2 ###############################################################################
4 # IPFire.org - A linux based firewall #
5 # Copyright (C) 2010 Michael Tremer & Christian Schmidt #
7 # This program is free software: you can redistribute it and/or modify #
8 # it under the terms of the GNU General Public License as published by #
9 # the Free Software Foundation, either version 3 of the License, or #
10 # (at your option) any later version. #
12 # This program is distributed in the hope that it will be useful, #
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
15 # GNU General Public License for more details. #
17 # You should have received a copy of the GNU General Public License #
18 # along with this program. If not, see <http://www.gnu.org/licenses/>. #
20 ###############################################################################
22 .
/usr
/lib
/network
/header-zone
24 HOOK_MANPAGE
="network-zone-bridge"
26 HOOK_SETTINGS
="HOOK STP STP_FORWARD_DELAY STP_HELLO STP_MAXAGE"
27 HOOK_SETTINGS
="${HOOK_SETTINGS} STP_PRIORITY MAC MTU"
29 HOOK_PORT_SETTINGS
="COST PRIORITY"
40 hook_check_settings
() {
43 assert isinteger STP_HELLO
44 assert isinteger STP_FORWARD_DELAY
45 assert isinteger STP_PRIORITY
49 hook_parse_cmdline
() {
50 while [ $# -gt 0 ]; do
56 STP_HELLO
=${1#--stp-hello=}
58 --stp-forward-delay=*)
59 STP_FORWARD_DELAY
=${1#--stp-forward-delay=}
62 STP_PRIORITY
=${1#--stp-priority=}
71 warning
"Ignoring unknown option '${1}'"
77 # Generate a random MAC address if the user passed no one
78 isset MAC || MAC
="$(mac_generate)"
85 zone_settings_read
"${zone}"
87 # Create the bridge if it does not already exist.
88 if ! device_exists
"${zone}"; then
89 bridge_create
"${zone}" \
98 if isset STP_FORWARD_DELAY
; then
99 stp_bridge_set_forward_delay
"${zone}" "${STP_FORWARD_DELAY}"
102 if isset STP_HELLO
; then
103 stp_bridge_set_hello_time
"${zone}" "${STP_HELLO}"
106 if isset STP_MAXAGE
; then
107 stp_bridge_set_max_age
"${zone}" "${STP_MAXAGE}"
110 if isset STP_PRIORITY
; then
111 stp_bridge_set_priority
"${zone}" "${STP_PRIORITY}"
114 stp_disable
"${zone}"
117 device_set_up
"${zone}"
119 # XXX Currently, there is a bug (in the linux kernel?) that we need to
120 # set our bridges to promisc mode.
121 device_set_promisc
"${zone}" on
123 # Bring up all configurations
124 zone_configs_up
"${zone}"
133 case "$(hotplug_action)" in
135 # Attach all ports when zone is coming up
136 if hotplug_event_interface_is_zone
"${zone}"; then
139 for port
in $
(zone_get_ports
"${zone}"); do
140 log DEBUG
"Trying to attach port ${port} to ${zone}"
142 hook_port_up
"${zone}" "${port}"
145 # Handle ports of this zone that have just been added
146 elif hotplug_event_interface_is_port_of_zone
"${zone}"; then
147 # Attach the device if the parent bridge is up
148 if zone_is_active
"${zone}"; then
149 hook_port_up
"${zone}" "${INTERFACE}"
154 if hotplug_event_interface_is_zone
"${zone}"; then
155 # Bring down/destroy all ports
157 for port
in $
(zone_get_ports
"${zone}"); do
158 log DEBUG
"Trying to detach port ${port} from ${zone}"
160 hook_port_down
"${zone}" "${port}"
163 # Handle ports of this zone that have just been removed
164 elif hotplug_event_interface_is_port_of_zone
"${zone}"; then
165 hook_port_down
"${zone}" "${INTERFACE}"
169 exit ${EXIT_NOT_HANDLED}
180 if ! device_is_up
"${zone}"; then
181 warning
"Zone '${zone}' is not up"
185 # Stop all the configs.
186 zone_configs_down
"${zone}"
188 # Bring down all the ports.
189 zone_ports_down
"${zone}"
190 zone_ports_remove
"${zone}"
193 device_set_down
"${zone}"
194 bridge_delete
"${zone}"
203 # Print the default header.
204 cli_device_headline
"${zone}"
206 # Exit if zone is down
207 if ! zone_is_up
"${zone}"; then
212 cli_headline
2 "Spanning Tree Protocol information"
213 if stp_is_enabled
"${zone}"; then
214 cli_print_fmt1
2 "ID" "$(stp_bridge_get_id ${zone})"
215 cli_print_fmt1
2 "Priority" "$(stp_bridge_get_priority ${zone})"
217 if stp_bridge_is_root
${zone}; then
218 cli_print
2 "This bridge is root."
220 cli_print_fmt1
2 "Designated root" \
221 "$(stp_bridge_get_designated_root ${zone})"
222 cli_print_fmt1
2 "Root path cost" \
223 "$(stp_bridge_get_root_path_cost ${zone})"
227 # Topology information
228 cli_print_fmt1
2 "Topology changing" \
229 "$(stp_bridge_get_topology_change_detected ${zone})"
230 cli_print_fmt1
2 "Topology change time" \
231 "$(beautify_time $(stp_bridge_get_topology_change_timer ${zone}))"
232 cli_print_fmt1
2 "Topology change count" \
233 "$(stp_bridge_get_topology_change_count ${zone})"
236 cli_print
2 "Disabled"
240 cli_headline
2 "Ports"
241 zone_ports_status
"${zone}"
244 cli_headline
2 "Configurations"
245 zone_configs_cmd status
"${zone}"
251 hook_check_port_settings
() {
253 assert isinteger COST
256 if isset PRIORITY
; then
257 assert isinteger PRIORITY
262 # Excepting at least two arguments here
269 if zone_has_port
"${zone}" "${port}"; then
270 zone_port_settings_read
"${zone}" "${port}"
278 COST
="$(cli_get_val "${arg}")"
281 PRIORITY
="$(cli_get_val "${arg}")"
284 done <<< "$(args "$@
")"
286 if ! zone_port_settings_write
"${zone}" "${port}"; then
299 # Shut down the port (if possible)
302 if ! zone_port_settings_remove
"${zone}" "${port}"; then
310 hook_port_attach
"$@"
319 # Try bringing up the port if it has not been
321 # We will get here as soon as the port device has
322 # been created and will then connect it with the bridge.
323 if ! device_exists
"${port}"; then
324 port_create
"${port}"
329 # Read configuration values
330 zone_port_settings_read
"${zone}" "${port}" ${HOOK_PORT_SETTINGS}
332 # Attach the port to the bridge
333 bridge_attach_device "${zone}" "${port}"
335 # Set STP configuration
337 stp_port_set_cost "${zone}" "${port}" "${COST}"
340 if isset PRIORITY; then
341 stp_port_set_priority "${zone}" "${port}" "${PRIORITY}"
344 # Make sure that the port is up
356 if device_exists "${port}"; then
357 bridge_detach_device "${zone}" "${port}"
371 # Do nothing for devices which are not up and running.
372 device_exists "${port}" || exit ${EXIT_OK}
376 # Check if the device is down.
377 if ! device_is_up "${port}"; then
378 status="${MSG_DEVICE_STATUS_DOWN}"
380 # Check if the device has no carrier.
381 elif ! device_has_carrier "${port}"; then
382 status="${MSG_DEVICE_STATUS_NOCARRIER}"
384 # Check for STP information.
385 elif stp_is_enabled "${zone}"; then
386 local state="$
(stp_port_get_state
"${zone}" "${port}")"
387 state="MSG_STP_
${state}"
390 status="${status} - DSR: $(stp_port_get_designated_root "${zone}" "${port}")"
391 status
="${status} - Cost: $(stp_port_get_cost "${zone}" "${port}")"
393 status="${MSG_DEVICE_STATUS_UP}"
395 cli_statusline 3 "${port}" "${status}"