src/network

   1 #!/bin/bash
   2 ###############################################################################
   3 #                                                                             #
   4 # IPFire.org - A linux based firewall                                         #
   5 # Copyright (C) 2010  Michael Tremer & Christian Schmidt                      #
   6 #                                                                             #
   7 # This program is free software: you can redistribute it and/or modify        #
   8 # it under the terms of the GNU General Public License as published by        #
   9 # the Free Software Foundation, either version 3 of the License, or           #
  10 # (at your option) any later version.                                         #
  11 #                                                                             #
  12 # This program is distributed in the hope that it will be useful,             #
  13 # but WITHOUT ANY WARRANTY; without even the implied warranty of              #
  14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
  15 # GNU General Public License for more details.                                #
  16 #                                                                             #
  17 # You should have received a copy of the GNU General Public License           #
  18 # along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
  19 #                                                                             #
  20 ###############################################################################
  21
  22 # Parse the command line
  23 while [ $# -gt 0 ]; do
  24         case "${1}" in
  25                 -d|--debug)
  26                         DEBUG=1
  27                         ;;
  28                 *)
  29                         action=${1}
  30                         ;;
  31         esac
  32         shift
  33         [ -n "${action}" ] && break
  34 done
  35
  36 . /usr/lib/network/functions
  37
  38 # Read network settings
  39 network_settings_read
  40
  41 cli_settings() {
  42         if cli_help_requested "$@"; then
  43                 cli_show_man network-settings
  44                 exit ${EXIT_OK}
  45         fi
  46
  47         if [ -n "${1}" ]; then
  48                 network_settings_set "$@"
  49                 network_settings_write
  50         else
  51                 network_settings_print
  52         fi
  53 }
  54
  55 cli_device() {
  56         if cli_help_requested "$@"; then
  57                 cli_show_man network-device
  58                 exit ${EXIT_OK}
  59         fi
  60
  61         local action="${1}"
  62         shift
  63
  64         case "${action}" in
  65                 list)
  66                         cli_device_list "$@"
  67                         ;;
  68                 *)
  69                         local device="${action}"
  70                         action="${1}"
  71                         shift
  72
  73                         if ! isset device; then
  74                                 cli_show_man network-device
  75                                 return ${EXIT_ERROR}
  76                         fi
  77
  78                         assert device_exists ${device}
  79
  80                         case "${action}" in
  81                                 discover)
  82                                         cli_device_discover ${device} "$@"
  83                                         ;;
  84                                 identify)
  85                                         device_identify "${device}" "$@"
  86                                         ;;
  87                                 monitor)
  88                                         cli_device_monitor "${device}" "$@"
  89                                         ;;
  90                                 status)
  91                                         cli_device_status ${device}
  92                                         ;;
  93                                 unlock)
  94                                         cli_device_serial_unlock ${device} "$@"
  95                                         ;;
  96                                 ussd)
  97                                         cli_device_send_ussd_command "${device}" "$@"
  98                                         ;;
  99                                 *)
 100                                         cli_show_man network-device
 101                                         ;;
 102                         esac
 103                         ;;
 104         esac
 105
 106         return ${EXIT_OK}
 107 }
 108
 109 cli_device_status() {
 110         local device="${1}"
 111         assert isset device
 112
 113         # Disable debugging output here.
 114         local log_disable_stdout=${LOG_DISABLE_STDOUT}
 115         LOG_DISABLE_STDOUT="true"
 116
 117         # Save the type of the device for later.
 118         local type=$(device_get_type ${device})
 119
 120         cli_headline 1 "Device status: ${device}"
 121         cli_print_fmt1 1 "Name"         "${device}"
 122
 123         # Handle special devices
 124         case "${type}" in
 125                 phy)
 126                         cli_device_status_phy "${device}"
 127                         return $?
 128                         ;;
 129                 serial)
 130                         cli_device_status_serial "${device}"
 131                         return $?
 132                         ;;
 133         esac
 134
 135         # Print the device status.
 136         device_is_up ${device} &>/dev/null
 137         local status=$?
 138
 139         case "${status}" in
 140                 ${EXIT_TRUE})
 141                         status="${CLR_GREEN_B}UP${CLR_RESET}"
 142                         ;;
 143                 ${EXIT_FALSE})
 144                         status="${CLR_RED_B}DOWN${CLR_RESET}"
 145                         ;;
 146         esac
 147
 148         cli_print_fmt1 1 "Status"       "${status}"
 149         cli_print_fmt1 1 "Type"         "${type}"
 150
 151         # Print the driver name
 152         local driver="$(device_get_driver "${device}")"
 153         if isset driver; then
 154                 cli_print_fmt1 1 "Driver" "${driver}"
 155         fi
 156
 157         # Ethernet-compatible?
 158         device_is_ethernet_compatible "${device}" &>/dev/null
 159         cli_print_fmt1 1 "Ethernet-compatible" "$(cli_print_bool $?)"
 160
 161         cli_print_fmt1 1 "Address"      "$(device_get_address ${device})"
 162         cli_space
 163
 164         # Print the link speed for ethernet devices.
 165         if device_is_up ${device} &>/dev/null; then
 166                 local link="$(device_get_link_string "${device}")"
 167                 if isset link; then
 168                         cli_print_fmt1 1 "Link" "${link}"
 169                 fi
 170         fi
 171
 172         cli_print_fmt1 1 "MTU"          "$(device_get_mtu ${device})"
 173         cli_space
 174
 175         # Print device statistics.
 176         cli_device_stats 2 ${device}
 177
 178         # Print some more information.
 179         device_has_carrier ${device} &>/dev/null
 180         cli_print_fmt1 1 "Has carrier?" "$(cli_print_bool $?)"
 181
 182         device_is_promisc ${device} &>/dev/null
 183         cli_print_fmt1 1 "Promisc"      "$(cli_print_bool $?)"
 184
 185         # Supports multiqueue?
 186         if device_supports_multiqueue ${device}; then
 187                 cli_print_fmt1 1 "Multiqueue" "Supported"
 188         fi
 189         cli_space
 190
 191         cli_device_show_queues 2 ${device}
 192
 193         # Print all vlan devices.
 194         local vlans=$(device_get_vlans ${device})
 195         if [ -n "${vlans}" ]; then
 196                 cli_headline 2 "VLAN devices"
 197
 198                 local vlan
 199                 for vlan in ${vlans}; do
 200                         cli_print 2 "* %-6s - %s" "${vlan}" "$(device_get_address ${vlan})"
 201                 done
 202                 cli_space
 203         fi
 204
 205         case "${type}" in
 206                 wireless*)
 207                         local phy="$(device_get_phy "${device}")"
 208                         if isset phy; then
 209                                 cli_headline 2 "PHY"
 210                                 cli_print_fmt1 2 "Name" "${phy}"
 211                                 cli_print_fmt1 2 "Address" "$(phy_get_address "${phy}")"
 212                                 cli_space
 213                         fi
 214                         ;;
 215         esac
 216
 217         # Reset the logging level.
 218         LOG_DISABLE_STDOUT=${log_disable_stdout}
 219 }
 220
 221 cli_device_status_serial() {
 222         local device=${1}
 223         assert device_is_serial ${device}
 224
 225         serial_is_locked ${device} &>/dev/null
 226         local locked=$?
 227
 228         cli_print_fmt1 1 "Locked" "$(cli_print_bool ${locked})"
 229         cli_space
 230
 231         # Cannot go on when the device is locked.
 232         [ ${locked} -eq ${EXIT_TRUE} ] && return ${EXIT_OK}
 233
 234         cli_print_fmt1 1 "Manufacturer" \
 235                 "$(modem_get_manufacturer ${device})"
 236         cli_print_fmt1 1 "Model" \
 237                 "$(modem_get_model ${device})"
 238         cli_print_fmt1 1 "Software version" \
 239                 "$(modem_get_software_version ${device})"
 240
 241         # Mobile
 242         if modem_is_mobile "${device}"; then
 243                 cli_print_fmt1 1 "IMEI" \
 244                         "$(modem_get_device_imei ${device})"
 245         fi
 246         cli_space
 247
 248         if modem_is_mobile "${device}"; then
 249                 modem_mobile_network_status "${device}" 2
 250                 cli_space
 251         fi
 252 }
 253
 254 cli_device_status_phy() {
 255         local phy="${1}"
 256         assert phy_exists "${phy}"
 257
 258         local address="$(phy_get_address "${phy}")"
 259         cli_print_fmt1 1 "Address" "${address}"
 260
 261         # Show kernel module
 262         local driver="$(phy_get_driver "${phy}")"
 263         if isset driver; then
 264                 cli_print_fmt1 1 "Driver" "${driver}"
 265         fi
 266
 267         cli_space
 268
 269         local devices="$(phy_get_devices "${phy}")"
 270         if isset devices; then
 271                 cli_headline 2 "Soft interfaces"
 272
 273                 local device
 274                 for device in ${devices}; do
 275                         cli_print 2 "* %s" "${device}"
 276                 done
 277                 cli_space
 278         fi
 279
 280         return ${EXIT_OK}
 281 }
 282
 283 cli_device_discover() {
 284         local device=${1}
 285         shift
 286
 287         # This can only be executed for ethernet (or compatible) devices
 288         if ! device_is_ethernet_compatible "${device}"; then
 289                 return ${EXIT_OK}
 290         fi
 291
 292         local raw
 293
 294         while [ $# -gt 0 ]; do
 295                 case "${1}" in
 296                         --raw)
 297                                 raw=1
 298                                 ;;
 299                 esac
 300                 shift
 301         done
 302
 303         local up
 304         device_is_up ${device} && up=1
 305         device_set_up ${device}
 306
 307         enabled raw || echo "${device}"
 308
 309         local hook
 310         local out
 311         local ret
 312         for hook in $(hook_zone_get_all); do
 313                 out=$(hook_zone_exec ${hook} discover ${device})
 314                 ret=$?
 315
 316                 [ ${ret} -eq ${DISCOVER_NOT_SUPPORTED} ] && continue
 317
 318                 if enabled raw; then
 319                         case "${ret}" in
 320                                 ${DISCOVER_OK})
 321                                         echo "${hook}: OK"
 322                                         local line
 323                                         while read line; do
 324                                                 echo "${hook}: ${line}"
 325                                         done <<<"${out}"
 326                                         ;;
 327
 328                                 ${DISCOVER_ERROR})
 329                                         echo "${hook}: FAILED"
 330                                         ;;
 331                         esac
 332                 else
 333                         case "${ret}" in
 334                                 ${DISCOVER_OK})
 335                                         echo "  ${hook} was successful."
 336                                         local line
 337                                         while read line; do
 338                                                 echo "  ${line}"
 339                                         done <<<"${out}"
 340                                         ;;
 341
 342                                 ${DISCOVER_ERROR})
 343                                         echo "  ${hook} failed."
 344                                         ;;
 345                         esac
 346                 fi
 347         done
 348
 349         echo # New line
 350
 351         [ "${up}" = "1" ] || device_set_down ${device}
 352 }
 353
 354 cli_device_serial_unlock() {
 355         if cli_help_requested "$@"; then
 356                 cli_show_man network-device
 357                 exit ${EXIT_OK}
 358         fi
 359
 360         local device=${1}
 361         assert isset device
 362
 363         if ! device_is_serial ${device}; then
 364                 error "${device} is not a serial device."
 365                 error "Unlocking is only supported for serial devices."
 366                 exit ${EXIT_ERROR}
 367         fi
 368
 369         # Read the current state of the SIM card.
 370         modem_sim_status ${device} &>/dev/null
 371         local sim_status_code=$?
 372
 373         # If the SIM card is already unlocked, we don't need to do anything.
 374         if [ ${sim_status_code} -eq ${EXIT_SIM_READY} ]; then
 375                 print "The SIM card is already unlocked."
 376                 exit ${EXIT_OK}
 377
 378         # If the SIM card is in an unknown state, we cannot do anything.
 379         elif [ ${sim_status_code} -eq ${EXIT_SIM_UNKNOWN} ]; then
 380                 error "The SIM card is in an unknown state."
 381                 exit ${EXIT_ERROR}
 382         fi
 383
 384         # Ask for the code.
 385         local code=${2}
 386         local require_new_pin="false"
 387         local new_pin
 388
 389         while ! isinteger code; do
 390                 local message
 391                 case "${sim_status_code}" in
 392                         ${EXIT_SIM_PIN})
 393                                 message="Please enter PIN:"
 394                                 ;;
 395                         ${EXIT_SIM_PUK})
 396                                 message="Please enter PUK:"
 397                                 require_new_pin="true"
 398                                 ;;
 399                 esac
 400                 assert isset message
 401
 402                 echo -n "${message} "
 403                 read -s code
 404                 echo # Print newline.
 405
 406                 if enabled require_new_pin; then
 407                         local i new_pin2
 408                         for i in 0 1; do
 409                                 case "${i}" in
 410                                         0)
 411                                                 message="Please enter a new PIN code:"
 412                                                 ;;
 413                                         1)
 414                                                 message="Please confirm the new PIN code:"
 415                                                 ;;
 416                                 esac
 417
 418                                 echo -n "${message} "
 419                                 read -s new_pin2
 420                                 echo # Print newline.
 421
 422                                 if [ -n "${new_pin}" ]; then
 423                                         if [ "${new_pin}" != "${new_pin2}" ]; then
 424                                                 error "The entered PIN codes did not match."
 425                                                 exit ${EXIT_ERROR}
 426                                         fi
 427                                 else
 428                                         new_pin=${new_pin2}
 429                                 fi
 430                         done
 431                 fi
 432         done
 433
 434         # Trying to unlock the SIM card.
 435         modem_sim_unlock ${device} ${code} ${new_pin}
 436
 437         exit $?
 438 }
 439
 440 cli_device_send_ussd_command() {
 441         local device="${1}"
 442         assert isset device
 443         shift
 444
 445         local command
 446         local timeout
 447
 448         while [ $# -gt 0 ]; do
 449                 case "${1}" in
 450                         --timeout=*)
 451                                 timeout="$(cli_get_val "${1}")"
 452                                 ;;
 453                         *)
 454                                 if isset command; then
 455                                         warning "Unrecognized argument: ${1}"
 456                                 else
 457                                         command="${1}"
 458                                 fi
 459                                 ;;
 460                 esac
 461                 shift
 462         done
 463
 464         assert device_is_serial "${device}"
 465
 466         local args
 467         if isset timeout; then
 468                 args="${args} --timeout=${timeout}"
 469         fi
 470
 471         modem_ussd_send_command "${device}" "${command}" ${args}
 472         exit $?
 473 }
 474
 475 cli_device_monitor() {
 476         local device="${1}"
 477         assert isset device
 478
 479         if ! device_is_wireless "${device}"; then
 480                 error "This action only works with wireless devices. Exiting."
 481                 exit ${EXIT_ERROR}
 482         fi
 483
 484         wireless_monitor "${device}"
 485         exit $?
 486 }
 487
 488 cli_device_list() {
 489         local device
 490         for device in $(device_list); do
 491                 cli_device_status "${device}"
 492         done
 493
 494         exit ${EXIT_OK}
 495 }
 496
 497 cli_hostname() {
 498         if cli_help_requested "$@"; then
 499                 cli_show_man network
 500                 exit ${EXIT_OK}
 501         fi
 502
 503         local hostname=${1}
 504
 505         if [ -n "${hostname}" ]; then
 506                 config_hostname ${hostname}
 507                 log INFO "Hostname was set to '${hostname}'."
 508                 log INFO "Changes do only take affect after reboot."
 509                 exit ${EXIT_OK}
 510         fi
 511
 512         echo "$(config_hostname)"
 513         exit ${EXIT_OK}
 514 }
 515
 516 cli_port() {
 517         if cli_help_requested "$@"; then
 518                 cli_show_man network-port
 519                 exit ${EXIT_OK}
 520         fi
 521
 522         local action
 523         local port
 524
 525         if port_exists ${1}; then
 526                 port=${1}
 527                 action=${2}
 528                 shift 2
 529
 530                 case "${action}" in
 531                         edit|create|remove|up|down|status|identify)
 532                                 port_${action} "${port}" "$@"
 533                                 ;;
 534                         color)
 535                                 color_cli "port" "${port}" "$@"
 536                                 ;;
 537                         description)
 538                                 description_cli "port" "${port}" "$@"
 539                                 ;;
 540                         *)
 541                                 error "Unrecognized argument: ${action}"
 542                                 exit ${EXIT_ERROR}
 543                                 ;;
 544                 esac
 545         else
 546                 action=${1}
 547                 shift
 548
 549                 case "${action}" in
 550                         new|destroy)
 551                                 port_${action} "$@"
 552                                 ;;
 553                         *)
 554                                 error "Unrecognized argument: ${action}"
 555                                 exit ${EXIT_ERROR}
 556                                 ;;
 557                 esac
 558         fi
 559 }
 560
 561 cli_zone() {
 562         if cli_help_requested "$@"; then
 563                 cli_show_man network-zone
 564                 exit ${EXIT_OK}
 565         fi
 566
 567         local action
 568         local zone
 569
 570         if zone_exists ${1}; then
 571                 zone=${1}
 572                 action=${2}
 573                 shift 2
 574
 575                 # Action aliases
 576                 case "${action}" in
 577                         start|reload)
 578                                 action="up"
 579                                 ;;
 580                         stop)
 581                                 action="down"
 582                                 ;;
 583                         show)
 584                                 action="status"
 585                                 ;;
 586                 esac
 587
 588                 case "${action}" in
 589                         port)
 590                                 cli_zone_port "${zone}" "$@"
 591                                 ;;
 592                         rename)
 593                                 cli_zone_rename "${zone}" "$@"
 594                                 ;;
 595                         config|disable|down|edit|enable|identify|status|up)
 596                                 zone_${action} ${zone} "$@"
 597                                 ;;
 598                         color)
 599                                 color_cli "zone" "${zone}" "$@"
 600                                 ;;
 601                         description)
 602                                 description_cli "zone" ${zone} "$@"
 603                                 ;;
 604                         *)
 605                                 error "Unrecognized argument: ${action}"
 606                                 cli_show_man network-zone
 607                                 exit ${EXIT_ERROR}
 608                                 ;;
 609                 esac
 610         else
 611                 action=${1}
 612                 shift
 613
 614                 case "${action}" in
 615                         new)
 616                                 cli_zone_new "$@"
 617                                 ;;
 618                         destroy)
 619                                 cli_zone_destroy "$@"
 620                                 ;;
 621                         ""|*)
 622                                 if [ -n "${action}" ]; then
 623                                         error "Unrecognized argument: '${action}'"
 624                                         echo
 625                                 fi
 626
 627                                 cli_show_man network-zone
 628                                 exit ${EXIT_ERROR}
 629                                 ;;
 630                 esac
 631         fi
 632 }
 633
 634 cli_zone_new() {
 635         if cli_help_requested "$@" || [ $# -lt 2 ]; then
 636                 cli_show_man network-zone-new
 637                 exit ${EXIT_OK}
 638         fi
 639
 640         zone_new "$@"
 641 }
 642
 643 # Removes a zone either immediately, if it is currently down,
 644 # or adds a tag that the removal will be done when the zone
 645 # is brought down the next time.
 646 cli_zone_destroy() {
 647         if cli_help_requested "$@"; then
 648                 cli_show_man network-zone
 649                 exit ${EXIT_OK}
 650         fi
 651
 652         local zone="${1}"
 653
 654         # Check if the zone exists
 655         if ! zone_exists "${zone}"; then
 656                 error "Zone '${zone}' does not exist"
 657                 return ${EXIT_ERROR}
 658         fi
 659
 660         echo "Removing zone '${zone}'..."
 661         zone_destroy "${zone}" || exit $?
 662 }
 663
 664 cli_zone_port() {
 665         if cli_help_requested "$@"; then
 666                 cli_show_man network-zone-port
 667                 exit ${EXIT_OK}
 668         fi
 669
 670         local zone="${1}"
 671         assert zone_exists "${zone}"
 672
 673         if port_exists "${2}"; then
 674                 local port="${2}"
 675                 local action="${3}"
 676                 shift 3
 677
 678                 case "${action}" in
 679                         edit)
 680                                 zone_port_edit "${zone}" "${port}" "$@"
 681                                 ;;
 682                         *)
 683                                 error "Unrecognised argument: ${action}"
 684                                 exit ${EXIT_ERROR}
 685                                 ;;
 686                 esac
 687         else
 688                 local action="${2}"
 689                 shift 2
 690
 691                 case "${action}" in
 692                         attach)
 693                                 zone_port_attach "${zone}" "$@"
 694                                 ;;
 695                         detach)
 696                                 zone_port_detach "${zone}" "$@"
 697                                 ;;
 698                         *)
 699                                 error "Unrecognised argument: ${action}"
 700                                 exit ${EXIT_ERROR}
 701                                 ;;
 702                 esac
 703         fi
 704
 705         exit ${EXIT_OK}
 706 }
 707
 708 cli_zone_rename() {
 709         if cli_help_requested "$@"; then
 710                 cli_show_man network-zone
 711                 exit ${EXIT_OK}
 712         fi
 713
 714         local zone="${1}"
 715         local name="${2}"
 716         shift 2
 717
 718         if ! isset name; then
 719                 error "You need to pass a new name"
 720                 exit ${EXIT_ERROR}
 721         fi
 722
 723         if ! zone_name_is_valid "${name}"; then
 724                 error "Invalid new zone name: ${name}"
 725                 exit ${EXIT_ERROR}
 726         fi
 727
 728         # Check if the zone exists
 729         if ! zone_exists "${zone}"; then
 730                 error "Zone ${zone} does not exist"
 731                 exit ${EXIT_ERROR}
 732         fi
 733
 734         # Check if a zone with the new name already exists
 735         if zone_exists "${name}"; then
 736                 error "Zone ${name} already exists"
 737                 exit ${EXIT_ERROR}
 738         fi
 739
 740         # Rename
 741         if ! zone_rename "${zone}" "${name}"; then
 742                 error "Could not rename zone ${zone} to ${name}"
 743                 exit ${EXIT_ERROR}
 744         fi
 745
 746         exit ${EXIT_OK}
 747 }
 748
 749 cli_list_hooks() {
 750         local type=${1}
 751         shift
 752
 753         if cli_help_requested "$@"; then
 754                 cli_show_man network-zone
 755                 exit ${EXIT_OK}
 756         fi
 757
 758         local hook_dir=$(hook_dir ${type})
 759         local hook
 760
 761         for hook in ${hook_dir}/*; do
 762                 hook=$(basename ${hook})
 763                 if hook_exists ${type} ${hook}; then
 764                         echo "${hook}"
 765                 fi
 766         done | sort -u
 767 }
 768
 769 cli_dhcpd() {
 770         local proto=${1}
 771         shift
 772
 773         if cli_help_requested "$@"; then
 774                 cli_show_man network-dhcp
 775                 exit ${EXIT_OK}
 776         fi
 777
 778         local action=${1}
 779         shift
 780
 781         case "${action}" in
 782                 edit)
 783                         dhcpd_edit ${proto} "$@"
 784                         ;;
 785                 start)
 786                         dhcpd_start ${proto}
 787
 788                         # Make this permanent
 789                         dhcpd_enable ${proto}
 790                         ;;
 791                 stop)
 792                         dhcpd_stop ${proto}
 793
 794                         # Make this permanent
 795                         dhcpd_disable ${proto}
 796                         ;;
 797                 restart|reload)
 798                         dhcpd_reload ${proto}
 799                         ;;
 800                 subnet)
 801                         cli_dhcpd_subnet ${proto} "$@"
 802                         ;;
 803                 show|"")
 804                         cli_dhcpd_show ${proto} "$@"
 805                         ;;
 806                 *)
 807                         error "Unrecognized action: ${action}"
 808                         cli_run_help network dhcpvN
 809
 810                         exit ${EXIT_ERROR}
 811                         ;;
 812         esac
 813
 814         exit ${EXIT_OK}
 815 }
 816
 817 cli_dhcpd_show() {
 818         local proto=${1}
 819         assert isset proto
 820
 821         local settings=$(dhcpd_settings ${proto})
 822         assert isset settings
 823
 824         local ${settings}
 825         dhcpd_global_settings_read ${proto}
 826
 827         cli_headline 1 "Dynamic Host Configuration Protocol Daemon for ${proto/ip/IP}"
 828
 829         case "${proto}" in
 830                 ipv6)
 831                         cli_headline 2 "Lease times"
 832                         if isinteger VALID_LIFETIME; then
 833                                 cli_print_fmt1 2 "Valid lifetime" "$(format_time ${VALID_LIFETIME})"
 834                         fi
 835
 836                         if isinteger PREFERRED_LIFETIME; then
 837                                 cli_print_fmt1 2 "Preferred lifetime" "$(format_time ${PREFERRED_LIFETIME})"
 838                         fi
 839
 840                         cli_space
 841                         ;;
 842                 ipv4)
 843                         cli_print_fmt1 1 "Authoritative" $(cli_print_enabled AUTHORITATIVE)
 844                         cli_space
 845
 846                         cli_headline 2 "Lease times"
 847                         cli_print_fmt1 2 "Default lease time" "$(format_time ${DEFAULT_LEASE_TIME})"
 848                         cli_print_fmt1 2 "Max. lease time" "$(format_time ${MAX_LEASE_TIME})"
 849
 850                         if isset MIN_LEASE_TIME; then
 851                                 cli_print_fmt1 2 "Min. lease time" "$(format_time ${MIN_LEASE_TIME})"
 852                         fi
 853
 854                         cli_space
 855                         ;;
 856         esac
 857
 858         # Read the options.
 859         local -A options
 860         dhcpd_global_options_read ${proto}
 861
 862         # Print the options if any.
 863         if [ ${#options[*]} -gt 0 ]; then
 864                 cli_headline 2 "Options"
 865
 866                 local option
 867                 for option in $(dhcpd_options ${proto}); do
 868                         [ -n "${options[${option}]}" ] || continue
 869
 870                         cli_print_fmt1 2 \
 871                                 "${option}" "${options[${option}]}"
 872                 done
 873                 cli_space
 874         fi
 875
 876         # Subnets.
 877         local subnets=$(dhcpd_subnet_list ${proto})
 878         if [ -n "${subnets}" ]; then
 879                 cli_headline 2 "Subnets"
 880                 local subnet
 881                 for subnet in ${subnets}; do
 882                         cli_dhcpd_subnet_show ${proto} ${subnet} 2
 883                 done
 884         fi
 885 }
 886
 887 cli_dhcpd_subnet() {
 888         assert [ $# -ge 1 ]
 889
 890         local proto=${1}
 891         shift
 892
 893         if cli_help_requested "$@"; then
 894                 cli_show_man network-dhcp-subnet
 895                 exit ${EXIT_OK}
 896         fi
 897
 898         local action=${1}
 899         shift
 900
 901         case "${action}" in
 902                 new)
 903                         dhcpd_subnet_new ${proto} "$@"
 904                         ;;
 905                 remove)
 906                         dhcpd_subnet_remove ${proto} "$@"
 907                         ;;
 908                 *:*/*|*.*.*.*/*)
 909                         local subnet=${action}
 910
 911                         if ! dhcpd_subnet_exists ${proto} ${subnet}; then
 912                                 error "Subnet ${subnet} does not exist"
 913                                 return ${EXIT_ERROR}
 914                         fi
 915
 916                         # Update the action.
 917                         action=${1}
 918                         shift
 919
 920                         case "${action}" in
 921                                 edit)
 922                                         dhcpd_subnet_edit ${proto} ${subnet} "$@"
 923                                         local ret=$?
 924
 925                                         if [ ${ret} -eq ${EXIT_OK} ]; then
 926                                                 dhcpd_reload ${proto}
 927                                         fi
 928                                         exit ${ret}
 929                                         ;;
 930                                 range)
 931                                         cli_dhcpd_subnet_range ${proto} ${subnet} "$@"
 932                                         exit $?
 933                                         ;;
 934                                 show)
 935                                         cli_dhcpd_subnet_show ${proto} ${subnet} "$@"
 936                                         exit $?
 937                                         ;;
 938                                 options)
 939                                         cli_dhcpd_subnet_options ${proto} ${subnet} "$@"
 940                                         exit $?
 941                                         ;;
 942                                 *)
 943                                         error "Unrecognized action: ${action}"
 944                                         cli_run_help network dhcpvN subnet
 945                                         exit ${EXIT_ERROR}
 946                                         ;;
 947                         esac
 948                         ;;
 949                 show)
 950                         local subnet
 951                         for subnet in $(dhcpd_subnet_list ${proto}); do
 952                                 cli_dhcpd_subnet_show ${proto} ${subnet}
 953                         done
 954                         ;;
 955                 *)
 956                         error "Unrecognized action: ${action}"
 957                         cli_run_help network dhcpvN subnet
 958
 959                         exit ${EXIT_ERROR}
 960                         ;;
 961         esac
 962
 963         exit ${EXIT_OK}
 964 }
 965
 966 cli_dhcpd_subnet_range() {
 967         assert [ $# -ge 2 ]
 968
 969         local proto=${1}
 970         local subnet=${2}
 971         local action=${3}
 972         shift 3
 973
 974         case "${action}" in
 975                 new)
 976                         dhcpd_subnet_range_new ${proto} ${subnet} "$@" || exit ${EXIT_ERROR}
 977                         ;;
 978                 remove)
 979                         dhcpd_subnet_range_remove ${proto} ${subnet} "$@" || exit ${EXIT_ERROR}
 980                         ;;
 981                 *)
 982                         error "Unrecognized action: ${action}"
 983                         cli_run_help network dhcpvN subnet range
 984                         exit ${EXIT_ERROR}
 985                         ;;
 986         esac
 987
 988         dhcpd_reload ${proto}
 989         return ${EXIT_OK}
 990 }
 991
 992 cli_dhcpd_subnet_show() {
 993         assert [ $# -ge 2 -a $# -le 3 ]
 994
 995         local proto=${1}
 996         local subnet=${2}
 997
 998         local level=${3}
 999         isset level || level=0
1000
1001         local $(dhcpd_subnet_settings ${proto})
1002
1003         # Read in configuration settings.
1004         dhcpd_subnet_read ${proto} ${subnet}
1005
1006         cli_headline $(( ${level} + 1 )) "DHCP Subnet Declaration"
1007         cli_print_fmt1 $(( ${level} + 1 )) \
1008                 "Subnet" "${ADDRESS}/${PREFIX}"
1009         cli_space
1010
1011         # Read the options.
1012         local -A options
1013         dhcpd_subnet_options_read "${proto}" "${subnet}"
1014
1015         # Print the options if any.
1016         if [ ${#options[*]} -gt 0 ]; then
1017                 cli_headline $(( ${level} + 2 )) "Options"
1018
1019                 local option
1020                 for option in $(dhcpd_subnet_options_list ${proto}); do
1021                         [ -n "${options[${option}]}" ] || continue
1022
1023                         cli_print_fmt1 $(( ${level} + 2 )) \
1024                                 "${option}" "${options[${option}]}"
1025                 done
1026                 cli_space
1027         fi
1028
1029         # Ranges.
1030         cli_headline $(( ${level} + 2 )) "Ranges"
1031
1032         local ranges=$(dhcpd_subnet_range_list ${proto} ${subnet})
1033         if isset ranges; then
1034                 local range $(dhcpd_subnet_range_settings ${proto})
1035                 for range in ${ranges}; do
1036                         dhcpd_subnet_range_read ${proto} ${subnet} ${range}
1037
1038                         cli_print $(( ${level} + 2 )) "%s - %s" ${START} ${END}
1039                 done
1040         else
1041                 cli_print $(( ${level} + 2 )) "No ranges have been defined."
1042         fi
1043
1044         cli_space
1045 }
1046
1047 cli_dhcpd_subnet_options() {
1048         assert [ $# -ge 2 ]
1049
1050         local proto=${1}
1051         local subnet=${2}
1052
1053         local key val
1054         while [ $# -gt 0 ]; do
1055                 case "${1}" in
1056                         *=*)
1057                                 key=$(cli_get_key ${1})
1058                                 val=$(cli_get_val "${1}")
1059
1060                                 dhcpd_subnet_option_set ${proto} ${subnet} ${key} ${val}
1061                 esac
1062                 shift
1063         done
1064 }
1065
1066 cli_start() {
1067         if cli_help_requested "$@"; then
1068                 cli_show_man network
1069                 exit ${EXIT_OK}
1070         fi
1071
1072         local zones=$(zones_get "$@")
1073
1074         local zone
1075         for zone in ${zones}; do
1076                 zone_start ${zone} &
1077         done
1078
1079         wait # until everything is settled
1080 }
1081
1082 cli_stop() {
1083         if cli_help_requested "$@"; then
1084                 cli_show_man network
1085                 exit ${EXIT_OK}
1086         fi
1087
1088         local zones=$(zones_get "$@")
1089
1090         local zone
1091         for zone in ${zones}; do
1092                 zone_stop ${zone} &
1093         done
1094
1095         wait # until everything is settled
1096 }
1097
1098 cli_restart() {
1099         if cli_help_requested "$@"; then
1100                 cli_show_man network
1101                 exit ${EXIT_OK}
1102         fi
1103
1104         cli_stop "$@"
1105
1106         # Give the system some time to calm down
1107         sleep ${TIMEOUT_RESTART}
1108
1109         cli_start "$@"
1110 }
1111
1112 cli_status() {
1113         if cli_help_requested "$@"; then
1114                 cli_show_man network
1115                 exit ${EXIT_OK}
1116         fi
1117
1118         # When dumping status information, the debug
1119         # mode clutters the console which is not what we want.
1120         # Logging on the console is disabled for a short time.
1121         local log_disable_stdout=${LOG_DISABLE_STDOUT}
1122         LOG_DISABLE_STDOUT="true"
1123
1124         local arguments=( $@ )
1125
1126         # Show all zones when no arguments are given
1127         if ! isset arguments; then
1128                 local zone
1129                 for zone in $(zones_get_all); do
1130                         zone_status "${zone}"
1131                 done
1132
1133                 return ${EXIT_OK}
1134         fi
1135
1136         local arg
1137         for arg in ${arguments[@]}; do
1138                 # Is this a zone?
1139                 if zone_exists "${arg}"; then
1140                         zone_status "${arg}"
1141
1142                 # Is this a port?
1143                 elif port_exists "${arg}"; then
1144                         port_status "${arg}"
1145
1146                 # Is this a PHY?
1147                 elif phy_exists "${arg}"; then
1148                         cli_device_status "${arg}"
1149
1150                 # Is this a device?
1151                 elif device_exists "${arg}"; then
1152                         cli_device_status "${arg}"
1153
1154                 # Unknown argument
1155                 else
1156                         error "Unknown argument: ${arg}"
1157                 fi
1158         done
1159
1160         # Reset logging.
1161         LOG_DISABLE_STDOUT=${log_disable_stdout}
1162 }
1163
1164 cli_reset() {
1165         if cli_help_requested "$@"; then
1166                 cli_show_man network
1167                 exit ${EXIT_OK}
1168         fi
1169
1170         warning_log "Will reset the whole network configuration!!!"
1171         # Force mode is disabled by default
1172         local force=0
1173
1174         while [ $# -gt 0 ]; do
1175                 case "${1}" in
1176                         --force|-f)
1177                                 force=1
1178                                 ;;
1179                 esac
1180                 shift
1181         done
1182
1183         # If we are not running in force mode, we ask the user if he does know
1184         # what he is doing.
1185         if ! enabled force; then
1186                 if ! cli_yesno "Do you really want to reset the whole network configuration?"; then
1187                         exit ${EXIT_ERROR}
1188                 fi
1189         fi
1190
1191         # Destroy all IPsec VPN connections
1192         local connection
1193         for connection in $(ipsec_list_connections); do
1194                 ipsec_connection_destroy "${connection}"
1195         done
1196
1197         local pool
1198         for pool in $(ipsec_list_pools); do
1199                 ipsec_pool_destroy "${pool}"
1200         done
1201
1202         # Stop strongswan
1203         ipsec_strongswan_autostart
1204
1205         # Destroy all user-defined security policies
1206         local secpol
1207         for secpol in $(vpn_security_policies_list_user); do
1208                 vpn_security_policies_destroy "${secpol}"
1209         done
1210
1211         local zone
1212         for zone in $(zones_get_all); do
1213                 zone_destroy "${zone}"
1214         done
1215
1216         local port
1217         for port in $(ports_get_all); do
1218                 port_destroy "${port}"
1219         done
1220
1221         # Flush all DNS servers.
1222         dns_server_flush
1223
1224         # Trigger udev to re-add all physical network devices
1225         cmd_quiet udevadm trigger --action=add --subsystem-match=net
1226
1227         exit ${EXIT_OK}
1228 }
1229
1230 # Help function: will show the default man page to the user.
1231 # Optionally, there are two arguments taken, the type of hook
1232 # and which hook should be shown.
1233 cli_help() {
1234         local cmd=${1}
1235         shift
1236
1237         case "${cmd}" in
1238                 zone|port|config)
1239                         local type=${cmd}
1240                         local hook=${1}
1241
1242                         # List all hooks if requested
1243                         if [ "${hook}" = "list-hooks" ]; then
1244                                 cli_list_hooks ${type}
1245                                 return ${EXIT_OK}
1246                         fi
1247
1248                         if ! hook_exists ${type} ${hook}; then
1249                                 error "No hook with name '${hook}' could be found"
1250                                 exit "${EXIT_ERROR}"
1251                         fi
1252
1253                         hook_exec ${type} ${hook} help
1254                         ;;
1255
1256                 # In all other cases show the default man page
1257                 *)
1258                         cli_show_man network
1259                         return ${EXIT_OK}
1260                         ;;
1261         esac
1262
1263         return ${EXIT_ERROR}
1264 }
1265
1266 cli_dns_server() {
1267         if cli_help_requested "$@"; then
1268                 cli_show_man network-dns-server
1269                 exit ${EXIT_OK}
1270         fi
1271
1272         # Get the command.
1273         local cmd=${1}; shift
1274         if [ -z "${cmd}" ]; then
1275                 cli_show_man network-dns-server
1276                 exit ${EXIT_ERROR}
1277         fi
1278
1279         # Get the new server to process (if any).
1280         local server=${1}
1281         local priority=${2}
1282
1283         case "${cmd}" in
1284                 list)
1285                         dns_server_show
1286                         exit ${EXIT_OK}
1287                         ;;
1288                 add)
1289                         if dns_server_exists ${server}; then
1290                                 error "DNS server '${server}' already exists!"
1291                                 exit ${EXIT_ERROR}
1292                         fi
1293
1294                         log INFO "Adding new DNS server: ${server}"
1295                         dns_server_add ${server} ${priority}
1296                         ;;
1297                 remove)
1298                         if ! dns_server_exists ${server}; then
1299                                 error "DNS server '${server}' does not exist!"
1300                                 exit ${EXIT_ERROR}
1301                         fi
1302
1303                         log INFO "Removing DNS server: ${server}"
1304                         dns_server_remove ${server} ${priority}
1305                         ;;
1306                 update)
1307                         # Just run the update afterwards.
1308                         ;;
1309                 *)
1310                         error "No such command: ${cmd}"
1311                         exit ${EXIT_ERROR}
1312         esac
1313
1314         # Update the local DNS configuration after changes have been made.
1315         dns_server_update
1316
1317         exit ${EXIT_OK}
1318 }
1319
1320 cli_raw() {
1321         local cmd="${1}"
1322         assert isset cmd
1323         shift
1324
1325         case "${cmd}" in
1326                 db-dump)
1327                         db_dump
1328                         ;;
1329                 device-get-by-mac-address)
1330                         device_get_by_mac_address "$@"
1331                         ;;
1332                 ipsec-connection-exists)
1333                         ipsec_connection_exists "$@"
1334                         ;;
1335                 list-devices)
1336                         device_list
1337                         ;;
1338                 list-dhcpd-ranges-of-subnet)
1339                         dhcpd_subnet_range_list "$@"
1340                         ;;
1341                 list-dhcpd-settings)
1342                         dhcpd_global_settings_list "$@"
1343                         ;;
1344                 list-dhcpd-subnets)
1345                         dhcpd_subnet_list "$@"
1346                         ;;
1347                 list-dhcpd-subnet-options)
1348                         dhcpd_subnet_options_list "$@"
1349                         ;;
1350                 list-dns-servers)
1351                         dns_server_list
1352                         ;;
1353                 list-free-ports)
1354                         port_list_free
1355                         ;;
1356                 list-hooks)
1357                         hook_list "$@"
1358                         ;;
1359                 list-ipsec-connections)
1360                         ipsec_list_connections
1361                         ;;
1362                 list-ports)
1363                         port_list
1364                         ;;
1365                 list-ports-of-zone)
1366                         zone_get_ports "$@"
1367                         ;;
1368                 list-vpn-security-policies-all)
1369                         vpn_security_policies_list_all
1370                         ;;
1371                 list-settings)
1372                         network_settings_list
1373                         ;;
1374                 list-zones)
1375                         zones_get_all
1376                         ;;
1377                 list-next-free-zones)
1378                         zones_get_next_free
1379                         ;;
1380                 list-zone-config-ids)
1381                         zone_config_list_ids "$@"
1382                         ;;
1383                 list-zone-config-hids)
1384                         zone_config_list_hids "$@"
1385                         ;;
1386                 vpn-security-policy-exists)
1387                         vpn_security_policy_exists "$@"
1388                         ;;
1389                 zone-name-is-valid)
1390                         zone_name_is_valid "$@"
1391                         ;;
1392                 zone-config-id-is-valid)
1393                         zone_config_id_is_valid "$@"
1394                         ;;
1395                 zone-config-hid-is-valid)
1396                         zone_config_hid_is_valid "$@"
1397                         ;;
1398                 *)
1399                         error "No such command: ${cmd}"
1400                         exit ${EXIT_ERROR}
1401                         ;;
1402         esac
1403
1404         exit ${EXIT_OK}
1405 }
1406
1407 # Process the given action
1408 case "${action}" in
1409         init)
1410                 # Update resolv.conf(5) when initializing the network
1411                 dns_generate_resolvconf
1412
1413                 # Also execute all triggers
1414                 triggers_execute_all "init"
1415                 ;;
1416
1417         settings|hostname|port|device|zone|start|stop|restart|status|reset|route|vpn|wireless)
1418                 cli_${action} "$@"
1419                 ;;
1420
1421         # DHCP server configuration (automatically detects which protocol to use).
1422         dhcpv6|dhcpv4)
1423                 cli_dhcpd ${action/dhcp/ip} "$@"
1424                 ;;
1425
1426         # DNS server configuration.
1427         dns-server)
1428                 cli_dns_server "$@"
1429                 ;;
1430
1431         ""|help|--help|-h)
1432                 cli_help "$@"
1433                 ;;
1434
1435         raw)
1436                 cli_raw "$@"
1437                 ;;
1438
1439         *)
1440                 error "Invalid command given: ${action}"
1441                 cli_usage "network help"
1442                 exit ${EXIT_CONF_ERROR}
1443                 ;;
1444 esac
1445
1446 exit ${EXIT_OK}