Project

General

Profile

Download (17 KB) Statistics
| Branch: | Tag: | Revision:
1
#!/usr/local/bin/php-cgi -q
2
<?php
3
/*
4
 * rc.initial.setlanip
5
 *
6
 * part of pfSense (https://www.pfsense.org)
7
 * Copyright (c) 2004-2013 BSD Perimeter
8
 * Copyright (c) 2013-2016 Electric Sheep Fencing
9
 * Copyright (c) 2014-2021 Rubicon Communications, LLC (Netgate)
10
 * All rights reserved.
11
 *
12
 * originally part of m0n0wall (http://m0n0.ch/wall)
13
 * Copyright (c) 2003-2004 Manuel Kasper <mk@neon1.net>.
14
 * All rights reserved.
15
 *
16
 * Licensed under the Apache License, Version 2.0 (the "License");
17
 * you may not use this file except in compliance with the License.
18
 * You may obtain a copy of the License at
19
 *
20
 * http://www.apache.org/licenses/LICENSE-2.0
21
 *
22
 * Unless required by applicable law or agreed to in writing, software
23
 * distributed under the License is distributed on an "AS IS" BASIS,
24
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
25
 * See the License for the specific language governing permissions and
26
 * limitations under the License.
27
 */
28

    
29
$options = getopt("hn", array("dry-run", "help"));
30

    
31
if (isset($options["h"]) || isset($options["help"])) {
32
	echo "usage: /etc/rc.initial.setlanip [option ...]\n";
33
	echo "  -h, --help       show this message\n";
34
	echo "  -n, --dry-run    do not make any configuration changes\n";
35
	return 0;
36
}
37

    
38
$dry_run = isset($options["n"]) || isset($options["dry-run"]);
39
if ($dry_run) {
40
	echo "DRY RUN MODE IS ON\n";
41
}
42

    
43
/* parse the configuration and include all functions used below */
44
require_once("config.inc");
45
require_once("functions.inc");
46
require_once("filter.inc");
47
require_once("shaper.inc");
48
require_once("rrd.inc");
49

    
50
function console_prompt_for_yn ($prompt_text) {
51
	global $fp;
52

    
53
	$good_answer = false;
54

    
55
	do {
56
		echo "\n" . $prompt_text . " (y/n) ";
57
		$yn = strtolower(chop(fgets($fp)));
58
		if (($yn == "y") || ($yn == "yes")) {
59
			$boolean_answer = true;
60
			$good_answer = true;
61
		}
62
		if (($yn == "n") || ($yn == "no")) {
63
			$boolean_answer = false;
64
			$good_answer = true;
65
		}
66
	} while (!$good_answer);
67

    
68
	return $boolean_answer;
69
}
70

    
71
function console_get_interface_from_ppp($realif) {
72
	global $config;
73

    
74
	if (is_array($config['ppps']['ppp']) && count($config['ppps']['ppp'])) {
75
		foreach ($config['ppps']['ppp'] as $pppid => $ppp) {
76
			if ($realif == $ppp['if']) {
77
				$ifaces = explode(",", $ppp['ports']);
78
				return $ifaces[0];
79
			}
80
		}
81
	}
82

    
83
	return "";
84
}
85

    
86
function prompt_for_enable_dhcp_server($version = 4) {
87
	global $config, $fp, $interface;
88
	if ($interface == "wan") {
89
		if ($config['interfaces']['lan']) {
90
			return false;
91
		}
92
	}
93
	/* only allow DHCP server to be enabled when static IP is
94
	   configured on this interface */
95
	if ($version === 6) {
96
		$is_ipaddr = is_ipaddrv6($config['interfaces'][$interface]['ipaddrv6']);
97
	} else {
98
		$is_ipaddr = is_ipaddrv4($config['interfaces'][$interface]['ipaddr']);
99
	}
100
	if (!($is_ipaddr)) {
101
		return false;
102
	}
103

    
104
	$label_DHCP = ($version === 6) ? "DHCP6" : "DHCP";
105
	$upperifname = strtoupper($interface);
106
	return console_prompt_for_yn (sprintf(gettext('Do you want to enable the %1$s server on %2$s?'), $label_DHCP, $upperifname));
107
}
108

    
109
function get_interface_config_description($iface) {
110
	global $config;
111
	$c = $config['interfaces'][$iface];
112
	if (!$c) {
113
		return null;
114
	}
115
	$if = $c['if'];
116
	$result = $if;
117
	$result2 = array();
118
	$ipaddr = $c['ipaddr'];
119
	$ipaddrv6 = $c['ipaddrv6'];
120
	if (is_ipaddr($ipaddr)) {
121
		$result2[] = "static";
122
	} else if ($ipaddr == "dhcp") {
123
		$result2[] = "dhcp";
124
	}
125
	if (is_ipaddr($ipaddrv6)) {
126
		$result2[] = "staticv6";
127
	} else if ($ipaddrv6 == "dhcp6") {
128
		$result2[] = "dhcp6";
129
	}
130
	if (count($result2)) {
131
		$result .= " - " . implode(", ", $result2);
132
	}
133
	return $result;
134
}
135

    
136
$fp = fopen('php://stdin', 'r');
137

    
138
/* build an interface collection */
139
$ifdescrs = get_configured_interface_with_descr(true);
140
$count = count($ifdescrs);
141

    
142
/* grab interface that we will operate on, unless there is only one interface */
143
if ($count > 1) {
144
	echo "Available interfaces:\n\n";
145
	$x=1;
146
	foreach ($ifdescrs as $iface => $ifdescr) {
147
		$config_descr = get_interface_config_description($iface);
148
		echo "{$x} - {$ifdescr} ({$config_descr})\n";
149
		$x++;
150
	}
151
	echo "\nEnter the number of the interface you wish to configure: ";
152
	$intnum = chop(fgets($fp));
153
} else {
154
	$intnum = $count;
155
}
156

    
157
if ($intnum < 1) {
158
	return;
159
}
160
if ($intnum > $count) {
161
	return;
162
}
163

    
164
$index = 1;
165
foreach ($ifdescrs as $ifname => $ifdesc) {
166
	if ($intnum == $index) {
167
		$interface = $ifname;
168
		break;
169
	} else {
170
		$index++;
171
	}
172
}
173
if (!$interface) {
174
	echo "Invalid interface!\n";
175
	return;
176
}
177

    
178
$ifaceassigned = "";
179

    
180
function next_unused_gateway_name($interface, $inet_type = 'inet') {
181
	global $g, $config;
182

    
183
	if ($inet_type == 'inet') {
184
		$name_suffix = "GW";
185
	} else {
186
		$name_suffix = "GWv6";
187
	}
188

    
189
	$new_name = strtoupper($interface) . $name_suffix;
190

    
191
	if (!is_array($config['gateways']['gateway_item'])) {
192
		return $new_name;
193
	}
194
	$count = 1;
195
	do {
196
		$existing = false;
197
		foreach ($config['gateways']['gateway_item'] as $item) {
198
			if ($item['name'] === $new_name) {
199
				$existing = true;
200
				break;
201
			}
202
		}
203
		if ($existing) {
204
			$count += 1;
205
			$new_name = strtoupper($interface) . $name_suffix . "_" . $count;
206
		}
207
	} while ($existing);
208
	return $new_name;
209
}
210

    
211
function add_gateway_to_config($interface, $gatewayip, $inet_type) {
212
	global $g, $config, $dry_run;
213
	init_config_arr(array('gateways', 'gateway_item'));
214
	$a_gateways = &$config['gateways']['gateway_item'];
215
	if ($dry_run) {
216
		print_r($a_gateways);
217
	}
218
	$new_name = '';
219
	foreach ($a_gateways as $item) {
220
		if ($item['ipprotocol'] === $inet_type) {
221
			if (($item['interface'] === $interface) && ($item['gateway'] === $gatewayip)) {
222
				$new_name = $item['name'];
223
			}
224
		}
225
	}
226
	if ($new_name == '') {
227
		$new_name = next_unused_gateway_name($interface, $inet_type);
228
		$item = array(
229
			"interface" => $interface,
230
			"gateway" => $gatewayip,
231
			"name" => $new_name,
232
			"weight" => 1,
233
			"ipprotocol" => $inet_type,
234
			"interval" => true,
235
			"descr" => "Interface $interface Gateway"
236
		);
237
		if ($dry_run) {
238
			print_r($item);
239
		}
240
		$a_gateways[] = $item;
241
	}
242

    
243
	//set the new GW as the default if there isnt one set yet
244
	if ($item['ipprotocol'] == "inet" && empty(isset($config['gateways']['defaultgw4']))) {
245
		$config['gateways']['defaultgw4'] = $new_name;
246
	}
247
	if ($item['ipprotocol'] == "inet6" && empty(isset($config['gateways']['defaultgw6']))) {
248
		$config['gateways']['defaultgw6'] = $new_name;
249
	}
250

    
251
	return $new_name;
252
}
253

    
254
function console_configure_ip_address($version) {
255
	global $g, $config, $interface, $restart_dhcpd, $ifaceassigned, $fp;
256

    
257
	$label_IPvX = ($version === 6) ? "IPv6"   : "IPv4";
258
	$maxbits    = ($version === 6) ? 127      : 31;
259
	$label_DHCP = ($version === 6) ? "DHCP6"  : "DHCP";
260

    
261
	$upperifname = strtoupper($interface);
262

    
263
	if ($interface == "wan") {
264
		if (console_prompt_for_yn (sprintf(gettext('Configure %1$s address %2$s interface via %3$s?'), $label_IPvX, $upperifname, $label_DHCP))) {
265
			$ifppp = console_get_interface_from_ppp(get_real_interface("wan"));
266
			if (!empty($ifppp)) {
267
				$ifaceassigned = $ifppp;
268
			}
269
			$intip = ($version === 6) ? "dhcp6" : "dhcp";
270
			$intbits = "";
271
			$isintdhcp = true;
272
			$restart_dhcpd = true;
273
		}
274
	}
275

    
276
	if ($isintdhcp == false or $interface <> "wan") {
277
		while (true) {
278
			do {
279
				echo "\n" . sprintf(gettext('Enter the new %1$s %2$s address.  Press <ENTER> for none:'),
280
							$upperifname, $label_IPvX) . "\n> ";
281
				$intip = chop(fgets($fp));
282
				$intbits_ok = false;
283
				if (strstr($intip, "/")) {
284
					list($intip, $intbits) = explode("/", $intip);
285
					$intbits_ok = (is_numeric($intbits) && (($intbits >= 1) && ($intbits <= $maxbits))) ? true : false;
286
				}
287
				$is_ipaddr = ($version === 6) ? is_ipaddrv6($intip) : is_ipaddrv4($intip);
288
				if ($is_ipaddr && is_ipaddr_configured($intip, $interface, true)) {
289
					$ip_conflict = true;
290
					echo gettext("This IP address conflicts with another interface or a VIP") . "\n";
291
				} else {
292
					$ip_conflict = false;
293
				}
294
			} while (($ip_conflict === true) || !($is_ipaddr || $intip == ''));
295
			if ($is_ipaddr && $intip != '') {
296
				if ($intbits_ok == false) {
297
					echo "\n" . sprintf(gettext("Subnet masks are entered as bit counts (as in CIDR notation) in %s."),
298
							$g['product_label']) . "\n";
299
					if ($version === 6) {
300
						echo "e.g. ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00 = 120\n";
301
						echo "     ffff:ffff:ffff:ffff:ffff:ffff:ffff:0    = 112\n";
302
						echo "     ffff:ffff:ffff:ffff:ffff:ffff:0:0       =  96\n";
303
						echo "     ffff:ffff:ffff:ffff:ffff:0:0:0          =  80\n";
304
						echo "     ffff:ffff:ffff:ffff:0:0:0:0             =  64\n";
305
					} else {
306
						echo "e.g. 255.255.255.0 = 24\n";
307
						echo "     255.255.0.0   = 16\n";
308
						echo "     255.0.0.0     = 8\n";
309
					}
310
				}
311
				while ($intbits_ok == false) {
312
					$upperifname = strtoupper($interface);
313
					echo "\n" . sprintf(gettext('Enter the new %1$s %2$s subnet bit count (1 to %3$s):'),
314
								$upperifname, $label_IPvX, $maxbits) . "\n> ";
315
					$intbits = chop(fgets($fp));
316
					$intbits_ok = is_numeric($intbits) && (($intbits >= 1) && ($intbits <= $maxbits));
317
					$restart_dhcpd = true;
318

    
319
					if ($version === 4 && $intbits < $maxbits) {
320
						if ($intip == gen_subnet($intip, $intbits)) {
321
							echo gettext("You cannot set network address to an interface");
322
							continue 2;
323
							$intbits_ok = false;
324
						} else if ($intip == gen_subnet_max($intip, $intbits)) {
325
							echo gettext("You cannot set broadcast address to an interface");
326
							continue 2;
327
							$intbits_ok = false;
328
						}
329
					}
330
				}
331

    
332
				if ($version === 6) {
333
					$subnet = gen_subnetv6($intip, $intbits);
334
				} else {
335
					$subnet = gen_subnet($intip, $intbits);
336
				}
337
				do {
338
					echo "\n" . sprintf(gettext('For a WAN, enter the new %1$s %2$s upstream gateway address.'), $upperifname, $label_IPvX) . "\n" .
339
								gettext("For a LAN, press <ENTER> for none:") . "\n> ";
340
					$gwip = chop(fgets($fp));
341
					$is_ipaddr = ($version === 6) ? is_ipaddrv6($gwip) : is_ipaddrv4($gwip);
342
					$is_in_subnet = $is_ipaddr && ip_in_subnet($gwip, $subnet . "/" . $intbits);
343
					if ($gwip != '') {
344
						if (!$is_ipaddr) {
345
							echo sprintf(gettext("not an %s IP address!"), $label_IPvX) . "\n";
346
						} else if (!$is_in_subnet) {
347
							echo gettext("not in subnet!") . "\n";
348
						}
349
					}
350
				} while (!($gwip == '' || ($is_ipaddr && $is_in_subnet)));
351

    
352
				if ($gwip != '') {
353
					$inet_type = ($version === 6) ? "inet6" : "inet";
354
					$gwname = add_gateway_to_config($interface, $gwip, $inet_type);
355
				}
356
			}
357
			$ifppp = console_get_interface_from_ppp(get_real_interface($interface));
358
			if (!empty($ifppp)) {
359
				$ifaceassigned = $ifppp;
360
			}
361
			break;
362
		}
363
	}
364

    
365
	return array($intip, $intbits, $gwname);
366
}
367

    
368
list($intip,  $intbits,  $gwname)  = console_configure_ip_address(4);
369
list($intip6, $intbits6, $gwname6) = console_configure_ip_address(6);
370

    
371
if (!empty($ifaceassigned)) {
372
	$config['interfaces'][$interface]['if'] = $ifaceassigned;
373
}
374
$config['interfaces'][$interface]['ipaddr']    = $intip;
375
$config['interfaces'][$interface]['subnet']    = $intbits;
376
$config['interfaces'][$interface]['gateway']   = $gwname;
377
$config['interfaces'][$interface]['ipaddrv6']  = $intip6;
378
$config['interfaces'][$interface]['subnetv6']  = $intbits6;
379
$config['interfaces'][$interface]['gatewayv6'] = $gwname6;
380
$config['interfaces'][$interface]['enable']    = true;
381

    
382
function console_configure_dhcpd($version = 4) {
383
	global $g, $config, $restart_dhcpd, $fp, $interface, $dry_run, $intip, $intbits, $intip6, $intbits6;
384

    
385
	$label_IPvX = ($version === 6) ? "IPv6"    : "IPv4";
386
	$dhcpd      = ($version === 6) ? "dhcpdv6" : "dhcpd";
387

    
388
	if ($g['services_dhcp_server_enable'] && prompt_for_enable_dhcp_server($version)) {
389
		$subnet_start = ($version === 6) ? gen_subnetv6($intip6, $intbits6) : gen_subnet($intip, $intbits);
390
		$subnet_end = ($version === 6) ? gen_subnetv6_max($intip6, $intbits6) : gen_subnet_max($intip, $intbits);
391
		do {
392
			do {
393
				echo sprintf(gettext("Enter the start address of the %s client address range:"), $label_IPvX) . " ";
394
				$dhcpstartip = chop(fgets($fp));
395
				if ($dhcpstartip === "") {
396
					fclose($fp);
397
					return 0;
398
				}
399
				$is_ipaddr = ($version === 6) ? is_ipaddrv6($dhcpstartip) : is_ipaddrv4($dhcpstartip);
400
				$is_inrange = is_inrange($dhcpstartip, $subnet_start, $subnet_end);
401
				if (!$is_inrange) {
402
					echo gettext("This IP address must be in the interface's subnet") . "\n";
403
				}
404
			} while (!$is_ipaddr || !$is_inrange);
405

    
406
			do {
407
				echo sprintf(gettext("Enter the end address of the %s client address range:"), $label_IPvX) . " ";
408
				$dhcpendip = chop(fgets($fp));
409
				if ($dhcpendip === "") {
410
					fclose($fp);
411
					return 0;
412
				}
413
				$is_ipaddr = ($version === 6) ? is_ipaddrv6($dhcpendip) : is_ipaddrv4($dhcpendip);
414
				$is_inrange = is_inrange($dhcpendip, $subnet_start, $subnet_end);
415
				if (!$is_inrange) {
416
					echo gettext("This IP address must be in the interface's subnet") . "\n";
417
				}
418
				$not_inorder = ($version === 6) ? (inet_pton($dhcpendip) < inet_pton($dhcpstartip)) : ip_less_than($dhcpendip, $dhcpstartip);
419
				if ($not_inorder) {
420
					echo gettext("The end address of the DHCP range must be >= the start address") . "\n";
421
				}
422
			} while (!$is_ipaddr || !$is_inrange);
423
		} while ($not_inorder);
424
		$restart_dhcpd = true;
425
		init_config_arr(array($dhcpd, $interface, 'range'));
426
		$config[$dhcpd][$interface]['enable'] = true;
427
		$config[$dhcpd][$interface]['range']['from'] = $dhcpstartip;
428
		$config[$dhcpd][$interface]['range']['to'] = $dhcpendip;
429
	} else {
430
		if (isset($config[$dhcpd][$interface]['enable'])) {
431
			unset($config[$dhcpd][$interface]['enable']);
432
			printf(gettext("Disabling %s DHCPD..."), $label_IPvX);
433
			$restart_dhcpd = true;
434
		}
435
	}
436
	return 1;
437
}
438

    
439
if (console_configure_dhcpd(4) == 0) {
440
	return 0;
441
}
442
if (console_configure_dhcpd(6) == 0) {
443
	return 0;
444
}
445

    
446
//*****************************************************************************
447

    
448
if ($config['system']['webgui']['protocol'] == "https") {
449

    
450
	if (console_prompt_for_yn (gettext("Do you want to revert to HTTP as the webConfigurator protocol?"))) {
451
		$config['system']['webgui']['protocol'] = "http";
452
		$restart_webgui = true;
453
	}
454
}
455

    
456
if (isset($config['system']['webgui']['noantilockout'])) {
457
	echo "\n" . sprintf(gettext("Note: the anti-lockout rule on %s has been re-enabled."), $interface) . "\n";
458
	unset($config['system']['webgui']['noantilockout']);
459
}
460

    
461
if ($config['interfaces']['lan']) {
462
	if ($config['dhcpd']) {
463
		if ($config['dhcpd']['wan']) {
464
			unset($config['dhcpd']['wan']);
465
		}
466
	}
467
	if ($config['dhcpdv6']) {
468
		if ($config['dhcpdv6']['wan']) {
469
			unset($config['dhcpdv6']['wan']);
470
		}
471
	}
472
}
473

    
474
if (!$config['interfaces']['lan']) {
475
	unset($config['interfaces']['lan']);
476
	if ($config['dhcpd']['lan']) {
477
		unset($config['dhcpd']['lan']);
478
	}
479
	if ($config['dhcpdv6']['lan']) {
480
		unset($config['dhcpdv6']['lan']);
481
	}
482
	unset($config['shaper']);
483
	unset($config['ezshaper']);
484
	unset($config['nat']);
485
	if (!$dry_run) {
486
		system("rm /var/dhcpd/var/db/* >/dev/null 2>/dev/null");
487
		$restart_dhcpd = true;
488
	}
489
}
490

    
491
$upperifname = strtoupper($interface);
492
if (!$dry_run) {
493
	echo "\nPlease wait while the changes are saved to {$upperifname}...";
494
	write_config(sprintf(gettext("%s IP configuration from console menu"), $interface));
495
	if (file_exists("{$g['conf_path']}/trigger_initial_wizard")) {
496
		// if any of the interfaces is manually configured, it means that the assignment is OK
497
		touch("{$g['conf_path']}/assign_complete");
498
	}
499
	interface_reconfigure(strtolower($upperifname));
500
	echo "\n Reloading filter...";
501
	filter_configure_sync();
502
	echo "\n Reloading routing configuration...";
503
	system_routing_configure();
504
	if ($restart_dhcpd) {
505
		echo "\n DHCPD...";
506
		services_dhcpd_configure();
507
	}
508
	if ($restart_webgui) {
509
		echo "\n Restarting webConfigurator... ";
510
		mwexec("/etc/rc.restart_webgui");
511
	}
512
}
513

    
514
if ($intip != '') {
515
	if (is_ipaddr($intip)) {
516
		$intipstr = "{$intip}/{$intbits}";
517
	} else {
518
		$intipstr = $intip;
519
	}
520
	echo "\n\n" . sprintf(gettext('The IPv4 %1$s address has been set to %2$s'), $upperifname, $intipstr) . "\n";
521
}
522
if ($intip6 != '') {
523
	if (is_ipaddr($intip6)) {
524
		$intip6str = "${intip6}/${intbits6}";
525
	} else {
526
		$intip6str = $intip6;
527
	}
528
	echo "\n\n" . sprintf(gettext('The IPv6 %1$s address has been set to %2$s'), $upperifname, $intip6str) . "\n";
529
}
530

    
531
if ($intip != '' || $intip6 != '') {
532
	if (count($ifdescrs) == "1" or $interface == "lan") {
533
		if ($debug) {
534
			echo "ifdescrs count is " . count($ifdescrs) . "\n";
535
			echo "interface is {$interface} \n";
536
		}
537
		echo gettext('You can now access the webConfigurator by opening the following URL in your web browser:') . "\n";
538
		if (!empty($config['system']['webgui']['port'])) {
539
			$webuiport = $config['system']['webgui']['port'];
540
			if ($intip != '') {
541
				echo "		{$config['system']['webgui']['protocol']}://{$intip}:{$webuiport}/\n";
542
			}
543
			if ($intip6 != '') {
544
				if (is_ipaddr($intip6)) {
545
					echo "		{$config['system']['webgui']['protocol']}://[{$intip6}]:{$webuiport}/\n";
546
				} else {
547
					echo "		{$config['system']['webgui']['protocol']}://{$intip6}:{$webuiport}/\n";
548
				}
549
			}
550
		} else {
551
			if ($intip != '') {
552
				echo "		{$config['system']['webgui']['protocol']}://{$intip}/\n";
553
			}
554
			if ($intip6 != '') {
555
				if (is_ipaddr($intip6)) {
556
					echo "		{$config['system']['webgui']['protocol']}://[{$intip6}]/\n";
557
				} else {
558
					echo "		{$config['system']['webgui']['protocol']}://{$intip6}/\n";
559
				}
560
			}
561
		}
562
	}
563
}
564

    
565
echo "\n" . gettext('Press <ENTER> to continue.');
566

    
567
fgets($fp);
568
fclose($fp);
569

    
570
?>
(43-43/82)