Return to phase1-up.sh CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / ipsec-tools / src / racoon / samples / roadwarrior / client

Annotation of embedaddon/ipsec-tools/src/racoon/samples/roadwarrior/client/phase1-up.sh, revision 1.1.1.1

1.1       misho       1: #!/bin/sh
                      2: 
                      3: #
                      4: # sa-up.sh local configuration for a new SA
                      5: #
                      6: PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin
                      7: 
                      8: case `uname -s` in
                      9: NetBSD)
                     10:        DEFAULT_GW=`netstat -finet -rn | awk '($1 == "default"){print $2; exit}'`
                     11:        ;;
                     12: Linux)
                     13:        DEFAULT_GW=`netstat --inet -rn | awk '($1 == "0.0.0.0"){print $2; exit}'`
                     14:        ;;
                     15: esac
                     16: 
                     17: echo $@
                     18: echo "LOCAL_ADDR = ${LOCAL_ADDR}"
                     19: echo "LOCAL_PORT = ${LOCAL_PORT}"
                     20: echo "REMOTE_ADDR = ${REMOTE_ADDR}"
                     21: echo "REMOTE_PORT = ${REMOTE_PORT}"
                     22: echo "DEFAULT_GW = ${DEFAULT_GW}"
                     23: echo "INTERNAL_ADDR4 = ${INTERNAL_ADDR4}"
                     24: echo "INTERNAL_NETMASK4 = ${INTERNAL_NETMASK4}"
                     25: echo "INTERNAL_DNS4 = ${INTERNAL_DNS4}"
                     26: 
                     27: echo ${INTERNAL_ADDR4} | grep '[0-9]' > /dev/null || exit 0
                     28: echo ${INTERNAL_NETMASK4} | grep '[0-9]' > /dev/null || exit 0
                     29: echo ${DEFAULT_GW} | grep '[0-9]' > /dev/null || exit 0
                     30: 
                     31: mv /etc/resolv.conf /etc/resolv.conf.bak
                     32: ( umask 22; touch /etc/resolv.conf )
                     33: echo "# Generated by racoon on `date`" >> /etc/resolv.conf
                     34: echo "nameserver ${INTERNAL_DNS4}" >> /etc/resolv.conf
                     35: 
                     36: case `uname -s` in
                     37: NetBSD)
                     38:        if=`netstat -finet -rn|awk '($1 == "default"){print $7; exit}'`
                     39:        ifconfig ${if} alias ${INTERNAL_ADDR4} netmask ${INTERNAL_NETMASK4}
                     40:        route delete default
                     41:        route add default ${DEFAULT_GW} -ifa ${INTERNAL_ADDR4}
                     42:        route add ${REMOTE_ADDR} ${DEFAULT_GW}
                     43:        ;;
                     44: Linux)
                     45:        if=`netstat --inet -rn|awk '($1 == "0.0.0.0"){print $8; exit}'`
                     46:        ifconfig ${if}:1 ${INTERNAL_ADDR4}      
                     47:        route delete default
                     48:        route add ${REMOTE_ADDR} gw ${DEFAULT_GW} dev ${if}
                     49:        route add default gw ${DEFAULT_GW} dev ${if}:1
                     50:        ;;
                     51: esac
                     52: 
                     53: LOCAL="${LOCAL_ADDR}"
                     54: REMOTE="${REMOTE_ADDR}"
                     55: if [ "x${LOCAL_PORT}" != "x500" ]; then
                     56:        # NAT-T setup
                     57:        LOCAL="${LOCAL}[${LOCAL_PORT}]"
                     58:        REMOTE="${REMOTE}[${REMOTE_PORT}]"
                     59: fi
                     60: 
                     61: 
                     62: echo "
                     63: spdadd ${INTERNAL_ADDR4}/32[any] 0.0.0.0/0[any] any
                     64:        -P out ipsec esp/tunnel/${LOCAL}-${REMOTE}/require;
                     65: spdadd 0.0.0.0/0[any] ${INTERNAL_ADDR4}[any] any
                     66:        -P in ipsec esp/tunnel/${REMOTE}-${LOCAL}/require;
                     67: " | setkey -c
                     68: 
                     69: #
                     70: # XXX This is a workaround for Linux forward policies problem. 
                     71: # Someone familiar with forward policies please fix this properly.
                     72: #
                     73: case `uname -s` in
                     74: Linux)
                     75:        echo "
                     76:        spddelete 0.0.0.0/0[any] ${INTERNAL_ADDR4}[any] any
                     77:                -P fwd ipsec esp/tunnel/${REMOTE}-${LOCAL}/require;
                     78:        " | setkey -c
                     79:        ;;
                     80: esac