mirror of
				https://github.com/eworm-de/routeros-scripts.git
				synced 2024-05-11 05:55:19 +00:00 
			
		
		
		
	
		
			
				
	
	
		
			45 lines
		
	
	
		
			1.7 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
			
		
		
	
	
			45 lines
		
	
	
		
			1.7 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
#!rsc by RouterOS
 | 
						|
# RouterOS script: update-gre-address
 | 
						|
# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 | 
						|
# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 | 
						|
#
 | 
						|
# requires RouterOS, version=7.12
 | 
						|
#
 | 
						|
# update gre interface remote address with dynamic address from
 | 
						|
# ipsec remote peer
 | 
						|
# https://git.eworm.de/cgit/routeros-scripts/about/doc/update-gre-address.md
 | 
						|
 | 
						|
:global GlobalFunctionsReady;
 | 
						|
:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 | 
						|
 | 
						|
:local Main do={
 | 
						|
  :local ScriptName [ :tostr $1 ];
 | 
						|
 | 
						|
  :global CharacterReplace;
 | 
						|
  :global LogPrintExit2;
 | 
						|
  :global ScriptLock; 
 | 
						|
 | 
						|
  :if ([ $ScriptLock $ScriptName ] = false) do={
 | 
						|
    :return false;
 | 
						|
  }
 | 
						|
 | 
						|
  /interface/gre/set remote-address=0.0.0.0 disabled=yes [ find where !running !disabled ];
 | 
						|
 | 
						|
  :foreach Peer in=[ /ip/ipsec/active-peers/find ] do={
 | 
						|
    :local PeerVal [ /ip/ipsec/active-peers/get $Peer ];
 | 
						|
    :local GreInt [ /interface/gre/find where comment=($PeerVal->"id") or comment=[ $CharacterReplace ($PeerVal->"id") "CN=" "" ] ];
 | 
						|
    :if ([ :len $GreInt ] > 0) do={
 | 
						|
      :local GreIntVal [ /interface/gre/get $GreInt ];
 | 
						|
      :if ([ :typeof ($PeerVal->"dynamic-address") ] = "str" && \
 | 
						|
           ($PeerVal->"dynamic-address" != $GreIntVal->"remote-address" || \
 | 
						|
            $GreIntVal->"disabled" = true)) do={
 | 
						|
        $LogPrintExit2 info $ScriptName ("Updating remote address for interface " . $GreIntVal->"name" . " to " . $PeerVal->"dynamic-address") false;
 | 
						|
        /interface/gre/set remote-address=0.0.0.0 disabled=yes [ find where remote-address=$PeerVal->"dynamic-address" name!=$GreIntVal->"name" ];
 | 
						|
        /interface/gre/set $GreInt remote-address=($PeerVal->"dynamic-address") disabled=no;
 | 
						|
      }
 | 
						|
    }
 | 
						|
  }
 | 
						|
}
 | 
						|
 | 
						|
$Main [ :jobname ];
 |