disabled>$Lang::tr{"zoneconf access vlan"}</option>
			</select>
			<input type="number" class="vlanid" id="TAG-$uc-$mac" name="TAG $uc $mac" min="1" max="4094" value="$zone_vlan_id" required $field_disabled>
		</td>
END
;
	}

	print "\t</tr>\n";
}

# STP options
my @stp_html = (); # form fields buffer (two rows)

foreach (@zones) { # load settings and prepare form elements for each zone
	my $uc = uc $_;

	# STP is not available if the RED interface is set to PPP, PPPoE, VDSL, ...
	if ($uc eq "RED") {
		unless (Network::is_red_mode_ip()) {
			push(@stp_html, ["\t\t<td></td>\n", "\t\t<td></td>\n"]); # print empty cell
			next;
		}
	}

	# load configuration
	my $stp_available = $ethsettings{"${uc}_MODE"} eq "bridge"; # STP is only available in bridge mode
	my $stp_enabled = $ethsettings{"${uc}_STP"} eq "on";
	my $stp_priority = $ethsettings{"${uc}_STP_PRIORITY"};
	
	# set priority to default value if no numerical value is configured
	$stp_priority = 32768 unless looks_like_number($stp_priority);

	# form element modifiers
	my $checked = "";
	my $disabled = "";
	$checked = "checked" if ($stp_available && $stp_enabled);
	$disabled = "disabled" unless $stp_available;

	# enable checkbox HTML
	my $row_1 = <<END
		<td>
			<input type="checkbox" id="STP-$uc" name="STP-$uc" data-zone="$uc" onchange="changeEnableSTP(this)" $disabled $checked>
		</td>
END
;
	$disabled = "disabled" unless $stp_enabled; # STP priority can't be entered if STP is disabled

	# priority input box HTML
	my $row_2 = <<END
		<td>
			<input type="number" class="stp-priority" id="STP-PRIORITY-$uc" name="STP-PRIORITY-$uc" min="1" max="65535" value="$stp_priority" required $disabled>
		</td>
END
;
	# add fields to buffer
	push(@stp_html, [$row_1, $row_2]);
}

# print two rows of prepared form elements
print <<END
	<tr class="half-height divider-top option-row">
		<td class="heading bold">$Lang::tr{"zoneconf stp enable"}</td>
END
;
foreach (@stp_html) {
	print $_->[0]; # row 1
}
print <<END
	</tr>
	<tr class="half-height option-row">
		<td class="heading">$Lang::tr{"zoneconf stp priority"}</td>
END
;
foreach (@stp_html) {
	print $_->[1]; # row 2
}
print "\t</tr>\n";

# footer and submit button
print <<END
	</table>

	<div id="submit-container">
		$restart_notice
		<input type="submit" name="ACTION" value="$Lang::tr{"save"}">
	</div>
</form>
END
;

### END OF TABLE ###

&Header::closebox();
&Header::closebigbox();
&Header::closepage();
Commit	Line	Data
1dcf513a FB	1	#!/usr/bin/perl
	2	###############################################################################
	3	# #
	4	# VLAN Management for IPFire #
	5	# Copyright (C) 2019 Florian Bührle <fbuehrle@ipfire.org> #
	6	# #
	7	# This program is free software: you can redistribute it and/or modify #
	8	# it under the terms of the GNU General Public License as published by #
	9	# the Free Software Foundation, either version 3 of the License, or #
	10	# (at your option) any later version. #
	11	# #
	12	# This program is distributed in the hope that it will be useful, #
	13	# but WITHOUT ANY WARRANTY; without even the implied warranty of #
	14	# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
	15	# GNU General Public License for more details. #
	16	# #
	17	# You should have received a copy of the GNU General Public License #
	18	# along with this program. If not, see <http://www.gnu.org/licenses/>. #
	19	# #
	20	###############################################################################
	21
	22	use strict;
	23	use Scalar::Util qw(looks_like_number);
	24
	25	require '/var/ipfire/general-functions.pl';
	26	require "${General::swroot}/lang.pl";
	27	require "${General::swroot}/header.pl";
52628052	28	require "${General::swroot}/network-functions.pl";
1dcf513a	29
63a1c81a	30	###--- HTML HEAD ---###
5c33a761	31	my $extraHead = <<END
1dcf513a	32	<style>
fc31c28d	33	table#zoneconf {
1dcf513a	34	width: 100%;
23b26ce5	35	border-collapse: collapse;
5e6eba88	36	border-style: hidden;
23b26ce5	37	table-layout: fixed;
1dcf513a FB	38	}
1dcf513a FB	39
5e6eba88	40	/* row height */
fc31c28d	41	#zoneconf tr {
1dcf513a FB	42	height: 4em;
1dcf513a FB	43	}
8de94a23 LAH	44	#zoneconf tr.half-height {
	45	height: 2em;
	46	}
	47	#zoneconf tr.half-height > td {
	48	padding: 2px 10px;
	49	}
	50
5e6eba88 LAH	51	/* section separators */
	52	#zoneconf tr.divider-top {
	53	border-top: 2px solid $Header::bordercolour;
	54	}
	55	#zoneconf tr.divider-bottom {
	56	border-bottom: 2px solid $Header::bordercolour;
	57	}
1dcf513a	58
5e6eba88	59	/* table cells */
fc31c28d LAH	60	#zoneconf td {
fc31c28d LAH	61	padding: 5px 10px;
5e6eba88	62	border-left: 0.5px solid $Header::bordercolour;
fc31c28d	63	text-align: center;
1dcf513a FB	64	}
1dcf513a FB	65
5e6eba88	66	/* grey header cells */
fc31c28d	67	#zoneconf td.heading {
5e6eba88	68	background-color: lightgrey;
fc31c28d LAH	69	color: white;
fc31c28d LAH	70	}
5e6eba88	71	#zoneconf td.heading.bold::first-line {
fc31c28d LAH	72	font-weight: bold;
fc31c28d LAH	73	line-height: 1.6;
1dcf513a FB	74	}
1dcf513a FB	75
5e6eba88	76	/* narrow left column with background color */
fc31c28d LAH	77	#zoneconf tr > td:first-child {
fc31c28d LAH	78	width: 11em;
23b26ce5	79	}
5e6eba88 LAH	80	#zoneconf tr.nic-row > td:first-child {
	81	background-color: darkgray;
	82	}
	83	#zoneconf tr.nic-row {
	84	border-bottom: 0.5px solid $Header::bordercolour;
	85	}
8de94a23 LAH	86	#zoneconf tr.option-row > td:first-child {
	87	background-color: gray;
	88	}
7478903f	89
fc31c28d	90	/* alternating row background color */
5e6eba88 LAH	91	#zoneconf tr {
	92	background-color: $Header::table2colour;
	93	}
fc31c28d	94	#zoneconf tr:nth-child(2n+3) {
5e6eba88	95	background-color: $Header::table1colour;
1dcf513a FB	96	}
1dcf513a FB	97
5e6eba88	98	/* special cell colors */
fc31c28d	99	#zoneconf td.green {
1dcf513a FB	100	background-color: $Header::colourgreen;
	101	}
	102
fc31c28d	103	#zoneconf td.red {
1dcf513a FB	104	background-color: $Header::colourred;
	105	}
	106
fc31c28d	107	#zoneconf td.blue {
1dcf513a FB	108	background-color: $Header::colourblue;
	109	}
	110
fc31c28d	111	#zoneconf td.orange {
1dcf513a FB	112	background-color: $Header::colourorange;
	113	}
	114
fc31c28d LAH	115	#zoneconf td.topleft {
fc31c28d LAH	116	background-color: $Header::pagecolour;
1dcf513a FB	117	}
1dcf513a FB	118
7f44ec04 AK	119	input.vlanid {
	120	width: 4em;
	121	}
8de94a23 LAH	122	input.stp-priority {
	123	width: 5em;
	124	}
7f44ec04	125
1dcf513a	126	#submit-container {
1dcf513a	127	width: 100%;
23b26ce5	128	padding-top: 20px;
1d6bc7a0	129	text-align: right;
23b26ce5	130	color: red;
1dcf513a FB	131	}
	132
	133	#submit-container.input {
	134	margin-left: auto;
	135	}
1dcf513a	136	</style>
5c33a761 LAH	137
5c33a761 LAH	138	<script src="/include/zoneconf.js"></script>
1dcf513a FB	139	END
1dcf513a FB	140	;
63a1c81a	141	###--- END HTML HEAD ---###
1dcf513a	142
63a1c81a	143	### Read configuration ###
1dcf513a FB	144	my %ethsettings = ();
	145	my %vlansettings = ();
	146	my %cgiparams = ();
	147
7478903f FB	148	my $restart_notice = "";
7478903f FB	149
1dcf513a FB	150	&General::readhash("${General::swroot}/ethernet/settings",\%ethsettings);
	151	&General::readhash("${General::swroot}/ethernet/vlans",\%vlansettings);
	152
	153	&Header::getcgihash(\%cgiparams);
	154	&Header::showhttpheaders();
	155
52628052 LAH	156	# Get all network zones that are currently enabled
52628052 LAH	157	my @zones = Network::get_available_network_zones();
1dcf513a FB	158
	159	# Get all physical NICs present
	160	opendir(my $dh, "/sys/class/net/");
	161	my @nics = ();
	162
	163	while (my $nic = readdir($dh)) {
	164	if (-e "/sys/class/net/$nic/device") { # Indicates that the NIC is physical
	165	push(@nics, [&Network::get_nic_property($nic, "address"), $nic, 0]);
	166	}
	167	}
	168
	169	closedir($dh);
	170
	171	@nics = sort {$a->[0] cmp $b->[0]} @nics; # Sort nics by their MAC address
	172
	173	# Name the physical NICs
	174	# Even though they may not be really named like this, we will name them ethX or wlanX
	175	my $ethcount = 0;
	176	my $wlancount = 0;
	177
	178	foreach (@nics) {
	179	my $nic = $_->[1];
	180
	181	if (-e "/sys/class/net/$nic/wireless") {
	182	$_->[1] = "wlan$wlancount";
	183	$_->[2] = 1;
	184	$wlancount++;
	185	} else {
	186	$_->[1] = "eth$ethcount";
	187	$ethcount++;
	188	}
	189	}
	190
63a1c81a	191	### START PAGE ###
5c33a761	192	&Header::openpage($Lang::tr{"zoneconf title"}, 1, $extraHead);
1dcf513a FB	193	&Header::openbigbox('100%', 'center');
	194
	195	### Evaluate POST parameters ###
	196
	197	if ($cgiparams{"ACTION"} eq $Lang::tr{"save"}) {
	198	my %VALIDATE_nic_check = ();
	199	my $VALIDATE_error = "";
	200
52628052 LAH	201	# Loop trough all known zones to ensure a complete configuration file is created
52628052 LAH	202	foreach (@Network::known_network_zones) {
1dcf513a FB	203	my $uc = uc $_;
	204	my $slave_string = "";
	205	my $zone_mode = $cgiparams{"MODE $uc"};
	206	my $VALIDATE_vlancount = 0;
f60b61e0 FB	207	my $VALIDATE_zoneslaves = 0;
f60b61e0 FB	208
1dcf513a FB	209	$ethsettings{"${uc}_MACADDR"} = "";
	210	$ethsettings{"${uc}_MODE"} = "";
	211	$ethsettings{"${uc}_SLAVES"} = "";
	212	$vlansettings{"${uc}_PARENT_DEV"} = "";
	213	$vlansettings{"${uc}_VLAN_ID"} = "";
	214	$vlansettings{"${uc}_MAC_ADDRESS"} = "";
	215
	216	# If RED is not in DHCP or static mode, we only set its MACADDR property
	217	if ($uc eq "RED" && ! $cgiparams{"PPPACCESS"} eq "") {
	218	foreach (@nics) {
	219	my $mac = $_->[0];
	220
	221	if ($mac eq $cgiparams{"PPPACCESS"}) {
	222	$ethsettings{"${uc}_MACADDR"} = $mac;
	223
	224	# Check if this interface is already accessed by any other zone
	225	# If this is the case, show an error message
	226	if ($VALIDATE_nic_check{"ACC $mac"}) {
	227	$VALIDATE_error = $Lang::tr{"zoneconf val ppp assignment error"};
	228	}
	229
	230	$VALIDATE_nic_check{"RESTRICT $mac"} = 1;
	231	last;
	232	}
	233	}
	234
63a1c81a	235	# skip NIC/VLAN assignment and additional zone options for RED in PPP mode
1dcf513a FB	236	next;
	237	}
	238
	239	foreach (@nics) {
	240	my $mac = $_->[0];
	241	my $nic_access = $cgiparams{"ACCESS $uc $mac"};
	242
bb90622c MT	243	next unless ($nic_access);
bb90622c MT	244
a6695868	245	if ($nic_access ne "NONE") {
1dcf513a FB	246	if ($VALIDATE_nic_check{"RESTRICT $mac"}) { # If this interface is already assigned to RED in PPP mode, throw an error
1dcf513a FB	247	$VALIDATE_error = $Lang::tr{"zoneconf val ppp assignment error"};
f60b61e0 FB	248	last;
	249	}
	250
a6695868	251	if ($zone_mode ne "BRIDGE" && $VALIDATE_zoneslaves > 0 && $nic_access ne "") {
f60b61e0 FB	252	$VALIDATE_error = $Lang::tr{"zoneconf val zoneslave amount error"};
f60b61e0 FB	253	last;
1dcf513a FB	254	}
	255
	256	$VALIDATE_nic_check{"ACC $mac"} = 1;
f60b61e0	257	$VALIDATE_zoneslaves++;
1dcf513a FB	258	}
	259
	260	if ($nic_access eq "NATIVE") {
	261	if ($VALIDATE_nic_check{"NATIVE $mac"}) {
	262	$VALIDATE_error = $Lang::tr{"zoneconf val native assignment error"};
f60b61e0	263	last;
1dcf513a FB	264	}
	265
	266	$VALIDATE_nic_check{"NATIVE $mac"} = 1;
	267
	268	if ($zone_mode eq "BRIDGE") {
	269	$slave_string = "${slave_string}${mac} ";
	270	} else {
	271	$ethsettings{"${uc}_MACADDR"} = $mac;
	272	}
	273	} elsif ($nic_access eq "VLAN") {
	274	my $vlan_tag = $cgiparams{"TAG $uc $mac"};
	275
	276	if ($VALIDATE_nic_check{"VLAN $mac $vlan_tag"}) {
	277	$VALIDATE_error = $Lang::tr{"zoneconf val vlan tag assignment error"};
f60b61e0	278	last;
1dcf513a FB	279	}
	280
	281	$VALIDATE_nic_check{"VLAN $mac $vlan_tag"} = 1;
715aa887 LAH	282
	283	# check VLAN tag range: 1..4094 (0, 4095 are reserved)
	284	unless (looks_like_number($vlan_tag) && ($vlan_tag >= 1) && ($vlan_tag <= 4094)) {
	285	$VALIDATE_error = $Lang::tr{"zoneconf val vlan tag range error"};
f60b61e0	286	last;
1dcf513a FB	287	}
	288
	289	my $rnd_mac = &Network::random_mac();
	290
	291	$vlansettings{"${uc}_PARENT_DEV"} = $mac;
	292	$vlansettings{"${uc}_VLAN_ID"} = $vlan_tag;
	293	$vlansettings{"${uc}_MAC_ADDRESS"} = $rnd_mac;
	294
	295	if ($zone_mode eq "BRIDGE") {
	296	$slave_string = "${slave_string}${rnd_mac} ";
	297	}
	298
	299	$VALIDATE_vlancount++; # We can't allow more than one VLAN per zone
	300	}
	301	}
	302
	303	if ($VALIDATE_vlancount > 1) {
	304	$VALIDATE_error = $Lang::tr{"zoneconf val vlan amount assignment error"};
f60b61e0	305	last;
1dcf513a FB	306	}
	307
	308	chop($slave_string);
	309
	310	if ($zone_mode eq "BRIDGE") {
	311	$ethsettings{"${uc}_MODE"} = "bridge";
	312	$ethsettings{"${uc}_SLAVES"} = $slave_string;
	313	} elsif ($zone_mode eq "MACVTAP") {
	314	$ethsettings{"${uc}_MODE"} = "macvtap";
	315	}
8de94a23 LAH	316
	317	# STP options
	318	# (this has already been skipped when RED is in PPP mode, so we don't need to check for PPP here)
	319	$ethsettings{"${uc}_STP"} = "";
	320	my $stp_enabled = $cgiparams{"STP-$uc"} eq "on";
	321	my $stp_priority = $cgiparams{"STP-PRIORITY-$uc"};
	322
	323	if($stp_enabled) {
	324	unless($ethsettings{"${uc}_MODE"} eq "bridge") { # STP is only available in bridge mode
	325	$VALIDATE_error = $Lang::tr{"zoneconf val stp zone mode error"};
	326	last;
	327	}
	328	unless (looks_like_number($stp_priority) && ($stp_priority >= 1) && ($stp_priority <= 65535)) { # STP bridge priority range: 1..65535
	329	$VALIDATE_error = $Lang::tr{"zoneconf val stp priority range error"};
	330	last;
	331	}
	332	$ethsettings{"${uc}_STP"} = "on"; # network-hotplug-bridges expects "on"
	333	$ethsettings{"${uc}_STP_PRIORITY"} = $stp_priority;
	334	}
1dcf513a FB	335	}
1dcf513a FB	336
63a1c81a	337	# validation failed, show error message and exit
1dcf513a FB	338	if ($VALIDATE_error) {
	339	&Header::openbox('100%', 'left', $Lang::tr{"error"});
	340
8797526d	341	print "$VALIDATE_error<br><br><a href='$ENV{'SCRIPT_NAME'}'>$Lang::tr{'back'}</a>\n";
1dcf513a FB	342
	343	&Header::closebox();
	344	&Header::closebigbox();
	345	&Header::closepage();
	346
	347	exit 0;
	348	}
	349
63a1c81a	350	# new settings are valid, write configuration files
1dcf513a FB	351	&General::writehash("${General::swroot}/ethernet/settings",\%ethsettings);
1dcf513a FB	352	&General::writehash("${General::swroot}/ethernet/vlans",\%vlansettings);
7478903f	353
23b26ce5	354	$restart_notice = $Lang::tr{'zoneconf notice reboot'};
1dcf513a FB	355	}
1dcf513a FB	356
1dcf513a FB	357	### START OF TABLE ###
1dcf513a FB	358
63a1c81a LAH	359	&Header::openbox('100%', 'left', $Lang::tr{"zoneconf nic assignment"});
63a1c81a LAH	360
1dcf513a	361	print <<END
0ec8e31a	362	<form method='post' enctype='multipart/form-data'>
fc31c28d	363	<table id="zoneconf">
5e6eba88	364	<tr class="divider-bottom">
fc31c28d	365	<td class="topleft"></td>
1dcf513a FB	366	END
	367	;
	368
0ec8e31a	369	# Fill the table header with all activated zones
1dcf513a	370	foreach (@zones) {
1dcf513a	371	my $uc = uc $_;
1dcf513a	372
63a1c81a	373	# If the red zone is in PPP mode, don't show a mode dropdown
23b26ce5	374	if ($uc eq "RED") {
1dcf513a	375	my $red_type = $ethsettings{"RED_TYPE"};
1dcf513a	376
52628052	377	unless (Network::is_red_mode_ip()) {
63a1c81a	378	print "\t\t<td class='heading bold $_'>$uc ($red_type)</td>\n";
1dcf513a	379
1dcf513a FB	380	next; # We're done here
	381	}
	382	}
	383
	384	my %mode_selected = ();
	385	my $zone_mode = $ethsettings{"${uc}_MODE"};
	386
	387	if ($zone_mode eq "") {
	388	$mode_selected{"DEFAULT"} = "selected";
	389	} elsif ($zone_mode eq "bridge") {
	390	$mode_selected{"BRIDGE"} = "selected";
	391	} elsif ($zone_mode eq "macvtap") {
	392	$mode_selected{"MACVTAP"} = "selected";
	393	}
	394
	395	print <<END
5e6eba88	396	<td class='heading bold $_'>$uc<br>
b4434345	397	<select name="MODE $uc" data-zone="$uc" onchange="changeZoneMode(this)">
1dcf513a FB	398	<option value="DEFAULT" $mode_selected{"DEFAULT"}>$Lang::tr{"zoneconf nicmode default"}</option>
	399	<option value="BRIDGE" $mode_selected{"BRIDGE"}>$Lang::tr{"zoneconf nicmode bridge"}</option>
	400	<option value="MACVTAP" $mode_selected{"MACVTAP"}>$Lang::tr{"zoneconf nicmode macvtap"}</option>
	401	</select>
	402	</td>
	403	END
	404	;
0ec8e31a FB	405	}
0ec8e31a FB	406
96d0c761	407	print "\t</tr>\n";
0ec8e31a	408
63a1c81a	409	# NIC assignment matrix
0ec8e31a	410	foreach (@nics) {
23b26ce5	411	my $mac = $_->[0];
0ec8e31a	412	my $nic = $_->[1];
23b26ce5	413	my $wlan = $_->[2];
0ec8e31a	414
5e6eba88 LAH	415	print "\t<tr class='nic-row'>\n";
5e6eba88 LAH	416	print "\t\t<td class='heading bold'>$nic<br>$mac</td>\n";
0ec8e31a	417
23b26ce5 MT	418	# Iterate through all zones and check if the current NIC is assigned to it
	419	foreach (@zones) {
	420	my $uc = uc $_;
5c33a761	421	my $highlight = "";
0ec8e31a	422
23b26ce5	423	if ($uc eq "RED") {
23b26ce5	424	# VLANs/Bridging is not possible if the RED interface is set to PPP, PPPoE, VDSL, ...
52628052	425	unless (Network::is_red_mode_ip()) {
23b26ce5	426	my $checked = "";
1dcf513a	427
0ec8e31a FB	428	if ($mac eq $ethsettings{"${uc}_MACADDR"}) {
0ec8e31a FB	429	$checked = "checked";
5c33a761	430	$highlight = $_;
0ec8e31a FB	431	}
0ec8e31a FB	432
96d0c761	433	print <<END
5c33a761 LAH	434	<td class="$highlight">
5c33a761 LAH	435	<input type="radio" name="PPPACCESS" value="$mac" data-zone="RED" data-mac="$mac" onchange="highlightAccess(this)" $checked>
96d0c761 LAH	436	</td>
	437	END
	438	;
23b26ce5 MT	439	next; # We're done here
	440	}
	441	}
	442
	443	my %access_selected = ();
	444	my $zone_mode = $ethsettings{"${uc}_MODE"};
	445	my $zone_parent_dev = $vlansettings{"${uc}_PARENT_DEV"}; # ZONE_PARENT_DEV is set if this zone accesses any interface via a VLAN
	446	my $field_disabled = "disabled"; # Only enable the VLAN ID input field if the current access mode is VLAN
1dcf513a FB	447	my $zone_vlan_id = "";
1dcf513a FB	448
23b26ce5 MT	449	# If ZONE_PARENT_DEV is set to a NICs name (e.g. green0 or eth0) instead of a MAC address, we have to find out this NICs MAC address
23b26ce5 MT	450	$zone_parent_dev = &Network::get_mac_by_name($zone_parent_dev);
0ec8e31a	451
23b26ce5 MT	452	# If the current NIC is accessed by the current zone via a VLAN, the ZONE_PARENT_DEV option corresponds to the current NIC
23b26ce5 MT	453	if ($mac eq $zone_parent_dev) {
1dcf513a FB	454	$access_selected{"VLAN"} = "selected";
	455	$field_disabled = "";
	456	$zone_vlan_id = $vlansettings{"${uc}_VLAN_ID"};
0ec8e31a	457	} elsif ($zone_mode eq "bridge") { # If the current zone is in bridge mode, all corresponding NICs (Native as well as VLAN) are set via the ZONE_SLAVES option
1dcf513a FB	458	my @slaves = split(/ /, $ethsettings{"${uc}_SLAVES"});
	459
	460	foreach (@slaves) {
	461	# Slaves can be set to a NICs name so we have to find out its MAC address
	462	$_ = &Network::get_mac_by_name($_);
	463
	464	if ($_ eq $mac) {
	465	$access_selected{"NATIVE"} = "selected";
	466	last;
	467	}
	468	}
0ec8e31a FB	469	} elsif ($mac eq $ethsettings{"${uc}_MACADDR"}) { # Native access via ZONE_MACADDR is only set if the zone does not access a NIC via a VLAN and the zone is not in bridge mode
0ec8e31a FB	470	$access_selected{"NATIVE"} = "selected";
1dcf513a FB	471	}
1dcf513a FB	472
23b26ce5	473	$access_selected{"NONE"} = ($access_selected{"NATIVE"} eq "") && ($access_selected{"VLAN"} eq "") ? "selected" : "";
1dcf513a FB	474	my $vlan_disabled = ($wlan) ? "disabled" : "";
1dcf513a FB	475
5c33a761 LAH	476	# If the interface is assigned, hightlight table cell
	477	if ($access_selected{"NONE"} eq "") {
	478	$highlight = $_;
	479	}
01139abb	480
23b26ce5	481	print <<END
5c33a761 LAH	482	<td class="$highlight">
5c33a761 LAH	483	<select name="ACCESS $uc $mac" data-zone="$uc" data-mac="$mac" onchange="highlightAccess(this)">
96d0c761 LAH	484	<option value="NONE" $access_selected{"NONE"}>- $Lang::tr{"zoneconf access none"} -</option>
	485	<option value="NATIVE" $access_selected{"NATIVE"}>$Lang::tr{"zoneconf access native"}</option>
	486	<option value="VLAN" $access_selected{"VLAN"} $vlan_disabled>$Lang::tr{"zoneconf access vlan"}</option>
	487	</select>
715aa887	488	<input type="number" class="vlanid" id="TAG-$uc-$mac" name="TAG $uc $mac" min="1" max="4094" value="$zone_vlan_id" required $field_disabled>
96d0c761	489	</td>
1dcf513a FB	490	END
1dcf513a FB	491	;
23b26ce5	492	}
1dcf513a	493
96d0c761	494	print "\t</tr>\n";
1dcf513a FB	495	}
1dcf513a FB	496
8de94a23 LAH	497	# STP options
	498	my @stp_html = (); # form fields buffer (two rows)
	499
	500	foreach (@zones) { # load settings and prepare form elements for each zone
	501	my $uc = uc $_;
	502
8de94a23 LAH	503	# STP is not available if the RED interface is set to PPP, PPPoE, VDSL, ...
8de94a23 LAH	504	if ($uc eq "RED") {
52628052	505	unless (Network::is_red_mode_ip()) {
8de94a23 LAH	506	push(@stp_html, ["\t\t<td></td>\n", "\t\t<td></td>\n"]); # print empty cell
	507	next;
	508	}
	509	}
	510
	511	# load configuration
	512	my $stp_available = $ethsettings{"${uc}_MODE"} eq "bridge"; # STP is only available in bridge mode
	513	my $stp_enabled = $ethsettings{"${uc}_STP"} eq "on";
	514	my $stp_priority = $ethsettings{"${uc}_STP_PRIORITY"};
01139abb LAH	515
	516	# set priority to default value if no numerical value is configured
	517	$stp_priority = 32768 unless looks_like_number($stp_priority);
8de94a23 LAH	518
	519	# form element modifiers
	520	my $checked = "";
	521	my $disabled = "";
	522	$checked = "checked" if ($stp_available && $stp_enabled);
	523	$disabled = "disabled" unless $stp_available;
	524
	525	# enable checkbox HTML
	526	my $row_1 = <<END
	527	<td>
b4434345	528	<input type="checkbox" id="STP-$uc" name="STP-$uc" data-zone="$uc" onchange="changeEnableSTP(this)" $disabled $checked>
8de94a23 LAH	529	</td>
	530	END
	531	;
	532	$disabled = "disabled" unless $stp_enabled; # STP priority can't be entered if STP is disabled
	533
	534	# priority input box HTML
	535	my $row_2 = <<END
	536	<td>
01139abb	537	<input type="number" class="stp-priority" id="STP-PRIORITY-$uc" name="STP-PRIORITY-$uc" min="1" max="65535" value="$stp_priority" required $disabled>
8de94a23 LAH	538	</td>
	539	END
	540	;
	541	# add fields to buffer
	542	push(@stp_html, [$row_1, $row_2]);
	543	}
	544
	545	# print two rows of prepared form elements
	546	print <<END
	547	<tr class="half-height divider-top option-row">
	548	<td class="heading bold">$Lang::tr{"zoneconf stp enable"}</td>
	549	END
	550	;
	551	foreach (@stp_html) {
	552	print $_->[0]; # row 1
	553	}
	554	print <<END
	555	</tr>
	556	<tr class="half-height option-row">
	557	<td class="heading">$Lang::tr{"zoneconf stp priority"}</td>
	558	END
	559	;
	560	foreach (@stp_html) {
	561	print $_->[1]; # row 2
	562	}
	563	print "\t</tr>\n";
	564
63a1c81a	565	# footer and submit button
1dcf513a FB	566	print <<END
1dcf513a FB	567	</table>
1d6bc7a0 MT	568
1d6bc7a0 MT	569	<div id="submit-container">
23b26ce5	570	$restart_notice
1d6bc7a0 MT	571	<input type="submit" name="ACTION" value="$Lang::tr{"save"}">
	572	</div>
	573	</form>
1dcf513a FB	574	END
	575	;
	576
	577	### END OF TABLE ###
	578
	579	&Header::closebox();
	580	&Header::closebigbox();
	581	&Header::closepage();