tag:
priority: 380
type: txt
help: Tunnel interface
val_help: <tunN>; Tunnel interface name
syntax:expression: pattern $VAR(@) "^tun[0-9]+$" \
		   ; "tunnel must be (tun0-tun999)"

commit:expression: $VAR(./local-ip/) != "" ;                    \
                   "Must configure the tunnel local-ip for $VAR(@)"
commit:expression: $VAR(./remote-ip/) != "" ;                   \
                   "Must configure the tunnel remote-ip for $VAR(@)"
commit:expression: $VAR(./encapsulation/) != "" ;               \
                   "Must configure the tunnel encapsulation for $VAR(@)"

create:
  if [ x$VAR(./multicast/@) == xenable ]; then
    MC="multicast on allmulticast on";
  fi
  case "$VAR(./encapsulation/@)" in
	  "gre" | "ipip" | "sit")
      if [ -n "$VAR(./parameters/ip/bridge-group/)" ] ; then
        echo "interfaces tunnel $VAR(@): Tunnel encapsulation type must be gre-bridge if a bridge group is defined";
        exit 1;
      fi
      if [ -z "$VAR(./parameters/ip/ttl/@)" ]; then
        TTL="ttl 255"
      fi
	    if [ -n "$VAR(./parameters/ip/key/@)" ]; then
        KEY="key $VAR(./parameters/ip/key/@)";
	    fi
      ip tunnel add $VAR(@) local $VAR(./local-ip/@) remote $VAR(./remote-ip/@) mode $VAR(./encapsulation/@) $KEY $TTL ||
        echo "interfaces tunnel $VAR(@): error creating tunnel interface"
	  ;;
	  "gre-bridge")
	    ip link add $VAR(@) type gretap local $VAR(./local-ip/@) remote $VAR(./remote-ip/@) ||
        echo "interfaces tunnel $VAR(@): error creating tunnel interface"
	  ;;
	  "ipip6" | "ip6ip6")
      ip -6 tunnel add $VAR(@) local $VAR(./local-ip/@) remote $VAR(./remote-ip/@) mode $VAR(./encapsulation/@) ||
        echo "interfaces tunnel $VAR(@): error creating tunnel interface"
	  ;;
    esac
    ip link set $VAR(@) $MC up ||
      echo "interfaces tunnel $VAR(@): error setting tunnel interface active"

delete: 
  ip link set $VAR(@) down
  case "$VAR(./encapsulation/@)" in
    "gre" | "ipip" | "sit")
      ip tunnel del $VAR(@) mode $VAR(./encapsulation/@);;
    "gre-bridge")
      ip link delete $VAR(@) ;;
    "ipip6" | "ip6ip6")
      ip -6 tunnel del $VAR(@) mode $VAR(./encapsulation/@);;
  esac

end: 
if [ "${COMMIT_ACTION}" == DELETE ]; then
  /opt/vyatta/sbin/vyatta-tunnel-cleanup $VAR(@)
fi