2564e407d2
Signed-Off-By: Vitaly Protsko <villy@sft.ru> --- b/net/ipsec-tools/Makefile | 16 - b/net/ipsec-tools/files/functions.sh | 137 +++++++++ b/net/ipsec-tools/files/p1client-down | 41 ++ b/net/ipsec-tools/files/p1client-up | 41 ++ b/net/ipsec-tools/files/racoon | 109 +++++++ b/net/ipsec-tools/files/racoon.init | 478 +++++++++++++++++++++++++++++++++- b/net/ipsec-tools/files/vpnctl | 19 + net/ipsec-tools/files/racoon.conf | 36 -- 8 files changed, 824 insertions(+), 53 deletions(-)
41 lines
1 KiB
Bash
41 lines
1 KiB
Bash
#!/bin/sh
|
|
#
|
|
|
|
log="logger -t p1client-up[$$]"
|
|
|
|
. /lib/functions.sh
|
|
. /etc/racoon/functions.sh
|
|
|
|
if [ -z "$SPLIT_INCLUDE_CIDR" ]; then
|
|
$log "Connection without server-pushed routing is not supported"
|
|
exit 1
|
|
fi
|
|
|
|
$log "Setting up tunnel to server $REMOTE_ADDR"
|
|
$log "Making tunnel(-s) to $SPLIT_INCLUDE_CIDR through $INTERNAL_ADDR4"
|
|
|
|
get_fieldval data dev "$(/usr/sbin/ip route get $REMOTE_ADDR)"
|
|
ip address add $INTERNAL_ADDR4/32 dev $data
|
|
|
|
config_load racoon
|
|
config_get confIntZone racoon int_zone lan
|
|
config_get confExtZone racoon ext_zone wan
|
|
|
|
data=$(get_zoneiflist $confIntZone)
|
|
if [ -n "$data" ]; then
|
|
for item in $data ; do
|
|
network_get_subnet locnet $item
|
|
if [ -n "$locnet" ]; then
|
|
manage_sa add "$locnet" "$SPLIT_INCLUDE_CIDR" $REMOTE_ADDR $INTERNAL_ADDR4
|
|
else
|
|
$log "Can not find subnet on interface $item"
|
|
fi
|
|
done
|
|
else
|
|
$log "Can not find interfaces in zone $confIntZone"
|
|
fi
|
|
|
|
manage_fw add $confIntZone $confExtZone "$INTERNAL_ADDR4 $SPLIT_INCLUDE_CIDR"
|
|
|
|
|
|
# EOF /etc/racoon/p1client-up
|