aa0911f204
communicate with another private port. All unicast/broadcast/multicast layer2 traffic is blocked so it works much the same way as using firewall rules but scales better and is generally easier as firewall packages usually do not allow ARP blocking. An example usage would be having a number of customers on separate vlans bridged with a server network. All the vlans are marked private, they can all communicate with the server network unhindered, but can not exchange any traffic whatsoever with each other. Approved by: re (rwatson)
738 lines
18 KiB
C
738 lines
18 KiB
C
/*-
|
|
* Copyright 2001 Wasabi Systems, Inc.
|
|
* All rights reserved.
|
|
*
|
|
* Written by Jason R. Thorpe for Wasabi Systems, Inc.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
* 3. All advertising materials mentioning features or use of this software
|
|
* must display the following acknowledgement:
|
|
* This product includes software developed for the NetBSD Project by
|
|
* Wasabi Systems, Inc.
|
|
* 4. The name of Wasabi Systems, Inc. may not be used to endorse
|
|
* or promote products derived from this software without specific prior
|
|
* written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY WASABI SYSTEMS, INC. ``AS IS'' AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
|
|
* TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
|
|
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL WASABI SYSTEMS, INC
|
|
* BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
|
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
|
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
|
|
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
|
|
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
|
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
|
|
* POSSIBILITY OF SUCH DAMAGE.
|
|
*/
|
|
|
|
#ifndef lint
|
|
static const char rcsid[] =
|
|
"$FreeBSD$";
|
|
#endif /* not lint */
|
|
|
|
#include <sys/param.h>
|
|
#include <sys/ioctl.h>
|
|
#include <sys/socket.h>
|
|
#include <sys/sockio.h>
|
|
|
|
#include <stdlib.h>
|
|
#include <unistd.h>
|
|
|
|
#include <net/ethernet.h>
|
|
#include <net/if.h>
|
|
#include <net/if_bridgevar.h>
|
|
#include <net/route.h>
|
|
|
|
#include <ctype.h>
|
|
#include <stdio.h>
|
|
#include <string.h>
|
|
#include <stdlib.h>
|
|
#include <unistd.h>
|
|
#include <err.h>
|
|
#include <errno.h>
|
|
|
|
#include "ifconfig.h"
|
|
|
|
#define PV2ID(pv, epri, eaddr) do { \
|
|
epri = pv >> 48; \
|
|
eaddr[0] = pv >> 40; \
|
|
eaddr[1] = pv >> 32; \
|
|
eaddr[2] = pv >> 24; \
|
|
eaddr[3] = pv >> 16; \
|
|
eaddr[4] = pv >> 8; \
|
|
eaddr[5] = pv >> 0; \
|
|
} while (0)
|
|
|
|
static const char *stpstates[] = {
|
|
"disabled",
|
|
"listening",
|
|
"learning",
|
|
"forwarding",
|
|
"blocking",
|
|
"discarding"
|
|
};
|
|
static const char *stpproto[] = {
|
|
"stp",
|
|
"-",
|
|
"rstp"
|
|
};
|
|
static const char *stproles[] = {
|
|
"disabled",
|
|
"root",
|
|
"designated",
|
|
"alternate",
|
|
"backup"
|
|
};
|
|
|
|
static int
|
|
get_val(const char *cp, u_long *valp)
|
|
{
|
|
char *endptr;
|
|
u_long val;
|
|
|
|
errno = 0;
|
|
val = strtoul(cp, &endptr, 0);
|
|
if (cp[0] == '\0' || endptr[0] != '\0' || errno == ERANGE)
|
|
return (-1);
|
|
|
|
*valp = val;
|
|
return (0);
|
|
}
|
|
|
|
static int
|
|
do_cmd(int sock, u_long op, void *arg, size_t argsize, int set)
|
|
{
|
|
struct ifdrv ifd;
|
|
|
|
memset(&ifd, 0, sizeof(ifd));
|
|
|
|
strlcpy(ifd.ifd_name, ifr.ifr_name, sizeof(ifd.ifd_name));
|
|
ifd.ifd_cmd = op;
|
|
ifd.ifd_len = argsize;
|
|
ifd.ifd_data = arg;
|
|
|
|
return (ioctl(sock, set ? SIOCSDRVSPEC : SIOCGDRVSPEC, &ifd));
|
|
}
|
|
|
|
static void
|
|
do_bridgeflag(int sock, const char *ifs, int flag, int set)
|
|
{
|
|
struct ifbreq req;
|
|
|
|
strlcpy(req.ifbr_ifsname, ifs, sizeof(req.ifbr_ifsname));
|
|
|
|
if (do_cmd(sock, BRDGGIFFLGS, &req, sizeof(req), 0) < 0)
|
|
err(1, "unable to get bridge flags");
|
|
|
|
if (set)
|
|
req.ifbr_ifsflags |= flag;
|
|
else
|
|
req.ifbr_ifsflags &= ~flag;
|
|
|
|
if (do_cmd(sock, BRDGSIFFLGS, &req, sizeof(req), 1) < 0)
|
|
err(1, "unable to set bridge flags");
|
|
}
|
|
|
|
static void
|
|
bridge_interfaces(int s, const char *prefix)
|
|
{
|
|
struct ifbifconf bifc;
|
|
struct ifbreq *req;
|
|
char *inbuf = NULL, *ninbuf;
|
|
char *p, *pad;
|
|
int i, len = 8192;
|
|
|
|
pad = strdup(prefix);
|
|
if (pad == NULL)
|
|
err(1, "strdup");
|
|
/* replace the prefix with whitespace */
|
|
for (p = pad; *p != '\0'; p++) {
|
|
if(isprint(*p))
|
|
*p = ' ';
|
|
}
|
|
|
|
for (;;) {
|
|
ninbuf = realloc(inbuf, len);
|
|
if (ninbuf == NULL)
|
|
err(1, "unable to allocate interface buffer");
|
|
bifc.ifbic_len = len;
|
|
bifc.ifbic_buf = inbuf = ninbuf;
|
|
if (do_cmd(s, BRDGGIFS, &bifc, sizeof(bifc), 0) < 0)
|
|
err(1, "unable to get interface list");
|
|
if ((bifc.ifbic_len + sizeof(*req)) < len)
|
|
break;
|
|
len *= 2;
|
|
}
|
|
|
|
for (i = 0; i < bifc.ifbic_len / sizeof(*req); i++) {
|
|
req = bifc.ifbic_req + i;
|
|
printf("%s%s ", prefix, req->ifbr_ifsname);
|
|
printb("flags", req->ifbr_ifsflags, IFBIFBITS);
|
|
printf("\n");
|
|
|
|
if (req->ifbr_ifsflags & IFBIF_STP) {
|
|
printf("%s", pad);
|
|
printf("port %u priority %u",
|
|
req->ifbr_portno, req->ifbr_priority);
|
|
printf(" path cost %u", req->ifbr_path_cost);
|
|
if (req->ifbr_proto <
|
|
sizeof(stpproto) / sizeof(stpproto[0]))
|
|
printf(" proto %s", stpproto[req->ifbr_proto]);
|
|
else
|
|
printf(" <unknown proto %d>",
|
|
req->ifbr_proto);
|
|
|
|
printf("\n%s", pad);
|
|
if (req->ifbr_role <
|
|
sizeof(stproles) / sizeof(stproles[0]))
|
|
printf("role %s", stproles[req->ifbr_role]);
|
|
else
|
|
printf("<unknown role %d>",
|
|
req->ifbr_role);
|
|
if (req->ifbr_state <
|
|
sizeof(stpstates) / sizeof(stpstates[0]))
|
|
printf(" state %s", stpstates[req->ifbr_state]);
|
|
else
|
|
printf(" <unknown state %d>",
|
|
req->ifbr_state);
|
|
printf("\n");
|
|
}
|
|
}
|
|
|
|
free(inbuf);
|
|
}
|
|
|
|
static void
|
|
bridge_addresses(int s, const char *prefix)
|
|
{
|
|
struct ifbaconf ifbac;
|
|
struct ifbareq *ifba;
|
|
char *inbuf = NULL, *ninbuf;
|
|
int i, len = 8192;
|
|
struct ether_addr ea;
|
|
|
|
for (;;) {
|
|
ninbuf = realloc(inbuf, len);
|
|
if (ninbuf == NULL)
|
|
err(1, "unable to allocate address buffer");
|
|
ifbac.ifbac_len = len;
|
|
ifbac.ifbac_buf = inbuf = ninbuf;
|
|
if (do_cmd(s, BRDGRTS, &ifbac, sizeof(ifbac), 0) < 0)
|
|
err(1, "unable to get address cache");
|
|
if ((ifbac.ifbac_len + sizeof(*ifba)) < len)
|
|
break;
|
|
len *= 2;
|
|
}
|
|
|
|
for (i = 0; i < ifbac.ifbac_len / sizeof(*ifba); i++) {
|
|
ifba = ifbac.ifbac_req + i;
|
|
memcpy(ea.octet, ifba->ifba_dst,
|
|
sizeof(ea.octet));
|
|
printf("%s%s Vlan%d %s %lu ", prefix, ether_ntoa(&ea),
|
|
ifba->ifba_vlan, ifba->ifba_ifsname, ifba->ifba_expire);
|
|
printb("flags", ifba->ifba_flags, IFBAFBITS);
|
|
printf("\n");
|
|
}
|
|
|
|
free(inbuf);
|
|
}
|
|
|
|
static void
|
|
bridge_status(int s)
|
|
{
|
|
struct ifbropreq ifbp;
|
|
struct ifbrparam param;
|
|
u_int16_t pri;
|
|
u_int8_t ht, fd, ma, hc, pro;
|
|
u_int8_t lladdr[ETHER_ADDR_LEN];
|
|
u_int16_t bprio;
|
|
u_int32_t csize, ctime;
|
|
|
|
if (do_cmd(s, BRDGGCACHE, ¶m, sizeof(param), 0) < 0)
|
|
return;
|
|
csize = param.ifbrp_csize;
|
|
if (do_cmd(s, BRDGGTO, ¶m, sizeof(param), 0) < 0)
|
|
return;
|
|
ctime = param.ifbrp_ctime;
|
|
if (do_cmd(s, BRDGPARAM, &ifbp, sizeof(ifbp), 0) < 0)
|
|
return;
|
|
pri = ifbp.ifbop_priority;
|
|
pro = ifbp.ifbop_protocol;
|
|
ht = ifbp.ifbop_hellotime;
|
|
fd = ifbp.ifbop_fwddelay;
|
|
hc = ifbp.ifbop_holdcount;
|
|
ma = ifbp.ifbop_maxage;
|
|
|
|
PV2ID(ifbp.ifbop_bridgeid, bprio, lladdr);
|
|
printf("\tid %s priority %u hellotime %u fwddelay %u\n",
|
|
ether_ntoa((struct ether_addr *)lladdr), pri, ht, fd);
|
|
printf("\tmaxage %u holdcnt %u proto %s maxaddr %u timeout %u\n",
|
|
ma, hc, stpproto[pro], csize, ctime);
|
|
|
|
PV2ID(ifbp.ifbop_designated_root, bprio, lladdr);
|
|
printf("\troot id %s priority %d ifcost %u port %u\n",
|
|
ether_ntoa((struct ether_addr *)lladdr), bprio,
|
|
ifbp.ifbop_root_path_cost, ifbp.ifbop_root_port & 0xfff);
|
|
|
|
bridge_interfaces(s, "\tmember: ");
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
static void
|
|
setbridge_add(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
struct ifbreq req;
|
|
|
|
memset(&req, 0, sizeof(req));
|
|
strlcpy(req.ifbr_ifsname, val, sizeof(req.ifbr_ifsname));
|
|
if (do_cmd(s, BRDGADD, &req, sizeof(req), 1) < 0)
|
|
err(1, "BRDGADD %s", val);
|
|
}
|
|
|
|
static void
|
|
setbridge_delete(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
struct ifbreq req;
|
|
|
|
memset(&req, 0, sizeof(req));
|
|
strlcpy(req.ifbr_ifsname, val, sizeof(req.ifbr_ifsname));
|
|
if (do_cmd(s, BRDGDEL, &req, sizeof(req), 1) < 0)
|
|
err(1, "BRDGDEL %s", val);
|
|
}
|
|
|
|
static void
|
|
setbridge_discover(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
|
|
do_bridgeflag(s, val, IFBIF_DISCOVER, 1);
|
|
}
|
|
|
|
static void
|
|
unsetbridge_discover(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
|
|
do_bridgeflag(s, val, IFBIF_DISCOVER, 0);
|
|
}
|
|
|
|
static void
|
|
setbridge_learn(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
|
|
do_bridgeflag(s, val, IFBIF_LEARNING, 1);
|
|
}
|
|
|
|
static void
|
|
unsetbridge_learn(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
|
|
do_bridgeflag(s, val, IFBIF_LEARNING, 0);
|
|
}
|
|
|
|
static void
|
|
setbridge_sticky(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
|
|
do_bridgeflag(s, val, IFBIF_STICKY, 1);
|
|
}
|
|
|
|
static void
|
|
unsetbridge_sticky(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
|
|
do_bridgeflag(s, val, IFBIF_STICKY, 0);
|
|
}
|
|
|
|
static void
|
|
setbridge_span(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
struct ifbreq req;
|
|
|
|
memset(&req, 0, sizeof(req));
|
|
strlcpy(req.ifbr_ifsname, val, sizeof(req.ifbr_ifsname));
|
|
if (do_cmd(s, BRDGADDS, &req, sizeof(req), 1) < 0)
|
|
err(1, "BRDGADDS %s", val);
|
|
}
|
|
|
|
static void
|
|
unsetbridge_span(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
struct ifbreq req;
|
|
|
|
memset(&req, 0, sizeof(req));
|
|
strlcpy(req.ifbr_ifsname, val, sizeof(req.ifbr_ifsname));
|
|
if (do_cmd(s, BRDGDELS, &req, sizeof(req), 1) < 0)
|
|
err(1, "BRDGDELS %s", val);
|
|
}
|
|
|
|
static void
|
|
setbridge_stp(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
|
|
do_bridgeflag(s, val, IFBIF_STP, 1);
|
|
}
|
|
|
|
static void
|
|
unsetbridge_stp(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
|
|
do_bridgeflag(s, val, IFBIF_STP, 0);
|
|
}
|
|
|
|
static void
|
|
setbridge_edge(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
do_bridgeflag(s, val, IFBIF_BSTP_EDGE, 1);
|
|
}
|
|
|
|
static void
|
|
unsetbridge_edge(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
do_bridgeflag(s, val, IFBIF_BSTP_EDGE, 0);
|
|
}
|
|
|
|
static void
|
|
setbridge_autoedge(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
do_bridgeflag(s, val, IFBIF_BSTP_AUTOEDGE, 1);
|
|
}
|
|
|
|
static void
|
|
unsetbridge_autoedge(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
do_bridgeflag(s, val, IFBIF_BSTP_AUTOEDGE, 0);
|
|
}
|
|
|
|
static void
|
|
setbridge_ptp(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
do_bridgeflag(s, val, IFBIF_BSTP_PTP, 1);
|
|
}
|
|
|
|
static void
|
|
unsetbridge_ptp(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
do_bridgeflag(s, val, IFBIF_BSTP_PTP, 0);
|
|
}
|
|
|
|
static void
|
|
setbridge_autoptp(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
do_bridgeflag(s, val, IFBIF_BSTP_AUTOPTP, 1);
|
|
}
|
|
|
|
static void
|
|
unsetbridge_autoptp(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
do_bridgeflag(s, val, IFBIF_BSTP_AUTOPTP, 0);
|
|
}
|
|
|
|
static void
|
|
setbridge_flush(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
struct ifbreq req;
|
|
|
|
memset(&req, 0, sizeof(req));
|
|
req.ifbr_ifsflags = IFBF_FLUSHDYN;
|
|
if (do_cmd(s, BRDGFLUSH, &req, sizeof(req), 1) < 0)
|
|
err(1, "BRDGFLUSH");
|
|
}
|
|
|
|
static void
|
|
setbridge_flushall(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
struct ifbreq req;
|
|
|
|
memset(&req, 0, sizeof(req));
|
|
req.ifbr_ifsflags = IFBF_FLUSHALL;
|
|
if (do_cmd(s, BRDGFLUSH, &req, sizeof(req), 1) < 0)
|
|
err(1, "BRDGFLUSH");
|
|
}
|
|
|
|
static void
|
|
setbridge_static(const char *val, const char *mac, int s,
|
|
const struct afswtch *afp)
|
|
{
|
|
struct ifbareq req;
|
|
struct ether_addr *ea;
|
|
|
|
memset(&req, 0, sizeof(req));
|
|
strlcpy(req.ifba_ifsname, val, sizeof(req.ifba_ifsname));
|
|
|
|
ea = ether_aton(mac);
|
|
if (ea == NULL)
|
|
errx(1, "%s: invalid address: %s", val, mac);
|
|
|
|
memcpy(req.ifba_dst, ea->octet, sizeof(req.ifba_dst));
|
|
req.ifba_flags = IFBAF_STATIC;
|
|
req.ifba_vlan = 1; /* XXX allow user to specify */
|
|
|
|
if (do_cmd(s, BRDGSADDR, &req, sizeof(req), 1) < 0)
|
|
err(1, "BRDGSADDR %s", val);
|
|
}
|
|
|
|
static void
|
|
setbridge_deladdr(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
struct ifbareq req;
|
|
struct ether_addr *ea;
|
|
|
|
memset(&req, 0, sizeof(req));
|
|
|
|
ea = ether_aton(val);
|
|
if (ea == NULL)
|
|
errx(1, "invalid address: %s", val);
|
|
|
|
memcpy(req.ifba_dst, ea->octet, sizeof(req.ifba_dst));
|
|
|
|
if (do_cmd(s, BRDGDADDR, &req, sizeof(req), 1) < 0)
|
|
err(1, "BRDGDADDR %s", val);
|
|
}
|
|
|
|
static void
|
|
setbridge_addr(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
|
|
bridge_addresses(s, "");
|
|
}
|
|
|
|
static void
|
|
setbridge_maxaddr(const char *arg, int d, int s, const struct afswtch *afp)
|
|
{
|
|
struct ifbrparam param;
|
|
u_long val;
|
|
|
|
if (get_val(arg, &val) < 0 || (val & ~0xffffffff) != 0)
|
|
errx(1, "invalid value: %s", arg);
|
|
|
|
param.ifbrp_csize = val & 0xffffffff;
|
|
|
|
if (do_cmd(s, BRDGSCACHE, ¶m, sizeof(param), 1) < 0)
|
|
err(1, "BRDGSCACHE %s", arg);
|
|
}
|
|
|
|
static void
|
|
setbridge_hellotime(const char *arg, int d, int s, const struct afswtch *afp)
|
|
{
|
|
struct ifbrparam param;
|
|
u_long val;
|
|
|
|
if (get_val(arg, &val) < 0 || (val & ~0xff) != 0)
|
|
errx(1, "invalid value: %s", arg);
|
|
|
|
param.ifbrp_hellotime = val & 0xff;
|
|
|
|
if (do_cmd(s, BRDGSHT, ¶m, sizeof(param), 1) < 0)
|
|
err(1, "BRDGSHT %s", arg);
|
|
}
|
|
|
|
static void
|
|
setbridge_fwddelay(const char *arg, int d, int s, const struct afswtch *afp)
|
|
{
|
|
struct ifbrparam param;
|
|
u_long val;
|
|
|
|
if (get_val(arg, &val) < 0 || (val & ~0xff) != 0)
|
|
errx(1, "invalid value: %s", arg);
|
|
|
|
param.ifbrp_fwddelay = val & 0xff;
|
|
|
|
if (do_cmd(s, BRDGSFD, ¶m, sizeof(param), 1) < 0)
|
|
err(1, "BRDGSFD %s", arg);
|
|
}
|
|
|
|
static void
|
|
setbridge_maxage(const char *arg, int d, int s, const struct afswtch *afp)
|
|
{
|
|
struct ifbrparam param;
|
|
u_long val;
|
|
|
|
if (get_val(arg, &val) < 0 || (val & ~0xff) != 0)
|
|
errx(1, "invalid value: %s", arg);
|
|
|
|
param.ifbrp_maxage = val & 0xff;
|
|
|
|
if (do_cmd(s, BRDGSMA, ¶m, sizeof(param), 1) < 0)
|
|
err(1, "BRDGSMA %s", arg);
|
|
}
|
|
|
|
static void
|
|
setbridge_priority(const char *arg, int d, int s, const struct afswtch *afp)
|
|
{
|
|
struct ifbrparam param;
|
|
u_long val;
|
|
|
|
if (get_val(arg, &val) < 0 || (val & ~0xffff) != 0)
|
|
errx(1, "invalid value: %s", arg);
|
|
|
|
param.ifbrp_prio = val & 0xffff;
|
|
|
|
if (do_cmd(s, BRDGSPRI, ¶m, sizeof(param), 1) < 0)
|
|
err(1, "BRDGSPRI %s", arg);
|
|
}
|
|
|
|
static void
|
|
setbridge_protocol(const char *arg, int d, int s, const struct afswtch *afp)
|
|
{
|
|
struct ifbrparam param;
|
|
|
|
if (strcasecmp(arg, "stp") == 0) {
|
|
param.ifbrp_proto = 0;
|
|
} else if (strcasecmp(arg, "rstp") == 0) {
|
|
param.ifbrp_proto = 2;
|
|
} else {
|
|
errx(1, "unknown stp protocol");
|
|
}
|
|
|
|
if (do_cmd(s, BRDGSPROTO, ¶m, sizeof(param), 1) < 0)
|
|
err(1, "BRDGSPROTO %s", arg);
|
|
}
|
|
|
|
static void
|
|
setbridge_holdcount(const char *arg, int d, int s, const struct afswtch *afp)
|
|
{
|
|
struct ifbrparam param;
|
|
u_long val;
|
|
|
|
if (get_val(arg, &val) < 0 || (val & ~0xff) != 0)
|
|
errx(1, "invalid value: %s", arg);
|
|
|
|
param.ifbrp_txhc = val & 0xff;
|
|
|
|
if (do_cmd(s, BRDGSTXHC, ¶m, sizeof(param), 1) < 0)
|
|
err(1, "BRDGSTXHC %s", arg);
|
|
}
|
|
|
|
static void
|
|
setbridge_ifpriority(const char *ifn, const char *pri, int s,
|
|
const struct afswtch *afp)
|
|
{
|
|
struct ifbreq req;
|
|
u_long val;
|
|
|
|
memset(&req, 0, sizeof(req));
|
|
|
|
if (get_val(pri, &val) < 0 || (val & ~0xff) != 0)
|
|
errx(1, "invalid value: %s", pri);
|
|
|
|
strlcpy(req.ifbr_ifsname, ifn, sizeof(req.ifbr_ifsname));
|
|
req.ifbr_priority = val & 0xff;
|
|
|
|
if (do_cmd(s, BRDGSIFPRIO, &req, sizeof(req), 1) < 0)
|
|
err(1, "BRDGSIFPRIO %s", pri);
|
|
}
|
|
|
|
static void
|
|
setbridge_ifpathcost(const char *ifn, const char *cost, int s,
|
|
const struct afswtch *afp)
|
|
{
|
|
struct ifbreq req;
|
|
u_long val;
|
|
|
|
memset(&req, 0, sizeof(req));
|
|
|
|
if (get_val(cost, &val) < 0)
|
|
errx(1, "invalid value: %s", cost);
|
|
|
|
strlcpy(req.ifbr_ifsname, ifn, sizeof(req.ifbr_ifsname));
|
|
req.ifbr_path_cost = val;
|
|
|
|
if (do_cmd(s, BRDGSIFCOST, &req, sizeof(req), 1) < 0)
|
|
err(1, "BRDGSIFCOST %s", cost);
|
|
}
|
|
|
|
static void
|
|
setbridge_timeout(const char *arg, int d, int s, const struct afswtch *afp)
|
|
{
|
|
struct ifbrparam param;
|
|
u_long val;
|
|
|
|
if (get_val(arg, &val) < 0 || (val & ~0xffffffff) != 0)
|
|
errx(1, "invalid value: %s", arg);
|
|
|
|
param.ifbrp_ctime = val & 0xffffffff;
|
|
|
|
if (do_cmd(s, BRDGSTO, ¶m, sizeof(param), 1) < 0)
|
|
err(1, "BRDGSTO %s", arg);
|
|
}
|
|
|
|
static void
|
|
setbridge_private(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
|
|
do_bridgeflag(s, val, IFBIF_PRIVATE, 1);
|
|
}
|
|
|
|
static void
|
|
unsetbridge_private(const char *val, int d, int s, const struct afswtch *afp)
|
|
{
|
|
|
|
do_bridgeflag(s, val, IFBIF_PRIVATE, 0);
|
|
}
|
|
|
|
static struct cmd bridge_cmds[] = {
|
|
DEF_CMD_ARG("addm", setbridge_add),
|
|
DEF_CMD_ARG("deletem", setbridge_delete),
|
|
DEF_CMD_ARG("discover", setbridge_discover),
|
|
DEF_CMD_ARG("-discover", unsetbridge_discover),
|
|
DEF_CMD_ARG("learn", setbridge_learn),
|
|
DEF_CMD_ARG("-learn", unsetbridge_learn),
|
|
DEF_CMD_ARG("sticky", setbridge_sticky),
|
|
DEF_CMD_ARG("-sticky", unsetbridge_sticky),
|
|
DEF_CMD_ARG("span", setbridge_span),
|
|
DEF_CMD_ARG("-span", unsetbridge_span),
|
|
DEF_CMD_ARG("stp", setbridge_stp),
|
|
DEF_CMD_ARG("-stp", unsetbridge_stp),
|
|
DEF_CMD_ARG("edge", setbridge_edge),
|
|
DEF_CMD_ARG("-edge", unsetbridge_edge),
|
|
DEF_CMD_ARG("autoedge", setbridge_autoedge),
|
|
DEF_CMD_ARG("-autoedge", unsetbridge_autoedge),
|
|
DEF_CMD_ARG("ptp", setbridge_ptp),
|
|
DEF_CMD_ARG("-ptp", unsetbridge_ptp),
|
|
DEF_CMD_ARG("autoptp", setbridge_autoptp),
|
|
DEF_CMD_ARG("-autoptp", unsetbridge_autoptp),
|
|
DEF_CMD("flush", 0, setbridge_flush),
|
|
DEF_CMD("flushall", 0, setbridge_flushall),
|
|
DEF_CMD_ARG2("static", setbridge_static),
|
|
DEF_CMD_ARG("deladdr", setbridge_deladdr),
|
|
DEF_CMD("addr", 1, setbridge_addr),
|
|
DEF_CMD_ARG("maxaddr", setbridge_maxaddr),
|
|
DEF_CMD_ARG("hellotime", setbridge_hellotime),
|
|
DEF_CMD_ARG("fwddelay", setbridge_fwddelay),
|
|
DEF_CMD_ARG("maxage", setbridge_maxage),
|
|
DEF_CMD_ARG("priority", setbridge_priority),
|
|
DEF_CMD_ARG("proto", setbridge_protocol),
|
|
DEF_CMD_ARG("holdcnt", setbridge_holdcount),
|
|
DEF_CMD_ARG2("ifpriority", setbridge_ifpriority),
|
|
DEF_CMD_ARG2("ifpathcost", setbridge_ifpathcost),
|
|
DEF_CMD_ARG("timeout", setbridge_timeout),
|
|
DEF_CMD_ARG("private", setbridge_private),
|
|
DEF_CMD_ARG("-private", unsetbridge_private),
|
|
};
|
|
static struct afswtch af_bridge = {
|
|
.af_name = "af_bridge",
|
|
.af_af = AF_UNSPEC,
|
|
.af_other_status = bridge_status,
|
|
};
|
|
|
|
static __constructor void
|
|
bridge_ctor(void)
|
|
{
|
|
#define N(a) (sizeof(a) / sizeof(a[0]))
|
|
int i;
|
|
|
|
for (i = 0; i < N(bridge_cmds); i++)
|
|
cmd_register(&bridge_cmds[i]);
|
|
af_register(&af_bridge);
|
|
#undef N
|
|
}
|