html/cgi-bin/zoneconf.cgi

   1 #!/usr/bin/perl
   2 ###############################################################################
   3 #                                                                             #
   4 # VLAN Management for IPFire                                                  #
   5 # Copyright (C) 2019 Florian Bührle <fbuehrle@ipfire.org>                     #
   6 #                                                                             #
   7 # This program is free software: you can redistribute it and/or modify        #
   8 # it under the terms of the GNU General Public License as published by        #
   9 # the Free Software Foundation, either version 3 of the License, or           #
  10 # (at your option) any later version.                                         #
  11 #                                                                             #
  12 # This program is distributed in the hope that it will be useful,             #
  13 # but WITHOUT ANY WARRANTY; without even the implied warranty of              #
  14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
  15 # GNU General Public License for more details.                                #
  16 #                                                                             #
  17 # You should have received a copy of the GNU General Public License           #
  18 # along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
  19 #                                                                             #
  20 ###############################################################################
  21
  22 use strict;
  23 use Scalar::Util qw(looks_like_number);
  24
  25 require '/var/ipfire/general-functions.pl';
  26 require "${General::swroot}/lang.pl";
  27 require "${General::swroot}/header.pl";
  28
  29 my $css = <<END
  30 <style>
  31         table {
  32                 width: 100%;
  33                 border-collapse: collapse;
  34                 table-layout: fixed;
  35         }
  36
  37         tr {
  38                 height: 4em;
  39         }
  40
  41         tr.thin {
  42                 height: 3em;
  43         }
  44
  45         td.narrow {
  46                 width: 11em;
  47         }
  48
  49         td {
  50                 padding: 5px;
  51                 padding-left: 10px;
  52                 padding-right: 10px;
  53                 border: 0.5px solid black;
  54         }
  55
  56         td.slightlygrey {
  57                 background-color: #F0F0F0;
  58         }
  59
  60         td.h {
  61                 background-color: grey;
  62                 color: white;
  63                 font-weight: 800;
  64         }
  65
  66         td.green {
  67                 background-color: $Header::colourgreen;
  68         }
  69
  70         td.red {
  71                 background-color: $Header::colourred;
  72         }
  73
  74         td.blue {
  75                 background-color: $Header::colourblue;
  76         }
  77
  78         td.orange {
  79                 background-color: $Header::colourorange;
  80         }
  81
  82         td.topleft {
  83                 background-color: white;
  84                 border-top-style: none;
  85                 border-left-style: none;
  86         }
  87
  88         td.disabled {
  89                 background-color: #cccccc;
  90         }
  91
  92         td.textcenter {
  93                 text-align: center;
  94         }
  95
  96         input.vlanid {
  97                 width: 4em;
  98         }
  99
 100         #submit-container {
 101                 width: 100%;
 102                 padding-top: 20px;
 103                 text-align: right;
 104                 color: red;
 105         }
 106
 107         #submit-container.input {
 108                 margin-left: auto;
 109         }
 110
 111         button {
 112                 margin-top: 1em;
 113         }
 114 </style>
 115 END
 116 ;
 117
 118 my %ethsettings = ();
 119 my %vlansettings = ();
 120 my %cgiparams = ();
 121
 122 my $restart_notice = "";
 123
 124 &General::readhash("${General::swroot}/ethernet/settings",\%ethsettings);
 125 &General::readhash("${General::swroot}/ethernet/vlans",\%vlansettings);
 126
 127 &Header::getcgihash(\%cgiparams);
 128 &Header::showhttpheaders();
 129
 130 # Define all zones we will check for NIC assignment
 131 my @zones = ("green", "red", "orange", "blue");
 132
 133 # Get all physical NICs present
 134 opendir(my $dh, "/sys/class/net/");
 135 my @nics = ();
 136
 137 while (my $nic = readdir($dh)) {
 138         if (-e "/sys/class/net/$nic/device") { # Indicates that the NIC is physical
 139                 push(@nics, [&Network::get_nic_property($nic, "address"), $nic, 0]);
 140         }
 141 }
 142
 143 closedir($dh);
 144
 145 @nics = sort {$a->[0] cmp $b->[0]} @nics; # Sort nics by their MAC address
 146
 147 # Name the physical NICs
 148 # Even though they may not be really named like this, we will name them ethX or wlanX
 149 my $ethcount = 0;
 150 my $wlancount = 0;
 151
 152 foreach (@nics) {
 153         my $nic = $_->[1];
 154
 155         if (-e "/sys/class/net/$nic/wireless") {
 156                 $_->[1] = "wlan$wlancount";
 157                 $_->[2] = 1;
 158                 $wlancount++;
 159         } else {
 160                 $_->[1] = "eth$ethcount";
 161                 $ethcount++;
 162         }
 163 }
 164
 165 &Header::openpage($Lang::tr{"zoneconf title"}, 1, $css);
 166 &Header::openbigbox('100%', 'center');
 167
 168 ### Evaluate POST parameters ###
 169
 170 if ($cgiparams{"ACTION"} eq $Lang::tr{"save"}) {
 171         my %VALIDATE_nic_check = ();
 172         my $VALIDATE_error = "";
 173
 174         foreach (@zones) {
 175                 my $uc = uc $_;
 176                 my $slave_string = "";
 177                 my $zone_mode = $cgiparams{"MODE $uc"};
 178                 my $VALIDATE_vlancount = 0;
 179                 my $VALIDATE_zoneslaves = 0;
 180
 181                 $ethsettings{"${uc}_MACADDR"} = "";
 182                 $ethsettings{"${uc}_MODE"} = "";
 183                 $ethsettings{"${uc}_SLAVES"} = "";
 184                 $vlansettings{"${uc}_PARENT_DEV"} = "";
 185                 $vlansettings{"${uc}_VLAN_ID"} = "";
 186                 $vlansettings{"${uc}_MAC_ADDRESS"} = "";
 187
 188                 # If RED is not in DHCP or static mode, we only set its MACADDR property
 189                 if ($uc eq "RED" && ! $cgiparams{"PPPACCESS"} eq "") {
 190                         foreach (@nics) {
 191                                 my $mac = $_->[0];
 192
 193                                 if ($mac eq $cgiparams{"PPPACCESS"}) {
 194                                         $ethsettings{"${uc}_MACADDR"} = $mac;
 195
 196                                         # Check if this interface is already accessed by any other zone
 197                                         # If this is the case, show an error message
 198                                         if ($VALIDATE_nic_check{"ACC $mac"}) {
 199                                                 $VALIDATE_error = $Lang::tr{"zoneconf val ppp assignment error"};
 200                                         }
 201
 202                                         $VALIDATE_nic_check{"RESTRICT $mac"} = 1;
 203                                         last;
 204                                 }
 205                         }
 206
 207                         next;
 208                 }
 209
 210                 foreach (@nics) {
 211                         my $mac = $_->[0];
 212                         my $nic_access = $cgiparams{"ACCESS $uc $mac"};
 213
 214                         if ($nic_access ne "NONE") {
 215                                 if ($VALIDATE_nic_check{"RESTRICT $mac"}) { # If this interface is already assigned to RED in PPP mode, throw an error
 216                                         $VALIDATE_error = $Lang::tr{"zoneconf val ppp assignment error"};
 217                                         last;
 218                                 }
 219
 220                                 if ($zone_mode ne "BRIDGE" && $VALIDATE_zoneslaves > 0 && $nic_access ne "") {
 221                                         $VALIDATE_error = $Lang::tr{"zoneconf val zoneslave amount error"};
 222                                         last;
 223                                 }
 224
 225                                 $VALIDATE_nic_check{"ACC $mac"} = 1;
 226                                 $VALIDATE_zoneslaves++;
 227                         }
 228
 229                         if ($nic_access eq "NATIVE") {
 230                                 if ($VALIDATE_nic_check{"NATIVE $mac"}) {
 231                                         $VALIDATE_error = $Lang::tr{"zoneconf val native assignment error"};
 232                                         last;
 233                                 }
 234
 235                                 $VALIDATE_nic_check{"NATIVE $mac"} = 1;
 236
 237                                 if ($zone_mode eq "BRIDGE") {
 238                                         $slave_string = "${slave_string}${mac} ";
 239                                 } else {
 240                                         $ethsettings{"${uc}_MACADDR"} = $mac;
 241                                 }
 242                         } elsif ($nic_access eq "VLAN") {
 243                                 my $vlan_tag = $cgiparams{"TAG $uc $mac"};
 244
 245                                 if ($VALIDATE_nic_check{"VLAN $mac $vlan_tag"}) {
 246                                         $VALIDATE_error = $Lang::tr{"zoneconf val vlan tag assignment error"};
 247                                         last;
 248                                 }
 249
 250                                 $VALIDATE_nic_check{"VLAN $mac $vlan_tag"} = 1;
 251
 252                                 if (! looks_like_number($vlan_tag)) {
 253                                         last;
 254                                 }
 255                                 if ($vlan_tag < 1 || $vlan_tag > 4095) {
 256                                         last;
 257                                 }
 258
 259                                 my $rnd_mac = &Network::random_mac();
 260
 261                                 $vlansettings{"${uc}_PARENT_DEV"} = $mac;
 262                                 $vlansettings{"${uc}_VLAN_ID"} = $vlan_tag;
 263                                 $vlansettings{"${uc}_MAC_ADDRESS"} = $rnd_mac;
 264
 265                                 if ($zone_mode eq "BRIDGE") {
 266                                         $slave_string = "${slave_string}${rnd_mac} ";
 267                                 }
 268
 269                                 $VALIDATE_vlancount++; # We can't allow more than one VLAN per zone
 270                         }
 271                 }
 272
 273                 if ($VALIDATE_vlancount > 1) {
 274                         $VALIDATE_error = $Lang::tr{"zoneconf val vlan amount assignment error"};
 275                         last;
 276                 }
 277
 278                 chop($slave_string);
 279
 280                 if ($zone_mode eq "BRIDGE") {
 281                         $ethsettings{"${uc}_MODE"} = "bridge";
 282                         $ethsettings{"${uc}_SLAVES"} = $slave_string;
 283                 } elsif ($zone_mode eq "MACVTAP") {
 284                         $ethsettings{"${uc}_MODE"} = "macvtap";
 285                 }
 286         }
 287
 288         if ($VALIDATE_error) {
 289                 &Header::openbox('100%', 'left', $Lang::tr{"error"});
 290
 291                 print "$VALIDATE_error<br><a href='/cgi-bin/zoneconf.cgi'><button>$Lang::tr{'ok'}</button></a>";
 292
 293                 &Header::closebox();
 294                 &Header::closebigbox();
 295                 &Header::closepage();
 296
 297                 exit 0;
 298         }
 299
 300         &General::writehash("${General::swroot}/ethernet/settings",\%ethsettings);
 301         &General::writehash("${General::swroot}/ethernet/vlans",\%vlansettings);
 302
 303         $restart_notice = $Lang::tr{'zoneconf notice reboot'};
 304 }
 305
 306 &Header::openbox('100%', 'left', $Lang::tr{"zoneconf nic assignment"});
 307
 308 ### START OF TABLE ###
 309
 310 print <<END
 311 <form method='post' enctype='multipart/form-data'>
 312         <table>
 313                 <tr>
 314                 <td class="h narrow topleft" /td>
 315 END
 316 ;
 317
 318 # Fill the table header with all activated zones
 319 foreach (@zones) {
 320         my $uc = uc $_;
 321         my $dev_name = $ethsettings{"${uc}_DEV"};
 322
 323         if ($dev_name eq "") { # If the zone is not activated, don't show it
 324                 next;
 325         }
 326
 327         # If the zone is in PPP mode, don't show a mode dropdown
 328         if ($uc eq "RED") {
 329                 my $red_type = $ethsettings{"RED_TYPE"};
 330                 my $red_restricted = ($uc eq "RED" && ! ($red_type eq "STATIC" || $red_type eq "DHCP"));
 331
 332                 if ($red_restricted) {
 333                         print "<td class='h textcenter $_'>$uc ($red_type)</td>";
 334
 335                         next; # We're done here
 336                 }
 337         }
 338
 339         my %mode_selected = ();
 340         my $zone_mode = $ethsettings{"${uc}_MODE"};
 341
 342         if ($zone_mode eq "") {
 343                 $mode_selected{"DEFAULT"} = "selected";
 344         } elsif ($zone_mode eq "bridge") {
 345                 $mode_selected{"BRIDGE"} = "selected";
 346         } elsif ($zone_mode eq "macvtap") {
 347                 $mode_selected{"MACVTAP"} = "selected";
 348         }
 349
 350         print <<END
 351                 <td class='h textcenter $_'>$uc</br>
 352                         <select name="MODE $uc">
 353                                 <option value="DEFAULT" $mode_selected{"DEFAULT"}>$Lang::tr{"zoneconf nicmode default"}</option>
 354                                 <option value="BRIDGE" $mode_selected{"BRIDGE"}>$Lang::tr{"zoneconf nicmode bridge"}</option>
 355                                 <option value="MACVTAP" $mode_selected{"MACVTAP"}>$Lang::tr{"zoneconf nicmode macvtap"}</option>
 356                         </select>
 357                 </td>
 358 END
 359 ;
 360 }
 361
 362 print "</tr>";
 363
 364 my $slightlygrey = "";
 365
 366 foreach (@nics) {
 367         my $mac = $_->[0];
 368         my $nic = $_->[1];
 369         my $wlan = $_->[2];
 370
 371         print "<tr><td class='h narrow textcenter'>$nic<br>$mac</td>";
 372
 373         # Iterate through all zones and check if the current NIC is assigned to it
 374         foreach (@zones) {
 375                 my $uc = uc $_;
 376                 my $dev_name = $ethsettings{"${uc}_DEV"};
 377
 378                 if ($dev_name eq "") { # Again, skip the zone if it is not activated
 379                         next;
 380                 }
 381
 382                 if ($uc eq "RED") {
 383                         my $red_type = $ethsettings{"RED_TYPE"};
 384                         my $red_restricted = ($uc eq "RED" && ! ($red_type eq "STATIC" || $red_type eq "DHCP"));
 385
 386                         # VLANs/Bridging is not possible if the RED interface is set to PPP, PPPoE, VDSL, ...
 387                         if ($red_restricted) {
 388                                 my $checked = "";
 389
 390                                 if ($mac eq $ethsettings{"${uc}_MACADDR"}) {
 391                                         $checked = "checked";
 392                                 }
 393
 394                                 print "<td class='textcenter $slightlygrey'><input type='radio' id='PPPACCESS $mac' name='PPPACCESS' value='$mac' $checked></td>";
 395                                 next; # We're done here
 396                         }
 397                 }
 398
 399                 my %access_selected = ();
 400                 my $zone_mode = $ethsettings{"${uc}_MODE"};
 401                 my $zone_parent_dev = $vlansettings{"${uc}_PARENT_DEV"};  # ZONE_PARENT_DEV is set if this zone accesses any interface via a VLAN
 402                 my $field_disabled = "disabled"; # Only enable the VLAN ID input field if the current access mode is VLAN
 403                 my $zone_vlan_id = "";
 404
 405                 # If ZONE_PARENT_DEV is set to a NICs name (e.g. green0 or eth0) instead of a MAC address, we have to find out this NICs MAC address
 406                 $zone_parent_dev = &Network::get_mac_by_name($zone_parent_dev);
 407
 408                 # If the current NIC is accessed by the current zone via a VLAN, the ZONE_PARENT_DEV option corresponds to the current NIC
 409                 if ($mac eq $zone_parent_dev) {
 410                         $access_selected{"VLAN"} = "selected";
 411                         $field_disabled = "";
 412                         $zone_vlan_id = $vlansettings{"${uc}_VLAN_ID"};
 413                 } elsif ($zone_mode eq "bridge") { # If the current zone is in bridge mode, all corresponding NICs (Native as well as VLAN) are set via the ZONE_SLAVES option
 414                         my @slaves = split(/ /, $ethsettings{"${uc}_SLAVES"});
 415
 416                         foreach (@slaves) {
 417                                 # Slaves can be set to a NICs name so we have to find out its MAC address
 418                                 $_ = &Network::get_mac_by_name($_);
 419
 420                                 if ($_ eq $mac) {
 421                                         $access_selected{"NATIVE"} = "selected";
 422                                         last;
 423                                 }
 424                         }
 425                 } elsif ($mac eq $ethsettings{"${uc}_MACADDR"}) { # Native access via ZONE_MACADDR is only set if the zone does not access a NIC via a VLAN and the zone is not in bridge mode
 426                         $access_selected{"NATIVE"} = "selected";
 427                 }
 428
 429                 $access_selected{"NONE"} = ($access_selected{"NATIVE"} eq "") && ($access_selected{"VLAN"} eq "") ? "selected" : "";
 430                 my $vlan_disabled = ($wlan) ? "disabled" : "";
 431
 432                 print <<END
 433                         <td class="textcenter $slightlygrey">
 434                                 <select name="ACCESS $uc $mac" onchange="document.getElementById('TAG $uc $mac').disabled = (this.value === 'VLAN' ? false : true)">
 435                                         <option value="NONE" $access_selected{"NONE"}>- $Lang::tr{"zoneconf access none"} -</option>
 436                                         <option value="NATIVE" $access_selected{"NATIVE"}>$Lang::tr{"zoneconf access native"}</option>
 437                                         <option value="VLAN" $access_selected{"VLAN"} $vlan_disabled>$Lang::tr{"zoneconf access vlan"}</option>
 438                                 </select>
 439                                 <input type="number" class="vlanid" id="TAG $uc $mac" name="TAG $uc $mac" min="1" max="4095" value="$zone_vlan_id" $field_disabled>
 440                         </td>
 441 END
 442 ;
 443         }
 444
 445         print "</tr>";
 446
 447         if ($slightlygrey) {
 448                 $slightlygrey = "";
 449         } else {
 450                 $slightlygrey = "slightlygrey";
 451         }
 452 }
 453
 454 print <<END
 455         </table>
 456
 457         <div id="submit-container">
 458                 $restart_notice
 459                 <input type="submit" name="ACTION" value="$Lang::tr{"save"}">
 460         </div>
 461 </form>
 462 END
 463 ;
 464
 465 ### END OF TABLE ###
 466
 467 &Header::closebox();
 468 &Header::closebigbox();
 469 &Header::closepage();