#!/bin/sh

. /lib/functions.sh

board_name=$(board_name)

help()
{
    cat <<_HELP_
Setup/Remove LAN port on static ip mode.
Support create/setup VLAN interface.
lan represents PHY port eth3. It means the native vlan.
LAN port will be added to a security zone, TRUSTED by default.

Usage:  $0 {set|del} {lan} [--ipaddr IPADDR] [--netmask NETMASK] 
                        [--mtu MTU] [--vid VLANID] [--zone ZONE] [-S]
        $0 set {lan} --ipaddr IPADDR --netmask NETMASK
                        [--mtu MTU] [--vid VLANID] [--zone ZONE] [-S]
        $0 del {lan} [--vid VLANID] [--zone ZONE] [-S]
        --ipaddr IPADDR # static ipaddress
        --netmask NETMASK # format 255.255.255.0
        --mtu MTU # Set MTU on this interface
        --vid VLANID # vlan id [1~4093] on the target interface
        --zone {*TRUSTED|UNTRUSTED|DMZ|GUEST} # assign security zone
        -S # don't restart service
Example:
    $0 set lan 192.168.254.254 255.255.255.0 # set lan port with static ip addresses
    $0 set lan 192.168.101.254 255.255.255.0 --vid 101 # set vlan 101 interface with static ip addresses
_HELP_
}

case $1 in
    set) cmd="$1";;
    del) cmd="$1";;
    *) help; exit 1;;
esac
shift 1

case $1 in
  lan) ifx="$1";ifname="eth1";
    if [ "$board_name" == "WOOLINK-MT7621-512M-256M" ]
    then
      ifname="eth0.4090 eth0.4091 eth0.4092 eth0.4093"
    elif [ "$board_name" == "WOOLINK-MT7628-128M-32M" ]
    then
      ifname="eth0.4091 eth0.4092 eth0.4093 eth0.4094"
    fi
      ;;
    *) help; exit 1;;
esac
shift 1

zone='TRUSTED'
while [ -n "$1" ]; do
    case $1 in
        --ipaddr) ipaddr="$2";shift 2;;
        --netmask) netmask="$2";shift 2;;
        --mtu) mtu="$2";shift 2;;
        --vid) vid="$2";shift 2;;
        --zone) zone="$2";shift 2;;
        -S) no_restart='1';shift 1;;
        --) shift;break;;
        -*) help;exit 1;;
        *) break;;
    esac
done

# TODO VID suppport on MTK board
if [ "$board_name" == "WOOLINK-MT7621-512M-256M" -o "$board_name" == "WOOLINK-MT7628-128M-32M" ]
then
  if [ -n "$vid" ]
  then
    exit
  fi
fi

case $zone in
    TRUSTED) zone_id='0';;
    UNTRUSTED) zone_id='1';;
    DMZ) zone_id='2';;
    GUEST) zone_id='3';;
    *) help; exit 1;;
esac

if [ -n "${vid}" ]; then
    if [ $vid -ge 4096 -o $vid -le 0 ]; then
        help
        exit 1
    else
        ifx="${ifx}_${vid}"
        if [ "$(uci get system.system.netmodel)" == "1" ]
        then
            ifname="eth0.${vid} ${ifname}.${vid}"
        else
            ifname="${ifname}.${vid}"
        fi
    fi
fi

set_vlan()
{
    [ -n "$ipaddr" -a -n "$netmask" ] || exit 1

    uci delete network.${ifx}
    uci set network.${ifx}=interface
    uci set network.${ifx}.type=bridge
    if [ "$(uci get system.system.netmodel)" == "1" ]
    then
      if [ "$board_name" == "WOOLINK-MT7621-512M-256M" ]
      then
        uci set network.${ifx}.ifname="eth0.4094 ${ifname}"
      elif [ "$board_name" == "WOOLINK-MT7628-128M-32M" ]
      then
        uci set network.${ifx}.ifname="eth0.4090 ${ifname}"
      else
        uci set network.${ifx}.ifname="eth0 ${ifname}"
      fi
      uci set network.wan.proto="none"
    else
        uci set network.${ifx}.ifname="${ifname}"
    fi
    uci set network.${ifx}.proto='static'
    uci set network.${ifx}.ipaddr="${ipaddr}"
    uci set network.${ifx}.netmask="${netmask}"
    if [ -n "$mtu" ]; then
        uci set network.${ifx}.mtu=$mtu
    fi
    uci get firewall.${zone}.network | grep -e "\<${ifx}\>" > /dev/null 2>&1
    if [ "$?" != 0 ]; then
        uci add_list firewall.${zone}.network="${ifx}"
    fi 

    if [ -z "${vid}" ]; then
        # need to adjust router.oakridge.vip --> lanip mapping
        # dhcp.dyiot_gw.ip='172.16.254.254'
        uci set dhcp.dyiot_gw.ip="${ipaddr}"
        uci commit dhcp
        # need to update webuiconfig file also
        uci set webui_config.${ifx}.ipaddr="${ipaddr}"
        uci set webui_config.${ifx}.netmask="${netmask}"
        uci commit webui_config
    fi
}

del_vlan()
{
    uci delete network.${ifx}
    uci del_list firewall.${zone}.network="${ifx}"
}


case "$cmd" in
    set) set_vlan;;
    del) del_vlan;;
    *) help;exit 1;;
esac

uci commit network
uci commit firewall

if [ -z "$no_restart" ]; then
    /etc/init.d/network reload
    /etc/init.d/dnsmasq reload
    /etc/init.d/firewall reload
fi

echo "Set IP $ipaddr/$netmask on $ifx : $vid"

exit 0