#!/bin/sh
#
# network-functions-ipv6
#
# Taken from:
# (P) & (C) 1997-2001 by Peter Bieringer <pb@bieringer.de>
#
# Version: 2001-07-17a
#
# Extended address detection is enabled, if 'ipv6calc' is installed
#  Available here: http://www.bieringer.de/linux/IPv6/tools/index.html#ipv6calc
#





# Return values
#  0 = ok
#  1 = error occurs
#  2 = not enabled, i.e. no IPv6 kernel support or switched off by configuration

##### Test for "ipv6calc" (used for better existing address detection)
EXISTS_ipv6calc=no	
	if which ipv6calc >/dev/null 2>&1; then
		if ipv6calc --if_inet62addr 3ffe04000100f1010000000000000001 40 | grep -q -v '3ffe:400:100:f101::1/64'; then
			false
		elif ipv6calc --addr2if_inet6 3ffe:400:100::1/64 | grep -q -v '3ffe0400010000000000000000000001 00 40'; then
			false
		else
			EXISTS_ipv6calc=yes
		fi
	else
		false
	fi


##### Test for IPv6 capabilites
# $1: (optional) testflag: currently supported: "testonly" (do not load a module)
test_ipv6() {
	local testflag=$1



	if ! [ -f /proc/net/if_inet6 ]; then
		if [ "$testflag" = "testonly" ]; then
			return 2
		else
			modprobe ipv6
	
			if ! [ -f /proc/net/if_inet6 ]; then
					echo $"Kernel is not compiled with IPv6 support"
				return 2
			fi
		fi
	fi

	if [ ! -d /proc/sys/net/ipv6/conf/ ]; then
		return 2
	fi


	if ! which ip 2>&1 >/dev/null; then
		echo $"Utility 'ip' (from the iproute package) doesn't exist or isn't executable - non-NBMA-styled tunneling setup won't work!"
		return 2													
	fi

	
	return 0
}


##### Get version of this function libary
getversion_ipv6_functions() {
	local version_ipv6_functions="`cat /etc/sysconfig/network-scripts/network-functions-ipv6 | grep "^# Version:" | awk '{ print $3 }' | sed 's/-//g' | sed 's/[A-Za-z]*$//g'`"
	echo $version_ipv6_functions
}

##### Control IPv6 forwarding

# Control IPv6 forwarding
#  $1: control [yes|no|on|off]
#  $2: network device (if not given, global IPv6 forwarding is set) [OBSOLETE]
forwarding_ipv6() {
	local fw_control=$1
	local fw_device=$2		# maybe empty

	if [ -z "$fw_control" ]; then
		echo $"Missing parameter 'forwarding control' (arg 1)"
		return 1
	fi

	if ! [ "$fw_control" = "yes" -o "$fw_control" = "no" -o "$fw_control" = "on" -o "$fw_control" = "off" ]; then
		echo $"Don't understand forwarding control parameter '$fw_control' (arg 1)"
		return 1
	fi
	
	test_ipv6 || return 2   


	if [ "$fw_control" = "yes" -o "$fw_control" = "on" ]; then
		local status=1
	else
		local status=0
	fi

	# Global control? (if no device is given)
	if [ -z "$fw_device" ]; then
			sysctl -w net.ipv6.conf.all.forwarding=$status >/dev/null
	fi
	
	# Per device control (not implemented in kernel)
	if [ ! -z "$fw_device" ]; then
		echo $"IPv6 forwarding per device cannot be controlled via sysctl - use netfilter6 instead!"
	fi
	
}


##### Static IPv6 route configuration

# Set static IPv6 route
#  $1: IPv6 network to route
#  $2: IPv6 gateway over which $1 should be routed (if "::", gw will be skipped)
#  $3: Interface (optional)
ifup_ipv6_route() {
	local networkipv6=$1
	local gatewayipv6=$2
	local device=$3		# maybe empty

	if [ -z "$networkipv6" ]; then
		echo $"Missing parameter 'IPv6-network' (arg 1)"
		return 1
	fi

	if [ -z "$gatewayipv6" ]; then
		echo $"Missing parameter 'IPv6-gateway' (arg 2)"
		return 1
	fi

	test_ipv6 || return 2   

	testipv6_valid $networkipv6 || return 2
	testipv6_valid $gatewayipv6 || return 2

	
	if [ -z "$device" ]; then
			local output="`LC_ALL=C route -A inet6 add $networkipv6 gw $gatewayipv6 2>&1`"
	else
		if [ "$gatewayipv6" = "::" ]; then
				local output="`LC_ALL=C route -A inet6 add $networkipv6 dev $device 2>&1`"
		else
				local output="`LC_ALL=C route -A inet6 add $networkipv6 gw $gatewayipv6 dev $device 2>&1`"
		fi
	fi

	if [ $? -ne 0 ]; then
		if echo $output | grep -i -q 'SIOCADDRT: File exists';  then
			true
		else
			echo $output
			return 2
		fi
	fi

	return 0
}

# Delete a static IPv6 route
#  $1: IPv6 network to route
#  $2: IPv6 gateway over which $1 should be routed (if "::", gw will be skipped)
#  $3: Interface (optional)
ifdown_ipv6_route() {
	local networkipv6=$1
	local gatewayipv6=$2
	local device=$3		# maybe empty

	if [ -z "$networkipv6" ]; then
		echo $"Missing parameter 'IPv6-network' (arg 1)"
		return 1
	fi

	if [ -z "$gatewayipv6" ]; then
		echo $"Missing parameter 'IPv6-gateway' (arg 2)"
		return 1
	fi

	test_ipv6 || return 2

	# Test, whether given IPv6 address is valid	
	testipv6_valid $networkipv6 || return 2
	testipv6_valid $gatewayipv6 || return 2

	
	if [ -z "$device" ]; then
			local output="`LC_ALL=C route -A inet6 del $networkipv6 gw $gatewayipv6 2>&1`"
	else
		if [ "$gatewayipv6" = "::" ]; then
				local output="`LC_ALL=C route -A inet6 del $networkipv6 dev $device 2>&1`"
		else
				local output="`LC_ALL=C route -A inet6 del $networkipv6 gw $gatewayipv6 dev $device 2>&1`"
		fi
	fi

	if [ $? -ne 0 ]; then
		if echo $output | grep -i -q 'SIOCDELRT: No such process'; then
			true
		else
			echo $output
			return 2
		fi
	fi

	return 0
}

# Delete all static IPv6 routes through a given interface
#  $1: Interface
#  $2: Gateway match (optional)
ifdown_ipv6_route_all() {
	local device=$1
	local gatewaymatch=$2

	if [ -z "$device" ]; then
		echo $"Missing parameter 'device' (arg 1)"
		return 1
	fi

	test_ipv6 || return 2   


	# Get all IPv6 routes through given interface and remove them
	LC_ALL=C route -A inet6 -n | grep "$device\W*$" | while read ipv6net nexthop flags metric ref use iface args; do
		if [ "$iface" = "$device" ]; then
			if [ ! -z "$gatewaymatch" ]; then
				# Test if given gateway matches
				if [ "$gatewaymatch" != "$nexthop" ]; then
					continue
				fi
			fi
			# Only non addrconf (automatic installed) routes should be removed
			if echo $flags | grep -v -q "A"; then
					local output="`LC_ALL=C route -A inet6 del $ipv6net gw $nexthop dev $iface 2>&1`"
			fi
		fi
	done

}


##### automatic tunneling configuration

## Configure automatic tunneling up
ifup_ipv6_autotunnel() {
	test_ipv6 || return 2 


	# enable IPv6-over-IPv4 tunnels
	if test_interface_status sit0; then
		true
	else
		# bring up basic tunnel device
			ifconfig sit0 up

			if ! test_interface_status sit0; then
				echo $"Tunnel device 'sit0' enabling didn't work - FATAL ERROR!"
				return 2
			fi

			# Set sysctls proper (regardless "default")
			sysctl -w net.ipv6.conf.sit0.forwarding=1 >/dev/null
			sysctl -w net.ipv6.conf.sit0.accept_ra=0 >/dev/null
			sysctl -w net.ipv6.conf.sit0.accept_redirects=0 >/dev/null
	fi
	
	return 0
}


## Configure automatic tunneling down
ifdown_ipv6_autotunnel() {
	test_ipv6 || return 2


	if test_interface_status sit0; then

		# disable IPv6-over-IPv4 tunnels (if a tunnel is no longer up)
		if LC_ALL=C route -A inet6 -n | grep "sit0\W*$" | awk '{ print $2 }' | grep -v -q "^::$"; then
			# still existing routes, skip shutdown of sit0
			true
		elif LC_ALL=C ip addr show dev sit0 | grep inet6 | awk '{ print $2 }' | grep -v -q '^::'; then
			# still existing IPv6 addresses, skip shutdown of sit0
			true
		else
			# take down basic tunnel device
				sysctl -w net.ipv6.conf.sit0.forwarding=0 >/dev/null
				sysctl -w net.ipv6.conf.sit0.accept_ra=0 >/dev/null
				sysctl -w net.ipv6.conf.sit0.accept_redirects=0 >/dev/null
			
				ifconfig sit0 down

				if test_interface_status sit0; then
					echo $"Tunnel device 'sit0' is still up - FATAL ERROR!"
					return 2
				fi
		fi
	fi

	return 0
}	


##### static NBMA-styled tunnel configuration

## Configure static tunnels up
#  $1: Interface (not needed - dummy)
#  $2: IPv4 address of foreign tunnel
#  $3: IPv6 route through this tunnel
ifup_ipv6_tunnel() {
	local device=$1
	local addressipv4tunnel=$2
	local routeipv6=$3

	if [ -z "$device" ]; then
		echo $"Missing parameter 'device' (arg 1)"
		return 1
	fi

	if [ -z "$addressipv4tunnel" ]; then
		echo $"Missing parameter 'IPv4-tunnel address' (arg 2)"
		return 1
	fi

	if [ -z "$routeipv6" ]; then
		echo $"Missing parameter 'IPv6-route' (arg 3)"
		return 1
	fi

	test_ipv6 || return 2


	# Test, whether given IPv6 address is valid	
	testipv6_valid $routeipv6 || return 2
	

	# enable general IPv6-over-IPv4 tunneling
	ifup_ipv6_autotunnel
	if [ $? -ne 0 ]; then
		return 2
	fi
	
   		# Set up a tunnel
		ifup_ipv6_route $routeipv6 ::$addressipv4tunnel sit0
		if [ $? -ne 0 ]; then
			return 2
		fi

	return 0
}	


## Configure static tunnels down
#  $1: Interface (not used - dummy)
#  $2: IPv4 address of foreign tunnel
#  $3: IPv6 route through this tunnel
ifdown_ipv6_tunnel() {
	local device=$1
	local addressipv4tunnel=$2
	local routeipv6=$3

	if [ -z "$device" ]; then
		echo $"Missing parameter 'device' (arg 1)"
		return 1
	fi

	if [ -z "$addressipv4tunnel" ]; then
		echo $"Missing parameter 'IPv4-tunnel address' (arg 2)"
		return 1
	fi

	if [ -z "$routeipv6" ]; then
		echo $"Missing parameter 'IPv6-route' (arg 3)"
		return 1
	fi

	test_ipv6 || return 2



		# Delete a NBMA-styled tunnel
		ifdown_ipv6_route $routeipv6 ::$addressipv4tunnel sit0
		if [ $? -ne 0 ]; then
			return 2
		fi

	# disable IPv6-over-IPv4 tunneling (if this was the last tunnel)
	ifdown_ipv6_autotunnel

}	


## Remove all IPv6 tunnels for a given tunnel endpoint
#  $1: Interface (not used - dummy)
#  $2: IPv4-tunnel address 
ifdown_ipv6_tunnel_all() {
	local idtuall_device=$1
	local idtuall_tunnel=$2

	if [ -z "$idtuall_device" ]; then
		echo $"Missing parameter 'device' (arg 1)"
		return 1
	fi

	if [ -z "$idtuall_tunnel" ]; then
		echo $"Missing parameter 'IPv4-tunnel address' (arg 2)"
		return 1
	fi

	test_ipv6 || return 2


	# Get all IPv6 routes through given interface and remove them
	LC_ALL=C route -A inet6 -n | grep "::$idtuall_tunnel" | while read ipv6net nexthop flags metric ref use iface args; do
		if [ "::$idtuall_tunnel" = "$nexthop" ]; then
			if echo $flags | grep -v -q "A"; then
				# Only non addrconf (automatic installed) routes should be removed
				ifdown_ipv6_tunnel $idtuall_device $idtuall_tunnel $ipv6net
			fi
		fi
	done

	# disable IPv6-over-IPv4 tunneling (if this was the last tunnel)
	ifdown_ipv6_autotunnel
	return 0
}


##### Test, whether an IPv6 address exists on an interface
# $1: Device for testing
# $2: Address to test (without prefix)
# $3: Prefix of address $1
# return values: 1:problem, 10:not exists, 11:exits
test_ipv6_address_exists() {
	local testdevice=$1
	local testaddr=$2
	local testprefix=$3

	if [ -z "$testaddr" ]; then
		echo $"Missing parameter 'IPv6AddrToTest' (arg 2)"
		return 1
	fi


	if [ "$EXISTS_ipv6calc" = "yes" ]; then
		# Using ipv6calc and compare against /proc/net/if_inet6

		local convertresult="`ipv6calc --addr2if_inet6 $testaddr/$testprefix`"
		# Split in address, scope and prefix length
		local test_addr="`echo $convertresult | awk '{ print $1 }'`"
		local test_scope="`echo $convertresult | awk '{ print $2 }'`"
		local test_prefixlength="`echo $convertresult | awk '{ print $3 }'`"

		if [ -z "$test_prefixlength" ]; then
			local testresult="`grep "$test_addr .. .. $test_scope .." /proc/net/if_inet6 | grep $testdevice$`"
		else
			local testresult="`grep "$test_addr .. $test_prefixlength $test_scope .." /proc/net/if_inet6 | grep $testdevice$`"
		fi
		if [ ! -z "$testresult" ]; then
			return 11
		else
			return 10
		fi
	else
		# low budget version, only works if given address is in equal form like "ip" displays
		local testresult="`LC_ALL=C ip addr show dev $testdevice | grep inet6 | awk '{ print $2 }' | grep -i "^$testaddr/$testprefix$"`"
		if [ ! -z "$testresult" ]; then
			return 11
		else
			return 10
		fi
	fi
}

##### Interface configuration

## Add an IPv6 address for given interface
#  $1: Interface 
#  $2: IPv6 address
ifup_ipv6_real() {
	local device=$1
	local address=$2

	if [ -z "$device" ]; then
		echo $"Missing parameter 'device' (arg 1)"
		ifupdown_ipv6_usage
		return 1
	fi

	if [ -z "$address" ]; then
		echo $"Missing parameter 'IPv6-address' (arg 2)"
		ifupdown_ipv6_usage
		return 1
	fi

	test_ipv6 || return 2

	testipv6_valid $address || return 2

	if test_interface_status $device; then
		true
	else
			ifconfig $device up

			if ! test_interface_status $device; then
				echo $"Device '$device' enabling didn't work - FATAL ERROR!"
				return 2
			fi
	fi


	# Extract address parts
	local prefixlength_implicit="`echo $address | awk -F/ '{ print $2 }'`"
	local address_implicit="`echo $address | awk -F/ '{ print $1 }'`"

	# Only add if address does not already exist
	test_ipv6_address_exists $device $address_implicit $prefixlength_implicit
	retval=$?
	if [ $retval -lt 10 ]; then
		return 2
	fi

	if [ $retval -eq 11 ]; then
		true
	else
			ifconfig $device add $address || return 2
	fi

	return 0
}


## Remove all IPv6 routes and addresses for given interface
#   cleanup to prevent kernel crashes
#  $1: Interface 
ifdown_ipv6_real_all() {
	local device=$1

	if [ -z "$device" ]; then
		echo $"Missing parameter 'device' (arg 1)"
		return 1
	fi

	test_ipv6 || return 2


	# Remove all IPv6 routes through this device (but not "lo")
		if [ "$device" != "lo" ]; then
	        	ip -6 route flush dev $device >/dev/null 2>&1
		fi

	# Remove all IPv6 addresses on this interface
		ip -6 addr flush dev $device >/dev/null 2>&1

	return 0
}


## Remove an IPv6 address on given interface
#  $1: Interface 
#  $2: IPv6 address
ifdown_ipv6_real() {
	local device=$1
	local address=$2

	if [ -z "$device" ]; then
		echo $"Missing parameter 'device' (arg 1)"
		ifupdown_ipv6_usage
		return 1
	fi

	if [ -z "$address" ]; then
		echo $"Missing parameter 'IPv6-address' (arg 2)"
		ifupdown_ipv6_usage
		return 1
	fi

	test_ipv6 || return 2

	testipv6_valid $address || return 2


	# Extract address parts
	local prefixlength_implicit="`echo $address | awk -F/ '{ print $2 }'`"
	local address_implicit="`echo $address | awk -F/ '{ print $1 }'`"

	# Only remove, if address exists and is not link-local (prevents from kernel crashing)
	test_ipv6_address_exists $device $address_implicit $prefixlength_implicit
	local retval=$?
	if [ $retval -lt 10 ]; then
		return 2
	fi

	if [ $retval -eq 11 ]; then
			ifconfig $device del $address || return 2
	else
		true
	fi
    
	return 0
}


##### Some address test functions

## Test a given IPv6 address for valid
#  $1: IPv6 address
#  Return code =0:valid  1:not valid  2:general problem
testipv6_valid() {
	local testipv6addr_valid=$1


	if [ -z "$testipv6addr_valid" ]; then
		return 2
	fi

	# Extract parts
	local prefixlength_implicit="`echo $testipv6addr_valid | awk -F/ '{ print $2 }'`"
	local address_implicit="`echo $testipv6addr_valid | awk -F/ '{ print $1 }'`"

	if [ "$EXISTS_ipv6calc" = "yes" ]; then
		if ! ipv6calc --addr2uncompaddr $testipv6addr_valid >/dev/null 2>&1; then
			echo $"Given IPv6 address '$testipv6addr_valid' is not valid"
			return 1
		fi
	else
		# Test for a valid format
		if ! echo "$address_implicit" | egrep -q '^[a-fA-F0-9:\.]*$'; then
			echo $"Given IPv6 address '$testipv6addr_valid' is not valid"
			return 1
		fi
	fi

	# Test for prefix length
	if [ -z "$prefixlength_implicit" ]; then
		if echo "$testipv6addr_valid" | grep "/$"; then
			# Trailing "/", but no value
			echo $"Missing 'prefix length' for given address '$testipv6addr_valid'"
			return 1
		else
			return 0
		fi
	elif [ $prefixlength_implicit -lt 0 -o $prefixlength_implicit -gt 128 ]; then
		echo $"'prefix length' on given address '$testipv6addr_valid' is out of range (0-128)"
		return 1
	fi

	return 0
}




## Test a given IPv4 address for not a private but unicast one
#  $1: IPv4 address
#  Return code =0:ok  1:private or not unicast  2:general problem
testipv4_globalusable() {
	local testipv4addr_globalusable=$1


	if [ -z "$testipv4addr_globalusable" ]; then
		return 2
	fi


	# Test for a globally usable IPv4 address now
		# test 0.0.0.0/8
		ipcalc --network $testipv4addr_globalusable 255.0.0.0   | grep -q "NETWORK=0\.0\.0\.0"     && return 1
		# test 10.0.0.0/8 (private)
		ipcalc --network $testipv4addr_globalusable 255.0.0.0   | grep -q "NETWORK=10\.0\.0\.0"    && return 1
		# test 127.0.0.0/8 (loopback)
		ipcalc --network $testipv4addr_globalusable 255.0.0.0   | grep -q "NETWORK=127\.0\.0\.0"    && return 1
		# test 169.254.0.0/16 (DHCP link local)
		ipcalc --network $testipv4addr_globalusable 255.255.0.0 | grep -q "NETWORK=169\.254\.0\.0"  && return 1
		# test 172.16.0.0/12 (private)
		ipcalc --network $testipv4addr_globalusable 255.240.0.0 | grep -q "NETWORK=172\.16\.0\.0"  && return 1
		# test 192.168.0.0/16 (private)
		ipcalc --network $testipv4addr_globalusable 255.255.0.0 | grep -q "NETWORK=192\.168\.0\.0" && return 1
		# test 224.0.0.0/3 (multicast and reserved, broadcast)
		ipcalc --network $testipv4addr_globalusable 224.0.0.0   | grep -q "NETWORK=224\.0\.0\.0"   && return 1
	
	return 0
}


## Test a given device for status
#  $1: device name
#  Return code =0:UP  1:not UP  2:not exists
test_interface_status() {
	local device=$1

	if [ -z "$device" ]; then
		echo $"Missing parameter 'device'"
		echo $"Usage: ifdown_ipv6to4_all interfacename"
		return 1
	fi

	# Test if device exists
	if ! LC_ALL=C ifconfig $device >/dev/null 2>&1 ; then
		return 2
	fi

	# Test if device is up
	if LC_ALL=C ifconfig $device 2>&1 | grep -q "UP "; then
		return 0
	else
		return 1
	fi
}


## Build 6to4 prefix
#  $1: IPv4 address
# RetVal: 6to4address
# Returncode 0=ok  1=failure  2=general problem
create6to4prefix() {
	local ipv4addr=$1


	local major1="`echo $ipv4addr | awk -F. '{ print $1 }'`"
	local minor1="`echo $ipv4addr | awk -F. '{ print $2 }'`"
	local major2="`echo $ipv4addr | awk -F. '{ print $3 }'`"
	local minor2="`echo $ipv4addr | awk -F. '{ print $4 }'`"

	if [ -z "$major1" -o -z "$minor1" -o -z "$major2" -o -z "$minor2" ]; then
		return 2
	fi

	if [ $major1 -eq 0 ]; then
		local block1="`printf "%x" $minor1`"	
	else 
		local block1="`printf "%x%02x" $major1 $minor1`"
	fi 
	if [ $major2 -eq 0 ]; then
		local block2="`printf "%x" $minor2`"	
	else 
		local block2="`printf "%x%02x" $major2 $minor2`"
	fi 

	local prefix6to4="2002:$block1:$block2"

	echo "$prefix6to4"
	return 0
}


##### 6to4 tunneling setup

## Configure 6to4 tunneling up
#  $1: Interface (not needed - dummy)
#  $2: global IPv4 address of local interface
#  $3: IPv6 suffix for 6to4 prefix (optional, default is "1")
# ReturnCodes 0=ok  1=failure  2=general problem
ifup_ipv6to4() {
	local device=$1  # dummy
	local localipv4=$2
	local localipv6to4suffix=$3

	if [ -z "$device" ]; then
		echo $"Missing parameter 'device' (arg 1)"
		ifupdown_ipv6to4_usage
		return 1
	fi

	if [ -z "$localipv4" ]; then
		echo $"Missing parameter 'local IPv4 address' (arg 2)"
		ifupdown_ipv6to4_usage
		return 1
	fi

	test_ipv6 || return 2


	# Generate 6to4 address
	local prefix6to4="`create6to4prefix $localipv4`"
	if [ $? -ne 0 -o -z "$prefix6to4" ]; then
		return 2
	fi

	if [ -z "$localipv6to4suffix" ]; then
		local address6to4="${prefix6to4}::1/16"
	else
		local address6to4="${prefix6to4}::${localipv6to4suffix}/16"
	fi

	# Enable general IPv6-over-IPv4 tunneling
	ifup_ipv6_autotunnel

	ifup_ipv6_real sit0 $address6to4	
	if [ $? -ne 0 ]; then
		return 2
	fi

	return 0
}	


## Configure all 6to4 tunneling down
#  $1: Interface (not needed - dummy)
# ReturnCodes 0=ok  1=failure  2=general problem
ifdown_ipv6to4_all() {
	local device=$1  # dummy

	if [ -z "$device" ]; then
		echo $"Missing parameter 'device' (arg 1)"
		return 1
	fi

	test_ipv6 || return 2


	# Get all configured 6to4 addresses and delete them
	LC_ALL=C ip addr show dev sit0 | grep inet6 | awk '{ print $2 }' | grep "^2002:" | while read ipv6to4addr; do
		ifdown_ipv6_real sit0 $ipv6to4addr
	done

	# Try to disable general IPv6-over-IPv4 tunneling
	ifdown_ipv6_autotunnel

}	


## Configure 6to4 tunneling down
#  $1: Interface (not needed - dummy)
#  $2: global IPv4 address of local interface
# ReturnCodes 0=ok  1=failure  2=general problem
ifdown_ipv6to4() {
	local device=$1  # dummy
	local localipv4=$2

	if [ -z "$device" ]; then
		echo $"Missing parameter 'device' (arg 1)"
		return 1
	fi

	if [ -z "$localipv4" ]; then
		echo $"Missing parameter 'local IPv4 address' (arg 2)"
		return 1
	fi

	test_ipv6 || return 2


	# generate 6to4 address
	local prefix6to4="`create6to4prefix $localipv4`"
	echo $"Generated 6to4 prefix '$prefix6to4' from '$localipv4'"
	if [ $? -ne 0 -o -z "$prefix6to4" ]; then
		return 2
	fi

	if [ -z "$localipv6to4suffix" ]; then
		local address6to4="$prefix6to4::1/16"
	else
		local address6to4="${prefix6to4}::${localipv6to4suffix}/16"
	fi

	ifdown_ipv6_real sit0 $address6to4	
	if [ $? -ne 0 ]; then
		return 2
	fi

	# Try to disable general IPv6-over-IPv4 tunneling
	ifdown_ipv6_autotunnel
	if [ $? -ne 0 ]; then
		return 2
	fi

	return 0
}	


##### static tunnel device configuration

## Configure a static tunnel device up
#  $1: Interface 
#  $2: IPv4 address of foreign tunnel
#  $3: Local IPv6 address of a P-t-P tunnel (optional)
ifup_ipv6_tunneldev() {
	local device=$1
	local addressipv4tunnel=$2
	local addressipv6local=$3

	if [ -z "$device" ]; then
		echo $"Missing parameter 'device' (arg 1)"
		return 1
	fi

	if [ -z "$addressipv4tunnel" ]; then
		echo $"Missing parameter 'IPv4-tunnel address' (arg 2)"
		return 1
	fi

	test_ipv6 || return 2   



		if ! test_interface_status $device; then
			local ttldefault="`sysctl net.ipv4.ip_default_ttl | awk '{ print $3 }'`"
			if [ -z "$ttldefault" ]; then
				local ttldefault=64
			fi

			# Test whether remote IPv4 address was already applied to another tunnel (does not catch IPv4 addresses with leading 0's)
			LC_ALL=C ip tunnel show | grep $addressipv4tunnel | while read dev type tag remote tag local tag ttl rest; do
				local devnew="`echo $dev | sed 's/:$//g'`"
				if [ "$remote" = "$addressipv4tunnel" ]; then
					echo $"Given remote address '$addressipv4tunnel' on tunnel device '$device' is already configured on device '$devnew' - FATAL ERROR!"
					return 2
				fi
			done
			if [ $? -ne 0 ]; then
				return 2
			fi

			ip tunnel add $device mode sit ttl $ttldefault remote $addressipv4tunnel

			# Test, whether "ip tunnel show" works without error
			ip tunnel show $device >/dev/null 2>&1
			if [ $? -ne 0 ]; then
				echo $"Tunnel device '$device' creation didn't work - ERROR!"
				return 2
			fi

			# Test, whether "ip tunnel show" reports valid content
			if ! ip tunnel show $device | grep -q "remote"; then
				echo $"Tunnel device '$device' creation didn't work - ERROR!"
				return 2
			fi

			ifconfig $device up

			if ! test_interface_status $device; then
				echo $"Tunnel device '$device' bringing up didn't work - ERROR!"
				return 2
			fi

			# Set sysctls proper (regardless "default")
			sysctl -w net.ipv6.conf.$device.forwarding=1 >/dev/null
			sysctl -w net.ipv6.conf.$device.accept_ra=0 >/dev/null
			sysctl -w net.ipv6.conf.$device.accept_redirects=0 >/dev/null

			if [ ! -z "$addressipv6local" ]; then
				# Setup P-t-P address
				ifup_ipv6_real $device $addressipv6local
				if [ $? -ne 0 ]; then
					return 2
				fi
			fi
		else
			false
		fi

	return 0
}	


## Configure a static tunnel device down
#  $1: Interface
ifdown_ipv6_tunneldev() {
	local device=$1

	if [ -z "$device" ]; then
		echo $"Missing parameter 'device' (arg 1)"
		return 1
	fi

	test_ipv6 || return 2   


	if test_interface_status $device; then
		ifdown_ipv6_real_all $device
	else
		if [ "$device" != "sit0" ]; then
			false
		fi
	fi

	if [ "$device" != "sit0" ]; then
		if ip tunnel | grep -q "^$device:" ; then
				ip tunnel del $device

				if test_interface_status $device; then
					false
				fi
		else												
			false
		fi
	fi

	return 0
}	


## Set IPv6 MTU for a device
#  $1: Interface
#  $2: IPv6 MTU
ipv6_set_mtu() {
	local device=$1
	local ipv6_mtu=$2

	if [ -z "$device" ]; then
		echo $"Missing parameter 'device' (arg 1)"
		return 1
	fi

	if [ -z "$ipv6_mtu" ]; then
		echo $"Missing parameter 'IPv6 MTU' (arg 2)"
		return 1
	fi

	# Check range
	if [ $ipv6_mtu -lt 1280 -o $ipv6_mtu -gt 65535 ]; then
		echo $"Given IPv6 MTU is out of range"
		return 1
	fi

		sysctl -w net.ipv6.conf.$device.mtu=$ipv6_mtu >/dev/null
}