aboutsummaryrefslogblamecommitdiffstats
path: root/update-gre-address
blob: c4d1dda7d1025a461433c86c4accc5d76fa4c400 (plain) (tree)
1
2
3
4
5
6
7
8
9
                 
                                     
                                                         
                                                             

                                                               
                                                                            
 
                     
                                                                                          
                                                      
                                                                      
                                 
                                                     

                                                                          
                                                                                                                                      
                                                                                                                                                 

     
#!rsc by RouterOS
# RouterOS script: update-gre-address
# Copyright (c) 2013-2020 Christian Hesse <mail@eworm.de>
# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
#
# update gre interface remote address with dynamic address from
# ipsec remote peer
# https://git.eworm.de/cgit/routeros-scripts/about/doc/update-gre-address.md

:global LogPrintExit;

/ interface gre set remote-address=0.0.0.0 disabled=yes [ find where !running !disabled ];

:foreach Peer in=[ / ip ipsec active-peers find ] do={
  :local PeerVal [ / ip ipsec active-peers get $Peer ];
  :local GreInt [ / interface gre find where comment=$PeerVal->"id" ];
  :if ([ :len $GreInt ] > 0) do={
    :local GreIntVal [ / interface gre get $GreInt ];
    :if ([ :typeof ($PeerVal->"dynamic-address") ] = "str" && \
         ($PeerVal->"dynamic-address" != $GreIntVal->"remote-address" || \
          $GreIntVal->"disabled" = true)) do={
      $LogPrintExit info ("Updating remote address for interface " . $GreIntVal->"name" . " to " . $PeerVal->"dynamic-address") false;
      / interface gre set remote-address=0.0.0.0 disabled=yes [ find where remote-address=$PeerVal->"dynamic-address" name!=$GreIntVal->"name" ];
      / interface gre set $GreInt remote-address=($PeerVal->"dynamic-address") disabled=no;
    }
  }
}