mac-client.pl

#!/usr/bin/perl

# This will handle network initialization for Mac OS X clients of GSSVPN.
# The parameters in argv will be the name of the tap device being used
# and the parameters passed back from the GSSVPN server. It will accept
# the following options
#
# ip <ip address>
# subnet <subnet mask>
# dhcp
# gateway <ip address>
# routenet <subnet address>/<cidr range>
# route <ip address>
#
# This script assumes it is running as the super-user
#

my $ipaddr = my $subnet = my $gateway = my $dhcp = undef;
my $tapdev = shift;
my $action = shift;
my @routenets = my @routehosts = ( );

$ENV{PATH} = "/sbin";
$action =~ /shutdown/ && exit 0;

while (@ARGV) {
	$_ = shift;
	if($_ =~ /ip/) {
		$ipaddr = shift;
	}
	elsif($_ =~ /subnet/) {
		$subnet = shift;
	}
	elsif($_ =~ /gateway/) {
		$gateway = shift;
	}
	elsif($_ =~ /dhcp/) {
		system "ipconfig set $tapdev DHCP";
		$dhcp = 1;
	}
	elsif($_ =~ /netroute/) {
		push @routenets, shift;
	}
	elsif($_ =~ /route/) {
		push @routehosts, shift;
	}
}

if(!$dhcp) {
	if(!$ipaddr || !$subnet) {
		exit 1;
	}
	system "/sbin/ifconfig $tapdev inet $ipaddr netmask $subnet";
}

if(!$gateway) {
	exit 0;
}

system "/sbin/ping -o -q -n $gateway";
if($? != 0) {
	die "Unable to ping gateway.";
}

foreach my $dest (@routenets) {
	system "/sbin/route add -net $dest $gateway";
}

foreach my $dest (@routehosts) {
	system "/sbin/route add -host $dest $gateway";
}