mirror of
https://github.com/eworm-de/routeros-scripts
synced 2024-05-14 08:04:19 +00:00
5b5c91da84
RouterOS before version 7.12beta3 had a bug where getting comment from registration-table is not possible. Require that version at least. This was fixed in SUP-124500.
78 lines
3.4 KiB
Text
78 lines
3.4 KiB
Text
#!rsc by RouterOS
|
|
# RouterOS script: hotspot-to-wpa-cleanup%TEMPL%
|
|
# Copyright (c) 2021-2023 Christian Hesse <mail@eworm.de>
|
|
# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
|
|
#
|
|
# provides: lease-script, order=80
|
|
# NOT /caps-man #
|
|
# requires RouterOS, version=7.12beta3
|
|
# NOT /caps-man #
|
|
#
|
|
# manage and clean up private WPA passphrase after hotspot login
|
|
# https://git.eworm.de/cgit/routeros-scripts/about/doc/hotspot-to-wpa.md
|
|
#
|
|
# !! This is just a template to generate the real script!
|
|
# !! Pattern '%TEMPL%' is replaced, paths are filtered.
|
|
|
|
:local 0 "hotspot-to-wpa-cleanup%TEMPL%";
|
|
:global GlobalFunctionsReady;
|
|
:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
|
|
|
|
:global EitherOr;
|
|
:global LogPrintExit2;
|
|
:global ParseKeyValueStore;
|
|
:global ScriptLock;
|
|
|
|
$ScriptLock $0 false 10;
|
|
|
|
:local DHCPServers ({});
|
|
:foreach Server in=[ /ip/dhcp-server/find where comment~"hotspot-to-wpa" ] do={
|
|
:local ServerVal [ /ip/dhcp-server/get $Server ]
|
|
:local ServerInfo [ $ParseKeyValueStore ($ServerVal->"comment") ];
|
|
:if (($ServerInfo->"hotspot-to-wpa") = "wpa") do={
|
|
:set ($DHCPServers->($ServerVal->"name")) \
|
|
[ :totime [ $EitherOr ($ServerInfo->"timeout") 4w ] ];
|
|
}
|
|
}
|
|
|
|
:foreach Client in=[ /caps-man/registration-table/find where comment~"^hotspot-to-wpa:" ] do={
|
|
:foreach Client in=[ /interface/wifiwave2/registration-table/find where comment~"^hotspot-to-wpa:" ] do={
|
|
:local ClientVal [ /caps-man/registration-table/get $Client ];
|
|
:local ClientVal [ /interface/wifiwave2/registration-table/get $Client ];
|
|
:foreach Lease in=[ /ip/dhcp-server/lease/find where dynamic \
|
|
mac-address=($ClientVal->"mac-address") ] do={
|
|
:if (($DHCPServers->[ /ip/dhcp-server/lease/get $Lease server ]) > 0s) do={
|
|
$LogPrintExit2 info $0 ("Client with mac address " . ($ClientVal->"mac-address") . \
|
|
" connected to WPA, making lease static.") false;
|
|
/ip/dhcp-server/lease/make-static $Lease;
|
|
/ip/dhcp-server/lease/set comment=($ClientVal->"comment") $Lease;
|
|
}
|
|
}
|
|
}
|
|
|
|
:foreach Client in=[ /caps-man/access-list/find where comment~"^hotspot-to-wpa:" \
|
|
:foreach Client in=[ /interface/wifiwave2/access-list/find where comment~"^hotspot-to-wpa:" \
|
|
!(comment~[ /system/clock/get date ]) ] do={
|
|
:local ClientVal [ /caps-man/access-list/get $Client ];
|
|
:local ClientVal [ /interface/wifiwave2/access-list/get $Client ];
|
|
:if ([ :len [ /ip/dhcp-server/lease/find where !dynamic comment~"^hotspot-to-wpa:" \
|
|
mac-address=($ClientVal->"mac-address") ] ] = 0) do={
|
|
$LogPrintExit2 info $0 ("Client with mac address " . ($ClientVal->"mac-address") . \
|
|
" did not connect to WPA, removing from access list.") false;
|
|
/caps-man/access-list/remove $Client;
|
|
/interface/wifiwave2/access-list/remove $Client;
|
|
}
|
|
}
|
|
|
|
:foreach Server,Timeout in=$DHCPServers do={
|
|
:foreach Lease in=[ /ip/dhcp-server/lease/find where !dynamic status="waiting" \
|
|
server=$Server last-seen>$Timeout comment~"^hotspot-to-wpa:" ] do={
|
|
:local LeaseVal [ /ip/dhcp-server/lease/get $Lease ];
|
|
$LogPrintExit2 info $0 ("Client with mac address " . ($LeaseVal->"mac-address") . \
|
|
" was not seen for " . $Timeout . ", removing.") false;
|
|
/caps-man/access-list/remove [ find where comment~"^hotspot-to-wpa:" \
|
|
/interface/wifiwave2/access-list/remove [ find where comment~"^hotspot-to-wpa:" \
|
|
mac-address=($LeaseVal->"mac-address") ];
|
|
/ip/dhcp-server/lease/remove $Lease;
|
|
}
|
|
}
|