aboutsummaryrefslogtreecommitdiffstats
path: root/sysconfig/network-scripts/network-functions-ipv6
diff options
context:
space:
mode:
Diffstat (limited to 'sysconfig/network-scripts/network-functions-ipv6')
-rw-r--r--sysconfig/network-scripts/network-functions-ipv6476
1 files changed, 316 insertions, 160 deletions
diff --git a/sysconfig/network-scripts/network-functions-ipv6 b/sysconfig/network-scripts/network-functions-ipv6
index c8c61cc4..2c0e7846 100644
--- a/sysconfig/network-scripts/network-functions-ipv6
+++ b/sysconfig/network-scripts/network-functions-ipv6
@@ -3,86 +3,127 @@
# network-functions-ipv6
#
# Taken from:
-# (P) & (C) 1997-2000 Peter Bieringer <pb@bieringer.de>
+# (P) & (C) 1997-2001 by Peter Bieringer <pb@bieringer.de>
+#
+# Version: 2001-02-05
+#
+
+
+# Filter tags (for stripping, empty lines following if all is stripped)
+
+
-# DEBUG_IPV6 & 1 "set -x" mode
-# DEBUG_IPV6 & 2 prevents from executing any network configuration
-# DEBUG_IPV6 & 4 shows messages in the test section
-#DEBUG_IPV6=$[ 65535 - 1 -2 -4]
-DEBUG_IPV6=0
# Return values
# 0 = ok
# 1 = error occurs
# 2 = not enabled, i.e. no IPv6 kernel support or switched off by configuration
+
##### Test for IPv6 capabilites
function test_ipv6()
{
- if [ -z $DEBUG_IPV6 ] ; then DEBUG_IPV6=0; fi
- if ! [ $[ $DEBUG_IPV6 & 4 ] = 0 ] ; then
- echo " Tests for IPv6"
- fi
+ # Test for IPv6 enabled kernel
+
+ if ! [ -f /proc/net/if_inet6 ]; then
+ echo "Did not find IPv6 in kernel, trying to load module"
+ modprobe ipv6
+
+ if ! [ -f /proc/net/if_inet6 ]; then
+ echo "Kernel not compiled for IPv6 - stop!"
+ return 2
+ fi
+ fi
+
+ # Test for IPv6 enabled needed binaries
+
+ if ! ifconfig -? 2>&1 | grep -q "(IPv6)"; then
+ echo "'`which ifconfig`' (net-tools) not compiled for IPv6 - stop!"
+ return 2
+ fi
+
+ if ! route -? 2>&1 | grep -q "(IPv6)"; then
+ echo "'`which route`' (net-tools) not compiled for IPv6 - stop!"
+ return 2
+ fi
+
+
+ return 0
+}
+
+##### Control IPv6 forwarding
+# Display usage
+function forwarding_ipv6_usage() {
+ echo "Usage: $0 yes|no [device]"
+}
+
+
+# Control IPv6 forwarding
+# $1: control [yes|no|on|off]
+# $2: network device (if not given, global IPv6 forwarding is set)
+function forwarding_ipv6() {
+ control=$1
+ device=$2 # maybe empty
+
+ if [ -z $control ]; then
+ echo "Missing option forwarding control'"
+ forwarding_ipv6_usage
+ return 1
+ fi
+
+ if ! [ "$control" = "yes" -o "$control" = "no" -o "$control" = "on" -o "$control" = "off" ]; then
+ echo "Don't understand forwarding control option '$control'"
+ forwarding_ipv6_usage
+ return 1
+ fi
+
+ # Device "lo" need no IPv6 configuration
+ if [ "$device" = "lo" ]; then
+ return 0;
+ fi
+
+ # Run IPv6 test
+ test_ipv6 || return
- # Test for IPv6 kernel
- if ! [ $[ $DEBUG_IPV6 & 4 ] = 0 ] ; then
- echo -n " Test kernel for IPv6..."
- fi
- if ! [ -f /proc/net/if_inet6 ]; then
- echo "Did not find IPv6 in kernel, trying to load module"
- modprobe ipv6
+ if [ "$control" = "yes" -o "$control" = "on" ]; then
+ status=1
+ else
+ status=0
+ fi
+
+ # Global control? (if no device is given)
+ if [ -z $device ]; then
+ if [ -f /proc/sys/net/ipv6/conf/all/forwarding ]; then
+ echo "$status" > /proc/sys/net/ipv6/conf/all/forwarding
+ fi
+ fi
- if ! [ -f /proc/net/if_inet6 ]; then
- if ! [ $[ $DEBUG_IPV6 & 4 ] = 0 ] ; then
- echo "Not compiled for IPv6 - stop!"
- else
- echo "Kernel not compiled for IPv6 - stop!"
- fi
- return 2
- fi
- else
- if ! [ $[ $DEBUG_IPV6 & 4 ] = 0 ] ; then
- echo " Ok!"
- fi
- fi
-
- # Test for IPv6 enabled needed binaries
- if ! [ $[ $DEBUG_IPV6 & 4 ] = 0 ] ; then
- echo n " Test binaries for IPv6 capability..."
- fi
-
- if ! ifconfig -? 2>&1 | grep -q "(IPv6)"; then
- echo "'`which ifconfig`' (net-tools) not compiled for IPv6 - stop!"
- return 2
- fi
+ # Per device control
+ if [ ! -z $device ]; then
+ if [ -f /proc/sys/net/ipv6/conf/$device/forwarding ]; then
+ echo "$string IPv6 forwarding for device '$device'"
+ echo "$status" > /proc/sys/net/ipv6/conf/$device/forwarding
+ fi
+ fi
- if ! route -? 2>&1 | grep -q "(IPv6)"; then
- echo "'`which route`' (net-tools) not compiled for IPv6 - stop!"
- return 2
- fi
-
- if ! [ $[ $DEBUG_IPV6 & 4 ] = 0 ] ; then
- echo " Ok!"
- fi
-
- # Info about executing
- if [ $[ $DEBUG_IPV6 > 0 ] = 1 ]; then
- echo " Executing in DEBUG_IPV6 mode: $DEBUG_IPV6"
- fi
}
-##### Static route configuration
+
+##### Static IPv6 route configuration
# Display usage
-function ifup_ipv6_route_usage() {
+function ifupdown_ipv6_route_usage() {
echo $"Usage: $0 IPv6-network IPv6-gateway [device]"
}
-# set route
+# Set static IPv6 route
+# $1: IPv6 network to route
+# $2: IPv6 gateway over which $1 should be routed
+# $3: Interface (optional)
function ifup_ipv6_route() {
networkipv6=$1
gatewayipv6=$2
@@ -90,31 +131,37 @@ function ifup_ipv6_route() {
if [ -z $networkipv6 ]; then
echo $"Missing option 'IPv6-network'"
- ifup_ipv6_route_usage
+ ifupdown_ipv6_route_usage
return 1
fi
if [ -z $gatewayipv6 ]; then
- echo $"Missing option 'IPv6-gateway'"
- ifup_ipv6_route_usage
+ echo "Missing option 'IPv6-gateway'"
+ ifupdown_ipv6_route_usage
return 1
fi
- # Run IPv6 test
+ # Device "lo" need no IPv6 configuration
+ if [ "$device" = "lo" ]; then
+ return 0;
+ fi
+
+ # Run IPv6 test
test_ipv6 || return
- [ $[ $DEBUG_IPV6 & 1 ] = 0 ] || set -x
if [ -z $device ]; then
- route -A inet6 add $networkipv6 gw $gatewayipv6
+ route -A inet6 add $networkipv6 gw $gatewayipv6
else
- route -A inet6 add $networkipv6 gw $gatewayipv6 dev $device
+ route -A inet6 add $networkipv6 gw $gatewayipv6 dev $device
fi
- [ $[ $DEBUG_IPV6 & 1 ] = 0 ] || set +x
}
-# delete route
+# Delete static IPv6 route
+# $1: IPv6 network to route
+# $2: IPv6 gateway over which $1 should be routed
+# $3: Interface (optional)
function ifdown_ipv6_route() {
networkipv6=$1
gatewayipv6=$2
@@ -132,210 +179,319 @@ function ifdown_ipv6_route() {
return 1
fi
- # Run IPv6 test
+ # Device "lo" need no IPv6 configuration
+ if [ "$device" = "lo" ]; then
+ return 0;
+ fi
+
+ # Run IPv6 test
test_ipv6 || return
- [ $[ $DEBUG_IPV6 & 1 ] = 0 ] || set -x
if [ -z $device ]; then
- route -A inet6 del $networkipv6 gw $gatewayipv6
+ echo "Delete IPv6 route '$networkipv6' gateway '$gatewayipv6'"
+ route -A inet6 del $networkipv6 gw $gatewayipv6
else
- route -A inet6 del $networkipv6 gw $gatewayipv6 dev $device
+ route -A inet6 del $networkipv6 gw $gatewayipv6 dev $device
fi
- [ $[ $DEBUG_IPV6 & 1 ] = 0 ] || set +x
}
-##### tunnel configuration
+##### automatic tunneling configuration
-# Display usage
-function ifup_ipv6_tunnel_usage() {
- echo $"Usage: $0 interfacename IPv4-tunneladdress IPv6-route"
+## Configure automatic tunneling up
+function ifup_ipv6_autotunnel() {
+
+ # Run IPv6 test
+ test_ipv6 || return
+
+
+ # enable IPv6-over-IPv4 tunnels
+ if ifconfig sit0 | grep -q "UP "; then
+ # already up, do nothing
+ true
+ else
+ # basic tunnel device to up
+ ifconfig sit0 up
+
+ # Switch on forwarding
+ forwarding_ipv6 on sit0
+ fi
+
+}
+
+
+## Configure automatic tunneling down
+function ifdown_ipv6_autotunnel() {
+
+ # Run IPv6 test
+ test_ipv6 || return
+
+
+ # disable IPv6-over-IPv4 tunnels (if a tunnel is no longer up)
+ if route -A inet6 -n | grep sit0 | grep -v -q "^::"; then
+ # existing routes, do nothing
+ true
+ else
+ # basic tunnel device to down
+ echo "Bring down basic tunnel device 'sit0'"
+ # Switch off forwarding
+ forwarding_ipv6 off sit0
+
+ ifconfig sit0 down
+ fi
+
+}
+
+
+##### static tunneling configuration
+
+function ifupdown_ipv6_tunnel_usage() {
+ echo "Usage: $0 interfacename IPv4-tunneladdress IPv6-route"
}
-## Configure tunnels up
+
+## Configure static tunnels up
+# $1: Interface (not needed - dummy)
+# $2: IPv4 address of foreign tunnel
+# $3: IPv6 route through this tunnel
function ifup_ipv6_tunnel() {
device=$1
addressipv4tunnel=$2
routeipv6=$3
if [ -z $device ]; then
- echo $"Missing option 'device'"
- ifup_ipv6_tunnel_usage
+ echo "Missing option 'device'"
+ ifupdown_ipv6_tunnel_usage
return 1
fi
if [ -z $addressipv4tunnel ]; then
- echo $"Missing option 'IPv4-tunneladdress'"
- ifup_ipv6_tunnel_usage
+ echo "Missing option 'IPv4-tunneladdress'"
+ ifupdown_ipv6_tunnel_usage
return 1
fi
if [ -z $routeipv6 ]; then
- echo $"Missing option 'IPv6-route'"
- ifup_ipv6_tunnel_usage
+ echo "Missing option 'IPv6-route'"
+ ifupdown_ipv6_tunnel_usage
return 1
fi
- # Run IPv6 test
+ # Run IPv6 test
test_ipv6 || return
- [ $[ $DEBUG_IPV6 & 1 ] = 0 ] || set -x
- # enable IPv6-over-IPv4 tunnels
- if ifconfig sit0 | grep -q "UP "; then
- # already up, do nothing
- true
- else
- # basic tunnel device to up
- if [ $[ $DEBUG_IPV6 & 2 ] = 0 ] ; then
- ifconfig sit0 up
- fi
- fi
-
- if [ $[ $DEBUG_IPV6 & 2 ] = 0 ]; then
- # Set up a tunnel
+ # enable general IPv6-over-IPv4 tunneling
+ ifup_ipv6_autotunnel
+
+ # Set up a tunnel
route -A inet6 add $routeipv6 gw ::$addressipv4tunnel dev sit0
- fi
- [ $[ $DEBUG_IPV6 & 1 ] = 0 ] || set +x
}
-## Configure tunnels down
+## Configure static tunnels down
+# $1: Interface (not used - dummy)
+# $2: IPv4 address of foreign tunnel
+# $3: IPv6 route through this tunnel
function ifdown_ipv6_tunnel() {
device=$1
addressipv4tunnel=$2
routeipv6=$3
if [ -z $device ]; then
- echo $"Missing option 'device'"
- ifup_ipv6_tunnel_usage
+ echo "Missing option 'device'"
+ ifupdown_ipv6_tunnel_usage
return 1
fi
if [ -z $addressipv4tunnel ]; then
- echo $"Missing option 'IPv4-tunneladdress'"
- ifup_ipv6_tunnel_usage
+ echo "Missing option 'IPv4-tunneladdress'"
+ ifupdown_ipv6_tunnel_usage
return 1
fi
if [ -z $routeipv6 ]; then
- echo $"Missing option 'IPv6-route'"
- ifup_ipv6_tunnel_usage
+ echo "Missing option 'IPv6-route'"
+ ifupdown_ipv6_tunnel_usage
return 1
fi
- # Run IPv6 test
+ # Run IPv6 test
test_ipv6 || return
- [ $[ $DEBUG_IPV6 & 1 ] = 0 ] || set -x
- if [ $[ $DEBUG_IPV6 & 2 ] = 0 ]; then
- # Set up a tunnel
+ # Set up a tunnel
route -A inet6 del $routeipv6 gw ::$addressipv4tunnel dev sit0
- fi
- # disable IPv6-over-IPv4 tunnels (if tunnel is no longer up)
- if route -A inet6 -n | grep sit0 | grep -v -q "^::"; then
- # existing routes, do nothing
- true
- else
- # basic tunnel device to down
- if [ $[ $DEBUG_IPV6 & 2 ] = 0 ] ; then
- ifconfig sit0 down
- fi
- fi
+ # disable IPv6-over-IPv4 tunneling (if no longer a tunnel is up)
+ ifdown_ipv6_autotunnel
- [ $[ $DEBUG_IPV6 & 1 ] = 0 ] || set +x
}
-
-##### Interface configuration
-# Display usage
-function ifup_ipv6_usage() {
- echo $"Usage: $0 interfacename IPv6-address IPv6-prefixlength"
+##### Interface configuration
+function ifupdown_ipv6_usage() {
+ echo "Usage: $0 interfacename IPv6-address [IPv6-prefixlength]"
}
-## Configure interfaces up
+## Add an IPv6 address for given interface
+# $1: Interface
+# $2: IPv6 address
+# $3: IPv6 prefix length (optional)
function ifup_ipv6_real() {
device=$1
address=$2
prefixlength=$3
if [ -z $device ]; then
- echo $"Missing option 'device'"
- ifup_ipv6_usage
+ echo "Missing option 'device'"
+ ifupdown_ipv6_usage
return 1
fi
+ # Device "lo" need no IPv6 configuration
+ if [ "$device" = "lo" ]; then
+ return 0;
+ fi
+
if [ -z $address ]; then
- echo $"Missing option 'IPv6-address'"
- ifup_ipv6_usage
+ echo "Missing option 'IPv6-address'"
+ ifupdown_ipv6_usage
return 1
fi
- if [ -z $prefixlength ]; then
- echo $"Missing option 'Prefixlength'"
- ifup_ipv6_usage
- return 1
+ # Test status of interface
+ if ifconfig $device | grep -q "UP "; then
+ # Interface is up
+ true
+ else
+ # no IPv4 for this interface, interface is still down, do up ...
+ ifconfig $device up
fi
- # Run IPv6 test
+ # Extract address parts
+ prefixlength_implicit="`echo $address | awk -F/ '{ print $2 }'`"
+ address_implicit="`echo $address | awk -F/ '{ print $1 }'`"
+
+ # Overwrite optional given one
+ if [ ! -z $prefixlength_implicit ]; then
+ prefixlength=$prefixlength_implicit
+ elif [ -z $prefixlength ]; then
+ prefixlength=128
+ fi
+
+ # Build IPv6 address
+ address="$address_implicit/$prefixlength"
+
+ # Run IPv6 test
test_ipv6 || return
- [ $[ $DEBUG_IPV6 & 1 ] = 0 ] || set -x
- if [ $[ $DEBUG_IPV6 & 2 ] = 0 ]; then
- ifconfig $device add $address/$length || return 2
+ # Only add, if address do not already exist
+ address_configured="`ifconfig $device | grep "inet6 addr:" | grep "$address" | awk '{ print $3 }'`"
+ address_configured_type="`ifconfig $device | grep "inet6 addr:" | grep "$address" | awk '{ print $4 }'`"
+
+ if [ "$address_configured" = "$address" ]; then
+ true
+ else
+ ifconfig $device add $address || return 2
fi
- if [ $[ $DEBUG_IPV6 & 2 ] = 0 ]; then
- route -A inet6 add $address/$prefixlength dev $device || return 2
- fi
+# route -A inet6 add $address/$prefixlength dev $device || return 2
- [ $[ $DEBUG_IPV6 & 1 ] = 0 ] || set +x
}
-## Configure interfaces down
+## Remove all IPv6 routes and addresses for given interface
+# cleanup to prevent kernel crashes
+# $1: Interface
+function ifdown_ipv6_real_all() {
+ device=$1
+
+ if [ -z $device ]; then
+ echo "Missing option 'device'"
+ echo "Usage: ifdown_ipv6_real_all interfacename"
+ return 1
+ fi
+
+ # Get all IPv6 routes through given interface and remove them
+ route -A inet6 | grep $device | while read ipv6net nexthop flags metric ref use iface args; do
+ if [ "$device" = "$iface" ]; then
+ if echo $flags | grep -v -q "A"; then
+ # Only non addrconf (automatic installed) routes should be removed
+ ifdown_ipv6_route $ipv6net $nexthop $iface
+ fi
+ fi
+ done
+
+ # Get all IPv6 addresses assigned to given interface and remove them
+ ifconfig $device | grep "inet6 addr:" | awk '{ print $3 }' | while read ipv6addr args; do
+ ifdown_ipv6_real $device $ipv6addr
+ done
+}
+
+## Remove an IPv6 address on given interface
+# $1: Interface
+# $2: IPv6 address
+# $3: IPv6 prefix length (optional)
function ifdown_ipv6_real() {
device=$1
address=$2
prefixlength=$3
if [ -z $device ]; then
- echo $"Missing option 'device'"
- ifup_ipv6_usage
+ echo "Missing option 'device'"
+ ifupdown_ipv6_usage
return 1
fi
+ # Device "lo" need no IPv6 configuration
+ if [ "$device" = "lo" ]; then
+ return 0;
+ fi
+
if [ -z $address ]; then
- echo $"Missing option 'IPv6-address'"
- ifup_ipv6_usage
+ echo "Missing option 'IPv6-address'"
+ ifupdown_ipv6_usage
return 1
fi
- if [ -z $prefixlength ]; then
- echo $"Missing option 'Prefixlength'"
- ifup_ipv6_usage
- return 1
+ # Extract address parts
+ prefixlength_implicit="`echo $address | awk -F/ '{ print $2 }'`"
+ address_implicit="`echo $address | awk -F/ '{ print $1 }'`"
+
+ # Overwrite optional given one
+ if [ ! -z $prefixlength_implicit ]; then
+ prefixlength=$prefixlength_implicit
+ elif [ -z $prefixlength ]; then
+ prefixlength=128
fi
- # Run IPv6 test
+ # Build IPv6 address
+ address="$address_implicit/$prefixlength"
+
+ # Run IPv6 test
test_ipv6 || return
- [ $[ $DEBUG_IPV6 & 1 ] = 0 ] || set -x
+#
+# route -A inet6 del $address/$prefixlength dev $device || return 2
- if [ $[ $DEBUG_IPV6 & 2 ] = 0 ]; then
- route -A inet6 del $address/$prefixlength dev $device || return 2
- fi
- if [ $[ $DEBUG_IPV6 & 2 ] = 0 ]; then
- ifconfig $device del $address/$length || return 2
+ # Only remove, if address exists and is not link-local (prevents from kernel crashing)
+ address_configured="`ifconfig $device | grep "inet6 addr:" | grep "$address" | awk '{ print $3 }'`"
+ address_configured_type="`ifconfig $device | grep "inet6 addr:" | grep "$address" | awk '{ print $4 }'`"
+ if [ ! -z "$address_configured" ]; then
+ if [ "$address_configured_type" = "Scope:Link" ]; then
+ true
+ else
+ ifconfig $device del $address || return 2
+ fi
+ else
+ true
fi
- [ $[ $DEBUG_IPV6 & 1 ] = 0 ] || set +x
}
+
generated by cgit v1.2.1 (git 2.21.0) at 2024-11-01 14:09:37 +0000