43 lines
1.6 KiB
Plaintext
43 lines
1.6 KiB
Plaintext
#!rsc by RouterOS
|
|
# RouterOS script: update-gre-address
|
|
# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
|
|
# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
|
|
#
|
|
# requires RouterOS, version=7.12
|
|
#
|
|
# update gre interface remote address with dynamic address from
|
|
# ipsec remote peer
|
|
# https://git.eworm.de/cgit/routeros-scripts/about/doc/update-gre-address.md
|
|
|
|
:global GlobalFunctionsReady;
|
|
:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
|
|
|
|
:do {
|
|
:local ScriptName [ :jobname ];
|
|
|
|
:global CharacterReplace;
|
|
:global LogPrint;
|
|
:global ScriptLock;
|
|
|
|
:if ([ $ScriptLock $ScriptName ] = false) do={
|
|
:error false;
|
|
}
|
|
|
|
/interface/gre/set remote-address=0.0.0.0 disabled=yes [ find where !running !disabled ];
|
|
|
|
:foreach Peer in=[ /ip/ipsec/active-peers/find ] do={
|
|
:local PeerVal [ /ip/ipsec/active-peers/get $Peer ];
|
|
:local GreInt [ /interface/gre/find where comment=($PeerVal->"id") or comment=[ $CharacterReplace ($PeerVal->"id") "CN=" "" ] ];
|
|
:if ([ :len $GreInt ] > 0) do={
|
|
:local GreIntVal [ /interface/gre/get $GreInt ];
|
|
:if ([ :typeof ($PeerVal->"dynamic-address") ] = "str" && \
|
|
($PeerVal->"dynamic-address" != $GreIntVal->"remote-address" || \
|
|
$GreIntVal->"disabled" = true)) do={
|
|
$LogPrint info $ScriptName ("Updating remote address for interface " . $GreIntVal->"name" . " to " . $PeerVal->"dynamic-address");
|
|
/interface/gre/set remote-address=0.0.0.0 disabled=yes [ find where remote-address=$PeerVal->"dynamic-address" name!=$GreIntVal->"name" ];
|
|
/interface/gre/set $GreInt remote-address=($PeerVal->"dynamic-address") disabled=no;
|
|
}
|
|
}
|
|
}
|
|
} on-error={ }
|