c1bb0d2b73758dc81ca3bd141a482a8d7075e794
[racktables] / gateways / switchvlans / cisco.connector
1 #!/bin/sh
2
3 [ $# = 7 ] || exit 1
4
5 ENDPOINT=$1
6 HW=$2
7 SW=$3
8 COMMAND=$4
9 FILE1=$5
10 FILE2=$6
11 FILE3=$7
12 MYDIR=`dirname $0`
13 ostype=`uname -s`
14 case "$ostype" in
15 Linux)
16 SEDFLAG='-r'
17 ;;
18 FreeBSD)
19 SEDFLAG='-E'
20 ;;
21 *)
22 exit 7
23 esac
24
25
26 prepare_connect_commands()
27 {
28 [ $# = 1 ] || exit 2
29 local skip=yes cval found=no
30 while read line; do
31 if [ "$skip" = "yes" -a "$line" = "# S-T-A-R-T" ]; then
32 skip=no
33 continue
34 fi
35 if [ "$skip" = "no" -a "$line" = "# S-T-O-P" ]; then
36 skip=yes
37 continue
38 fi
39 [ "$skip" = "yes" ] && continue
40 # Allow comments.
41 [ -z "${line###*}" ] && continue
42
43 # First endpoint string/regexp match is sufficient for us.
44 cval=`echo $line | cut -s -d' ' -f1`
45 if [ -z "${1##$cval}" ]; then
46 found=yes
47 # Don't be too smart at the moment, just be able to handle
48 # the known-good case ;-)
49
50 username=`echo $line | cut -s -d' ' -f5`
51 [ "$username" != "-" ] && echo $username > $CMDS1
52 echo $line | cut -s -d' ' -f6 >> $CMDS1
53 echo en >> $CMDS1
54 echo $line | cut -s -d' ' -f7 >> $CMDS1
55 # same for ports
56 cat "$CMDS1" > "$CMDS2"
57 # ...and MAC addresses
58 cat "$CMDS1" > "$CMDS3"
59 break
60 fi
61 done < "$MYDIR/cisco.secrets.php"
62 [ "$found" = "yes" ] && return
63 echo "E!connector could not find credentials for $1" >> "$FILE2"
64 exit 3
65 }
66
67 prepare_fetch_commands()
68 {
69 printf 'term len 0\nshow vlan brief\nquit\n' >> $CMDS1
70 printf 'term len 0\nshow int status\nquit\n' >> $CMDS2
71 printf 'term len 0\nshow mac-address-table dynamic\nquit\n' >> $CMDS3
72 }
73
74 prepare_push_commands()
75 {
76 printf 'term len 0\nconf t\n' >> $CMDS1
77 while read portname vlanid; do
78 if [ -z "$portname" -o -z "$vlanid" ]; then
79 echo "E!could not parse input in connector" >> "$FILE2"
80 continue
81 fi
82 if [ "$vlanid" = "trunk" ]; then
83 echo "E!trunking is not allowed" >> "$FILE2"
84 continue
85 fi
86 printf "int $portname\n" >> $CMDS1
87 if [ $vlanid -lt 4096 ]; then
88 printf "swi access vlan $vlanid\nswi mode access\n" >> $CMDS1
89 printf "no description\n" >> $CMDS1
90 else
91 printf "descr VLAN$vlanid\n" >> $CMDS1
92 printf "swi trunk encap dot1q\nswi mode trunk\n" >> $CMDS1
93 "$MYDIR/trunkdecoder" $vlanid >> $CMDS1
94 fi
95 printf "exit\n" >> $CMDS1
96 echo "C!64!$portname!$ENDPOINT!$vlanid" >> "$FILE2"
97 done < "$FILE1"
98 printf "end\nwri\nquit\n" >> $CMDS1
99 }
100
101 do_fetch()
102 {
103 local tmp_ifname tmp_ifdescr tmp_status tmp_vlanid
104 nc $ENDPOINT 23 < $CMDS1 > "$OUT1"
105 if fgrep -q '% Bad passwords' "$OUT1"; then
106 echo "E!password mismatch while trying to connect to $ENDPOINT" >> "$FILE2"
107 exit 4
108 fi
109 nc $ENDPOINT 23 < $CMDS2 > "$OUT2a"
110 nc $ENDPOINT 23 < $CMDS3 > "$OUT3"
111 cat "$OUT1" | fgrep ' active ' | sed $SEDFLAG 's/^([[:digit:]]+)[[:space:]]+(.+)[[:space:]]+active (.*)/\1=\2/;s/[[:space:]]+$//' > $FILE1
112 # Add trunk data, if appropriate.
113 [ -s "$MYDIR/trunktable" ] && cat "$MYDIR/trunktable" >> $FILE1
114
115 # First extract structured info about VLAN membership, then map
116 # special descriptions into VLAN IDs.
117 cat "$OUT2a" | egrep '^(Et|Fa|Gi|Te)' | sed $SEDFLAG 's/^([A-Za-z/0-9]+) +(.*) +(connected|notconnect|disabled|err-disabled|monitoring|suspended) +/\1~\2%\3%/;s/%(trunk|routed|([0-9]+)) .*$/%\1/;s/%(monitoring|suspended)%/%connected%/;s/%(err-disabled)%/%disabled%/;s/ +%/%/;s/~/%/' > $OUT2b
118 while read line; do
119 tmp_ifname=`echo $line | cut -d% -f1`
120 tmp_ifdescr=`echo $line | cut -d% -f2`
121 tmp_status=`echo $line | cut -d% -f3`
122 tmp_vlanid=`echo $line | cut -d% -f4`
123 # If the port has a description pretending to be a martian VLAN, map it onto the VLAN ID.
124 if [ -n "$tmp_ifdescr" -a -z "${tmp_ifdescr##VLAN*}" ]; then
125 tmp_vlanid=${tmp_ifdescr##VLAN}
126 fi
127 echo "$tmp_ifname=$tmp_status,$tmp_vlanid" >> $FILE2
128 done < $OUT2b
129 # FIXME
130 # Here we need to distinguish between different platforms and IOS version,
131 # cause they produce output in different formats.
132 if [ "$SW" = "Cisco+IOS+12.0" ]; then
133 cat "$OUT3" | tr -d '\r' | fgrep Dynamic | sed $SEDFLAG 's/ +Dynamic +([0-9]+) +(.+)/=\1@\2/;s/FastEthernet/Fa/;s/GigabitEthernet/Gi/' > "$FILE3"
134 elif [ "$SW" = "Cisco+IOS+12.2" -o "$SW" = "Cisco+IOS+12.1" ]; then
135 case "$HW" in
136 Cisco+Catalyst+35*|Cisco+Catalyst+37*|Cisco+Catalyst+29*)
137 cat "$OUT3" | tr -d '\r' | fgrep DYNAMIC | \
138 sed $SEDFLAG 's/ +([0-9]+) +(.+) DYNAMIC +(.+)/\2=\1@\3/;s/FastEthernet/Fa/;s/GigabitEthernet/Gi/' > "$FILE3"
139 ;;
140 Cisco+Catalyst+49*)
141 cat "$OUT3" | tr -d '\r' | fgrep dynamic | \
142 sed $SEDFLAG 's/ +([0-9]+) +([0-9a-f\.]+) dynamic ip +([a-zA-Z/0-9]+) */\2=\1@\3/;s/FastEthernet/Fa/;s/GigabitEthernet/Gi/;s/TenGi/Te/' > "$FILE3"
143 ;;
144 esac
145 fi
146 }
147
148 do_push()
149 {
150 nc $ENDPOINT 23 < $CMDS1 >/dev/null
151 }
152
153 remove_tempfiles()
154 {
155 [ -f "$CMDS1" ] && rm -f "$CMDS1"
156 [ -f "$CMDS2" ] && rm -f "$CMDS2"
157 [ -f "$CMDS3" ] && rm -f "$CMDS3"
158 [ -f "$OUT1" ] && rm -f "$OUT1"
159 [ -f "$OUT2a" ] && rm -f "$OUT2a"
160 [ -f "$OUT2b" ] && rm -f "$OUT2b"
161 [ -f "$OUT3" ] && rm -f "$OUT3"
162 }
163
164 create_tempfiles()
165 {
166 # This one is for VLAN list.
167 CMDS1=`mktemp /tmp/cisco.connector.XXXX`
168 # And this one holds ports list...
169 CMDS2=`mktemp /tmp/cisco.connector.XXXX`
170 # ...and one more for MAC address table
171 CMDS3=`mktemp /tmp/cisco.connector.XXXX`
172 # The following are buffers to hold the whole switch output
173 # before filtering.
174 OUT1=`mktemp /tmp/cisco.connector.XXXX`
175 OUT2a=`mktemp /tmp/cisco.connector.XXXX`
176 OUT2b=`mktemp /tmp/cisco.connector.XXXX`
177 OUT3=`mktemp /tmp/cisco.connector.XXXX`
178 [ -f "$CMDS1" -a -f "$CMDS2" -a -f "$CMDS3" -a -f "$OUT1" -a -f "$OUT2a" -a -f "$OUT2b" -a -f "$OUT3" ] && return
179 echo "E!connector cannot create tempfiles" >> "$FILE2"
180 remove_tempfiles
181 exit 5
182 }
183
184 case $COMMAND in
185 fetch)
186 create_tempfiles
187 prepare_connect_commands $ENDPOINT
188 prepare_fetch_commands
189 do_fetch
190 remove_tempfiles
191 ;;
192 push)
193 create_tempfiles
194 prepare_connect_commands $ENDPOINT
195 prepare_push_commands
196 do_push
197 remove_tempfiles
198 ;;
199 *)
200 echo "E!unknown command for connector" >> "$FILE2"
201 exit 6
202 ;;
203 esac
204
205 exit 0