html/cgi-bin/zoneconf.cgi

   1 #!/usr/bin/perl
   2 ###############################################################################
   3 #                                                                             #
   4 # VLAN Management for IPFire                                                  #
   5 # Copyright (C) 2019 Florian Bührle <fbuehrle@ipfire.org>                     #
   6 #                                                                             #
   7 # This program is free software: you can redistribute it and/or modify        #
   8 # it under the terms of the GNU General Public License as published by        #
   9 # the Free Software Foundation, either version 3 of the License, or           #
  10 # (at your option) any later version.                                         #
  11 #                                                                             #
  12 # This program is distributed in the hope that it will be useful,             #
  13 # but WITHOUT ANY WARRANTY; without even the implied warranty of              #
  14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
  15 # GNU General Public License for more details.                                #
  16 #                                                                             #
  17 # You should have received a copy of the GNU General Public License           #
  18 # along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
  19 #                                                                             #
  20 ###############################################################################
  21
  22 use strict;
  23 use Scalar::Util qw(looks_like_number);
  24
  25 require '/var/ipfire/general-functions.pl';
  26 require "${General::swroot}/lang.pl";
  27 require "${General::swroot}/header.pl";
  28
  29 my $css = <<END
  30 <style>
  31         table {
  32                 width: 100%;
  33         }
  34
  35         tr {
  36                 height: 4em;
  37         }
  38
  39         td:first-child {
  40                 width: 1px;
  41         }
  42
  43         td {
  44                 padding: 5px;
  45                 padding-left: 10px;
  46                 padding-right: 10px;
  47                 border: 0.5px solid black;
  48         }
  49
  50         table {
  51                 border-collapse: collapse;
  52         }
  53
  54         td.h {
  55                 background-color: grey;
  56                 color: white;
  57                 font-weight: 800;
  58         }
  59
  60         td.green {
  61                 background-color: $Header::colourgreen;
  62         }
  63
  64         td.red {
  65                 background-color: $Header::colourred;
  66         }
  67
  68         td.blue {
  69                 background-color: $Header::colourblue;
  70         }
  71
  72         td.orange {
  73                 background-color: $Header::colourorange;
  74         }
  75
  76         td.topleft {
  77                 background-color: white;
  78                 border-top-style: none;
  79                 border-left-style: none;
  80         }
  81
  82         td.disabled {
  83                 background-color: #cccccc;
  84         }
  85
  86         td.textcenter {
  87                 text-align: center;
  88         }
  89
  90         #submit-container {
  91                 width: 100%;
  92                 padding-top: 20px;
  93                 text-align: right;
  94         }
  95
  96         #submit-container.input {
  97                 margin-left: auto;
  98         }
  99
 100         button {
 101                 margin-top: 1em;
 102         }
 103
 104 </style>
 105 END
 106 ;
 107
 108 my %ethsettings = ();
 109 my %vlansettings = ();
 110 my %cgiparams = ();
 111
 112 &General::readhash("${General::swroot}/ethernet/settings",\%ethsettings);
 113 &General::readhash("${General::swroot}/ethernet/vlans",\%vlansettings);
 114
 115 &Header::getcgihash(\%cgiparams);
 116 &Header::showhttpheaders();
 117
 118 # Define all zones we will check for NIC assignment
 119 my @zones = ("green", "red", "orange", "blue");
 120
 121 # Get all physical NICs present
 122 opendir(my $dh, "/sys/class/net/");
 123 my @nics = ();
 124
 125 while (my $nic = readdir($dh)) {
 126         if (-e "/sys/class/net/$nic/device") { # Indicates that the NIC is physical
 127                 push(@nics, [&Network::get_nic_property($nic, "address"), $nic, 0]);
 128         }
 129 }
 130
 131 closedir($dh);
 132
 133 @nics = sort {$a->[0] cmp $b->[0]} @nics; # Sort nics by their MAC address
 134
 135 # Name the physical NICs
 136 # Even though they may not be really named like this, we will name them ethX or wlanX
 137 my $ethcount = 0;
 138 my $wlancount = 0;
 139
 140 foreach (@nics) {
 141         my $nic = $_->[1];
 142
 143         if (-e "/sys/class/net/$nic/wireless") {
 144                 $_->[1] = "wlan$wlancount";
 145                 $_->[2] = 1;
 146                 $wlancount++;
 147         } else {
 148                 $_->[1] = "eth$ethcount";
 149                 $ethcount++;
 150         }
 151 }
 152
 153 &Header::openpage($Lang::tr{"zoneconf title"}, 1, $css);
 154 &Header::openbigbox('100%', 'center');
 155
 156 ### Evaluate POST parameters ###
 157
 158 if ($cgiparams{"ACTION"} eq $Lang::tr{"save"}) {
 159         my %VALIDATE_nic_check = ();
 160         my $VALIDATE_error = "";
 161
 162         foreach (@zones) {
 163                 my $uc = uc $_;
 164                 my $slave_string = "";
 165                 my $zone_mode = $cgiparams{"MODE $uc"};
 166                 my $VALIDATE_vlancount = 0;
 167
 168                 $ethsettings{"${uc}_MACADDR"} = "";
 169                 $ethsettings{"${uc}_MODE"} = "";
 170                 $ethsettings{"${uc}_SLAVES"} = "";
 171                 $vlansettings{"${uc}_PARENT_DEV"} = "";
 172                 $vlansettings{"${uc}_VLAN_ID"} = "";
 173                 $vlansettings{"${uc}_MAC_ADDRESS"} = "";
 174
 175                 # If RED is not in DHCP or static mode, we only set its MACADDR property
 176                 if ($uc eq "RED" && ! $cgiparams{"PPPACCESS"} eq "") {
 177                         foreach (@nics) {
 178                                 my $mac = $_->[0];
 179
 180                                 if ($mac eq $cgiparams{"PPPACCESS"}) {
 181                                         $ethsettings{"${uc}_MACADDR"} = $mac;
 182
 183                                         # Check if this interface is already accessed by any other zone
 184                                         # If this is the case, show an error message
 185                                         if ($VALIDATE_nic_check{"ACC $mac"}) {
 186                                                 $VALIDATE_error = $Lang::tr{"zoneconf val ppp assignment error"};
 187                                         }
 188
 189                                         $VALIDATE_nic_check{"RESTRICT $mac"} = 1;
 190                                         last;
 191                                 }
 192                         }
 193
 194                         next;
 195                 }
 196
 197                 foreach (@nics) {
 198                         my $mac = $_->[0];
 199                         my $nic_access = $cgiparams{"ACCESS $uc $mac"};
 200
 201                         if (! ($nic_access eq "NONE")) {
 202                                 if ($VALIDATE_nic_check{"RESTRICT $mac"}) { # If this interface is already assigned to RED in PPP mode, throw an error
 203                                         $VALIDATE_error = $Lang::tr{"zoneconf val ppp assignment error"};
 204                                         next;
 205                                 }
 206
 207                                 $VALIDATE_nic_check{"ACC $mac"} = 1;
 208                         }
 209
 210                         if ($nic_access eq "NATIVE") {
 211                                 if ($VALIDATE_nic_check{"NATIVE $mac"}) {
 212                                         $VALIDATE_error = $Lang::tr{"zoneconf val native assignment error"};
 213                                         next;
 214                                 }
 215
 216                                 $VALIDATE_nic_check{"NATIVE $mac"} = 1;
 217
 218                                 if ($zone_mode eq "BRIDGE") {
 219                                         $slave_string = "${slave_string}${mac} ";
 220                                 } else {
 221                                         $ethsettings{"${uc}_MACADDR"} = $mac;
 222                                 }
 223                         } elsif ($nic_access eq "VLAN") {
 224                                 my $vlan_tag = $cgiparams{"TAG $uc $mac"};
 225
 226                                 if ($VALIDATE_nic_check{"VLAN $mac $vlan_tag"}) {
 227                                         $VALIDATE_error = $Lang::tr{"zoneconf val vlan tag assignment error"};
 228                                         next;
 229                                 }
 230
 231                                 $VALIDATE_nic_check{"VLAN $mac $vlan_tag"} = 1;
 232
 233                                 if (! looks_like_number($vlan_tag)) {
 234                                         next;
 235                                 }
 236                                 if ($vlan_tag < 1 || $vlan_tag > 4095) {
 237                                         next;
 238                                 }
 239
 240                                 my $rnd_mac = &Network::random_mac();
 241
 242                                 $vlansettings{"${uc}_PARENT_DEV"} = $mac;
 243                                 $vlansettings{"${uc}_VLAN_ID"} = $vlan_tag;
 244                                 $vlansettings{"${uc}_MAC_ADDRESS"} = $rnd_mac;
 245
 246                                 if ($zone_mode eq "BRIDGE") {
 247                                         $slave_string = "${slave_string}${rnd_mac} ";
 248                                 }
 249
 250                                 $VALIDATE_vlancount++; # We can't allow more than one VLAN per zone
 251                         }
 252                 }
 253
 254                 if ($VALIDATE_vlancount > 1) {
 255                         $VALIDATE_error = $Lang::tr{"zoneconf val vlan amount assignment error"};
 256                         next;
 257                 }
 258
 259                 chop($slave_string);
 260
 261                 if ($zone_mode eq "BRIDGE") {
 262                         $ethsettings{"${uc}_MODE"} = "bridge";
 263                         $ethsettings{"${uc}_SLAVES"} = $slave_string;
 264                 } elsif ($zone_mode eq "MACVTAP") {
 265                         $ethsettings{"${uc}_MODE"} = "macvtap";
 266                 }
 267         }
 268
 269         if ($VALIDATE_error) {
 270                 &Header::openbox('100%', 'left', $Lang::tr{"error"});
 271
 272                 print "$VALIDATE_error<br><a href='/cgi-bin/zoneconf.cgi'><button>$Lang::tr{'ok'}</button></a>";
 273
 274                 &Header::closebox();
 275                 &Header::closebigbox();
 276                 &Header::closepage();
 277
 278                 exit 0;
 279         }
 280
 281         &General::writehash("${General::swroot}/ethernet/settings",\%ethsettings);
 282         &General::writehash("${General::swroot}/ethernet/vlans",\%vlansettings);
 283 }
 284
 285 &Header::openbox('100%', 'left', $Lang::tr{"zoneconf nic assignment"});
 286
 287 ### START OF TABLE ###
 288
 289 print <<END
 290         <form method='post' enctype='multipart/form-data'>
 291                 <table>
 292                         <tr>
 293                         <td class="h topleft" /td>
 294 END
 295 ;
 296
 297 # Fill the table header with all physical NICs
 298 foreach (@nics) {
 299         my $mac = $_->[0];
 300         my $nic = $_->[1];
 301
 302         print "<td class='h textcenter'>$nic<br>$mac</td>";
 303 }
 304
 305 print "</tr>";
 306
 307 foreach (@zones) {
 308         print "<tr>";
 309         my $uc = uc $_;
 310
 311         my $dev_name = $ethsettings{"${uc}_DEV"};
 312
 313         if ($dev_name eq "") { # If the zone is not activated, color it light grey
 314                 print "<td class='h disabled'>$uc</td>";
 315
 316                 foreach (@nics) {
 317                         print "<td class='disabled'/>";
 318                 }
 319
 320                 print "</tr>";
 321                 next;
 322         }
 323
 324         if ($uc eq "RED") {
 325                 my $red_type = $ethsettings{"RED_TYPE"};
 326                 my $red_restricted = ($uc eq "RED" && ! ($red_type eq "STATIC" || $red_type eq "DHCP"));
 327
 328                 # VLANs/Bridging is not possible if the RED interface is set to PPP, PPPoE, VDSL, ...
 329                 if ($red_restricted) {
 330                         print "<td class='h $_'>$uc<br>($red_type)</td>";
 331
 332                         foreach (@nics) {
 333                                 my $mac = $_->[0];
 334                                 my $checked = "";
 335
 336                                 if ($mac eq $ethsettings{"${uc}_MACADDR"}) {
 337                                         $checked = "checked";
 338                                 }
 339
 340                                 print "<td class='textcenter'><input type='radio' id='PPPACCESS $mac' name='PPPACCESS' value='$mac' $checked></td>";
 341                         }
 342
 343                         print "</tr>";
 344                         next; # We're done here
 345                 }
 346         }
 347
 348         my %mode_selected = ();
 349         my $zone_mode = $ethsettings{"${uc}_MODE"};
 350
 351         if ($zone_mode eq "") {
 352                 $mode_selected{"DEFAULT"} = "selected";
 353         } elsif ($zone_mode eq "bridge") {
 354                 $mode_selected{"BRIDGE"} = "selected";
 355         } elsif ($zone_mode eq "macvtap") {
 356                 $mode_selected{"MACVTAP"} = "selected";
 357         }
 358
 359         print <<END
 360                 <td class='h $_'>$uc<br>
 361                         <select name="MODE $uc">
 362                                 <option value="DEFAULT" $mode_selected{"DEFAULT"}>$Lang::tr{"zoneconf nicmode default"}</option>
 363                                 <option value="BRIDGE" $mode_selected{"BRIDGE"}>$Lang::tr{"zoneconf nicmode bridge"}</option>
 364                                 <option value="MACVTAP" $mode_selected{"MACVTAP"}>$Lang::tr{"zoneconf nicmode macvtap"}</option>
 365                         </select>
 366                 </td>
 367 END
 368 ;
 369
 370         # ZONE_PARENT_DEV is set if this zone accesses any interface via a VLAN
 371         my $zone_parent_dev = $vlansettings{"${uc}_PARENT_DEV"};
 372
 373         # If ZONE_PARENT_DEV is set to a NICs name (e.g. green0 or eth0) instead of a MAC address, we have to find out this NICs MAC address
 374         $zone_parent_dev = &Network::get_mac_by_name($zone_parent_dev);
 375
 376         foreach (@nics) { # Check for all nics if they are assigned to the current zone
 377                 my %access_selected = ();
 378                 my $mac = $_->[0];
 379                 my $wlan = $_->[2];
 380                 my $field_disabled = "disabled"; # Only enable the VLAN ID input field if the current access mode is VLAN
 381                 my $zone_vlan_id = "";
 382
 383                 # If the current NIC is accessed by the current zone via a VLAN, the ZONE_PARENT_DEV option corresponds to the current NIC
 384                 if ($mac eq $zone_parent_dev) {
 385                         $access_selected{"VLAN"} = "selected";
 386                         $field_disabled = "";
 387                         $zone_vlan_id = $vlansettings{"${uc}_VLAN_ID"};
 388                 }
 389
 390                 # If the current zone is in bridge mode, all corresponding NICs (Native as well as VLAN) are set via the ZONE_SLAVES option
 391                 if ($zone_mode eq "bridge") {
 392                         my @slaves = split(/ /, $ethsettings{"${uc}_SLAVES"});
 393
 394                         foreach (@slaves) {
 395                                 # Slaves can be set to a NICs name so we have to find out its MAC address
 396                                 $_ = &Network::get_mac_by_name($_);
 397
 398                                 if ($_ eq $mac) {
 399                                         $access_selected{"NATIVE"} = "selected";
 400                                         last;
 401                                 }
 402                         }
 403                 } else { # Native access via ZONE_MACADDR is only set if the zone does not access a NIC via a VLAN and the zone is not in bridge mode
 404                         if ($mac eq $ethsettings{"${uc}_MACADDR"}) {
 405                                 $access_selected{"NATIVE"} = "selected";
 406                         }
 407                 }
 408
 409                 $access_selected{"NONE"} = ($access_selected{"NATIVE"} eq "") && ($access_selected{"VLAN"} eq "") ? "selected" : "";
 410                 my $vlan_disabled = ($wlan) ? "disabled" : "";
 411
 412                 print <<END
 413                         <td class="textcenter">
 414                                 <select name="ACCESS $uc $mac" onchange="document.getElementById('TAG $uc $mac').disabled = (this.value === 'VLAN' ? false : true)">
 415                                         <option value="NONE" $access_selected{"NONE"}>- $Lang::tr{"zoneconf access none"} -</option>
 416                                         <option value="NATIVE" $access_selected{"NATIVE"}>$Lang::tr{"zoneconf access native"}</option>
 417                                         <option value="VLAN" $access_selected{"VLAN"} $vlan_disabled>$Lang::tr{"zoneconf access vlan"}</option>
 418                                 </select>
 419                                 <input type="number" id="TAG $uc $mac" name="TAG $uc $mac" min="1" max="4095" value="$zone_vlan_id" $field_disabled>
 420                         </td>
 421 END
 422 ;
 423
 424         }
 425         print "</tr>";
 426 }
 427
 428 print <<END
 429         </table>
 430
 431         <div id="submit-container">
 432                 <input type="submit" name="ACTION" value="$Lang::tr{"save"}">
 433         </div>
 434 </form>
 435 END
 436 ;
 437
 438 ### END OF TABLE ###
 439
 440 &Header::closebox();
 441 &Header::closebigbox();
 442 &Header::closepage();