blob: a3eeb1d3316183a34ecf3f4209d5ee39b9c16329 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
|
# l2tp.sh - L2TPv3 tunnel backend
# Copyright (c) 2010 OpenWrt.org
l2tp_next_tunnel_id() {
local max=0
local val
for val in $(
local l
l2tpv3tun show tunnel | while read l; do
case "$l" in
Tunnel*,*encap*) l="${l#Tunnel }"; echo "${l%%,*}";;
esac
done
); do
[ "$val" -gt "$max" ] && max="$val"
done
echo $((max + 1))
}
l2tp_next_session_id() {
local tunnel="$1"
local max=0
local val
for val in $(
local l
l2tpv3tun show session${tunnel:+ tunnel_id "$tunnel"} | while read l; do
case "$l" in
Session*in*) l="${l#Session }"; echo "${l%% *}";;
esac
done
); do
[ "$val" -gt "$max" ] && max="$val"
done
echo $((max + 1))
}
l2tp_tunnel_exists() {
test -n "$(l2tpv3tun show tunnel tunnel_id "$1" 2>/dev/null)"
}
l2tp_session_exists() {
test -n "$(l2tpv3tun show session tunnel_id "$1" session_id "$2" 2>/dev/null)"
}
l2tp_ifname() {
l2tpv3tun show session tunnel_id "$1" session_id "$2" 2>/dev/null | \
sed -ne 's/^.*interface name: //p'
}
l2tp_lock() {
lock /var/lock/l2tp-setup
}
l2tp_unlock() {
lock -u /var/lock/l2tp-setup
}
l2tp_log() {
logger -t "ifup-l2tp" "$@"
}
# Hook into scan_interfaces() to synthesize a .device option
# This is needed for /sbin/ifup to properly dispatch control
# to setup_interface_l2tp() even if no .ifname is set in
# the configuration.
scan_l2tp() {
local dev
config_get dev "$1" device
config_set "$1" device "${dev:+$dev }l2tp-$1"
}
coldplug_interface_l2tp() {
setup_interface_l2tp "l2tp-$1" "$1"
}
setup_interface_l2tp() {
local iface="$1"
local cfg="$2"
local link="l2tp-$cfg"
l2tp_lock
# prevent recursion
local up="$(uci_get_state network "$cfg" up 0)"
[ "$up" = 0 ] || {
l2tp_unlock
return 0
}
local tunnel_id
config_get tunnel_id "$cfg" tunnel_id
[ -n "$tunnel_id" ] || {
tunnel_id="$(l2tp_next_tunnel_id)"
uci_set_state network "$cfg" tunnel_id "$tunnel_id"
l2tp_log "No tunnel ID specified, assuming $tunnel_id"
}
local peer_tunnel_id
config_get peer_tunnel_id "$cfg" peer_tunnel_id
[ -n "$peer_tunnel_id" ] || {
peer_tunnel_id="$tunnel_id"
uci_set_state network "$cfg" peer_tunnel_id "$peer_tunnel_id"
l2tp_log "No peer tunnel ID specified, assuming $peer_tunnel_id"
}
local encap
config_get encap "$cfg" encap udp
local sport dport
[ "$encap" = udp ] && {
config_get sport "$cfg" sport 1701
config_get dport "$cfg" dport 1701
}
local peeraddr
config_get peeraddr "$cfg" peeraddr
[ -z "$peeraddr" ] && config_get peeraddr "$cfg" peer6addr
local localaddr
case "$peeraddr" in
*:*) config_get localaddr "$cfg" local6addr ;;
*) config_get localaddr "$cfg" localaddr ;;
esac
[ -n "$localaddr" -a -n "$peeraddr" ] || {
l2tp_log "Missing local or peer address for tunnel $cfg - skipping"
return 1
}
(
while ! l2tp_tunnel_exists "$tunnel_id"; do
[ -n "$sport" ] && l2tpv3tun show tunnel 2>/dev/null | grep -q "ports: $sport/" && {
l2tp_log "There already is a tunnel with src port $sport - skipping"
l2tp_unlock
return 1
}
l2tpv3tun add tunnel tunnel_id "$tunnel_id" peer_tunnel_id "$peer_tunnel_id" \
encap "$encap" local "$localaddr" remote "$peeraddr" \
${sport:+udp_sport "$sport"} ${dport:+udp_dport "$dport"}
# Wait for tunnel
sleep 1
done
local session_id
config_get session_id "$cfg" session_id
[ -n "$session_id" ] || {
session_id="$(l2tp_next_session_id "$tunnel_id")"
uci_set_state network "$cfg" session_id "$session_id"
l2tp_log "No session ID specified, assuming $session_id"
}
local peer_session_id
config_get peer_session_id "$cfg" peer_session_id
[ -n "$peer_session_id" ] || {
peer_session_id="$session_id"
uci_set_state network "$cfg" peer_session_id "$peer_session_id"
l2tp_log "No peer session ID specified, assuming $peer_session_id"
}
while ! l2tp_session_exists "$tunnel_id" "$session_id"; do
l2tpv3tun add session ifname "$link" tunnel_id "$tunnel_id" \
session_id "$session_id" peer_session_id "$peer_session_id"
# Wait for session
sleep 1
done
local dev
config_get dev "$cfg" device
local ifn
config_get ifn "$cfg" ifname
uci_set_state network "$cfg" ifname "${ifn:-$dev}"
uci_set_state network "$cfg" device "$dev"
local mtu
config_get mtu "$cfg" mtu 1462
local ttl
config_get ttl "$cfg" ttl
ip link set mtu "$mtu" ${ttl:+ ttl "$ttl"} dev "$link"
# IP setup inherited from proto static
prepare_interface "$link" "$cfg"
setup_interface_static "${ifn:-$dev}" "$cfg"
ip link set up dev "$link"
uci_set_state network "$cfg" up 1
l2tp_unlock
) &
}
stop_interface_l2tp() {
local cfg="$1"
local link="l2tp-$cfg"
local tunnel=$(uci_get_state network "$cfg" tunnel_id)
local session=$(uci_get_state network "$cfg" session_id)
[ -n "$tunnel" ] && [ -n "$session" ] && {
l2tpv3tun del session tunnel_id "$tunnel" session_id "$session"
l2tpv3tun del tunnel tunnel_id "$tunnel"
}
}
|
