mirror of https://github.com/F-Stack/f-stack.git
126 lines
3.0 KiB
Bash
126 lines
3.0 KiB
Bash
#! /bin/bash
|
|
# SPDX-License-Identifier: BSD-3-Clause
|
|
|
|
#check ETH_DEV
|
|
if [[ -z "${ETH_DEV}" ]]; then
|
|
echo "ETH_DEV is invalid"
|
|
exit 127
|
|
fi
|
|
#check that REMOTE_HOST is reachable
|
|
ssh ${REMOTE_HOST} echo
|
|
st=$?
|
|
if [[ $st -ne 0 ]]; then
|
|
echo "host ${REMOTE_HOST} is not reachable"
|
|
exit $st
|
|
fi
|
|
|
|
#get ether addr of REMOTE_HOST
|
|
REMOTE_MAC=`ssh ${REMOTE_HOST} ip addr show dev ${REMOTE_IFACE}`
|
|
st=$?
|
|
REMOTE_MAC=`echo ${REMOTE_MAC} | sed -e 's/^.*ether //' -e 's/ brd.*$//'`
|
|
if [[ $st -ne 0 || -z "${REMOTE_MAC}" ]]; then
|
|
echo "coouldn't retrieve ether addr from ${REMOTE_IFACE}"
|
|
exit 127
|
|
fi
|
|
|
|
LOCAL_IFACE=dtap0
|
|
|
|
LOCAL_MAC="00:64:74:61:70:30"
|
|
|
|
REMOTE_IPV4=192.168.31.14
|
|
LOCAL_IPV4=192.168.31.92
|
|
|
|
REMOTE_IPV6=fd12:3456:789a:0031:0000:0000:0000:0014
|
|
LOCAL_IPV6=fd12:3456:789a:0031:0000:0000:0000:0092
|
|
|
|
DPDK_PATH=${RTE_SDK:-${PWD}}
|
|
DPDK_BUILD=${RTE_TARGET:-x86_64-native-linux-gcc}
|
|
|
|
# by default ipsec-secgw can't deal with multi-segment packets
|
|
# make sure our local/remote host wouldn't generate fragmented packets
|
|
# if reassmebly option is not enabled
|
|
DEF_MTU_LEN=1400
|
|
DEF_PING_LEN=1200
|
|
|
|
#setup mtu on local iface
|
|
set_local_mtu()
|
|
{
|
|
mtu=$1
|
|
ifconfig ${LOCAL_IFACE} mtu ${mtu}
|
|
sysctl -w net.ipv6.conf.${LOCAL_IFACE}.mtu=${mtu}
|
|
}
|
|
|
|
# configure local host/ifaces
|
|
config_local_iface()
|
|
{
|
|
ifconfig ${LOCAL_IFACE} ${LOCAL_IPV4}/24 up
|
|
ifconfig ${LOCAL_IFACE}
|
|
|
|
ip neigh flush dev ${LOCAL_IFACE}
|
|
ip neigh add ${REMOTE_IPV4} dev ${LOCAL_IFACE} lladdr ${REMOTE_MAC}
|
|
ip neigh show dev ${LOCAL_IFACE}
|
|
}
|
|
|
|
config6_local_iface()
|
|
{
|
|
config_local_iface
|
|
|
|
sysctl -w net.ipv6.conf.${LOCAL_IFACE}.disable_ipv6=0
|
|
ip addr add ${LOCAL_IPV6}/64 dev ${LOCAL_IFACE}
|
|
|
|
ip -6 neigh add ${REMOTE_IPV6} dev ${LOCAL_IFACE} lladdr ${REMOTE_MAC}
|
|
ip neigh show dev ${LOCAL_IFACE}
|
|
}
|
|
|
|
#configure remote host/iface
|
|
config_remote_iface()
|
|
{
|
|
ssh ${REMOTE_HOST} ifconfig ${REMOTE_IFACE} down
|
|
ssh ${REMOTE_HOST} ifconfig ${REMOTE_IFACE} ${REMOTE_IPV4}/24 up
|
|
ssh ${REMOTE_HOST} ifconfig ${REMOTE_IFACE}
|
|
|
|
ssh ${REMOTE_HOST} ip neigh flush dev ${REMOTE_IFACE}
|
|
|
|
# by some reason following ip neigh doesn't work for me here properly:
|
|
#ssh ${REMOTE_HOST} ip neigh add ${LOCAL_IPV4} \
|
|
# dev ${REMOTE_IFACE} lladr ${LOCAL_MAC}
|
|
# so used arp instead.
|
|
ssh ${REMOTE_HOST} arp -i ${REMOTE_IFACE} -s ${LOCAL_IPV4} ${LOCAL_MAC}
|
|
ssh ${REMOTE_HOST} ip neigh show dev ${REMOTE_IFACE}
|
|
|
|
ssh ${REMOTE_HOST} iptables --flush
|
|
}
|
|
|
|
config6_remote_iface()
|
|
{
|
|
config_remote_iface
|
|
|
|
ssh ${REMOTE_HOST} sysctl -w \
|
|
net.ipv6.conf.${REMOTE_IFACE}.disable_ipv6=0
|
|
ssh ${REMOTE_HOST} ip addr add ${REMOTE_IPV6}/64 dev ${REMOTE_IFACE}
|
|
|
|
ssh ${REMOTE_HOST} ip -6 neigh add ${LOCAL_IPV6} \
|
|
dev ${REMOTE_IFACE} lladdr ${LOCAL_MAC}
|
|
ssh ${REMOTE_HOST} ip neigh show dev ${REMOTE_IFACE}
|
|
|
|
ssh ${REMOTE_HOST} ip6tables --flush
|
|
}
|
|
|
|
#configure remote and local host/iface
|
|
config_iface()
|
|
{
|
|
config_local_iface
|
|
config_remote_iface
|
|
}
|
|
|
|
config6_iface()
|
|
{
|
|
config6_local_iface
|
|
config6_remote_iface
|
|
}
|
|
|
|
# secgw application parameters setup
|
|
SGW_PORT_CFG="--vdev=\"net_tap0,mac=fixed\" ${ETH_DEV}"
|
|
SGW_WAIT_DEV="${LOCAL_IFACE}"
|
|
. ${DIR}/common_defs_secgw.sh
|