ports: Drop HOOK_SETTINGS variable

This does not need to be passed to the port_settings_* functions
any more which makes them more easy to use

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

settings: Some code refactoring

No functional changes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Convert HOOK_SETTINGS into an array

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hooks: Import zone default settings, too

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hooks: Automatically set defaults for all port hooks

Before, this was broken so that all configuration parameters
had to be passed all the time.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hostapd: Enable WPA authentication with SHA256

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireless-ap: Automatically enable all supported ciphers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hostapd: Dump config file in debug mode

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Move cli_device_status_phy() to functions.phy

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

network: Show when a PHY supports ACS

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireless-ap: Allow to enable/disable 802.11w Management Frame Protection

This is disabled by default, because loads of stations have issues
associating with an AP that has 802.11w enabled.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hostapd: Always qoute SSID

hostapd has a new parameter that always allows us to set
the SSID as a quoted UTF8 string

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hostapd: Kick stations that are too far away

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hostapd: Set default WMM settings

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hostapd: Always enable Transmit Power Control

Also advertise this to clients

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hostapd: Remove now useless comment

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireless-ap: Allow setting the wireless environment (indoor/outdoor)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireless-ap: Enable ACS only for ath* devices

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hostapd: Apply channel bandwidth to configuration

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireless-ap: Forgot to add configuration variables to file

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireless-ap: Add CLI to set channel bandwidth

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hostapd: Disable DFS automatically when not supported by hardware

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireless-ap: Allow to disable DFS in configuration

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireless-ap: Use automatic channel selection (ACS) by default

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dns: Always enable EDNS0

This is for all DNS queries originating from the firewall.

Since we have had DNS Flag Day, we are expecting all DNS servers
to support this now. If not, then you are very unlucky.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bird: (Re-)generate configuration when network is initialised

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bird: Apply static routes instead of doing that manually with ip

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bird: Add some generic configuration file

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ip-tunnel: Set TTL to 255 by default

By default, the Linux kernel inherits the TTL of the transported
packet. Usually with BGP, the TTL is deliberately set to 1 or very
low numbers which causes the packet to be dropped after the first
hop.

Since the tunnel should be routed, we set this to a default value
of 255 and ignore the TTL of the encapsulated packet.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bonding; Validate any MAC address passed

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Remove unused function

Fixes: #11423
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bridge: Add option to missing --stp-max-age=

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bridge: Order arguments in alphabetical order

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bridge: Set proper defaults

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bridge: Reorder functions into the common order

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bridge: Fix assertion for MTU

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bridge: Check input and return useful errors

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Bump version to 011

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Bump version to 010

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ipsec: security policies: system: Order by complexity

strongswan uses the cipher suites in the order as listed by first
match instead of complexity. This patch re-orders them so that
maximum complexity is tried first and everything else after.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ipsec: Set traffic selectors to all when using GRE/VTI devices

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

port: ip-tunnel: Allow to set MAC address

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ports: Use default port pattern for all ports

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ip-tunnel: New port hook

This allows to create layer-2 tunnels using the GRETAP protocol

Fixes: #11608
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ip-tunnel: Add support for GRETAP tunnels

Fixes: 11608
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hotplug: Do not attempt to rename any devices with an invalid MAC address

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Do not allow to create ethernet devices with an invalid MAC address

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

network-hotplug: Try to use fewer checks when deleting a device

This code basically does the same but runs fewer checks to
find the right device type

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hotplug: Handle special devices by name only

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hotplug: Do not attempt to remove the special ip6gre0 device

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hotplug: Do not attempt to remove special device ip_vti0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hotplug: Don't try to remove gre0

This device cannot be removed

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Drop unused function: device_is_ipsec

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

device: Refactor check for device type

There is now one implementation for various types of devices

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Cleanup code that deletes ports/zones

This is used for network reset and it wasn't clear
before if the command were successful

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hotplug: Ignore all PPP interfaces

Those will come up when a PPP session is being established
with the pppoe-server.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

lock: Accept names instead of paths

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

util: Parse command line correctly when running commands

Before, empty arguments where just dropped

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pppoe-server: Remove line to enable kernel mode

This is enabled anyways since it is the only mode
we are supporting right now.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pppoe-server: Refactor pppoe_server_poolfile

Due to output of other functions changed, this function
needed to be slightly rewritten.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ipv4: Fix ipv4_range_explicit function

Inputs where not converted correctly and therefore
the function returned an invalid output.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Remove debugging line

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireless: Try to automatically enable HT40+/- on devices that support it

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

copy: Automatically create target directory when copying files

Fixes: #11663
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libnetwork: Add function to check if a PHY supports a specific channel

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Show driver name in device status

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

colors: Fix length of LISTENING label

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hotplug: Let bridges create their ports in hotplug event

This patch changes that all ports are being created in the
hotplug event and allows us to start bridges at any time
with ports existing or being added later.

Fixes: #11360
Signed-off-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

boot: Fix bringing up zones when system is booting

An incorrect target was required and no zone was brought
up during boot.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

util: Fail silently when directory already exists

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

colors: Remove extra space character in BLOCKING msg

This message was not properly aligned

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Move creating port configurations into network-hotplug-rename

This script is now actually creating a new configuration while
it is holding the lock.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Refactor network-hotplug-rename

This is now using a new locking mechanism that is working
faster and more reliable then looping for forever.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

port: ethernet: Correctly create new configurations

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ports: Fix saving HOOK name

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Refactor hotplug script

This script is doing the same as before, but has been refactored
to be cleaner and faster.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

hotplug: Continue running through script for ipsec devices

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

zones: Drop unused commands

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Extend "network status"

This now takes ports, devices and PHYs and prints the appropriate
status.

This is very handy and just a shortcut.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Speed up device_list() by removing the alphabetical sort

We are now returning all devices, then all PHYs, then all
serial devices.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Fix generating device_list()

It was returning values like bonding_masters which are not
an actual device.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Validate input for --offloading flag and throw an error when empty

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ports: ethernet+bonding: Allow to disable all offloading

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Move offloading code into an own file

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Add support for hardware offloading

Hardware offloading will now be enabled on physical
and bonding devices automatically.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Move DEFAULT_MTU to constants

This is where it belongs

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ipsec: Rewrite adding routes script

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

constants: Remove unused BATMAN variable

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

port: ethernet: Use combined setting for advertised link speeds

This patch removes the speed and duplex settings and replaces them
with a configuration option that allows to change advertised link
speeds to a certain speed.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

port: ethernet: Allow setting duplex mode

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

port: ethernet: Allow setting link speed

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

port: ethernet: Bring back accidentially dropped hook_create function

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

port: ethernet: Return OK only to rename ports

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

port: ethernet: Use default hook_new() function

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

header-port: Start with empty set of settings

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

port: ethernet: Allow setting the MTU

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Restart ports after edit to apply settings

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

header-port: Print errors if config could not be read/written

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ports: ethernet: Allow changing MAC address

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Add support for LEDs

This patch configures LEDs on some Wireless PHYs to flash
on activity. This makes debugging easier.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>