blob: 07ef6dc753fc536a6bcea4b38d4e142481c635f4 [file] [log] [blame]
lh9ed821d2023-04-07 01:36:19 -07001#!/bin/sh
2test_log=`nv get telog_path`
3if [ "$test_log" == "" ]; then
4 test_log=`nv get path_log`"te.log"
5fi
6
7c_id=$1
8path_conf=`nv get path_conf`
9path_tmp=`nv get path_tmp`
10dhcp6s_conf=$path_conf/dhcp6s$c_id.conf
11radvd_conf=$path_conf/radvd$c_id.conf
12ndp_log=$path_conf/ndp$c_id.log
13radvd_pidfile=$path_tmp/radvd$c_id.pid
14
15ps_if=`nv get pswan`$c_id
16eth_if=`nv get "ps_ext"$c_id`
17br_if="br"$c_id
18
19echo "Info: psext_updown_ipv6.sh $ps_if $eth_if $br_if start" >> $test_log
20
21prefix_len=`nv get $ps_if"_ipv6_prefix_len"`
22br_ip=`nv get $br_if"_ipv6_ip"`
23ps_ip=`nv get $ps_if"_ipv6_ip"`
24pdp_ip=`nv get $ps_if"_ipv6_pdp"`
25local_ipv6_addr=`nv get $ps_if"_ipv6_local"`
26
27#获取ip并配置ps、eth
28linkup_get_addr()
29{
30 #disable the forwarding to send RS and not set the addr when receive ra packet
31 echo 0 > /proc/sys/net/ipv6/conf/all/forwarding
32 echo 0 > /proc/sys/net/ipv6/conf/$ps_if/accept_ra
33 echo 0 > /proc/sys/net/ipv6/conf/$eth_if/accept_ra
34 echo 0 > /proc/sys/net/ipv6/conf/$br_if/accept_ra
35 #call the slaac program to get the prefix addr
36 ifconfig $ps_if up 2>>$test_log
37 if [ $? -ne 0 ];then
38 echo "Error: ifconfig $ps_if up failed." >> $test_log
39 fi
40 ip -6 addr add $local_ipv6_addr/64 dev $ps_if 2>>$test_log
41 brctl addbr $br_if
42 brctl setfd $br_if 0.1
43 ifconfig $br_if up 2>>$test_log
44 if [ $? -ne 0 ];then
45 echo "Error: ifconfig $br_if up failed." >> $test_log
46 fi
47 ip -6 addr add $br_ip/64 dev $br_if
48 ip -6 addr add $ps_ip/126 dev $ps_if 2>>$test_log
49 if [ $? -ne 0 ];then
50 echo "Error: ip -6 addr add $ps_ip/126 dev $ps_if failed." >> $test_log
51 fi
52 nv set $ps_if"_ipv6_state"="working"
53}
54
55#路由规则,ps与eth级联
56linkup_route_set()
57{
58 echo 0 > /proc/sys/net/ipv6/conf/all/forwarding
59
60 marknum=`expr $c_id + 60`
61 ip6tables -t mangle -A PREROUTING -i $ps_if -j MARK --set-mark $marknum
62 rt_num=`expr $c_id + 160`
63 ip -6 route add default dev $br_if table $rt_num
64 ip -6 rule add to $pdp_ip/64 fwmark $marknum table $rt_num
65
66 marknum=`expr $c_id + 50`
67 ip6tables -t mangle -A PREROUTING -i $br_if -j MARK --set-mark $marknum
68 rt_num=`expr $c_id + 150`
69 ip -6 route add default dev $ps_if table $rt_num
70 ip -6 rule add from $pdp_ip/64 fwmark $marknum table $rt_num
71
72 ip6tables -t filter -A FORWARD -p icmpv6 --icmpv6-type 135 -j DROP
73
74 ip -6 route flush cache
75
76 #这句设完,里面可以ping通外网了
77 echo "Info: route_set ps_ip=$ps_ip" >> $test_log
78 #ip -6 route add default via $ps_ip dev $ps_if
79 ip -6 route add default dev $ps_if 2>>$test_log
80 if [ $? -ne 0 ];then
81 echo "Error: ip -6 route add default dev $ps_if failed." >> $test_log
82 fi
83
84 #enable ipv6 packet forwarding
85 echo 1 > /proc/sys/net/ipv6/conf/all/forwarding
86 echo 1 > /proc/sys/net/ipv6/conf/$ps_if/accept_ra
87 echo 1 > /proc/sys/net/ipv6/conf/$eth_if/accept_ra
88 echo 1 > /proc/sys/net/ipv6/conf/$br_if/accept_ra
89 #enable ipv6 neigh discovery proxy
90 echo 1 > /proc/sys/net/ipv6/conf/all/proxy_ndp
91
92 zte_ndp -a -s $br_if -d $ps_if -l $ndp_log -p &
93}
94
95linkup_dhcpv6_set()
96{
97 dhcp6s -dDf -c $dhcp6s_conf $br_if &
98}
99
100linkup_radvd_set()
101{
102 radvd -d 3 -C $radvd_conf -p $radvd_pidfile &
103}
104
105mtu=`nv get mtu`
106ifconfig $ps_if mtu $mtu
107linkup_get_addr
108linkup_route_set
109linkup_dhcpv6_set
110linkup_radvd_set
111brctl addif $br_if $eth_if
112ifconfig $eth_if up
113tc_tbf.sh up $c_id
114echo "Info: psext_up_ipv6.sh leave" >> $test_log