Viewing file:  save_bifc.cgi (10.23 KB) -rwxr-xr-x
Select action/file-type:
 (+) |  (+) |  (+) | Code (+) | Session (+) |  (+) | SDB (+) |  (+) |  (+) |  (+) |  (+) |  (+) |
#!/usr/bin/perl
# save_bifc.cgi
# Create, save or delete a boot-time interface
require './net-lib.pl';
&ReadParse();
@boot = &boot_interfaces();
if ($in{'delete'} || $in{'unapply'}) {
# Delete interface
&error_setup($text{'bifc_err1'});
$b = $boot[$in{'idx'}];
&can_iface($b) || &error($text{'ifcs_ecannot_this'});
if ($in{'unapply'}) {
# Shut down this interface active (if active)
&error_setup($text{'bifc_err4'});
@active = &active_interfaces();
($act) = grep { $_->{'fullname'} eq $b->{'fullname'} } @active;
if ($act) {
if (defined(&unapply_interface)) {
$err = &unapply_interface($act);
$err && &error("<pre>$err</pre>");
}
else {
&deactivate_interface($act);
}
}
}
&delete_interface($b);
&webmin_log("delete", "bifc", $b->{'fullname'}, $b);
}
else {
# Save or create interface
&error_setup($text{'bifc_err2'});
if (!$in{'new'}) {
# Modifying an interface
$oldb = $boot[$in{'idx'}];
&can_iface($oldb) || &error($text{'ifcs_ecannot_this'});
$b = { %$oldb };
}
elsif (defined($in{'virtual'})) {
# creating a virtual interface
$in{'virtual'} =~ /^\d+$/ ||
&error($text{'bifc_evirt'});
$in{'virtual'} >= $min_virtual_number ||
&error(&text('aifc_evirtmin', &html_escape($min_virtual_number)));
foreach $eb (@boot) {
if ($eb->{'name'} eq $in{'name'} &&
$eb->{'virtual'} eq $in{'virtual'}) {
&error(&text('bifc_evirtdup',
&html_escape("$in{'name'}:$in{'virtual'}")));
}
}
$b->{'name'} = $in{'name'};
$b->{'virtual'} = $in{'virtual'};
$b->{'fullname'} = $b->{'name'}.":".$b->{'virtual'};
&can_create_iface() || &error($text{'ifcs_ecannot'});
&can_iface($b) || &error($text{'ifcs_ecannot'});
}
elsif ($in{'name'} =~ /^([a-z]+\d*(s\d*)?(\.\d+)?):(\d+)$/ ||
$in{'name'} =~ /^(en[0-9a-z]+(s\d*)?(\.\d+)?):(\d+)$/) {
# also creating a virtual interface
foreach $eb (@boot) {
if ($eb->{'name'} eq $2 &&
$eb->{'virtual'} eq $4) {
&error(&text('bifc_evirtdup', &html_escape($in{'name'})));
}
}
$4 >= $min_virtual_number ||
&error(&text('aifc_evirtmin', &html_escape($min_virtual_number)));
$b->{'name'} = $1;
$b->{'virtual'} = $4;
$b->{'fullname'} = $b->{'name'}.":".$b->{'virtual'};
}
elsif ($in{'bridge'}) {
# Creating a bridge interface
$in{'name'} =~ /^\d+$/ || &error($text{'bifc_ebridge'});
$b->{'name'} = $b->{'fullname'} = "br".$in{'name'};
$b->{'bridge'} = 1;
}
elsif ($in{'bond'}) {
# Creating a bond interface
$in{'name'} =~ /^\d+$/ || &error($text{'bifc_ebond'});
$b->{'name'} = $b->{'fullname'} = "bond".$in{'name'};
$b->{'bond'} = 1;
}
elsif ($in{'name'} =~ /^[a-z]+\d*(s\d*)?(\.\d+)?$/ ||
$in{'name'} =~ /^en[0-9a-z]+(s\d*)?(\.\d+)?$/) {
# creating a real interface
$b->{'name'} = $in{'name'};
$b->{'fullname'} = $in{'name'};
}
elsif ($in{'name'} eq 'auto') {
# creating a vlan interface
$b->{'name'} = $in{'name'};
$b->{'fullname'} = $in{'name'};
}
else {
&error($text{'bifc_ename'});
}
if ($in{'new'}) {
# Check permissions
&can_create_iface() || &error($text{'ifcs_ecannot'});
&can_iface($b) || &error($text{'ifcs_ecannot'});
# Check for clash
foreach $eb (@boot) {
if ($eb->{'fullname'} eq $b->{'fullname'}) {
&error(&text('bifc_edup', &html_escape($in{'name'})));
}
}
}
# Check for address clash
$allow_clash = defined(&allow_interface_clash) ?
&allow_interface_clash($b, 1) : 1;
if (!$allow_clash && $in{'mode'} eq 'address' &&
($in{'new'} || $oldb->{'address'} ne $in{'address'})) {
($clash) = grep { $_->{'address'} eq $in{'address'} &&
$_->{'up'} } @boot;
$clash && &error(&text('aifc_eclash', &html_escape($clash->{'fullname'})));
}
# Validate and store inputs
delete($b->{'dhcp'});
delete($b->{'bootp'});
delete($b->{'address'});
if ($in{'mode'} eq 'dhcp' || $in{'mode'} eq 'bootp') {
$in{'activate'} && !defined(&apply_interface) &&
&error($text{'bifc_eapply'});
$b->{$in{'mode'}}++;
$auto++;
}
elsif ($in{'mode'} eq 'none') {
delete($b->{'address'});
}
else {
&valid_boot_address($in{'address'}) ||
&error(&text('bifc_eip', &html_escape($in{'address'})));
$b->{'address'} = $in{'address'};
}
# Set description if possible
if (defined($in{'desc'})) {
$b->{'desc'} = $in{'desc'};
}
else {
delete($b->{'desc'});
}
if ($in{'mode'} eq 'none') {
# No netmask needed
delete($b->{'netmask'});
}
elsif ($virtual_netmask && $b->{'virtual'} ne "") {
# Always use this netmask for virtuals
$b->{'netmask'} = $virtual_netmask;
}
elsif (!$access{'netmask'}) {
# Use default netmask
if ($in{'new'}) {
$b->{'netmask'} = $config{'def_netmask'} ||
"255.255.255.0";
}
}
elsif (&can_edit("netmask", $b) && $access{'netmask'}) {
$auto && !$in{'netmask'} ||
&check_netmask($in{'netmask'}, $in{'address'}) ||
&error(&text('bifc_emask', &html_escape($in{'netmask'})));
$b->{'netmask'} = $in{'netmask'};
}
if ($in{'mode'} eq 'none') {
# No broadcast needed
delete($b->{'broadcast'});
}
elsif (!$access{'broadcast'} && $in{'new'}) {
# Work out broadcast if user isn't allowed to set it
$b->{'broadcast'} = &compute_broadcast(
$b->{'address'}, $b->{'netmask'});
}
elsif ($in{'broadcast_def'}) {
# If system needs broadcast to be computed, do it here
if (!&can_broadcast_def()) {
$b->{'broadcast'} = &compute_broadcast(
$b->{'address'}, $b->{'netmask'});
}
else {
$b->{'broadcast'} = undef;
}
}
elsif (&can_edit("broadcast", $b)) {
# Manually entered broadcast
($auto && !$in{'broadcast'}) ||
&check_ipaddress($in{'broadcast'}) ||
&error(&text('bifc_ebroad', &html_escape($in{'broadcast'})));
$b->{'broadcast'} = $in{'broadcast'};
}
if (!$access{'mtu'}) {
# Use default MTU or leave unchanged
if ($in{'new'}) {
$b->{'mtu'} = $config{'def_mtu'};
}
}
elsif (&can_edit("mtu", $b) && $access{'mtu'}) {
$auto && !$in{'mtu'} ||
$in{'mtu_def'} ||
$in{'mtu'} =~ /^\d+$/ ||
&error(&text('bifc_emtu', &html_escape($in{'mtu'})));
$b->{'mtu'} = $in{'mtu_def'} ? undef : $in{'mtu'};
}
# MAC address
if (defined($in{'ether'}) && !$in{'ether_def'}) {
$in{'ether'} =~ /^[A-Fa-f0-9:]+$/ ||
&error(&text('aifc_ehard', &html_escape($in{'ether'})));
$b->{'ether'} = $in{'ether'};
}
else {
delete($b->{'ether'});
}
# Activate at boot flag
if ($in{'new'} && !$access{'up'}) {
# If cannot edit up flag, assume enabled for new interfaces
$b->{'up'} = 1;
}
elsif (&can_edit("up", $b) && $access{'up'}) {
# If can edit, respect the user
$b->{'up'} = $in{'up'};
}
# Save IPv6 addresses
if (&supports_address6($b)) {
delete($b->{'address6'});
delete($b->{'netmask6'});
delete($b->{'auto6'});
if ($in{'mode6'} eq 'auto') {
# Dynamic configuration
$b->{'auto6'} = 1;
}
elsif ($in{'mode6'} eq 'address') {
# Static addresses
@address6 = ( );
@netmask6 = ( );
%clash6 = ( );
foreach $eb (@boot) {
if ($eb->{'fullname'} ne $b->{'fullname'}) {
foreach $a6 (@{$eb->{'address6'}}) {
$clash6{$a6} = $eb;
}
}
}
for($i=0; defined($in{'address6_'.$i}); $i++) {
next if ($in{'address6_'.$i} !~ /\S/);
&check_ip6address($in{'address6_'.$i}) ||
&error(&text('aifc_eaddress6', $i+1));
$c = $clash6{$in{'address6_'.$i}};
$c && &error(&text('aifc_eclash6', $i+1, &html_escape($c->{'name'})));
push(@address6, $in{'address6_'.$i});
$in{'netmask6_'.$i} =~ /^\d+$/ &&
$in{'netmask6_'.$i} > 0 &&
$in{'netmask6_'.$i} <= 128 ||
&error(&text('aifc_enetmask6', $i+1));
push(@netmask6, $in{'netmask6_'.$i});
$clash6{$in{'address6_'.$i}} = $b;
}
@address6 || &error($text{'aifc_eaddresses6'});
delete($b->{'auto6'});
$b->{'address6'} = \@address6;
$b->{'netmask6'} = \@netmask6;
}
}
# Save bonding settings
if ($in{'bond'}) {
$b->{'bond'} = 1;
$b->{'partner'} = $in{'partner'};
$b->{'mode'} = $in{'bondmode'};
$b->{'primary'} = $in{'primary'};
$b->{'miimon'} = $in{'miimon'};
$b->{'updelay'} = $in{'updelay'};
$b->{'downdelay'} = $in{'downdelay'};
}
else {
delete($b->{'bond'});
}
# Save VLAN settings
if ($in{'vlan'}) {
$b->{'vlan'} = 1;
if ($in{'physical'}) {
$b->{'physical'} = $in{'physical'};
}
if ($in{'vlanid'}) {
$b->{'vlanid'} = $in{'vlanid'};
}
}
else {
delete($b->{'vlan'});
}
# Save bridge settings
if ($b->{'bridge'}) {
if ($in{'bridgeto'}) {
&iface_type($in{'bridgeto'}) =~ /Ethernet|Bonded/ ||
&error($text{'bifc_ebridgeto'});
($bt) = grep { $_->{'fullname'} eq $in{'bridgeto'} }
@boot;
$bt || &error($text{'bifc_ebridgeto'});
}
($bt->{'address'} || $bt->{'dhcp'} || $bt->{'bootp'}) &&
&error($text{'bifc_ebridgeto2'});
$b->{'bridgeto'} = $in{'bridgeto'};
if (&can_edit("bridgestp")) {
$b->{'bridgestp'} = $in{'bridgestp'};
}
if (&can_edit("bridgefd")) {
$b->{'bridgefd'} = $in{'bridgefd'};
}
if (&can_edit("bridgewait")) {
$b->{'bridgewait'} = $in{'bridgewait'};
}
}
else {
delete($b->{'bridgeto'});
delete($b->{'bridgestp'});
delete($b->{'bridgefd'});
delete($b->{'bridgewait'});
}
# Save the interface with its final name
if ($b->{'vlan'}) {
$b->{'fullname'} = $in{'physical'}.".".$in{'vlanid'};
}
else {
$b->{'fullname'} = $b->{'name'}.
( $b->{'virtual'} eq '' ? '' : ':'.$b->{'virtual'});
}
&save_interface($b, \@boot);
# If switching from DHCP to static and there is no default gateway
# set, copy the active one
if ($oldb{'dhcp'} && !$b{'dhcp'} && $b{'virtual'} eq '' &&
defined(&get_default_gateway) && defined(&list_routes)) {
my $oldgw = &get_default_gateway();
my ($dr) = grep { $_->{'dest'} eq '0.0.0.0' } &list_routes();
if (!$oldgw && $dr) {
&set_default_gateway($dr->{'gateway'}, $b{'name'});
}
}
if ($in{'activate'}) {
# Make this interface active (if possible)
&error_setup($text{'bifc_err3'});
$b->{'up'}++;
$b->{'address'} = &to_ipaddress($b->{'address'});
if (defined(&apply_interface)) {
$err = &apply_interface($b);
$err && &error("<pre>$err</pre>");
}
else {
if ($in{'bond'}) {
if (($gconfig{'os_type'} eq 'debian-linux') &&
($gconfig{'os_version'} >= 5)) {}
else {&load_module($b);}
}
&activate_interface($b);
}
}
&webmin_log($in{'new'} ? 'create' : 'modify',
"bifc", $b->{'fullname'}, $b);
}
&redirect("list_ifcs.cgi?mode=boot");
|