pfSense

 * services_radvd.php

 *

 * part of pfSense (https://www.pfsense.org)

 * Copyright (c) 2004-2013 BSD Perimeter

 * Copyright (c) 2014-2023 Rubicon Communications, LLC (Netgate)

 * Copyright (c) 2010 Seth Mos <seth.mos@dds.nl>

 *

 * originally based on m0n0wall (http://m0n0.ch/wall)

 *

 * Licensed under the Apache License, Version 2.0 (the "License");

 *

 * http://www.apache.org/licenses/LICENSE-2.0

 *

 * Unless required by applicable law or agreed to in writing, software

 */

##|*IDENT=page-services-router-advertisement

##|-PRIV

require_once('guiconfig.inc');

if (!g_get('services_dhcp_server_enable')) {

	header('Location: /');

	exit;

$if = $_REQUEST['if'];

$iflist = get_configured_interface_with_descr();

		$ifaddr = config_get_path("interfaces/{$ifent}/ipaddrv6");

			continue;

		}

		$if = $ifent;

if (!empty(config_get_path("dhcpdv6/{$if}"))) {

	/* RA specific */

	$pconfig['ramode'] = config_get_path("dhcpdv6/{$if}/ramode");

	if ($pconfig['rapriority'] == "") {

		$pconfig['rapriority'] = "medium";

	}

	$pconfig['ravalidlifetime'] = config_get_path("dhcpdv6/{$if}/ravalidlifetime");

	$pconfig['radomainsearchlist'] = config_get_path("dhcpdv6/{$if}/radomainsearchlist");

	$pconfig['radvd-dns'] = ($config['dhcpdv6'][$if]['radvd-dns'] != 'disabled') ? true : false;

	$pconfig['rasamednsasdhcp6'] = isset($config['dhcpdv6'][$if]['rasamednsasdhcp6']);

	$pconfig['subnets'] = config_get_path("dhcpdv6/{$if}/subnets/item");

}

if (!is_array($pconfig['subnets'])) {

	$pconfig['subnets'] = array();

}

$advertise_modes = array(

	"router" => 	gettext("Router Only - RA Flags [none], Prefix Flags [router]"),

$priority_modes = array(

// THe use of <div class="infoblock"> here causes the text to be hidden until the user clicks the "info" icon

$ramode_help = gettext('Select the Operating Mode for the Router Advertisement (RA) Daemon.') .

	'<div class="infoblock">' .

	'<dl class="dl-horizontal responsive">' .

	'<dt>' . gettext('Disabled') . 		 '</dt><dd>' . gettext('RADVD will not be enabled on this interface.') . '</dd>' .

	'<dt>' . gettext('Unmanaged') . 	 '</dt><dd>' . gettext('Will advertise this router with Stateless Address Auto-Configuration (SLAAC).') . '</dd>' .

	'<dt>' . gettext('Managed') . 		 '</dt><dd>' . gettext('Will advertise this router with all configuration through a DHCPv6 server.') . '</dd>' .

	'<dt>' . gettext('Assisted') . 		 '</dt><dd>' . gettext('Will advertise this router with configuration through a DHCPv6 server and/or SLAAC.') . '</dd>' .

	'</dl>' .

	sprintf(gettext('It is not required to activate DHCPv6 server on %s ' .

	    'be another host on the network.'), g_get('product_label')) .

	'</div>';

if ($_POST['save']) {

	unset($input_errors);

	/* input validation */

		if ($address === "") {

			continue;

		}

		if ($bits === "") {

			$bits = "128";

		}

			$pconfig['subnets'][] = $address;

		} else {

			if (!is_ipaddrv6($address)) {

				$input_errors[] = sprintf(gettext('An invalid subnet or alias was specified. [%1$s/%2$s]'), $address, $bits);

			}

		}

	if (($_POST['radns1'] && !is_ipaddrv6($_POST['radns1'])) || ($_POST['radns2'] && !is_ipaddrv6($_POST['radns2'])) || ($_POST['radns3'] && !is_ipaddrv6($_POST['radns3']))) {

		$input_errors[] = gettext("A valid IPv6 address must be specified for each of the DNS servers.");

	}

	if ($_POST['radomainsearchlist']) {

		$domain_array=preg_split("/[ ;]+/", $_POST['radomainsearchlist']);

		foreach ($domain_array as $curdomain) {

	if ($_POST['ravalidlifetime'] && ($_POST['ravalidlifetime'] < 7200)) {

		if ($_POST['raminrtradvinterval'] < 3) {

			$input_errors[] = gettext("Minimum advertisement interval must be no less than 3.");

		if ($_POST['ramaxrtradvinterval'] < 4 || $_POST['ramaxrtradvinterval'] > 1800) {

			$input_errors[] = gettext("Maximum advertisement interval must be no less than 4 and no greater than 1800.");

	}

	if ($_POST['rapreferredlifetime']) {

	if ($_POST['raadvdefaultlifetime'] && (($_POST['raadvdefaultlifetime'] < 1) || ($_POST['raadvdefaultlifetime'] > 9000))) {

	}

	if (($_POST['ravalidlifetime'] && $_POST['rapreferredlifetime'] &&

	    ($_POST['ravalidlifetime'] && empty($_POST['rapreferredlifetime']) &&

	    ($_POST['ravalidlifetime'] < 14400)) || (empty($_POST['ravalidlifetime']) &&

	    $_POST['rapreferredlifetime'] && ($_POST['rapreferredlifetime'] > 86400))) {

		$input_errors[] = gettext("Default valid lifetime must be greater than Default preferred lifetime.");

	if (!$input_errors) {

		if (!is_array($config['dhcpdv6'])) {

			config_set_path('dhcpdv6', array());

		}

		if (!is_array($config['dhcpdv6'][$if])) {

			$config['dhcpdv6'][$if] = array();

		}

		$config['dhcpdv6'][$if]['rainterface'] = $_POST['rainterface'];

		$config['dhcpdv6'][$if]['ravalidlifetime'] = $_POST['ravalidlifetime'];

		$config['dhcpdv6'][$if]['raminrtradvinterval'] = $_POST['raminrtradvinterval'];

		$config['dhcpdv6'][$if]['raadvdefaultlifetime'] = $_POST['raadvdefaultlifetime'];

		$config['dhcpdv6'][$if]['radomainsearchlist'] = $_POST['radomainsearchlist'];

		config_del_path("dhcpdv6/{$if}/radnsserver");

		if ($_POST['radns1']) {

			$config['dhcpdv6'][$if]['radnsserver'][] = $_POST['radns1'];

		}

			$config['dhcpdv6'][$if]['radnsserver'][] = $_POST['radns2'];

		}

			$config['dhcpdv6'][$if]['radnsserver'][] = $_POST['radns3'];

		}

		$config['dhcpdv6'][$if]['radvd-dns'] = ($_POST['radvd-dns']) ? "enabled" : "disabled";

		$config['dhcpdv6'][$if]['rasamednsasdhcp6'] = ($_POST['rasamednsasdhcp6']) ? true : false;

		if (count($pconfig['subnets'])) {

			config_del_path("dhcpdv6/{$if}/subnets");

		}

		write_config("Router Advertisements settings saved");

		$changes_applied = true;

	}

$pgtitle = [gettext('Services'), gettext('Router Advertisement')];

	$pglinks[] = 'services_radvd.php?if=' . $if;

}

$shortcut_section = 'radvd';

include('head.inc');

if ($input_errors) {

	print_input_errors($input_errors);

}

if ($changes_applied) {

}

	$oc = config_get_path("interfaces/{$ifent}");

	// We need interfaces configured with a static IPv6 address or track6 for PD.

	if (!is_ipaddrv6($oc['ipaddrv6']) && $oc['ipaddrv6'] != "track6") {

		continue;

	if ($ifent == $if) {

	}

	$tab_array[] = array($ifname, $active, 'services_radvd.php?if='.$ifent);

	$tabscounter++;

	print_info_box(gettext('Router Advertisements can only be enabled on interfaces configured with a static IPv6 address. This system has none.'), 'danger', false);

	exit;

$valid_ra = in_array(config_get_path('dhcpdv6/'.$if.'/ramode', 'disabled'), ['managed', 'assist', 'stateless_dhcp']);

display_top_tabs($tab_array);

$form = new Form();

$section = new Form_Section(gettext('Router Advertisement'));

	'*'.gettext('Router Mode'),

	$pconfig['ramode'],

))->setHelp($ramode_help);

	'*'.gettext('Router Priority'),

	$pconfig['rapriority'],

))->setHelp(gettext('Select the Priority for the RA Daemon.'));

$carplist = get_configured_vip_list("inet6", VIP_CARP);

if (count($carplist) > 0) {

		if (get_configured_vip_interface($ifname) == $if) {

	$iflist['interface'] = convert_friendly_interface_to_friendly_descr($if);

	foreach ($carplistif as $ifname => $vip) {

		$iflist[$ifname] = get_vip_descr($vip) . " - " . $vip;

		gettext('RA Interface'),

		$pconfig['rainterface'],

	))->setHelp(gettext('Select the Interface for the Router Advertisement (RA) Daemon.'));

}

$section->addInput(new Form_Input(

	gettext('Valid Lifetime'),

	'number',

	['min' => 1, 'max' => 655350, 'placeholder' => 86400]

))->setHelp(gettext('The length of time in seconds (relative to the time the packet is sent) that the prefix is valid for the purpose of on-link determination.%1$s' .

	gettext('Preferred Lifetime'),

	'number',

	$pconfig['rapreferredlifetime'],

))->setHelp(gettext('The length of time in seconds (relative to the time the packet is sent) that addresses generated from the prefix via SLAAC remain preferred.%1$s' .

$section->addInput(new Form_Input(

	gettext('Minimum RA Interval'),

	'number',

	['min' => 3, 'max' => 1350, 'placeholder' => 200]

))->setHelp(gettext('The minimum time allowed between sending unsolicited multicast router advertisements in seconds.%1$s' .

	gettext('Maximum RA Interval'),

	'number',

	['min' => 4, 'max' => 1800, 'placeholder' => 600]

))->setHelp(gettext('The maximum time allowed between sending unsolicited multicast router advertisements in seconds.%1$s' .

}

$section->addInput(new Form_Input(

	gettext('Router Lifetime'),

	'number',

	['min' => 1, 'max' => 9000, 'placeholder' => $raadvdefaultlifetime]

))->setHelp(gettext('The lifetime associated with the default router in seconds.%1$s' .

if (empty($pconfig['subnets'])) {

	$pconfig['subnets'] = array('0' => '/128');

}

$last = (count($pconfig['subnets']) - 1);

foreach ($pconfig['subnets'] as $subnet) {

	$group = new Form_Group(($counter == 0) ? gettext('RA Subnet(s)') : '');

	[$address, $subnet] = explode('/', $subnet);

	$group->add(new Form_IpAddress(

		'subnet_address' . $counter,

		$address,

	))->addClass('autotrim')

		gettext('Delete'),

		null,

	))->addClass('btn-sm btn-warning');

$group = new Form_Group(null);

	'addrow',

	gettext('Add RA Subnet'),

	null,

);

$section = new Form_Section(gettext('DNS Configuration'));

for ($idx = 1; $idx <= 4; $idx++) {

		'radns' . $idx,

		gettext('DNS Server') . ' '. $idx,

		$pconfig['radns' . $idx],

	))->addClass('autotrim')

}

$last->setHelp(gettext('Leave blank to use the IP address of this firewall interface if DNS Resolver or Forwarder is enabled, the servers configured in General settings or those obtained dynamically.'));

	gettext('Domain Search List'),

	'text',

))->addClass('autotrim')

$form->addGlobal(new Form_Input(

	'if',

?>

<script type="text/javascript">

//<![CDATA[

events.push(function() {

	// Suppress "Delete row" button if there are fewer than two rows

	// --------- Autocomplete -----------------------------------------------------------------------------------------

	var addressarray = <?= json_encode(get_alias_list(array("host", "network", "urltable"))) ?>;

	$('#radns1, #radns2, #radns3, #radns4').autocomplete({

		source: addressarray

});

//]]>

</script>

<?php