voltron/vpnmon
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Update vpnmon.sh

Browse Source
This commit is contained in:
David Schroeder
2023-11-16 21:45:46 -06:00
parent 28ede4655a
commit 7744e2f092
1 changed files with 8 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
vpnmon.sh
View File

@@ -9,17 +9,17 @@ logfile=/opt/idssys/vpnmon/logfile
touch $logfile
START(){
touch /opt/idssys/vpnmon/vpn.stop
sudo mkdir -p /var/run/xl2tpd
sudo touch /var/run/xl2tpd/l2tp-control
[ "$(systemctl list-units --full -all | grep "strongswan.service")" != "" ] && sudo service strongswan restart
[ "$(systemctl list-units --full -all | grep "strongswan-starter.service")" != "" ] && sudo service strongswan-starter restart
sudo systemctl restart xl2tpd ipsec
sleep 3s
sudo /usr/sbin/ipsec up ${VPN_CFGNAME}
sleep 4s
sudo /usr/sbin/ipsec up ${VPN_NAME}
sleep 4s
sudo echo "c ${VPN_NAME}" > /var/run/xl2tpd/l2tp-control
sleep 4s
sudo echo "c ${VPN_CFGNAME}" > /var/run/xl2tpd/l2tp-control
sleep 5s
[ "${ROUTE_SUBNET1}" != "" ] && ip route add ${ROUTE_SUBNET1} via $(ip address show dev ppp0 | grep -Po '(?<=peer )(\b([0-9]{1,3}\.){3}[0-9]{1,3}\b)') dev ppp0
[ "${ROUTE_SUBNET2}" != "" ] && ip route add ${ROUTE_SUBNET2} via $(ip address show dev ppp0 | grep -Po '(?<=peer )(\b([0-9]{1,3}\.){3}[0-9]{1,3}\b)') dev ppp0
@@ -43,10 +43,9 @@ STOP(){
# /usr/sbin/service unifi-poller stop
# fi
# sudo bash -c 'echo "d ${VPN_NAME}" > /var/run/xl2tpd/l2tp-control'
sudo echo "d ${VPN_NAME}" > /var/run/xl2tpd/l2tp-control
sudo echo "d ${VPN_CFGNAME}" > /var/run/xl2tpd/l2tp-control
sleep 4s
/usr/sbin/ipsec down ${VPN_NAME}
/usr/sbin/ipsec down ${VPN_CFGNAME}
echo "$(date) - VPN stopped" >> $logfile
@@ -54,14 +53,11 @@ STOP(){
CHECK(){
if [ ! -f /opt/idssys/vpnmon/vpn.stop ]; then
touch /opt/idssys/vpnmon/vpn.stop
checked=false
cc=0
until [ "${checked}" = "" ]; do
OUT=$(ip link | grep "ppp0")
#OUT=`ip a show $VPN_INTERFACE up` >/dev/null 2>&1
OUT=$(ip link | grep "${VPN_INTERFACE}")
if [ ${#OUT} -ne 0 ]; then
checked=""
elif [ ${cc} -eq 10 ]; then
@@ -97,7 +93,6 @@ CHECK(){
rm -f /opt/idssys/vpnmon/vpn.fail*
fi
else
echo "VPN system is stopped and must be restarted manually"
fi