1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
|
#!/usr/bin/env python3
#
# Copyright (C) 2020-2024 VyOS maintainers and contributors
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2 or later as
# published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
# - remove primary/secondary identifier from nameserver
from sys import argv, exit
from vyos.configtree import ConfigTree
if len(argv) < 2:
print("Must specify file name!")
exit(1)
file_name = argv[1]
with open(file_name, 'r') as f:
config_file = f.read()
config = ConfigTree(config_file)
base = ['service', 'pppoe-server']
if not config.exists(base):
# Nothing to do
exit(0)
else:
# Migrate IPv4 DNS servers
dns_base = base + ['dns-servers']
if config.exists(dns_base):
for server in ['server-1', 'server-2']:
if config.exists(dns_base + [server]):
dns = config.return_value(dns_base + [server])
config.set(base + ['name-server'], value=dns, replace=False)
config.delete(dns_base)
# Migrate IPv6 DNS servers
dns_base = base + ['dnsv6-servers']
if config.exists(dns_base):
for server in ['server-1', 'server-2', 'server-3']:
if config.exists(dns_base + [server]):
dns = config.return_value(dns_base + [server])
config.set(base + ['name-server'], value=dns, replace=False)
config.delete(dns_base)
# Migrate IPv4 WINS servers
wins_base = base + ['wins-servers']
if config.exists(wins_base):
for server in ['server-1', 'server-2']:
if config.exists(wins_base + [server]):
wins = config.return_value(wins_base + [server])
config.set(base + ['wins-server'], value=wins, replace=False)
config.delete(wins_base)
# Migrate radius-settings node to RADIUS and use this as base for the
# later migration of the RADIUS servers - this will save a lot of code
radius_settings = base + ['authentication', 'radius-settings']
if config.exists(radius_settings):
config.rename(radius_settings, 'radius')
# Migrate RADIUS dynamic author / change of authorisation server
dae_old = base + ['authentication', 'radius', 'dae-server']
if config.exists(dae_old):
config.rename(dae_old, 'dynamic-author')
dae_new = base + ['authentication', 'radius', 'dynamic-author']
if config.exists(dae_new + ['ip-address']):
config.rename(dae_new + ['ip-address'], 'server')
if config.exists(dae_new + ['secret']):
config.rename(dae_new + ['secret'], 'key')
# Migrate RADIUS server
radius_server = base + ['authentication', 'radius-server']
if config.exists(radius_server):
new_base = base + ['authentication', 'radius', 'server']
config.set(new_base)
config.set_tag(new_base)
for server in config.list_nodes(radius_server):
old_base = radius_server + [server]
config.copy(old_base, new_base + [server])
# migrate key
if config.exists(new_base + [server, 'secret']):
config.rename(new_base + [server, 'secret'], 'key')
# remove old req-limit node
if config.exists(new_base + [server, 'req-limit']):
config.delete(new_base + [server, 'req-limit'])
config.delete(radius_server)
# Migrate IPv6 prefixes
ipv6_base = base + ['client-ipv6-pool']
if config.exists(ipv6_base + ['prefix']):
prefix_old = config.return_values(ipv6_base + ['prefix'])
# delete old prefix CLI nodes
config.delete(ipv6_base + ['prefix'])
# create ned prefix tag node
config.set(ipv6_base + ['prefix'])
config.set_tag(ipv6_base + ['prefix'])
for p in prefix_old:
prefix = p.split(',')[0]
mask = p.split(',')[1]
config.set(ipv6_base + ['prefix', prefix, 'mask'], value=mask)
if config.exists(ipv6_base + ['delegate-prefix']):
prefix_old = config.return_values(ipv6_base + ['delegate-prefix'])
# delete old delegate prefix CLI nodes
config.delete(ipv6_base + ['delegate-prefix'])
# create ned delegation tag node
config.set(ipv6_base + ['delegate'])
config.set_tag(ipv6_base + ['delegate'])
for p in prefix_old:
prefix = p.split(',')[0]
mask = p.split(',')[1]
config.set(ipv6_base + ['delegate', prefix, 'delegation-prefix'], value=mask)
try:
with open(file_name, 'w') as f:
f.write(config.to_string())
except OSError as e:
print("Failed to save the modified config: {}".format(e))
exit(1)
|
