vips: moved to github
[openwrt.org/packages.git] / net / l2tpv3tun / files / l2tp.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
# l2tp.sh - L2TPv3 tunnel backend
# Copyright (c) 2010 OpenWrt.org
 
l2tp_next_tunnel_id() {
        local max=0
        local val
        for val in $(
                local l
                l2tpv3tun show tunnel | while read l; do
                        case "$l" in
                                Tunnel*,*encap*) l="${l#Tunnel }"; echo "${l%%,*}";;
                        esac
                done
        ); do
                [ "$val" -gt "$max" ] && max="$val"
        done
        echo $((max + 1))
}
 
l2tp_next_session_id() {
        local tunnel="$1"
        local max=0
        local val
        for val in $(
                local l
                l2tpv3tun show session${tunnel:+ tunnel_id "$tunnel"} | while read l; do
                        case "$l" in
                                Session*in*) l="${l#Session }"; echo "${l%% *}";;
                        esac
                done
        ); do
                [ "$val" -gt "$max" ] && max="$val"
        done
        echo $((max + 1))
}
 
l2tp_tunnel_exists() {
        test -n "$(l2tpv3tun show tunnel tunnel_id "$1" 2>/dev/null)"
}
 
l2tp_session_exists() {
        test -n "$(l2tpv3tun show session tunnel_id "$1" session_id "$2" 2>/dev/null)"
}
 
l2tp_ifname() {
        l2tpv3tun show session tunnel_id "$1" session_id "$2" 2>/dev/null | \
                sed -ne 's/^.*interface name: //p'
}
 
l2tp_lock() {
        lock /var/lock/l2tp-setup
}
 
l2tp_unlock() {
        lock -u /var/lock/l2tp-setup
}
 
l2tp_log() {
        logger -t "ifup-l2tp" "$@"
}
 
 
# Hook into scan_interfaces() to synthesize a .device option
# This is needed for /sbin/ifup to properly dispatch control
# to setup_interface_l2tp() even if no .ifname is set in
# the configuration.
scan_l2tp() {
        local dev
        config_get dev "$1" device
        config_set "$1" device "${dev:+$dev }l2tp-$1"
}
 
coldplug_interface_l2tp() {
        setup_interface_l2tp "l2tp-$1" "$1"
}
 
setup_interface_l2tp() {
        local iface="$1"
        local cfg="$2"
        local link="l2tp-$cfg"
 
        l2tp_lock
 
        # prevent recursion
        local up="$(uci_get_state network "$cfg" up 0)"
        [ "$up" = 0 ] || {
                l2tp_unlock
                return 0
        }
 
        local tunnel_id
        config_get tunnel_id "$cfg" tunnel_id
        [ -n "$tunnel_id" ] || {
                tunnel_id="$(l2tp_next_tunnel_id)"
                uci_set_state network "$cfg" tunnel_id "$tunnel_id"
                l2tp_log "No tunnel ID specified, assuming $tunnel_id"
        }
 
        local peer_tunnel_id
        config_get peer_tunnel_id "$cfg" peer_tunnel_id
        [ -n "$peer_tunnel_id" ] || {
                peer_tunnel_id="$tunnel_id"
                uci_set_state network "$cfg" peer_tunnel_id "$peer_tunnel_id"
                l2tp_log "No peer tunnel ID specified, assuming $peer_tunnel_id"
        }
 
        local encap
        config_get encap "$cfg" encap udp
 
        local sport dport
        [ "$encap" = udp ] && {
                config_get sport "$cfg" sport 1701
                config_get dport "$cfg" dport 1701
        }
 
        local peeraddr
        config_get peeraddr "$cfg" peeraddr
        [ -z "$peeraddr" ] && config_get peeraddr "$cfg" peer6addr
 
        local localaddr
        case "$peeraddr" in
                *:*) config_get localaddr "$cfg" local6addr ;;
                *)   config_get localaddr "$cfg" localaddr  ;;
        esac
 
        [ -n "$localaddr" -a -n "$peeraddr" ] || {
                l2tp_log "Missing local or peer address for tunnel $cfg - skipping"
                return 1
        }
 
        (
                while ! l2tp_tunnel_exists "$tunnel_id"; do
                        [ -n "$sport" ] && l2tpv3tun show tunnel 2>/dev/null | grep -q "ports: $sport/" && {
                                l2tp_log "There already is a tunnel with src port $sport - skipping"
                                l2tp_unlock
                                return 1
                        }
 
                        l2tpv3tun add tunnel tunnel_id "$tunnel_id" peer_tunnel_id "$peer_tunnel_id" \
                                encap "$encap" local "$localaddr" remote "$peeraddr" \
                                ${sport:+udp_sport "$sport"} ${dport:+udp_dport "$dport"}
 
                        # Wait for tunnel
                        sleep 1
                done
 
 
                local session_id
                config_get session_id "$cfg" session_id
                [ -n "$session_id" ] || {
                        session_id="$(l2tp_next_session_id "$tunnel_id")"
                        uci_set_state network "$cfg" session_id "$session_id"
                        l2tp_log "No session ID specified, assuming $session_id"
                }
 
                local peer_session_id
                config_get peer_session_id "$cfg" peer_session_id
                [ -n "$peer_session_id" ] || {
                        peer_session_id="$session_id"
                        uci_set_state network "$cfg" peer_session_id "$peer_session_id"
                        l2tp_log "No peer session ID specified, assuming $peer_session_id"
                }
 
 
                while ! l2tp_session_exists "$tunnel_id" "$session_id"; do
                        l2tpv3tun add session ifname "$link" tunnel_id "$tunnel_id" \
                                session_id "$session_id" peer_session_id "$peer_session_id"
 
                        # Wait for session
                        sleep 1
                done
 
 
                local dev
                config_get dev "$cfg" device
 
                local ifn
                config_get ifn "$cfg" ifname
 
                uci_set_state network "$cfg" ifname "${ifn:-$dev}"
                uci_set_state network "$cfg" device "$dev"
 
                local mtu
                config_get mtu "$cfg" mtu 1462
 
                local ttl
                config_get ttl "$cfg" ttl
 
                ip link set mtu "$mtu" ${ttl:+ ttl "$ttl"} dev "$link"
 
                # IP setup inherited from proto static
                prepare_interface "$link" "$cfg"
                setup_interface_static "${ifn:-$dev}" "$cfg"
 
                ip link set up dev "$link"
 
                uci_set_state network "$cfg" up 1
                l2tp_unlock
        ) &
}
 
stop_interface_l2tp() {
        local cfg="$1"
        local link="l2tp-$cfg"
 
        local tunnel=$(uci_get_state network "$cfg" tunnel_id)
        local session=$(uci_get_state network "$cfg" session_id)
 
        [ -n "$tunnel" ] && [ -n "$session" ] && {
                l2tpv3tun del session tunnel_id "$tunnel" session_id "$session"
                l2tpv3tun del tunnel tunnel_id "$tunnel"
        }
}
 
comments