#!/bin/sh

export DATE="16.10.2010";SCRIPT=${0#/rom}
export TITLE="Admin: IPv6"
. ${SCRIPT%/*}/cgi-bin-pre.sh

cat<<EOF
<H1>Admin: IPv6</H1>
EOF

case $REQUEST_METHOD in POST)
read QUERY_STRING
;;esac
case $QUERY_STRING in "");;*)
IFS=\&;set $QUERY_STRING;unset IFS;eval $*
;;esac
case $QUERY_STRING in "")
#Speedups
ff_wan6to4="$(nvram get ff_wan6to4)"
ff_ip6_6to4="$(nvram get ff_ip6_6to4)"
ff_ip6lan66="$(nvram get ff_ip6lan66)"

cat<<EOF
<FORM ACTION="ipv6.html" METHOD="POST">
<TABLE CLASS="shadow0" CELLPADDING="0" CELLSPACING="0"><TR><TD><TABLE CLASS="shadow1" CELLPADDING="0" CELLSPACING="0"><TR><TD><TABLE CLASS="shadow2" CELLPADDING="0" CELLSPACING="0"><TR><TD><TABLE BORDER="0" CLASS="form">
<TR
TITLE="General prefix for IPv6 addresses. This setting should match on all OLSR routers in your mesh. If this input field is empty, the fdca:ffee:babe::/64 default is used.">
<TD>IPv6
Prefix:</TD>
<TD COLSPAN="2"><INPUT NAME="ff_ip6pfix" SIZE="50" TYPE="TEXT" VALUE="$(nvram get ff_ip6pfix)"></TD>
</TR>
<TR
TITLE="IPv6 address of the DNS server. This IPv6 will be spread to connected PC via RDNSS. Leave the input field blank for a default DNS server.">
<TD>IPv6 DNS:</TD>
<TD COLSPAN="2"><INPUT NAME="ff_ip6dns" SIZE="50" TYPE="TEXT" VALUE="$(nvram get ff_ip6dns)"></TD>
</TR>
<TR
TITLE="MAC address list of PCs that are connected via LAN interface in the format 00:11:22:33:44:55,name. The name is optional. Enter a separate line per entry.">
<TD>IPv6 MACs:</TD>
<TD COLSPAN="2"><TEXTAREA NAME="ff_ip6macs" ROWS="10" COLS="50">$(nvram get ff_ip6macs|sed 's/;/\n/g')</TEXTAREA></TD>
</TR>
<TR
TITLE="Configure a 6to4 tunnel using then WAN interface. Precondition: the WAN interface has a globally unique IP address, e.g. via PPPoE.">
<TD>6to4
via WAN:</TD>
<TD><SPAN STYLE="white-space: nowrap;"><INPUT CLASS="radio" NAME="ff_ip6_6to4" TYPE="RADIO" VALUE="1"$(if [ "$ff_ip6_6to4" = "1" ];then echo ' checked="checked"';fi)>Enable&nbsp;</SPAN></TD>
<TD><INPUT CLASS="radio" NAME="ff_ip6_6to4" TYPE="RADIO" VALUE="0"$(if [ "$ff_ip6_6to4" != "1" ];then echo ' checked="checked"';fi)>Disable</TD>
</TR>
<TR
TITLE="Enables the router to be connected via IPv6/6to4 from the Internet. Note: outgoing IPv6 is always possible.">
<TD>6to4 WAN
Input:</TD>
<TD><SPAN STYLE="white-space: nowrap;"><INPUT CLASS="radio" NAME="ff_wan6to4" TYPE="RADIO" VALUE="1"$(if [ "$ff_wan6to4" = "1" ];then echo ' checked="checked"';fi)>Enable&nbsp;</SPAN></TD>
<TD><INPUT CLASS="radio" NAME="ff_wan6to4" TYPE="RADIO" VALUE="0"$(if [ "$ff_wan6to4" != "1" ];then echo ' checked="checked"';fi)>Disable</TD>
</TR>
<TR
TITLE="Uses an Internet prefix (2001:db8::/32) on the LAN. This circumvents the preference of private IPv4 adresses when using IPv6 ULA addresses with Debian/Ubuntu Linux (keyword: gai.conf)">
<TD>MAP66 on
LAN:</TD>
<TD><SPAN STYLE="white-space: nowrap;"><INPUT CLASS="radio" NAME="ff_ip6lan66" TYPE="RADIO" VALUE="1"$(if [ "$ff_ip6lan66" = "1" ];then echo ' checked="checked"';fi)>Enable&nbsp;</SPAN></TD>
<TD><INPUT CLASS="radio" NAME="ff_ip6lan66" TYPE="RADIO" VALUE="0"$(if [ "$ff_ip6lan66" != "1" ];then echo ' checked="checked"';fi)>Disable</TD>
</TR>
<TR>
<TD COLSPAN="3">&nbsp;</TD>
</TR>
<TR>
<TD COLSPAN="3"><INPUT NAME="post_ipv6" TITLE="Apply these settings. The settings are applied with the next restart." TYPE="SUBMIT" VALUE="Apply">&nbsp;&nbsp;&nbsp;<INPUT NAME="post_abort" TITLE="Cancel dialog page." TYPE="SUBMIT" VALUE="Cancel"></TD>
</TR>
</TABLE></TD></TR></TABLE></TD></TR></TABLE></TD></TR></TABLE></FORM>
<P><B>Note1</B>:
If you have your own IPv4 Interet access (e.g. via a PPPoE modem), you can
use IPv6 yourself and also offer IPv6 for the OLSR network. Currently,
this is supported only if the WAN interface uses a globally unique IPv4
address. Configuring a 6to4 tunnel with a private IPv4 address behind a
NAT router is not supported currently.</P>
<P><B>Note2</B>:
A PC connected via the LAN interface can also communicate with the IPv6
Internet. For this, you need to add the MAC address of the PC to the <B>IPv6
MACs</B> setting. By using the MAC address, the IPv6 address of the PC is
deviated which is then announced with HNA6 in the OLSR network. The IPv6
address is also communicated to the PC by using the &quot;Neighbour
Discovery Protocol&quot; (radvd).</P>
<P><B>Warning</B>:
With this, the PC can be contacted via IPv6 from the outside. An IPv6
firewall is (currently) not implemented on this router.</P>
<P> The following list has
some configuration tips for connected PCs.</P>
<DL>
<DT>Linux</DT>
<DD>The IPv6
protocol is normally already installed. Using random IPv6 addresses is
typically inactive. Otherwise, deactivate the IPv6 privacy extensions
with <CODE>sudo sysctl -w net.ipv6.conf.all.use_tempaddr=0</CODE>.
Also, a program for configuring the DNS server via RDNSS is missing. You
can activate this with <CODE>sudo apt-get install rdnssd</CODE>.</DD>
<DT>Windows XP</DT>
<DD>The
IPv6 protocol is normally not installed. Depending on the service pack
version, you can add the protocol via the interface configuration. In
all cases, the installation should be possible with an administrative
command shell: <CODE>netsh interface ipv6 install</CODE>. Installing
IPv6 fails in many cases. The following command may fix this: <CODE>esentutl
/r %windir%\security\Database\secedit.sdb</CODE>. Using random IPv6
addresses is typically activated. You need to disable the IPv6 privacy
extensions with <CODE>netsh int ipv6 set privacy state=disabled</CODE>.</DD>
<DT>Windows Vista/7</DT>
<DD>The IPv6 protocol is normally
installed and using random IPv6 addresses is also active. You need to
disable the IPv6 privacy extensions with <CODE>netsh int ipv6 set
privacy state=disabled</CODE> and <CODE>netsh interface ipv6 set global
randomizeidentifiers=disabled</CODE>.</DD>
</DL>
EOF

;;*)
IFS=\&;set $QUERY_STRING;unset IFS;eval $*
DIRTY=
case $post_ipv6 in "");;*)
ff_ip6macs=$(echo $ff_ip6macs|sed 's/%0[aA]/;/g;s/%0[dD]//g')
for V in ff_ip6dns ff_ip6pfix ff_ip6macs ff_wan6to4 ff_ip6_6to4 ff_ip6lan66; do
eval "C=\$$V"
C=$(unescape $C)
case $(nvram get $V) in $C);;*)
DIRTY=1
nvram set $V="$C"
;;esac
done
;;esac
case $DIRTY in "")

cat<<EOF
<TABLE BORDER="0" CLASS="note">
<TR>
<TD>No
settings are changed.</TD>
</TR>
</TABLE>
EOF

;;*)
nvram commit>/dev/null 2>&1

cat<<EOF
<TABLE BORDER="0" CLASS="note">
<TR>
<TD>The changed settings are committed. The
settings are active after the next <A HREF="reset.html">Restart</A>.</TD>
</TR>
</TABLE>
EOF

;;esac
;;esac

. ${SCRIPT%/*}/cgi-bin-post.sh