Help! need to move "backbone_net"

spohnz

This is what I have to go by for directions.
The VPN configs have a backbone net that is hard coded. This is legacy from when there was only one. This needs to be provided and used in the scripts in a different manner so we dont have to edit the source code manually for each individual site.
Here is the code parts that mentions backbone_net

backbone_net="${backbone_net:-"172.16.4.0/23"}"
  echo "backbone_net=\"${backbone_net}\"" >> "$config_file"
    sed -i -e "s/\$ntt_ip/$ntt_ip/g" \
         -e "s/\$downstream_dhcp_prefix/$downstream_dhcp_prefix/g" \
         -e "s/\$unique_client_net/$unique_client_net/g" \
         -e "s/\$downstream_dhcp_net/$downstream_dhcp_net/g" \
         -e "s/\$lo_prefix/$lo_prefix/g" \
         -e "s,\$backbone_net,$backbone_net,g" \
             /etc/quagga/ripd.conf

I know this is vague, I feel that I can get a better grasp on the task if it is explained to me in a different way maybe?
Thanks for any assistance provided.

TinCanTech

spohnz wrote I know this is vague

Indeed !

spohnz wrote The VPN configs have a backbone net that is hard coded

Perhaps, if we could see the VPN config file ..

spohnz

Hi TinCanTech Here is the whole file I have.

#!/bin/bash
#
# agautoconf   This shell script generates the device specific network
#              configuration data for this particular AG appliance and
#              updates the configuration files of other core services
#              on this machine to participate in NTT Security ActiveGuard
#              processing network.
#
# chkconfig: 345 23 77
#
# description: NTT Security ActiveGuard processing infrastructure requires
#              each participating device to be addressed in a unique and
#              and predictable fashion.  This service ensures that this
#              device has such a configuration and all services that run
#              on this device are configured to use this data.


[[ ! -e "/var/run/openvpn-server/" ]] && mkdir -p "/var/run/openvpn-server/"
base_dir="/etc/sysconfig/ntt"
config_file="${base_dir}/network.conf"

[[ -e "$config_file" ]] && . "$config_file"

lo_prefix="${lo_prefix:-"100"}"
# hostname minus any domain
hostname="${hostname:-$(hostname | cut -d. -f1)}"
downstream_tap="${downstream_tap:-"tap0"}"
downstream_bridge="${downstream_bridge:-"downstream0"}"
downstream_dhcp_prefix="${downstream_dhcp_prefix:-"100"}"
backbone_net="${backbone_net:-"172.16.4.0/23"}"
server_id="$(hostname --short | rev | cut -c 1-2 | rev | sed 's/^0*//')"


  [[ ! -d $(dirname $config_file) ]] && mkdir -p $(dirname $config_file)

  ntt_ip="${lo_prefix}.64.${server_id}.1"
  unique_client_net="${lo_prefix}.64.${server_id}.0"

  echo "# automatically generated config" > "$config_file"
  echo "hostname=\"${hostname}\"" >> "$config_file"
  echo "backbone_net=\"${backbone_net}\"" >> "$config_file"
  echo "lo_prefix=\"${lo_prefix}\"" >> "$config_file"
  echo "ntt_ip=\"${ntt_ip}\"" >> "$config_file"
  echo "unique_client_net=\"${unique_client_net}\"" >> "$config_file"
  echo "downstream_tap=\"${downstream_tap}\"" >> "$config_file"
  echo "downstream_bridge=\"${downstream_bridge}\"" >> "$config_file"
  echo "downstream_bridge_ip=\"${downstream_dhcp_prefix}.64.${server_id}.1\"" >> "$config_file"
  echo "downstream_bridge_brd=\"${downstream_dhcp_prefix}.64.${server_id}.255\"" >> "$config_file"
  echo "downstream_dhcp_prefix=\"${downstream_dhcp_prefix}\"" >> "$config_file"
  echo "downstream_dhcp_net=\"${downstream_dhcp_prefix}.64.${server_id}.0\"" >> "$config_file"
  echo "downstream_dhcp_min=\"${downstream_dhcp_prefix}.64.${server_id}.2\"" >> "$config_file"
  echo "downstream_dhcp_max=\"${downstream_dhcp_prefix}.64.${server_id}.254\"" >> "$config_file"

  [[ -z "$(ip addr show dev lo | grep $ntt_ip)" ]] && ip addr add $ntt_ip/32 dev lo

  [[ ! -f "/etc/init.d/openvpn.downstream" ]] && ln -s /etc/sysconfig/ntt/scripts/openvpn.downstream /etc/init.d/openvpn.downstream
  # Generate Quagga configuration based on template.

  [[ ! -d /etc/quagga ]] && mkdir -p /etc/quagga

  cp -a $base_dir/templates/quagga/zebra.conf /etc/quagga/
  cp -a $base_dir/templates/quagga/ripd.conf /etc/quagga/
  cp -a $base_dir/templates/quagga/bgp.conf /etc/quagga/

  sed -i -e "s/\$ntt_ip/$ntt_ip/g" \
         -e "s/\$downstream_dhcp_prefix/$downstream_dhcp_prefix/g" \
         -e "s/\$unique_client_net/$unique_client_net/g" \
         -e "s/\$downstream_dhcp_net/$downstream_dhcp_net/g" \
         -e "s/\$lo_prefix/$lo_prefix/g" \
         -e "s,\$backbone_net,$backbone_net,g" \
             /etc/quagga/ripd.conf

case "$1" in
  start)
    ;;
  stop)
    ;;
  *)
    echo "usage: $(basename $0) (start)" >&2
    exit 1
    ;;
esac

spohnz

Here is my config file. Seems like this site wont let me post it. says forbidden "Forbidden. You submitted too quickly. You may try again in a few seconds. " been trying it for 30 minutes.
here is my gist to it anyway:
https://gist.github.com/dallasspohn/5e5cf0539902f86c70b9326a023b8c26

TinCanTech

I suggest you contact the author.

spohnz

The author is no longer with the company.
There are more to the task like setting a bgp config to be placed on the reflectors. But this task seems hard to wrap my head around.
My lead sent me further instructions last night.
"The backbone_net is hardcoded into the script. The task that needs completed (by me) is to extract it in a way that makes it easy for Techops to deploy this with little to no intervention from us."

I am newish (6 months) and a remote worker. I feel that some training would have been helpful but they are a very busy team. So my deepest thanks for any assistance you would be willing to provide please.

TinCanTech

This has nothing to do with openvpn.

If you can not resolve this yourself you can contact me privately: tincanteksup <at> gmail