summaryrefslogtreecommitdiff
path: root/scripts/bgp/vyatta-bgp.pl
blob: 3306654c48387cd0aaeac413854f843b3a8b2baf (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
#!/usr/bin/perl
use strict;
use lib "/opt/vyatta/share/perl5/";
use Vyatta::Config;
use Vyatta::Misc;
use Getopt::Long;

my ( $pg, $as, $neighbor );
my ( $checkas, $peername, $checkifpeergroup, $checkpeergroups );

GetOptions(
    "peergroup=s"         => \$pg,
    "as=s"                => \$as,
    "neighbor=s"          => \$neighbor,
    "check-peer-name=s"   => \$peername,
    "check-as"            => \$checkas,
    "check-peer-groups"   => \$checkpeergroups,
    "check-if-peer-group" => \$checkifpeergroup,
);

check_peer_name($peername)	  	       if ($peername);
check_for_peer_groups( $pg, $as )	       if ($checkpeergroups);
check_as( ( $pg ? $pg : -1 ), $neighbor, $as ) if ($checkas);
check_if_peer_group($pg)		       if ($checkifpeergroup);

exit 0;

sub check_if_peer_group {
    my $neighbor = shift;

    exit 1 if is_ip_v4_or_v6($neighbor);
    exit 0;
}

# Make sure the neighbor is a proper IP or name
sub check_peer_name {
    my $neighbor = shift;

    $_ = $neighbor;
    my $version = is_ip_v4_or_v6($neighbor);
    if ( ( !defined($version) ) && (/[\s\W]/g) ) {
        die "malformed neighbor address $neighbor\n";
    }

    # Quagga treats the first byte as a potential IPv6 address
    # so we can't use it as a peer group name.  So let's check for it.
    if ( $version == 6 && /^[A-Fa-f]{1,4}$/ ) {
	die "malformed neighbor address $neighbor\n";
    }
}

# Make sure we aren't deleteing a peer-group that has
# neighbors configured to us it
sub check_for_peer_groups {
    my $config = new Vyatta::Config;
    my $pg     = shift;
    die "Peer group not defined\n" unless $pg;
    my $as = shift;
    die "AS not defined\n" unless $as;
    my @peers;

    # short circuit if the neighbor is an IP rather than name
    return if is_ip_v4_or_v6($pg);

    # get the list of neighbors and see if they have a peer-group set
    $config->setLevel("protocols bgp $as neighbor");
    my @neighbors = $config->listNodes();

    foreach my $node (@neighbors) {
        my $peergroup = $config->returnValue("$node peer-group");
        if ( $peergroup eq $pg ) { push @peers, $node; }
    }

    # if we found peers in the previous statements
    # notify an return errors
    if (@peers) {
        foreach my $node (@peers) {
            print "neighbor $node uses peer-group $pg\n";
        }

	die "please delete these peers before removing the peer-group\n";
    }
}

# make sure nodes are either in a peer group of have
# a remote AS assigned to them.
sub check_as {
    my $pg       = shift;
    my $neighbor = shift;
    die "Neighbor not defined" unless $neighbor;
    my $as = shift;
    die "AS not defined\n" unless $as;
    my $config = new Vyatta::Config;
    my $pgtest = $neighbor;

    # if this is peer-group then short circuit this
    return unless is_ip_v4_or_v6($pg);

    $config->setLevel("protocols bgp $as neighbor $neighbor");
    my $remoteas = $config->returnValue("remote-as");

    return unless $remoteas;

    return if ( $pg > 0 );

    my $peergroup   = $config->returnValue("peer-group");
    my $peergroupas = $config->returnValue(" .. $peergroup remote-as");

    die "protocols bgp $as neighbor $neighbor: must define a remote-as or peer-group\n"
      unless $peergroup;

    die "protocols bgp $as neighbor $neighbor: must define a remote-as in neighbor or peer-group $peergroup\n"
      unless $peergroupas;
}