From 5383f20a588a5f4865185986b8fe7660207a0790 Mon Sep 17 00:00:00 2001 From: Greg Revelle <31642433+grevelle@users.noreply.github.com> Date: Wed, 30 Dec 2020 13:11:45 -0600 Subject: [PATCH] Update to configure for supplicant mode --- bin/pfatt.sh | 59 +++++++--------------------------------------------- 1 file changed, 7 insertions(+), 52 deletions(-) diff --git a/bin/pfatt.sh b/bin/pfatt.sh index 5a69c8a..f08bfb0 100755 --- a/bin/pfatt.sh +++ b/bin/pfatt.sh @@ -2,7 +2,6 @@ set -e ONT_IF='xx0' -RG_IF='xx1' RG_ETHER_ADDR='xx:xx:xx:xx:xx:xx' LOG=/var/log/pfatt.log @@ -11,74 +10,30 @@ getTimestamp(){ } { - echo "$(getTimestamp) pfSense + AT&T U-verse Residential Gateway for true bridge mode" + echo "$(getTimestamp) pfSense + AT&T U-verse Residential Gateway bypass mode" echo "$(getTimestamp) Configuration: " echo "$(getTimestamp) ONT_IF: $ONT_IF" - echo "$(getTimestamp) RG_IF: $RG_IF" echo "$(getTimestamp) RG_ETHER_ADDR: $RG_ETHER_ADDR" echo -n "$(getTimestamp) attaching interfaces to ng_ether... " /usr/local/bin/php -r "pfSense_ngctl_attach('.', '$ONT_IF');" - /usr/local/bin/php -r "pfSense_ngctl_attach('.', '$RG_IF');" echo "OK!" echo "$(getTimestamp) building netgraph nodes..." - - echo -n "$(getTimestamp) creating ng_one2many... " - /usr/sbin/ngctl mkpeer $ONT_IF: one2many lower one - /usr/sbin/ngctl name $ONT_IF:lower o2m - echo "OK!" - + echo -n "$(getTimestamp) creating vlan node and interface... " - /usr/sbin/ngctl mkpeer o2m: vlan many0 downstream - /usr/sbin/ngctl name o2m:many0 vlan0 + /usr/sbin/ngctl mkpeer $ONT_IF: vlan lower downstream + /usr/sbin/ngctl name $ONT_IF:lower vlan0 /usr/sbin/ngctl mkpeer vlan0: eiface vlan0 ether - + /usr/sbin/ngctl msg vlan0: 'addfilter { vlan=0 hook="vlan0" }' /usr/sbin/ngctl msg ngeth0: set $RG_ETHER_ADDR - echo "OK!" - - echo -n "$(getTimestamp) defining etf for $ONT_IF (ONT)... " - /usr/sbin/ngctl mkpeer o2m: etf many1 downstream - /usr/sbin/ngctl name o2m:many1 waneapfilter - /usr/sbin/ngctl connect waneapfilter: $ONT_IF: nomatch upper - echo "OK!" - - echo -n "$(getTimestamp) defining etf for $RG_IF (RG)... " - /usr/sbin/ngctl mkpeer $RG_IF: etf lower downstream - /usr/sbin/ngctl name $RG_IF:lower laneapfilter - /usr/sbin/ngctl connect laneapfilter: $RG_IF: nomatch upper - echo "OK!" - - echo -n "$(getTimestamp) bridging etf for $ONT_IF <-> $RG_IF... " - /usr/sbin/ngctl connect waneapfilter: laneapfilter: eapout eapout - echo "OK!" - - echo -n "$(getTimestamp) defining filters for EAP traffic... " - /usr/sbin/ngctl msg waneapfilter: 'setfilter { matchhook="eapout" ethertype=0x888e }' - /usr/sbin/ngctl msg laneapfilter: 'setfilter { matchhook="eapout" ethertype=0x888e }' - echo "OK!" - - echo -n "$(getTimestamp) enabling one2many links... " - /usr/sbin/ngctl msg o2m: setconfig "{ xmitAlg=2 failAlg=1 enabledLinks=[ 1 1 ] }" - echo "OK!" - - echo -n "$(getTimestamp) removing waneapfilter:nomatch hook... " - /usr/sbin/ngctl rmhook waneapfilter: nomatch - echo "OK!" - - echo -n "$(getTimestamp) enabling $RG_IF interface... " - /sbin/ifconfig $RG_IF up - echo "OK!" - + echo "OK!" + echo -n "$(getTimestamp) enabling $ONT_IF interface... " /sbin/ifconfig $ONT_IF up echo "OK!" - echo -n "$(getTimestamp) enabling promiscuous mode on $RG_IF... " - /sbin/ifconfig $RG_IF promisc - echo "OK!" - echo -n "$(getTimestamp) enabling promiscuous mode on $ONT_IF... " /sbin/ifconfig $ONT_IF promisc echo "OK!"