1a192e900Samaguire#!/sbin/sh 2a192e900Samaguire# 3a192e900Samaguire# CDDL HEADER START 4a192e900Samaguire# 5a192e900Samaguire# The contents of this file are subject to the terms of the 6a192e900Samaguire# Common Development and Distribution License (the "License"). 7a192e900Samaguire# You may not use this file except in compliance with the License. 8a192e900Samaguire# 9a192e900Samaguire# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 10a192e900Samaguire# or http://www.opensolaris.org/os/licensing. 11a192e900Samaguire# See the License for the specific language governing permissions 12a192e900Samaguire# and limitations under the License. 13a192e900Samaguire# 14a192e900Samaguire# When distributing Covered Code, include this CDDL HEADER in each 15a192e900Samaguire# file and include the License file at usr/src/OPENSOLARIS.LICENSE. 16a192e900Samaguire# If applicable, add the following below this CDDL HEADER, with the 17a192e900Samaguire# fields enclosed by brackets "[]" replaced with your own identifying 18a192e900Samaguire# information: Portions Copyright [yyyy] [name of copyright owner] 19a192e900Samaguire# 20a192e900Samaguire# CDDL HEADER END 21a192e900Samaguire# 22a192e900Samaguire# 23a192e900Samaguire# Copyright 2006 Sun Microsystems, Inc. All rights reserved. 24a192e900Samaguire# Use is subject to license terms. 25a192e900Samaguire# 26a192e900Samaguire# ident "%Z%%M% %I% %E% SMI" 27a192e900Samaguire 28a192e900Samaguire# This script configures IP routing. 29a192e900Samaguire 30a192e900Samaguire. /lib/svc/share/smf_include.sh 31a192e900Samaguire 32a192e900Samaguire# 33a192e900Samaguire# In a zone we need this service to be up, but all of the work 34a192e900Samaguire# it tries to do is irrelevant (and will actually lead to the service 35a192e900Samaguire# failing if we try to do it), so just bail out. 36a192e900Samaguire# 37a192e900Samaguiresmf_is_globalzone || exit $SMF_EXIT_OK 38a192e900Samaguire 39a192e900Samaguire# 40a192e900Samaguire# If routing.conf file is in place, and has not already been read in 41ceb97a6aSamaguire# by previous invokation of routeadm, legacy configuration is upgraded 42ceb97a6aSamaguire# by this call to "routeadm -u". This call is also needed when 43a192e900Samaguire# a /var/svc/profile/upgrade file is found, as it may contain routeadm commands 44ceb97a6aSamaguire# which need to be applied. Finally, routeadm starts in.ndpd by 45ceb97a6aSamaguire# enabling the ndp service (in.ndpd), which is required for IPv6 address 46ceb97a6aSamaguire# autoconfiguration. It would be nice if we could do this in 47a192e900Samaguire# network/loopback, but since the SMF backend is read-only at that 48a192e900Samaguire# point in boot, we cannot. 49a192e900Samaguire# 50a192e900Samaguire/sbin/routeadm -u 51a192e900Samaguire 52a192e900Samaguire# 53a192e900Samaguire# Are we routing dynamically? routeadm(1M) reports this in the 54a192e900Samaguire# "current" values of ipv4/6-routing - if either are true, we are running 55a192e900Samaguire# routing daemons (or at least they are enabled to run). 56a192e900Samaguire# 57a192e900Samaguiredynamic_routing_test=`/sbin/routeadm -p | \ 58a192e900Samaguirenawk '/^ipv[46]-routing [.]*/ { print $2 }' | /usr/bin/grep "current=enabled"` 59a192e900Samaguireif [ -n "$dynamic_routing_test" ]; then 60a192e900Samaguire dynamic_routing="true" 61a192e900Samaguirefi 62a192e900Samaguire 63a192e900Samaguire/usr/sbin/ifconfig -a6u >/etc/svc/volatile/ifconfig.$$ 64a192e900Samaguirenumv6ifs=`/usr/bin/grep -c inet6 /etc/svc/volatile/ifconfig.$$` 65ceb97a6aSamaguire 66a192e900Samaguireif [ $numv6ifs -gt 1 ]; then 67a192e900Samaguire # 68a192e900Samaguire # Add a static route for multicast packets out of a link-local 69a192e900Samaguire # interface, although would like to specify multicast interface using 70a192e900Samaguire # an interface name! 71a192e900Samaguire # 72a192e900Samaguire set -- `/usr/bin/awk ' 73a192e900Samaguire /inet6 fe80:/ { 74a192e900Samaguire print substr($2, 1, index($2, "/") - 1) 75a192e900Samaguire }' /etc/svc/volatile/ifconfig.$$` 76a192e900Samaguire 77a192e900Samaguire if [ -n "$1" ]; then 78a192e900Samaguire echo "Setting default IPv6 interface for multicast:" \ 79a192e900Samaguire "add net ff00::/8: gateway $1" 80a192e900Samaguire /usr/sbin/route -n add -interface -inet6 "ff00::/8" "$1" \ 81a192e900Samaguire >/dev/null 82a192e900Samaguire fi 83a192e900Samaguirefi 84a192e900Samaguire/usr/bin/rm -f /etc/svc/volatile/ifconfig.$$ 85a192e900Samaguire 86a192e900Samaguire# 87a192e900Samaguire# Configure default IPv4 routers using the local "/etc/defaultrouter" 88a192e900Samaguire# configuration file. The file can contain the hostnames or IP 89a192e900Samaguire# addresses of one or more default routers. If hostnames are used, 90a192e900Samaguire# each hostname must also be listed in the local "/etc/hosts" file 91a192e900Samaguire# because NIS and NIS+ are not running at the time that this script is 92a192e900Samaguire# run. Each router name or address is listed on a single line by 93a192e900Samaguire# itself in the file. Anything else on that line after the router's 94a192e900Samaguire# name or address is ignored. Lines that begin with "#" are 95a192e900Samaguire# considered comments and ignored. 96a192e900Samaguire# 97a192e900Samaguire# The default routes listed in the "/etc/defaultrouter" file will 98a192e900Samaguire# replace those added by the kernel during diskless booting. An 99a192e900Samaguire# empty "/etc/defaultrouter" file will cause the default route 100a192e900Samaguire# added by the kernel to be deleted. 101a192e900Samaguire# 102a192e900Samaguire# Note that the default router file is ignored if we received routes 103a192e900Samaguire# from a DHCP server. Our policy is to always trust DHCP over local 104a192e900Samaguire# administration. 105a192e900Samaguire# 106a192e900Samaguiresmf_netstrategy 107a192e900Samaguire 108a192e900Samaguireif [ "$_INIT_NET_STRATEGY" = "dhcp" ] && \ 109a192e900Samaguire [ -n "`/sbin/dhcpinfo Router`" ]; then 110a192e900Samaguire defrouters=`/sbin/dhcpinfo Router` 111a192e900Samaguireelif [ -f /etc/defaultrouter ]; then 112a192e900Samaguire defrouters=`/usr/bin/grep -v \^\# /etc/defaultrouter | \ 113a192e900Samaguire /usr/bin/awk '{print $1}'` 114a192e900Samaguire if [ -n "$defrouters" ]; then 115a192e900Samaguire # 116a192e900Samaguire # We want the default router(s) listed in 117a192e900Samaguire # /etc/defaultrouter to replace the one added from the 118a192e900Samaguire # BOOTPARAMS WHOAMI response but we must avoid flushing 119a192e900Samaguire # the last route between the running system and its 120a192e900Samaguire # /usr file system. 121a192e900Samaguire # 122a192e900Samaguire 123a192e900Samaguire # First, remember the original route. 124a192e900Samaguire shift $# 125a192e900Samaguire set -- `/usr/bin/netstat -rn -f inet | \ 126a192e900Samaguire /usr/bin/grep '^default'` 127a192e900Samaguire route_IP="$2" 128a192e900Samaguire 129a192e900Samaguire # 130a192e900Samaguire # Next, add those from /etc/defaultrouter. While doing 131a192e900Samaguire # this, if one of the routes we add is for the route 132a192e900Samaguire # previously added as a result of the BOOTPARAMS 133a192e900Samaguire # response, we will see a message of the form: 134a192e900Samaguire # "add net default: gateway a.b.c.d: entry exists" 135a192e900Samaguire # 136a192e900Samaguire do_delete=yes 137a192e900Samaguire for router in $defrouters; do 138a192e900Samaguire set -- `/usr/sbin/route -n add default \ 139a192e900Samaguire -gateway $router` 140a192e900Samaguire [ $? -ne 0 -a "x$5" = "x$route_IP:" ] \ 141a192e900Samaguire && do_delete=no 142a192e900Samaguire done 143a192e900Samaguire 144a192e900Samaguire # 145a192e900Samaguire # Finally, delete the original default route unless it 146a192e900Samaguire # was also listed in the defaultrouter file. 147a192e900Samaguire # 148a192e900Samaguire if [ -n "$route_IP" -a $do_delete = yes ]; then 149a192e900Samaguire /usr/sbin/route -n delete default \ 150a192e900Samaguire -gateway $route_IP >/dev/null 151a192e900Samaguire fi 152a192e900Samaguire else 153a192e900Samaguire /usr/sbin/route -fn > /dev/null 154a192e900Samaguire fi 155a192e900Samaguireelse 156a192e900Samaguire defrouters= 157a192e900Samaguirefi 158a192e900Samaguire 159a192e900Samaguire# 160a192e900Samaguire# Use routeadm(1M) to configure forwarding and launch routing daemons 161a192e900Samaguire# for IPv4 and IPv6 based on preset values. These settings only apply 162a192e900Samaguire# to the global zone. For IPv4 dynamic routing, the system will default 163a192e900Samaguire# to disabled if a default route was previously added via BOOTP, DHCP, 164a192e900Samaguire# or the /etc/defaultrouter file. routeadm also starts in.ndpd. 165a192e900Samaguire# 166a192e900Samaguireif [ "$dynamic_routing" != "true" ] && [ -z "$defrouters" ]; then 167a192e900Samaguire # 168a192e900Samaguire # No default routes were setup by "route" command above. 169a192e900Samaguire # Check the kernel routing table for any other default 170a192e900Samaguire # routes. 171a192e900Samaguire # 172a192e900Samaguire /usr/bin/netstat -rn -f inet | \ 173a192e900Samaguire /usr/bin/grep default >/dev/null 2>&1 && defrouters=yes 174a192e900Samaguirefi 175a192e900Samaguire 176a192e900Samaguire# 177a192e900Samaguire# The routeadm/ipv4-routing-set property is true if the administrator 178a192e900Samaguire# has run "routeadm -e/-d ipv4-routing". If not, we revert to the 179a192e900Samaguire# appropriate defaults. We no longer run "routeadm -u" on every boot 180a192e900Samaguire# however, as persistent daemon state is now controlled by SMF. 181a192e900Samaguire# 182a192e900Samaguireipv4_routing_set=`/usr/bin/svcprop -p routeadm/ipv4-routing-set $SMF_FMRI` 183a192e900Samaguireif [ -z "$defrouters" ]; then 184a192e900Samaguire # 185a192e900Samaguire # Set default value for ipv4-routing to enabled. If routeadm -e/-d 186a192e900Samaguire # has not yet been run by the administrator, we apply this default. 187*ef2c19a1Samaguire # The -b option is project-private and informs routeadm not 188*ef2c19a1Samaguire # to treat the enable as administrator-driven. 189a192e900Samaguire # 190a192e900Samaguire /usr/sbin/svccfg -s $SMF_FMRI \ 191a192e900Samaguire setprop routeadm/default-ipv4-routing = true 192a192e900Samaguire if [ "$ipv4_routing_set" = "false" ]; then 193*ef2c19a1Samaguire /sbin/routeadm -b -e ipv4-routing -u 194a192e900Samaguire fi 195a192e900Samaguireelse 196a192e900Samaguire # 197a192e900Samaguire # Default router(s) have been found, so ipv4-routing default value 198a192e900Samaguire # should be disabled. If routaedm -e/d has not yet been run by 199*ef2c19a1Samaguire # the administrator, we apply this default. The -b option is 200*ef2c19a1Samaguire # project-private and informs routeadm not to treat the disable as 201*ef2c19a1Samaguire # administrator-driven. 202*ef2c19a1Samaguire # 203a192e900Samaguire /usr/sbin/svccfg -s $SMF_FMRI \ 204a192e900Samaguire setprop routeadm/default-ipv4-routing = false 205a192e900Samaguire if [ "$ipv4_routing_set" = "false" ]; then 206*ef2c19a1Samaguire /sbin/routeadm -b -d ipv4-routing -u 207a192e900Samaguire fi 208a192e900Samaguirefi 209a192e900Samaguire 210a192e900Samaguire# 211a192e900Samaguire# Set 6to4 Relay Router communication support policy and, if applicable, 212a192e900Samaguire# the destination Relay Router IPv4 address. See /etc/default/inetinit for 213a192e900Samaguire# setting and further info on ACCEPT6TO4RELAY and RELAY6TO4ADDR. 214a192e900Samaguire# If ACCEPT6TO4RELAY=NO, the default value in the kernel will 215a192e900Samaguire# be used. 216a192e900Samaguire# 217a192e900SamaguireACCEPT6TO4RELAY=`echo "$ACCEPT6TO4RELAY" | /usr/bin/tr '[A-Z]' '[a-z]'` 218a192e900Samaguireif [ "$ACCEPT6TO4RELAY" = yes ]; then 219a192e900Samaguire if [ "$RELAY6TO4ADDR" ]; then 220a192e900Samaguire /usr/sbin/6to4relay -e -a $RELAY6TO4ADDR 221a192e900Samaguire else 222a192e900Samaguire /usr/sbin/6to4relay -e 223a192e900Samaguire fi 224a192e900Samaguirefi 225a192e900Samaguire 226a192e900Samaguire# 227a192e900Samaguire# Read /etc/inet/static_routes and add each route. 228a192e900Samaguire# 229a192e900Samaguireif [ -f /etc/inet/static_routes ]; then 230a192e900Samaguire echo "Adding persistent routes:" 231a192e900Samaguire /usr/bin/egrep -v "^(#|$)" /etc/inet/static_routes | while read line; do 232a192e900Samaguire /usr/sbin/route add $line 233a192e900Samaguire done 234a192e900Samaguirefi 235a192e900Samaguire 236a192e900Samaguire# Clear exit status. 237a192e900Samaguireexit $SMF_EXIT_OK 238