Subversion Repositories ALCASAR

Rev

Rev 2960 | Go to most recent revision | Details | Compare with Previous | Last modification | View Log

Rev Author Line No. Line
2956 rexy 1
#!/bin/bash
2
 
3
# alcasar-network.sh
4
# by Pierre RIVAULT and Rexy
5
# This script is distributed under the Gnu General Public License (GPL)
6
 
7
# Met à jour la configuration réseau conformément au fichier de configuration (alcasar.conf)
8
# update network configuration according to alcasar.conf
9
 
10
CONF_FILE="/usr/local/etc/alcasar.conf"
11
TMP_ip_gw_save="/tmp/ipset_ip_gw_save"
12
EXTIF=`grep ^EXTIF= $CONF_FILE|cut -d"=" -f2`
13
PUBLIC_IP=`grep ^PUBLIC_IP= $CONF_FILE|cut -d"=" -f2`
14
GW1=`grep ^GW= $CONF_FILE|cut -d"=" -f2`
15
MTU=`grep ^PUBLIC_MTU= $CONF_FILE|cut -d"=" -f2`
16
MULTIWAN=`grep ^MULTIWAN= $CONF_FILE|cut -d"=" -f2`
2979 rexy 17
MULTIWAN=${MULTIWAN:=off}
2956 rexy 18
NET="`ipcalc -n $PUBLIC_IP | cut -d"=" -f2`/`ipcalc -p $PUBLIC_IP | cut -d"=" -f2`"
19
IP=`echo $PUBLIC_IP | cut -d"/" -f1`
20
PRIVATE_IP_MASK=`grep ^PRIVATE_IP $CONF_FILE | cut -d"=" -f2`
21
PRIVATE_IP=`echo $PRIVATE_IP_MASK | cut -d"/" -f1`
22
PRIVATE_NETMASK=`echo $PRIVATE_IP_MASK | cut -d"/" -f2`
23
PRIVATE_PREFIX=`/bin/ipcalc -p $PRIVATE_IP $PRIVATE_NETMASK |cut -d"=" -f2`		# prefixe du réseau (ex. 24)
24
PRIVATE_NETWORK=`/bin/ipcalc -n $PRIVATE_IP $PRIVATE_NETMASK| cut -d"=" -f2`	# @ réseau de consultation (ex.: 192.168.182.0)
25
PRIVATE_NETWORK_MASK=$PRIVATE_NETWORK/$PRIVATE_PREFIX							# @ + masque du réseau de consult (192.168.182.0/24)
26
nb_gw=`grep ^WAN $CONF_FILE | wc -l`
27
routecmd="ip route replace default scope global"
28
 
29
if [ $(whoami) != "root" ]; then
30
	echo "You must be root to run this!" ; echo ; exit 1
31
fi
32
 
33
if [ $# -eq 0 ]; then
34
	args="--apply"
35
else
36
	args=$1
37
fi
38
 
39
case $args in
2960 rexy 40
	--save)	# save all the IP before changing the configuration
2956 rexy 41
		rm -f $TMP_ip_gw_save
2960 rexy 42
		gw_list="gw0"	# ipset name list for load_balancing
2956 rexy 43
		for ((i=1 ; i<=$nb_gw ; i++)); do
44
			gw_list="${gw_list} gw$i"
45
		done
46
		# Saving all of the already connected IP in order to put them back in the load balancing after
47
		for i in $gw_list;do
48
			ipset list $i 1>/dev/null 2>&1
49
			if [ $? -eq 0 ]
50
			then
51
				# the cut -d":" -f5 deletes all the lines with a :, i.e all the lines except the members
2960 rexy 52
				ipset list $i | grep -v ":" >> $TMP_ip_gw_save
2956 rexy 53
			fi
54
		done
55
	exit 0
56
	;;
57
	--apply)
58
		[ -e /etc/sysconfig/network-scripts/ifcfg-$EXTIF ] && ifdown $EXTIF
59
		# set the new configuration for EXTIF
60
		cat <<EOF > /etc/sysconfig/network-scripts/ifcfg-$EXTIF
61
DEVICE=$EXTIF
62
BOOTPROTO=static
63
IPADDR=$IP
64
NETMASK=`ipcalc -m $PUBLIC_IP | cut -d= -f2`
65
NETWORK=`ipcalc -n $PUBLIC_IP | cut -d= -f2`
66
GATEWAY=$GW1
67
DNS1=127.0.0.1
68
RESOLV_MODS=yes
69
ONBOOT=yes
70
METRIC=10
71
MII_NOT_SUPPORTED=yes
72
IPV6INIT=no
73
IPV6TO4INIT=no
74
ACCOUNTING=no
75
USERCTL=no
76
MTU=$MTU
77
NOZEROCONF=yes
78
EOF
79
		ifup $EXTIF
80
		ip route flush ${NET}	# Remove the previous route for the network of EXTIF
81
		ip route delete default scope global	# Remove the previous default route
82
		ip route add ${NET} dev ${EXTIF} src ${IP}	 # Set the new route for EXTIF network
83
		ip route add ${NET} dev ${EXTIF} src ${IP} table 200	# Set the new default route. If no multiwan, these lines are equivalent to `ip route add default via ${GW1}`
84
		ip route add default via ${GW1} table 200
85
		routecmd="${routecmd} nexthop via ${GW1} dev ${EXTIF}"
86
		ip rule flush	# Remove the previous routing rules
87
		ip rule add from all lookup main pref 32766	# Set back the main rules
88
		ip rule add from all lookup default pref 32767	# Set back the default rules
89
		ip rule add from ${PRIVATE_NETWORK_MASK} fwmark 200 lookup 200	# Add the rule for the first gateway
90
		if [ "$MULTIWAN" == "on" ] || [ "$MULTIWAN" == "On" ]; then
91
			nb_gw_supp=`grep ^WAN $CONF_FILE|wc -l`
92
			for ((i=0 ; $i < $nb_gw_supp ; i++)); do
93
				table=$(($i + 201))	# This number is used to mark the paquets in order to route them to the choosen GW 
94
				GW=`grep ^WAN$(($i + 1))= $CONF_FILE|awk -F'"' '{ print $2 }' | awk -F, '{print $1}'`
95
				ip route add ${NET} dev ${EXTIF} src ${IP} table $table	# Add the others route in their respective tables
96
				ip route add default via ${GW} table $table
97
				ip rule add from ${PRIVATE_NETWORK_MASK} fwmark $table lookup $table	# Add the rule for each rule depending of the mark set by the firewall
98
				routecmd="${routecmd} nexthop via ${GW} dev ${EXTIF}"	# add the added gateway into the default gateway
99
			done
100
		fi
101
		${routecmd}	# define the default gateway for outgoing traffic
102
		ip route flush cache
103
		exit 0
104
		;;
105
	*)
106
		exit 1
107
		;;
108
esac