]>
git.ipfire.org Git - people/pmueller/ipfire-2.x.git/blob - src/initscripts/networking/red
2 ###############################################################################
4 # IPFire.org - A linux based firewall #
5 # Copyright (C) 2007-2022 IPFire Team <info@ipfire.org> #
7 # This program is free software: you can redistribute it and/or modify #
8 # it under the terms of the GNU General Public License as published by #
9 # the Free Software Foundation, either version 3 of the License, or #
10 # (at your option) any later version. #
12 # This program is distributed in the hope that it will be useful, #
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
15 # GNU General Public License for more details. #
17 # You should have received a copy of the GNU General Public License #
18 # along with this program. If not, see <http://www.gnu.org/licenses/>. #
20 ###############################################################################
24 .
/etc
/init.d
/networking
/functions.network
31 eval $
(/usr
/local
/bin
/readhash
/var
/ipfire
/main
/settings
)
32 if [ "$RRDLOG" == "" ]; then
36 eval $
(/usr
/local
/bin
/readhash
/var
/ipfire
/ethernet
/settings
)
37 eval $
(/usr
/local
/bin
/readhash
/var
/ipfire
/dns
/settings
)
38 eval $
(/usr
/local
/bin
/readhash
/var
/ipfire
/mac
/settings
)
41 MAC1
=$
(tr - : <<<$MAC1)
42 MAC2
=$
(tr - : <<<$MAC2)
47 if [ "$TYPE" == "STATIC" ] ||
[ "$TYPE" == "DHCP" ]; then
48 if [ "$DEVICE" == "" ]; then
49 boot_mesg
"No device for red network. Please run setup." ${FAILURE}
51 [ "${1}" == "start" ] && exit 0
55 if [ "${TYPE}" == "STATIC" ]; then
56 if [ "${DEVICE}" != "${GREEN_DEV}" ]; then
57 ADDRESS
="${RED_ADDRESS}"
58 NETADDRESS
="${RED_NETADDRESS}"
59 NETMASK
="${RED_NETMASK}"
62 ADDRESS
="${GREEN_ADDRESS}"
63 NETADDRESS
="${GREEN_NETADDRESS}"
64 NETMASK
="${GREEN_NETMASK}"
67 GATEWAY
="${DEFAULT_GATEWAY}"
71 if [ -n "${ADDRESS}" -a -n "${NETMASK}" ]; then
72 PREFIX
=`whatmask ${NETMASK} | grep -e ^CIDR | awk -F': ' '{ print $2 }' | cut -c 2-`
73 args
="${args} ${ADDRESS}/${PREFIX}"
75 boot_mesg
"ADDRESS and/or NETMASK variable missing from input, cannot continue." ${FAILURE}
83 # Remove possible leftover files
84 rm -f /var
/ipfire
/red
/{active
,device
,dial-on-demand
,dns1
,dns2
,local-ipaddress
,remote-ipaddress
,resolv.conf
}
86 if [ "${DEVICE}" != "${GREEN_DEV}" ] && [ "${DEVICE}" != "" ]; then
87 boot_mesg
"Bringing up the ${DEVICE} interface..."
89 # Check if an interface is there...
90 if ip link show
${DEVICE} > /dev
/null
2>&1; then
91 link_status
=`ip link show ${DEVICE} 2> /dev/null`
92 if [ -n "${link_status}" ]; then
93 if ! echo "${link_status}" |
grep -q UP
; then
94 if [ -n "$MAC" ]; then
95 boot_mesg
"Setting mac address on ${DEVICE} to ${MAC}"
96 ip link
set dev
${DEVICE} address
${MAC}
99 ip link
set ${DEVICE} up
103 boot_mesg
"Interface ${DEVICE} doesn't exist." ${FAILURE}
109 if [ "${TYPE}" == "STATIC" ]; then
111 if [ -n "${MTU}" ]; then
112 if ! ip link
set dev
"${DEVICE}" mtu
"${MTU}" &>/dev
/null
; then
113 boot_mesg
"Could not set MTU of ${MTU} to ${DEVICE}..."
118 if [ "$DEVICE" != "${GREEN_DEV}" ]; then
119 boot_mesg
"Adding IPv4 address ${ADDRESS} to the ${DEVICE} interface..."
120 ip addr add
${args} dev
${DEVICE}
123 echo -n "${DEVICE}" > /var
/ipfire
/red
/iface
124 echo -n "${ADDRESS}" > /var
/ipfire
/red
/local-ipaddress
125 echo -n "${GATEWAY}" > /var
/ipfire
/red
/remote-ipaddress
126 grep -v -E "\<gateway\>" /etc
/hosts
> /tmp
/hosts
127 echo "$GATEWAY gateway" >> /tmp
/hosts
128 mv /tmp
/hosts
/etc
/hosts
129 touch /var
/ipfire
/red
/active
131 # Create route to default gateway
132 ip route add
${GATEWAY} dev
${DEVICE}
134 boot_mesg
"Setting up default gateway ${GATEWAY}..."
135 ip route add default via
${GATEWAY} dev
${DEVICE}
138 if [ -d "/sys/class/net/${DEVICE}" ]; then
140 if [ ! "$(</sys/class/net/${DEVICE}/carrier)" = "1" ]; then
141 boot_mesg
-n "Wait for carrier on ${DEVICE} "
142 for (( i
=30; i
>1; i--
)) do
143 if [ "$(</sys/class/net/${DEVICE}/carrier)" = "1" ]; then
150 if [ ! "$(</sys/class/net/${DEVICE}/carrier)" = "1" ]; then
158 run_subdir
${rc_base}/init.d
/networking
/red.up
/
160 # Configure aliases only if red static
161 /usr
/local
/bin
/setaliases
163 elif [ "${TYPE}" == "DHCP" ]; then
164 # Add firewall rules to allow comunication with the dhcp server on red.
165 iptables
-A REDINPUT
-p tcp
--source-port 67 --destination-port 68 -i ${DEVICE} -j ACCEPT
166 iptables
-A REDINPUT
-p udp
--source-port 67 --destination-port 68 -i ${DEVICE} -j ACCEPT
168 echo -n "${DEVICE}" > /var
/ipfire
/red
/iface
170 # Check if the wlan-client is used on red.
171 # To determine this we check if a wpa_supplicant is running.
172 pid
="$(pidof wpa_supplicant)"
174 if [ -z "${pid}" ]; then
175 # No wpa_supplicant is running. So it's save to start dhcpcd.
176 dhcpcd_start
"${DEVICE}"
179 elif [ "$TYPE" == "PPPOE" ]; then
181 if ( ps ax |
grep -q [p
]ppd
); then
182 boot_mesg
"pppd is still running." ${FAILURE}
187 eval $
(/usr
/local
/bin
/readhash
/var
/ipfire
/ppp
/settings
)
189 [ -c "/dev/ppp" ] || mknod
/dev
/ppp c
108 0
191 # We force the plugin method, anyway.
192 METHOD
="PPPOE_PLUGIN"
196 if [ "$TYPE" == "pppoeatm" ] ||
[ "$TYPE" == "pptpatm" ]; then
197 PPP_NIC
=nas
${ATM_DEV}
199 boot_mesg
"Creating ATM-Bridge as $PPP_NIC ..."
200 br2684ctl
-c${ATM_DEV} -e${ENCAP} -a${ATM_DEV}.${VPI}.${VCI} >/dev
/null
2>&1 &
203 # use user-defined or green mac address for nas0
204 if [ -n "$MAC" ]; then
205 ip link
set dev nas
${ATM_DEV} address
${MAC}
207 ip link
set dev nas
${ATM_DEV} address $
(cat /sys
/class
/net
/green
0/address
)
210 if [ "$TYPE" == "pppoeatm" ]; then
213 if [ "$TYPE" == "pptpatm" ]; then
218 elif [ "$TYPE" = "qmi" ]; then
219 DEVICE
="$(qmi_find_device "${RED_DEV}")"
221 boot_mesg
"Bringing up QMI on ${RED_DEV} (${DEVICE})..."
224 qmi_enable_rawip_mode
"${RED_DEV}"
227 qmi_configure_apn
"${DEVICE}" "${APN}" "${AUTH}" "${USERNAME}" "${PASSWORD}"
229 # Set up the interface
230 ip link
set "${RED_DEV}" up
&>/dev
/null
232 # Write red device name to the corresponding file.
233 echo -n "${RED_DEV}" > /var
/ipfire
/red
/iface
235 # Start the DHCP client
236 dhcpcd_start
"${RED_DEV}" --dhcp
242 if [ "$TYPE" == "vdsl" ]; then
243 boot_mesg
"Creating VLAN Interface ${DEVICE}.${INET_VLAN} ..."
245 vconfig add
${DEVICE} ${INET_VLAN}
246 if [ -n "$MAC1" ]; then
247 boot_mesg
"Setting mac address on ${DEVICE}.${INET_VLAN} to ${MAC1}"
248 ip link
set dev
${DEVICE}.${INET_VLAN} address ${MAC1}
251 PPP_NIC
=${DEVICE}.
${INET_VLAN}
253 ip link
set ${PPP_NIC} up
256 if [ "${IPTV}" == "enable" ]; then
257 PIDFILE
="/var/run/dhcpcd/${DEVICE}.${IPTV_VLAN}.pid"
258 LEASEINFO
="/var/ipfire/dhcpc/dhcpcd-${DEVICE}.${IPTV_VLAN}.info"
259 # Test to see if there is a stale pid file
260 if [ -f "$PIDFILE" ]; then
261 ps
`cat "$PIDFILE"` |
grep dhcpcd
> /dev
/null
263 rm -f /var
/run
/dhcpcd
/${DEVICE}.
${IPTV_VLAN}.pid
> /dev
/null
267 if [ ! -f "$PIDFILE" ]; then
268 boot_mesg
"Creating VLAN Interface ${DEVICE}.${IPTV_VLAN} ..."
270 vconfig add
${DEVICE} ${IPTV_VLAN}
271 if [ -n "$MAC2" ]; then
272 boot_mesg
"Setting mac address on ${DEVICE}.${IPTV_VLAN} to ${MAC2}"
273 ip link
set dev
${DEVICE}.${IPTV_VLAN} address ${MAC2}
276 boot_mesg
-n "Starting dhcpcd on the ${DEVICE}.${IPTV_VLAN} interface..."
277 /sbin
/dhcpcd
${DEVICE}.${IPTV_VLAN} ${DHCP_START} >/dev
/null
2>&1
280 if [ "$RET" = "0" ]; then
281 .
/var
/ipfire
/dhcpc
/dhcpcd-
${DEVICE}.
${IPTV_VLAN}.info
284 boot_mesg
" DHCP Assigned Settings for ${DEVICE}.${IPTV_VLAN}:"
286 boot_mesg
" IP Address: $ip_address"
288 boot_mesg
" Hostname: $RED_DHCP_HOSTNAME"
290 boot_mesg
" Subnet Mask: $subnet_mask"
292 boot_mesg
" Default Gateway: $routers"
294 boot_mesg
" DNS Server: $domain_name_servers"
304 if [ "$TYPE" == "pppoe" ] ||
[ "$TYPE" == "pptp" ]; then
305 if [ "$PPP_NIC" == "" ]; then
306 boot_mesg
"No device for red interface given. Check netsetup or dialprofile!" ${FAILURE}
310 boot_mesg
"Bringing up the $TYPE interface on $PPP_NIC ..."
311 ip addr flush dev
$PPP_NIC >/dev
/null
2>&1
312 if [ "$TYPE" == "pptp" ]; then
313 if [ "$PPTP_NICCFG" == "dhcp" ]; then
314 # Test to see if there is a stale pid file
315 if [ -f "$PIDFILE" ]; then
316 ps
`cat "$PIDFILE"` |
grep dhcpcd
> /dev
/null
318 rm -f /var
/run
/dhcpcd
/${DEVICE}.pid
> /dev
/null
322 if [ ! -f "$PIDFILE" ]; then
323 boot_mesg
-n "Starting dhcpcd on the ${DEVICE} interface..."
324 /sbin
/dhcpcd
${DEVICE} ${DHCP_START} >/dev
/null
2>&1
327 if [ "$RET" = "0" ]; then
328 .
/var
/ipfire
/dhcpc
/dhcpcd-
${DEVICE}.info
331 boot_mesg
" DHCP Assigned Settings for ${DEVICE}:"
333 boot_mesg
" IP Address: $ip_address"
335 boot_mesg
" Hostname: $RED_DHCP_HOSTNAME"
337 boot_mesg
" Subnet Mask: $subnet_mask"
339 boot_mesg
" Default Gateway: $routers"
341 boot_mesg
" DNS Server: $domain_name_servers"
343 /sbin
/route add
$PPTP_PEER gw
$routers $PPP_NIC
351 ip addr add
$PPTP_NICCFG dev
$PPP_NIC
354 ip link
set ${PPP_NIC} up
355 if [ -n "${PPTP_ROUTE}" ]; then
356 boot_mesg
"Set route ${PPTP_ROUTE} to pptp server..."
357 route add
${PPTP_ROUTE}
360 boot_mesg
"Bringing up the PPP via ${TYPE} on ${COMPORT}..."
364 ### Configuring the pppd ###
369 if [ "$TYPE" == "pppoe" ]; then
370 [ "${METHOD}" == "PPPOE_PLUGIN" ] && \
371 PLUGOPTS
="plugin pppoe.so"
379 ### Access Concentrator Name
381 if [ -n "${CONCENTRATORNAME}" ]; then
382 ACNAME
="-C ${CONCENTRATORNAME}"
387 if [ -n "${SERVICENAME}" ]; then
388 if [ "${METHOD}" == "PPPOE_PLUGIN" ]; then
389 PLUGOPTS
+=" rp_pppoe_service ${SERVICENAME}"
391 SERVICENAME
="-S ${SERVICENAME}"
395 ### Authentication Types
397 if [ "${AUTH}" == "pap" ]; then
399 elif [ "${AUTH}" == "chap" ]; then
407 if [ "${RECONNECTION}" != "persistent" ]; then
408 if [ "${TIMEOUT}" != "0" ] && [ "${TIMEOUT}" != "" ]; then
409 SECONDS
=$
[${TIMEOUT} * 60]
413 if [ "${RECONNECTION}" == "dialondemand" ]; then
414 touch /var
/ipfire
/red
/dial-on-demand
415 DEMAND
="demand persist idle ${SECONDS} 10.112.112.112:10.112.112.113"
416 DEMAND
+=" ipcp-accept-remote ipcp-accept-local noipdefault ktune"
420 if [ "$TYPE" == "pppoe" ]; then
421 ### When using pppoe-plugin the device has to be the last option
423 [ "${METHOD}" == "PPPOE_PLUGIN" ] && PLUGOPTS
+=" $PPP_NIC"
426 if [ "$TYPE" == "modem" ]; then
427 PLUGOPTS
=" /dev/${COMPORT} ${DTERATE} connect /etc/ppp/dialer lock modem crtscts"
428 METHOD
="PPPOE_PLUGIN"
429 elif [ "$TYPE" == "serial" ]; then
430 PLUGOPTS
=" /dev/${COMPORT} ${DTERATE} connect /bin/true lock modem crtscts"
431 METHOD
="PPPOE_PLUGIN"
434 ### Standard PPP options we always use
436 PPP_STD_OPTIONS
="$PLUGOPTS usepeerdns defaultroute noipdefault noauth"
437 PPP_STD_OPTIONS
+=" default-asyncmap hide-password nodetach noipv6"
438 PPP_STD_OPTIONS
+=" noaccomp nodeflate nopcomp novj novjccomp"
439 PPP_STD_OPTIONS
+=" nobsdcomp user ${USERNAME} lcp-echo-interval 20"
440 PPP_STD_OPTIONS
+=" lcp-echo-failure 5 ${AUTH}"
442 if [ -n "${MTU}" ]; then
443 PPP_STD_OPTIONS
="${PPP_STD_OPTIONS} mtu ${MTU}"
446 if [ -n "${MRU}" ]; then
447 PPP_STD_OPTIONS
="${PPP_STD_OPTIONS} mru ${MRU}"
452 if [ "${DEBUG}" == "on" ]; then
460 if [ "$TYPE" == "pppoe" ]; then
461 PPPOE_CMD
="/usr/sbin/pppoe -p /var/run/ppp-ipfire.pid.pppoe -I $PPP_NIC"
462 PPPOE_CMD
+=" -T 80 -U $PPPOE_SYNC $ACNAME $SERVICENAMEOPT"
467 if [ "$TYPE" == "pptp" ]; then
468 PPPOE_CMD
="pptp $PPTP_PEER --nolaunchpppd"
474 if [ "$METHOD" == "PPPOE_PLUGIN" ]; then
475 /usr
/sbin
/pppd
$PPP_STD_OPTIONS $DEBUG $DEMAND >/dev
/null
2>&1 &
477 # echo PLUGIN: /usr/sbin/pppd $PPP_STD_OPTIONS $DEBUG $DEMAND
479 /usr
/sbin
/pppd pty
"$PPPOE_CMD" $PPP_STD_OPTIONS $DEBUG $DEMAND $PPPD_SYNC >/dev
/null
2>&1 &
481 # echo PPP: /usr/sbin/pppd pty "$PPPOE_CMD" $PPP_STD_OPTIONS $DEBUG $DEMAND $PPPD_SYNC
484 /etc
/rc.d
/init.d
/connectd start
485 # Add a NaN value to ppp0 rrd to supress spikes at reconnect
486 rrdtool update
$RRDLOG/collectd
/localhost
/interface
/if_octets-ppp0.rrd \
487 $
(date +%s
):: > /dev
/null
2>&1
493 rm -f /var
/ipfire
/red
/{active
,device
,dial-on-demand
,dns1
,dns2
,local-ipaddress
,remote-ipaddress
,resolv.conf
}
495 if [ "$TYPE" == "STATIC" ]; then
496 boot_mesg
"Stopping default gateway ${GATEWAY}..."
497 ip route del default via
${GATEWAY} >/dev
/null
2>&1
499 if [ "$DEVICE" != "${GREEN_DEV}" ]; then
500 boot_mesg
"Removing IPv4 addresses from the ${DEVICE} interface..."
501 ip addr flush dev
${DEVICE}
504 run_subdir
${rc_base}/init.d
/networking
/red.down
/
506 elif [ "$TYPE" == "PPPOE" ]; then
507 eval $
(/usr
/local
/bin
/readhash
/var
/ipfire
/ppp
/settings
)
509 if [ "${TYPE}" = "qmi" ]; then
510 boot_mesg
"Bringing down the QMI interface ${RED_DEV}..."
511 DEVICE
="$(qmi_find_device "${RED_DEV}")"
513 # Stop the DHCP client on RED
514 dhcpcd_stop
"${RED_DEV}"
516 # Reset any QMI settings
517 qmi_reset
"${DEVICE}"
522 boot_mesg
"Bringing down the PPP interface ..."
523 rm -f /var
/ipfire
/red
/keepconnected
524 killall
-w -s TERM
/usr
/sbin
/pppd
2>/dev
/null
526 # Add a NaN value to ppp0 rrd to supress spikes at reconnect
527 rrdtool update
$RRDLOG/collectd
/localhost
/interface
/if_octets-ppp0.rrd \
528 $
(date +%s
):: > /dev
/null
2>&1
530 elif [ "$TYPE" == "DHCP" ]; then
531 # Check if the wlan-client is used on red.
532 # To determine this we check if a wpa_supplicant is running.
533 pid
="$(pidof wpa_supplicant)"
535 if [ -z "${pid}" ]; then
537 dhcpcd_stop
"${DEVICE}"
541 if [ -n "${PPTP_ROUTE}" ]; then
542 route del
${PPTP_ROUTE}
545 if [ "$DEVICE" != "${GREEN_DEV}" ] && [ "$DEVICE" != "" ]; then
546 link_status
=`ip link show $DEVICE.${INET_VLAN} 2> /dev/null`
547 if [ -n "${link_status}" ]; then
548 if echo "${link_status}" |
grep -q UP
; then
549 boot_mesg
"Bringing down the ${DEVICE}.${INET_VLAN} interface..."
550 ip link
set ${DEVICE}.
${INET_VLAN} down
551 vconfig rem
${DEVICE}.
${INET_VLAN}
555 link_status
=`ip link show $DEVICE 2> /dev/null`
556 if [ -n "${link_status}" ]; then
557 if echo "${link_status}" |
grep -q UP
; then
558 boot_mesg
"Bringing down the ${DEVICE} interface..."
559 ip link
set ${DEVICE} down
565 killall
-w -s KILL
/usr
/sbin
/pppd
>/dev
/null
2>&1
566 killall
-w -s KILL pptp
>/dev
/null
2>&1
567 killall
-w -s KILL br2684ctl
>/dev
/null
2>&1