| 1234567891011121314151617181920212223242526272829303132333435363738394041 |
- #!/bin/sh
- #
- log="logger -t p1client-up[$$]"
- . /lib/functions.sh
- . /etc/racoon/functions.sh
- if [ -z "$SPLIT_INCLUDE_CIDR" ]; then
- $log "Connection without server-pushed routing is not supported"
- exit 1
- fi
- $log "Setting up tunnel to server $REMOTE_ADDR"
- $log "Making tunnel(-s) to $SPLIT_INCLUDE_CIDR through $INTERNAL_ADDR4"
- get_fieldval data dev "$(/usr/sbin/ip route get $REMOTE_ADDR)"
- ip address add $INTERNAL_ADDR4/32 dev $data
- config_load racoon
- config_get confIntZone racoon int_zone lan
- config_get confExtZone racoon ext_zone wan
- data=$(get_zoneiflist $confIntZone)
- if [ -n "$data" ]; then
- for item in $data ; do
- network_get_subnet locnet $item
- if [ -n "$locnet" ]; then
- manage_sa add "$locnet" "$SPLIT_INCLUDE_CIDR" $REMOTE_ADDR $INTERNAL_ADDR4
- else
- $log "Can not find subnet on interface $item"
- fi
- done
- else
- $log "Can not find interfaces in zone $confIntZone"
- fi
- manage_fw add $confIntZone $confExtZone "$INTERNAL_ADDR4 $SPLIT_INCLUDE_CIDR"
- # EOF /etc/racoon/p1client-up
|
