[mirror_iproute2.git] / ip / iptunnel.c

/*
 * iptunnel.c	       "ip tunnel"
 *
 *		This program is free software; you can redistribute it and/or
 *		modify it under the terms of the GNU General Public License
 *		as published by the Free Software Foundation; either version
 *		2 of the License, or (at your option) any later version.
 *
 * Authors:	Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru>
 *
 */

#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <arpa/inet.h>
#include <sys/ioctl.h>
#include <net/if.h>
#include <net/if_arp.h>
#include <linux/ip.h>
#include <linux/if_tunnel.h>

#include "rt_names.h"
#include "utils.h"
#include "ip_common.h"
#include "tunnel.h"

static void usage(void) __attribute__((noreturn));

static void usage(void)
{
	fprintf(stderr,
		"Usage: ip tunnel { add | change | del | show | prl | 6rd } [ NAME ]\n"
		"	 [ mode { ipip | gre | sit | isatap | vti } ] [ remote ADDR ] [ local ADDR ]\n"
		"	 [ [i|o]seq ] [ [i|o]key KEY ] [ [i|o]csum ]\n"
		"	 [ prl-default ADDR ] [ prl-nodefault ADDR ] [ prl-delete ADDR ]\n"
		"	 [ 6rd-prefix ADDR ] [ 6rd-relay_prefix ADDR ] [ 6rd-reset ]\n"
		"	 [ ttl TTL ] [ tos TOS ] [ [no]pmtudisc ] [ dev PHYS_DEV ]\n"
		"\n"
		"Where:	NAME := STRING\n"
		"	ADDR := { IP_ADDRESS | any }\n"
		"	TOS  := { STRING | 00..ff | inherit | inherit/STRING | inherit/00..ff }\n"
		"	TTL  := { 1..255 | inherit }\n"
		"	KEY  := { DOTTED_QUAD | NUMBER }\n");
	exit(-1);
}

static void set_tunnel_proto(struct ip_tunnel_parm *p, int proto)
{
	if (p->iph.protocol && p->iph.protocol != proto) {
		fprintf(stderr,
			"You managed to ask for more than one tunnel mode.\n");
		exit(-1);
	}
	p->iph.protocol = proto;
}

static int parse_args(int argc, char **argv, int cmd, struct ip_tunnel_parm *p)
{
	int count = 0;
	const char *medium = NULL;
	int isatap = 0;

	memset(p, 0, sizeof(*p));
	p->iph.version = 4;
	p->iph.ihl = 5;
#ifndef IP_DF
#define IP_DF		0x4000		/* Flag: "Don't Fragment"	*/
#endif
	p->iph.frag_off = htons(IP_DF);

	while (argc > 0) {
		if (strcmp(*argv, "mode") == 0) {
			NEXT_ARG();
			if (strcmp(*argv, "ipip") == 0 ||
			    strcmp(*argv, "ip/ip") == 0) {
				set_tunnel_proto(p, IPPROTO_IPIP);
			} else if (strcmp(*argv, "gre") == 0 ||
				   strcmp(*argv, "gre/ip") == 0) {
				set_tunnel_proto(p, IPPROTO_GRE);
			} else if (strcmp(*argv, "sit") == 0 ||
				   strcmp(*argv, "ipv6/ip") == 0) {
				set_tunnel_proto(p, IPPROTO_IPV6);
			} else if (strcmp(*argv, "isatap") == 0) {
				set_tunnel_proto(p, IPPROTO_IPV6);
				isatap++;
			} else if (strcmp(*argv, "vti") == 0) {
				set_tunnel_proto(p, IPPROTO_IPIP);
				p->i_flags |= VTI_ISVTI;
			} else {
				fprintf(stderr,
					"Unknown tunnel mode \"%s\"\n", *argv);
				exit(-1);
			}
		} else if (strcmp(*argv, "key") == 0) {
			NEXT_ARG();
			p->i_flags |= GRE_KEY;
			p->o_flags |= GRE_KEY;
			p->i_key = p->o_key = tnl_parse_key("key", *argv);
		} else if (strcmp(*argv, "ikey") == 0) {
			NEXT_ARG();
			p->i_flags |= GRE_KEY;
			p->i_key = tnl_parse_key("ikey", *argv);
		} else if (strcmp(*argv, "okey") == 0) {
			NEXT_ARG();
			p->o_flags |= GRE_KEY;
			p->o_key = tnl_parse_key("okey", *argv);
		} else if (strcmp(*argv, "seq") == 0) {
			p->i_flags |= GRE_SEQ;
			p->o_flags |= GRE_SEQ;
		} else if (strcmp(*argv, "iseq") == 0) {
			p->i_flags |= GRE_SEQ;
		} else if (strcmp(*argv, "oseq") == 0) {
			p->o_flags |= GRE_SEQ;
		} else if (strcmp(*argv, "csum") == 0) {
			p->i_flags |= GRE_CSUM;
			p->o_flags |= GRE_CSUM;
		} else if (strcmp(*argv, "icsum") == 0) {
			p->i_flags |= GRE_CSUM;
		} else if (strcmp(*argv, "ocsum") == 0) {
			p->o_flags |= GRE_CSUM;
		} else if (strcmp(*argv, "nopmtudisc") == 0) {
			p->iph.frag_off = 0;
		} else if (strcmp(*argv, "pmtudisc") == 0) {
			p->iph.frag_off = htons(IP_DF);
		} else if (strcmp(*argv, "remote") == 0) {
			NEXT_ARG();
			p->iph.daddr = get_addr32(*argv);
		} else if (strcmp(*argv, "local") == 0) {
			NEXT_ARG();
			p->iph.saddr = get_addr32(*argv);
		} else if (strcmp(*argv, "dev") == 0) {
			NEXT_ARG();
			medium = *argv;
		} else if (strcmp(*argv, "ttl") == 0 ||
			   strcmp(*argv, "hoplimit") == 0 ||
			   strcmp(*argv, "hlim") == 0) {
			__u8 uval;

			NEXT_ARG();
			if (strcmp(*argv, "inherit") != 0) {
				if (get_u8(&uval, *argv, 0))
					invarg("invalid TTL\n", *argv);
				p->iph.ttl = uval;
			}
		} else if (strcmp(*argv, "tos") == 0 ||
			   strcmp(*argv, "tclass") == 0 ||
			   matches(*argv, "dsfield") == 0) {
			char *dsfield;
			__u32 uval;

			NEXT_ARG();
			dsfield = *argv;
			strsep(&dsfield, "/");
			if (strcmp(*argv, "inherit") != 0) {
				dsfield = *argv;
				p->iph.tos = 0;
			} else
				p->iph.tos = 1;
			if (dsfield) {
				if (rtnl_dsfield_a2n(&uval, dsfield))
					invarg("bad TOS value", *argv);
				p->iph.tos |= uval;
			}
		} else {
			if (strcmp(*argv, "name") == 0)
				NEXT_ARG();
			else if (matches(*argv, "help") == 0)
				usage();

			if (p->name[0])
				duparg2("name", *argv);
			if (get_ifname(p->name, *argv))
				invarg("\"name\" not a valid ifname", *argv);
			if (cmd == SIOCCHGTUNNEL && count == 0) {
				struct ip_tunnel_parm old_p = {};

				if (tnl_get_ioctl(*argv, &old_p))
					return -1;
				*p = old_p;
			}
		}
		count++;
		argc--; argv++;
	}


	if (p->iph.protocol == 0) {
		if (memcmp(p->name, "gre", 3) == 0)
			p->iph.protocol = IPPROTO_GRE;
		else if (memcmp(p->name, "ipip", 4) == 0)
			p->iph.protocol = IPPROTO_IPIP;
		else if (memcmp(p->name, "sit", 3) == 0)
			p->iph.protocol = IPPROTO_IPV6;
		else if (memcmp(p->name, "isatap", 6) == 0) {
			p->iph.protocol = IPPROTO_IPV6;
			isatap++;
		} else if (memcmp(p->name, "vti", 3) == 0) {
			p->iph.protocol = IPPROTO_IPIP;
			p->i_flags |= VTI_ISVTI;
		}
	}

	if ((p->i_flags & GRE_KEY) || (p->o_flags & GRE_KEY)) {
		if (!(p->i_flags & VTI_ISVTI) &&
		    (p->iph.protocol != IPPROTO_GRE)) {
			fprintf(stderr, "Keys are not allowed with ipip and sit tunnels\n");
			return -1;
		}
	}

	if (medium) {
		p->link = ll_name_to_index(medium);
		if (!p->link)
			return nodev(medium);
	}

	if (p->i_key == 0 && IN_MULTICAST(ntohl(p->iph.daddr))) {
		p->i_key = p->iph.daddr;
		p->i_flags |= GRE_KEY;
	}
	if (p->o_key == 0 && IN_MULTICAST(ntohl(p->iph.daddr))) {
		p->o_key = p->iph.daddr;
		p->o_flags |= GRE_KEY;
	}
	if (IN_MULTICAST(ntohl(p->iph.daddr)) && !p->iph.saddr) {
		fprintf(stderr, "A broadcast tunnel requires a source address\n");
		return -1;
	}
	if (isatap)
		p->i_flags |= SIT_ISATAP;

	return 0;
}

static const char *tnl_defname(const struct ip_tunnel_parm *p)
{
	switch (p->iph.protocol) {
	case IPPROTO_IPIP:
		if (p->i_flags & VTI_ISVTI)
			return "ip_vti0";
		else
			return "tunl0";
	case IPPROTO_GRE:
		return "gre0";
	case IPPROTO_IPV6:
		return "sit0";
	}
	return NULL;
}

static int do_add(int cmd, int argc, char **argv)
{
	struct ip_tunnel_parm p;
	const char *basedev;

	if (parse_args(argc, argv, cmd, &p) < 0)
		return -1;

	if (p.iph.ttl && p.iph.frag_off == 0) {
		fprintf(stderr, "ttl != 0 and nopmtudisc are incompatible\n");
		return -1;
	}

	basedev = tnl_defname(&p);
	if (!basedev) {
		fprintf(stderr,
			"cannot determine tunnel mode (ipip, gre, vti or sit)\n");
		return -1;
	}

	return tnl_add_ioctl(cmd, basedev, p.name, &p);
}

static int do_del(int argc, char **argv)
{
	struct ip_tunnel_parm p;

	if (parse_args(argc, argv, SIOCDELTUNNEL, &p) < 0)
		return -1;

	return tnl_del_ioctl(tnl_defname(&p) ? : p.name, p.name, &p);
}

static void print_tunnel(const void *t)
{
	const struct ip_tunnel_parm *p = t;
	struct ip_tunnel_6rd ip6rd = {};
	SPRINT_BUF(b1);

	/* Do not use format_host() for local addr,
	 * symbolic name will not be useful.
	 */
	open_json_object(NULL);
	print_color_string(PRINT_ANY, COLOR_IFNAME, "ifname", "%s: ", p->name);
	snprintf(b1, sizeof(b1), "%s/ip", tnl_strproto(p->iph.protocol));
	print_string(PRINT_ANY, "mode", "%s ", b1);
	print_null(PRINT_FP, NULL, "remote ", NULL);
	print_color_string(PRINT_ANY, COLOR_INET, "remote", "%s ",
			   p->iph.daddr || is_json_context()
				? format_host_r(AF_INET, 4, &p->iph.daddr, b1, sizeof(b1))
				: "any");
	print_null(PRINT_FP, NULL, "local ", NULL);
	print_color_string(PRINT_ANY, COLOR_INET, "local", "%s",
			   p->iph.saddr || is_json_context()
				? rt_addr_n2a_r(AF_INET, 4, &p->iph.saddr, b1, sizeof(b1))
				: "any");

	if (p->iph.protocol == IPPROTO_IPV6 && (p->i_flags & SIT_ISATAP)) {
		struct ip_tunnel_prl prl[16] = {};
		int i;

		prl[0].datalen = sizeof(prl) - sizeof(prl[0]);
		prl[0].addr = htonl(INADDR_ANY);

		if (!tnl_prl_ioctl(SIOCGETPRL, p->name, prl)) {
			for (i = 1; i < ARRAY_SIZE(prl); i++) {
				if (prl[i].addr == htonl(INADDR_ANY))
					continue;
				if (prl[i].flags & PRL_DEFAULT)
					print_string(PRINT_ANY, "pdr",
						     " pdr %s",
						     format_host(AF_INET, 4, &prl[i].addr));
				else
					print_string(PRINT_ANY, "pr", " pr %s",
						     format_host(AF_INET, 4, &prl[i].addr));
			}
		}
	}

	if (p->link) {
		const char *n = ll_index_to_name(p->link);

		if (n)
			print_string(PRINT_ANY, "dev", " dev %s", n);
	}

	if (p->iph.ttl)
		print_uint(PRINT_ANY, "ttl", " ttl %u", p->iph.ttl);
	else
		print_string(PRINT_FP, "ttl", " ttl %s", "inherit");

	if (p->iph.tos) {
		SPRINT_BUF(b2);

		if (p->iph.tos != 1) {
			if (!is_json_context() && p->iph.tos & 1)
				snprintf(b2, sizeof(b2), "%s%s",
					 p->iph.tos & 1 ? "inherit/" : "",
					 rtnl_dsfield_n2a(p->iph.tos & ~1, b1, sizeof(b1)));
			else
				snprintf(b2, sizeof(b2), "%s",
					 rtnl_dsfield_n2a(p->iph.tos, b1, sizeof(b1)));
			print_string(PRINT_ANY, "tos", " tos %s", b2);
		} else {
			print_string(PRINT_FP, NULL, " tos %s", "inherit");
		}
	}

	if (!(p->iph.frag_off & htons(IP_DF)))
		print_null(PRINT_ANY, "nopmtudisc", " nopmtudisc", NULL);

	if (p->iph.protocol == IPPROTO_IPV6 && !tnl_ioctl_get_6rd(p->name, &ip6rd) && ip6rd.prefixlen) {
		print_string(PRINT_ANY, "6rd-prefix", " 6rd-prefix %s",
			     inet_ntop(AF_INET6, &ip6rd.prefix, b1, sizeof(b1)));
		print_uint(PRINT_ANY, "6rd-prefixlen", "/%u", ip6rd.prefixlen);
		if (ip6rd.relay_prefix) {
			print_string(PRINT_ANY, "6rd-relay_prefix",
				     " 6rd-relay_prefix %s",
				     format_host(AF_INET, 4, &ip6rd.relay_prefix));
			print_uint(PRINT_ANY, "6rd-relay_prefixlen", "/%u",
				   ip6rd.relay_prefixlen);
		}
	}

	tnl_print_gre_flags(p->iph.protocol, p->i_flags, p->o_flags,
			    p->i_key, p->o_key);

	close_json_object();
}


static void ip_tunnel_parm_initialize(const struct tnl_print_nlmsg_info *info)
{
	struct ip_tunnel_parm *p2 = info->p2;

	memset(p2, 0, sizeof(*p2));
}

static bool ip_tunnel_parm_match(const struct tnl_print_nlmsg_info *info)
{
	const struct ip_tunnel_parm *p1 = info->p1;
	const struct ip_tunnel_parm *p2 = info->p2;

	return ((!p1->link || p1->link == p2->link) &&
		(!p1->name[0] || strcmp(p1->name, p2->name) == 0) &&
		(!p1->iph.daddr || p1->iph.daddr == p2->iph.daddr) &&
		(!p1->iph.saddr || p1->iph.saddr == p2->iph.saddr) &&
		(!p1->i_key || p1->i_key == p2->i_key));
}

static int do_show(int argc, char **argv)
{
	struct ip_tunnel_parm p, p1;
	const char *basedev;

	if (parse_args(argc, argv, SIOCGETTUNNEL, &p) < 0)
		return -1;

	basedev = tnl_defname(&p);
	if (!basedev) {
		struct tnl_print_nlmsg_info info = {
			.p1    = &p,
			.p2    = &p1,
			.init  = ip_tunnel_parm_initialize,
			.match = ip_tunnel_parm_match,
			.print = print_tunnel,
		};

		return do_tunnels_list(&info);
	}

	if (tnl_get_ioctl(p.name[0] ? p.name : basedev, &p))
		return -1;

	print_tunnel(&p);
	fputc('\n', stdout);
	return 0;
}

static int do_prl(int argc, char **argv)
{
	struct ip_tunnel_prl p = {};
	int count = 0;
	int cmd = 0;
	const char *medium = NULL;

	while (argc > 0) {
		if (strcmp(*argv, "prl-default") == 0) {
			NEXT_ARG();
			cmd = SIOCADDPRL;
			p.addr = get_addr32(*argv);
			p.flags |= PRL_DEFAULT;
			count++;
		} else if (strcmp(*argv, "prl-nodefault") == 0) {
			NEXT_ARG();
			cmd = SIOCADDPRL;
			p.addr = get_addr32(*argv);
			count++;
		} else if (strcmp(*argv, "prl-delete") == 0) {
			NEXT_ARG();
			cmd = SIOCDELPRL;
			p.addr = get_addr32(*argv);
			count++;
		} else if (strcmp(*argv, "dev") == 0) {
			NEXT_ARG();
			if (check_ifname(*argv))
				invarg("\"dev\" not a valid ifname", *argv);
			medium = *argv;
		} else {
			fprintf(stderr,
				"Invalid PRL parameter \"%s\"\n", *argv);
			exit(-1);
		}
		if (count > 1) {
			fprintf(stderr,
				"One PRL entry at a time\n");
			exit(-1);
		}
		argc--; argv++;
	}
	if (!medium) {
		fprintf(stderr, "Must specify device\n");
		exit(-1);
	}

	return tnl_prl_ioctl(cmd, medium, &p);
}

static int do_6rd(int argc, char **argv)
{
	struct ip_tunnel_6rd ip6rd = {};
	int cmd = 0;
	const char *medium = NULL;
	inet_prefix prefix;

	while (argc > 0) {
		if (strcmp(*argv, "6rd-prefix") == 0) {
			NEXT_ARG();
			if (get_prefix(&prefix, *argv, AF_INET6))
				invarg("invalid 6rd_prefix\n", *argv);
			cmd = SIOCADD6RD;
			memcpy(&ip6rd.prefix, prefix.data, 16);
			ip6rd.prefixlen = prefix.bitlen;
		} else if (strcmp(*argv, "6rd-relay_prefix") == 0) {
			NEXT_ARG();
			if (get_prefix(&prefix, *argv, AF_INET))
				invarg("invalid 6rd-relay_prefix\n", *argv);
			cmd = SIOCADD6RD;
			memcpy(&ip6rd.relay_prefix, prefix.data, 4);
			ip6rd.relay_prefixlen = prefix.bitlen;
		} else if (strcmp(*argv, "6rd-reset") == 0) {
			cmd = SIOCDEL6RD;
		} else if (strcmp(*argv, "dev") == 0) {
			NEXT_ARG();
			if (check_ifname(*argv))
				invarg("\"dev\" not a valid ifname", *argv);
			medium = *argv;
		} else {
			fprintf(stderr,
				"Invalid 6RD parameter \"%s\"\n", *argv);
			exit(-1);
		}
		argc--; argv++;
	}
	if (!medium) {
		fprintf(stderr, "Must specify device\n");
		exit(-1);
	}

	return tnl_6rd_ioctl(cmd, medium, &ip6rd);
}

static int tunnel_mode_is_ipv6(char *tunnel_mode)
{
	static const char * const ipv6_modes[] = {
		"ipv6/ipv6", "ip6ip6",
		"vti6",
		"ip/ipv6", "ipv4/ipv6", "ipip6", "ip4ip6",
		"ip6gre", "gre/ipv6",
		"any/ipv6", "any"
	};
	int i;

	for (i = 0; i < ARRAY_SIZE(ipv6_modes); i++) {
		if (strcmp(ipv6_modes[i], tunnel_mode) == 0)
			return 1;
	}
	return 0;
}

int do_iptunnel(int argc, char **argv)
{
	int i;

	for (i = 0; i < argc - 1; i++) {
		if (strcmp(argv[i], "mode") == 0) {
			if (tunnel_mode_is_ipv6(argv[i + 1]))
				preferred_family = AF_INET6;
			break;
		}
	}
	switch (preferred_family) {
	case AF_UNSPEC:
		preferred_family = AF_INET;
		break;
	case AF_INET:
		break;
	/*
	 * This is silly enough but we have no easy way to make it
	 * protocol-independent because of unarranged structure between
	 * IPv4 and IPv6.
	 */
	case AF_INET6:
		return do_ip6tunnel(argc, argv);
	default:
		fprintf(stderr, "Unsupported protocol family: %d\n", preferred_family);
		exit(-1);
	}

	if (argc > 0) {
		if (matches(*argv, "add") == 0)
			return do_add(SIOCADDTUNNEL, argc - 1, argv + 1);
		if (matches(*argv, "change") == 0)
			return do_add(SIOCCHGTUNNEL, argc - 1, argv + 1);
		if (matches(*argv, "delete") == 0)
			return do_del(argc - 1, argv + 1);
		if (matches(*argv, "show") == 0 ||
		    matches(*argv, "lst") == 0 ||
		    matches(*argv, "list") == 0)
			return do_show(argc - 1, argv + 1);
		if (matches(*argv, "prl") == 0)
			return do_prl(argc - 1, argv + 1);
		if (matches(*argv, "6rd") == 0)
			return do_6rd(argc - 1, argv + 1);
		if (matches(*argv, "help") == 0)
			usage();
	} else
		return do_show(0, NULL);

	fprintf(stderr, "Command \"%s\" is unknown, try \"ip tunnel help\"\n", *argv);
	exit(-1);
}
Commit	Line	Data
aba5acdf SH	1	/*
	2	* iptunnel.c "ip tunnel"
	3	*
	4	* This program is free software; you can redistribute it and/or
	5	* modify it under the terms of the GNU General Public License
	6	* as published by the Free Software Foundation; either version
	7	* 2 of the License, or (at your option) any later version.
	8	*
	9	* Authors: Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru>
	10	*
aba5acdf SH	11	*/
	12
	13	#include <stdio.h>
	14	#include <stdlib.h>
	15	#include <string.h>
	16	#include <unistd.h>
d9bd1bd9	17	#include <sys/types.h>
aba5acdf	18	#include <sys/socket.h>
7272ddc7	19	#include <arpa/inet.h>
aba5acdf	20	#include <sys/ioctl.h>
ea71beac SH	21	#include <net/if.h>
ea71beac SH	22	#include <net/if_arp.h>
7272ddc7	23	#include <linux/ip.h>
aba5acdf SH	24	#include <linux/if_tunnel.h>
	25
	26	#include "rt_names.h"
	27	#include "utils.h"
288384f2	28	#include "ip_common.h"
d9bd1bd9	29	#include "tunnel.h"
aba5acdf SH	30
	31	static void usage(void) __attribute__((noreturn));
	32
	33	static void usage(void)
	34	{
8589eb4e MC	35	fprintf(stderr,
	36	"Usage: ip tunnel { add \| change \| del \| show \| prl \| 6rd } [ NAME ]\n"
	37	" [ mode { ipip \| gre \| sit \| isatap \| vti } ] [ remote ADDR ] [ local ADDR ]\n"
	38	" [ [i\|o]seq ] [ [i\|o]key KEY ] [ [i\|o]csum ]\n"
	39	" [ prl-default ADDR ] [ prl-nodefault ADDR ] [ prl-delete ADDR ]\n"
	40	" [ 6rd-prefix ADDR ] [ 6rd-relay_prefix ADDR ] [ 6rd-reset ]\n"
	41	" [ ttl TTL ] [ tos TOS ] [ [no]pmtudisc ] [ dev PHYS_DEV ]\n"
	42	"\n"
	43	"Where: NAME := STRING\n"
	44	" ADDR := { IP_ADDRESS \| any }\n"
	45	" TOS := { STRING \| 00..ff \| inherit \| inherit/STRING \| inherit/00..ff }\n"
	46	" TTL := { 1..255 \| inherit }\n"
	47	" KEY := { DOTTED_QUAD \| NUMBER }\n");
aba5acdf SH	48	exit(-1);
	49	}
	50
2520598a PS	51	static void set_tunnel_proto(struct ip_tunnel_parm *p, int proto)
	52	{
	53	if (p->iph.protocol && p->iph.protocol != proto) {
a96a5d94 SH	54	fprintf(stderr,
a96a5d94 SH	55	"You managed to ask for more than one tunnel mode.\n");
2520598a PS	56	exit(-1);
	57	}
	58	p->iph.protocol = proto;
	59	}
	60
aba5acdf SH	61	static int parse_args(int argc, char *argv, int cmd, struct ip_tunnel_parm p)
	62	{
	63	int count = 0;
26111ab1	64	const char *medium = NULL;
0bd17929	65	int isatap = 0;
aba5acdf SH	66
aba5acdf SH	67	memset(p, 0, sizeof(*p));
aba5acdf SH	68	p->iph.version = 4;
	69	p->iph.ihl = 5;
	70	#ifndef IP_DF
	71	#define IP_DF 0x4000 /* Flag: "Don't Fragment" */
	72	#endif
	73	p->iph.frag_off = htons(IP_DF);
	74
	75	while (argc > 0) {
	76	if (strcmp(*argv, "mode") == 0) {
	77	NEXT_ARG();
	78	if (strcmp(*argv, "ipip") == 0 \|\|
	79	strcmp(*argv, "ip/ip") == 0) {
2520598a	80	set_tunnel_proto(p, IPPROTO_IPIP);
aba5acdf SH	81	} else if (strcmp(*argv, "gre") == 0 \|\|
aba5acdf SH	82	strcmp(*argv, "gre/ip") == 0) {
2520598a	83	set_tunnel_proto(p, IPPROTO_GRE);
aba5acdf SH	84	} else if (strcmp(*argv, "sit") == 0 \|\|
aba5acdf SH	85	strcmp(*argv, "ipv6/ip") == 0) {
2520598a	86	set_tunnel_proto(p, IPPROTO_IPV6);
0bd17929	87	} else if (strcmp(*argv, "isatap") == 0) {
2520598a	88	set_tunnel_proto(p, IPPROTO_IPV6);
0bd17929	89	isatap++;
eec47608	90	} else if (strcmp(*argv, "vti") == 0) {
2520598a	91	set_tunnel_proto(p, IPPROTO_IPIP);
eec47608	92	p->i_flags \|= VTI_ISVTI;
aba5acdf	93	} else {
a96a5d94 SH	94	fprintf(stderr,
a96a5d94 SH	95	"Unknown tunnel mode \"%s\"\n", *argv);
aba5acdf SH	96	exit(-1);
	97	}
	98	} else if (strcmp(*argv, "key") == 0) {
aba5acdf SH	99	NEXT_ARG();
	100	p->i_flags \|= GRE_KEY;
	101	p->o_flags \|= GRE_KEY;
a7ed1520	102	p->i_key = p->o_key = tnl_parse_key("key", *argv);
aba5acdf	103	} else if (strcmp(*argv, "ikey") == 0) {
aba5acdf SH	104	NEXT_ARG();
aba5acdf SH	105	p->i_flags \|= GRE_KEY;
a7ed1520	106	p->i_key = tnl_parse_key("ikey", *argv);
aba5acdf	107	} else if (strcmp(*argv, "okey") == 0) {
aba5acdf SH	108	NEXT_ARG();
aba5acdf SH	109	p->o_flags \|= GRE_KEY;
a7ed1520	110	p->o_key = tnl_parse_key("okey", *argv);
aba5acdf SH	111	} else if (strcmp(*argv, "seq") == 0) {
	112	p->i_flags \|= GRE_SEQ;
	113	p->o_flags \|= GRE_SEQ;
	114	} else if (strcmp(*argv, "iseq") == 0) {
	115	p->i_flags \|= GRE_SEQ;
	116	} else if (strcmp(*argv, "oseq") == 0) {
	117	p->o_flags \|= GRE_SEQ;
	118	} else if (strcmp(*argv, "csum") == 0) {
	119	p->i_flags \|= GRE_CSUM;
	120	p->o_flags \|= GRE_CSUM;
	121	} else if (strcmp(*argv, "icsum") == 0) {
	122	p->i_flags \|= GRE_CSUM;
	123	} else if (strcmp(*argv, "ocsum") == 0) {
	124	p->o_flags \|= GRE_CSUM;
	125	} else if (strcmp(*argv, "nopmtudisc") == 0) {
	126	p->iph.frag_off = 0;
	127	} else if (strcmp(*argv, "pmtudisc") == 0) {
	128	p->iph.frag_off = htons(IP_DF);
	129	} else if (strcmp(*argv, "remote") == 0) {
	130	NEXT_ARG();
57daab1e	131	p->iph.daddr = get_addr32(*argv);
aba5acdf SH	132	} else if (strcmp(*argv, "local") == 0) {
aba5acdf SH	133	NEXT_ARG();
57daab1e	134	p->iph.saddr = get_addr32(*argv);
aba5acdf SH	135	} else if (strcmp(*argv, "dev") == 0) {
aba5acdf SH	136	NEXT_ARG();
26111ab1	137	medium = *argv;
eddde110	138	} else if (strcmp(*argv, "ttl") == 0 \|\|
0dd4d2b3 PS	139	strcmp(*argv, "hoplimit") == 0 \|\|
	140	strcmp(*argv, "hlim") == 0) {
	141	__u8 uval;
a96a5d94	142
aba5acdf SH	143	NEXT_ARG();
aba5acdf SH	144	if (strcmp(*argv, "inherit") != 0) {
0dd4d2b3	145	if (get_u8(&uval, *argv, 0))
aba5acdf	146	invarg("invalid TTL\n", *argv);
aba5acdf SH	147	p->iph.ttl = uval;
	148	}
	149	} else if (strcmp(*argv, "tos") == 0 \|\|
eddde110	150	strcmp(*argv, "tclass") == 0 \|\|
aba5acdf	151	matches(*argv, "dsfield") == 0) {
e59fd3db	152	char *dsfield;
aba5acdf	153	__u32 uval;
a96a5d94	154
aba5acdf	155	NEXT_ARG();
e59fd3db DW	156	dsfield = *argv;
e59fd3db DW	157	strsep(&dsfield, "/");
aba5acdf	158	if (strcmp(*argv, "inherit") != 0) {
e59fd3db DW	159	dsfield = *argv;
e59fd3db DW	160	p->iph.tos = 0;
aba5acdf SH	161	} else
aba5acdf SH	162	p->iph.tos = 1;
e59fd3db DW	163	if (dsfield) {
	164	if (rtnl_dsfield_a2n(&uval, dsfield))
	165	invarg("bad TOS value", *argv);
	166	p->iph.tos \|= uval;
	167	}
aba5acdf	168	} else {
a96a5d94	169	if (strcmp(*argv, "name") == 0)
aba5acdf	170	NEXT_ARG();
a96a5d94	171	else if (matches(*argv, "help") == 0)
aba5acdf	172	usage();
a96a5d94	173
aba5acdf SH	174	if (p->name[0])
aba5acdf SH	175	duparg2("name", *argv);
625df645 PS	176	if (get_ifname(p->name, *argv))
625df645 PS	177	invarg("\"name\" not a valid ifname", *argv);
aba5acdf	178	if (cmd == SIOCCHGTUNNEL && count == 0) {
d17b136f	179	struct ip_tunnel_parm old_p = {};
a96a5d94	180
d9bd1bd9	181	if (tnl_get_ioctl(*argv, &old_p))
aba5acdf SH	182	return -1;
	183	*p = old_p;
	184	}
	185	}
	186	count++;
	187	argc--; argv++;
	188	}
	189
	190
	191	if (p->iph.protocol == 0) {
	192	if (memcmp(p->name, "gre", 3) == 0)
	193	p->iph.protocol = IPPROTO_GRE;
	194	else if (memcmp(p->name, "ipip", 4) == 0)
	195	p->iph.protocol = IPPROTO_IPIP;
	196	else if (memcmp(p->name, "sit", 3) == 0)
	197	p->iph.protocol = IPPROTO_IPV6;
0bd17929 TF	198	else if (memcmp(p->name, "isatap", 6) == 0) {
	199	p->iph.protocol = IPPROTO_IPV6;
	200	isatap++;
eec47608 SM	201	} else if (memcmp(p->name, "vti", 3) == 0) {
	202	p->iph.protocol = IPPROTO_IPIP;
	203	p->i_flags \|= VTI_ISVTI;
0bd17929	204	}
aba5acdf SH	205	}
aba5acdf SH	206
1c28bd59 HL	207	if ((p->i_flags & GRE_KEY) \|\| (p->o_flags & GRE_KEY)) {
	208	if (!(p->i_flags & VTI_ISVTI) &&
	209	(p->iph.protocol != IPPROTO_GRE)) {
14645ec2	210	fprintf(stderr, "Keys are not allowed with ipip and sit tunnels\n");
aba5acdf SH	211	return -1;
	212	}
	213	}
	214
26111ab1	215	if (medium) {
4b3cb962	216	p->link = ll_name_to_index(medium);
fe99adbc SP	217	if (!p->link)
fe99adbc SP	218	return nodev(medium);
aba5acdf SH	219	}
	220
	221	if (p->i_key == 0 && IN_MULTICAST(ntohl(p->iph.daddr))) {
	222	p->i_key = p->iph.daddr;
	223	p->i_flags \|= GRE_KEY;
	224	}
	225	if (p->o_key == 0 && IN_MULTICAST(ntohl(p->iph.daddr))) {
	226	p->o_key = p->iph.daddr;
	227	p->o_flags \|= GRE_KEY;
	228	}
	229	if (IN_MULTICAST(ntohl(p->iph.daddr)) && !p->iph.saddr) {
14645ec2	230	fprintf(stderr, "A broadcast tunnel requires a source address\n");
aba5acdf SH	231	return -1;
aba5acdf SH	232	}
eeef12c5	233	if (isatap)
0bd17929	234	p->i_flags \|= SIT_ISATAP;
0bd17929	235
aba5acdf SH	236	return 0;
	237	}
	238
c957821b PS	239	static const char tnl_defname(const struct ip_tunnel_parm p)
	240	{
	241	switch (p->iph.protocol) {
	242	case IPPROTO_IPIP:
	243	if (p->i_flags & VTI_ISVTI)
	244	return "ip_vti0";
	245	else
	246	return "tunl0";
	247	case IPPROTO_GRE:
	248	return "gre0";
	249	case IPPROTO_IPV6:
	250	return "sit0";
	251	}
	252	return NULL;
	253	}
aba5acdf SH	254
	255	static int do_add(int cmd, int argc, char **argv)
	256	{
	257	struct ip_tunnel_parm p;
c957821b	258	const char *basedev;
aba5acdf SH	259
	260	if (parse_args(argc, argv, cmd, &p) < 0)
	261	return -1;
	262
	263	if (p.iph.ttl && p.iph.frag_off == 0) {
30d07e9e	264	fprintf(stderr, "ttl != 0 and nopmtudisc are incompatible\n");
aba5acdf SH	265	return -1;
	266	}
	267
a96a5d94 SH	268	basedev = tnl_defname(&p);
	269	if (!basedev) {
	270	fprintf(stderr,
	271	"cannot determine tunnel mode (ipip, gre, vti or sit)\n");
aba5acdf SH	272	return -1;
aba5acdf SH	273	}
c957821b PS	274
c957821b PS	275	return tnl_add_ioctl(cmd, basedev, p.name, &p);
aba5acdf SH	276	}
aba5acdf SH	277
d9bd1bd9	278	static int do_del(int argc, char **argv)
aba5acdf SH	279	{
	280	struct ip_tunnel_parm p;
	281
	282	if (parse_args(argc, argv, SIOCDELTUNNEL, &p) < 0)
	283	return -1;
	284
c957821b	285	return tnl_del_ioctl(tnl_defname(&p) ? : p.name, p.name, &p);
aba5acdf SH	286	}
aba5acdf SH	287
3e953938	288	static void print_tunnel(const void *t)
aba5acdf	289	{
3e953938	290	const struct ip_tunnel_parm *p = t;
d17b136f	291	struct ip_tunnel_6rd ip6rd = {};
a8360dd3	292	SPRINT_BUF(b1);
aba5acdf	293
aba5acdf SH	294	/* Do not use format_host() for local addr,
	295	* symbolic name will not be useful.
	296	*/
a8360dd3 AC	297	open_json_object(NULL);
	298	print_color_string(PRINT_ANY, COLOR_IFNAME, "ifname", "%s: ", p->name);
	299	snprintf(b1, sizeof(b1), "%s/ip", tnl_strproto(p->iph.protocol));
	300	print_string(PRINT_ANY, "mode", "%s ", b1);
	301	print_null(PRINT_FP, NULL, "remote ", NULL);
	302	print_color_string(PRINT_ANY, COLOR_INET, "remote", "%s ",
	303	p->iph.daddr \|\| is_json_context()
	304	? format_host_r(AF_INET, 4, &p->iph.daddr, b1, sizeof(b1))
	305	: "any");
	306	print_null(PRINT_FP, NULL, "local ", NULL);
	307	print_color_string(PRINT_ANY, COLOR_INET, "local", "%s",
	308	p->iph.saddr \|\| is_json_context()
	309	? rt_addr_n2a_r(AF_INET, 4, &p->iph.saddr, b1, sizeof(b1))
	310	: "any");
aba5acdf	311
86c00faa	312	if (p->iph.protocol == IPPROTO_IPV6 && (p->i_flags & SIT_ISATAP)) {
d17b136f	313	struct ip_tunnel_prl prl[16] = {};
a07e9912	314	int i;
0612519e	315
a07e9912 SH	316	prl[0].datalen = sizeof(prl) - sizeof(prl[0]);
a07e9912 SH	317	prl[0].addr = htonl(INADDR_ANY);
0612519e	318
a8360dd3	319	if (!tnl_prl_ioctl(SIOCGETPRL, p->name, prl)) {
a96a5d94	320	for (i = 1; i < ARRAY_SIZE(prl); i++) {
a8360dd3 AC	321	if (prl[i].addr == htonl(INADDR_ANY))
	322	continue;
	323	if (prl[i].flags & PRL_DEFAULT)
	324	print_string(PRINT_ANY, "pdr",
	325	" pdr %s",
	326	format_host(AF_INET, 4, &prl[i].addr));
	327	else
	328	print_string(PRINT_ANY, "pr", " pr %s",
	329	format_host(AF_INET, 4, &prl[i].addr));
a07e9912	330	}
a8360dd3	331	}
a07e9912 SH	332	}
a07e9912 SH	333
aba5acdf	334	if (p->link) {
ea71beac	335	const char *n = ll_index_to_name(p->link);
a96a5d94	336
aba5acdf	337	if (n)
a8360dd3	338	print_string(PRINT_ANY, "dev", " dev %s", n);
aba5acdf SH	339	}
	340
	341	if (p->iph.ttl)
a8360dd3	342	print_uint(PRINT_ANY, "ttl", " ttl %u", p->iph.ttl);
aba5acdf	343	else
a8360dd3	344	print_string(PRINT_FP, "ttl", " ttl %s", "inherit");
ae665a52	345
aba5acdf	346	if (p->iph.tos) {
a8360dd3 AC	347	SPRINT_BUF(b2);
	348
	349	if (p->iph.tos != 1) {
	350	if (!is_json_context() && p->iph.tos & 1)
	351	snprintf(b2, sizeof(b2), "%s%s",
	352	p->iph.tos & 1 ? "inherit/" : "",
	353	rtnl_dsfield_n2a(p->iph.tos & ~1, b1, sizeof(b1)));
	354	else
	355	snprintf(b2, sizeof(b2), "%s",
	356	rtnl_dsfield_n2a(p->iph.tos, b1, sizeof(b1)));
	357	print_string(PRINT_ANY, "tos", " tos %s", b2);
	358	} else {
	359	print_string(PRINT_FP, NULL, " tos %s", "inherit");
	360	}
aba5acdf SH	361	}
aba5acdf SH	362
04ce8d3e	363	if (!(p->iph.frag_off & htons(IP_DF)))
a8360dd3	364	print_null(PRINT_ANY, "nopmtudisc", " nopmtudisc", NULL);
aba5acdf	365
3979ef91	366	if (p->iph.protocol == IPPROTO_IPV6 && !tnl_ioctl_get_6rd(p->name, &ip6rd) && ip6rd.prefixlen) {
a8360dd3 AC	367	print_string(PRINT_ANY, "6rd-prefix", " 6rd-prefix %s",
	368	inet_ntop(AF_INET6, &ip6rd.prefix, b1, sizeof(b1)));
	369	print_uint(PRINT_ANY, "6rd-prefixlen", "/%u", ip6rd.prefixlen);
b88215c4	370	if (ip6rd.relay_prefix) {
a8360dd3 AC	371	print_string(PRINT_ANY, "6rd-relay_prefix",
	372	" 6rd-relay_prefix %s",
	373	format_host(AF_INET, 4, &ip6rd.relay_prefix));
	374	print_uint(PRINT_ANY, "6rd-relay_prefixlen", "/%u",
	375	ip6rd.relay_prefixlen);
b88215c4 AC	376	}
	377	}
	378
ee713339 AC	379	tnl_print_gre_flags(p->iph.protocol, p->i_flags, p->o_flags,
ee713339 AC	380	p->i_key, p->o_key);
a8360dd3 AC	381
a8360dd3 AC	382	close_json_object();
aba5acdf SH	383	}
aba5acdf SH	384
3e953938 SP	385
	386	static void ip_tunnel_parm_initialize(const struct tnl_print_nlmsg_info *info)
	387	{
	388	struct ip_tunnel_parm *p2 = info->p2;
	389
	390	memset(p2, 0, sizeof(*p2));
	391	}
	392
	393	static bool ip_tunnel_parm_match(const struct tnl_print_nlmsg_info *info)
ec895940	394	{
3e953938 SP	395	const struct ip_tunnel_parm *p1 = info->p1;
	396	const struct ip_tunnel_parm *p2 = info->p2;
	397
ec895940 SP	398	return ((!p1->link \|\| p1->link == p2->link) &&
	399	(!p1->name[0] \|\| strcmp(p1->name, p2->name) == 0) &&
	400	(!p1->iph.daddr \|\| p1->iph.daddr == p2->iph.daddr) &&
	401	(!p1->iph.saddr \|\| p1->iph.saddr == p2->iph.saddr) &&
	402	(!p1->i_key \|\| p1->i_key == p2->i_key));
	403	}
	404
aba5acdf SH	405	static int do_show(int argc, char **argv)
aba5acdf SH	406	{
3e953938	407	struct ip_tunnel_parm p, p1;
c957821b	408	const char *basedev;
aba5acdf SH	409
	410	if (parse_args(argc, argv, SIOCGETTUNNEL, &p) < 0)
	411	return -1;
	412
a96a5d94	413	basedev = tnl_defname(&p);
3e953938 SP	414	if (!basedev) {
	415	struct tnl_print_nlmsg_info info = {
	416	.p1 = &p,
	417	.p2 = &p1,
	418	.init = ip_tunnel_parm_initialize,
	419	.match = ip_tunnel_parm_match,
	420	.print = print_tunnel,
	421	};
	422
	423	return do_tunnels_list(&info);
	424	}
c957821b PS	425
c957821b PS	426	if (tnl_get_ioctl(p.name[0] ? p.name : basedev, &p))
aba5acdf SH	427	return -1;
	428
	429	print_tunnel(&p);
ec895940	430	fputc('\n', stdout);
aba5acdf SH	431	return 0;
	432	}
	433
a07e9912 SH	434	static int do_prl(int argc, char **argv)
a07e9912 SH	435	{
d17b136f	436	struct ip_tunnel_prl p = {};
a07e9912	437	int count = 0;
a07e9912	438	int cmd = 0;
26111ab1	439	const char *medium = NULL;
a07e9912 SH	440
	441	while (argc > 0) {
	442	if (strcmp(*argv, "prl-default") == 0) {
	443	NEXT_ARG();
	444	cmd = SIOCADDPRL;
	445	p.addr = get_addr32(*argv);
	446	p.flags \|= PRL_DEFAULT;
	447	count++;
	448	} else if (strcmp(*argv, "prl-nodefault") == 0) {
	449	NEXT_ARG();
	450	cmd = SIOCADDPRL;
	451	p.addr = get_addr32(*argv);
	452	count++;
	453	} else if (strcmp(*argv, "prl-delete") == 0) {
	454	NEXT_ARG();
	455	cmd = SIOCDELPRL;
	456	p.addr = get_addr32(*argv);
	457	count++;
	458	} else if (strcmp(*argv, "dev") == 0) {
	459	NEXT_ARG();
625df645 PS	460	if (check_ifname(*argv))
625df645 PS	461	invarg("\"dev\" not a valid ifname", *argv);
26111ab1	462	medium = *argv;
a07e9912	463	} else {
a96a5d94 SH	464	fprintf(stderr,
a96a5d94 SH	465	"Invalid PRL parameter \"%s\"\n", *argv);
a07e9912 SH	466	exit(-1);
	467	}
	468	if (count > 1) {
a96a5d94 SH	469	fprintf(stderr,
a96a5d94 SH	470	"One PRL entry at a time\n");
a07e9912 SH	471	exit(-1);
	472	}
	473	argc--; argv++;
	474	}
26111ab1	475	if (!medium) {
14645ec2	476	fprintf(stderr, "Must specify device\n");
a07e9912 SH	477	exit(-1);
	478	}
	479
	480	return tnl_prl_ioctl(cmd, medium, &p);
	481	}
	482
b88215c4 AC	483	static int do_6rd(int argc, char **argv)
b88215c4 AC	484	{
d17b136f	485	struct ip_tunnel_6rd ip6rd = {};
b88215c4	486	int cmd = 0;
26111ab1	487	const char *medium = NULL;
b88215c4 AC	488	inet_prefix prefix;
b88215c4 AC	489
b88215c4 AC	490	while (argc > 0) {
	491	if (strcmp(*argv, "6rd-prefix") == 0) {
	492	NEXT_ARG();
	493	if (get_prefix(&prefix, *argv, AF_INET6))
	494	invarg("invalid 6rd_prefix\n", *argv);
	495	cmd = SIOCADD6RD;
	496	memcpy(&ip6rd.prefix, prefix.data, 16);
	497	ip6rd.prefixlen = prefix.bitlen;
	498	} else if (strcmp(*argv, "6rd-relay_prefix") == 0) {
	499	NEXT_ARG();
	500	if (get_prefix(&prefix, *argv, AF_INET))
	501	invarg("invalid 6rd-relay_prefix\n", *argv);
	502	cmd = SIOCADD6RD;
	503	memcpy(&ip6rd.relay_prefix, prefix.data, 4);
	504	ip6rd.relay_prefixlen = prefix.bitlen;
	505	} else if (strcmp(*argv, "6rd-reset") == 0) {
	506	cmd = SIOCDEL6RD;
	507	} else if (strcmp(*argv, "dev") == 0) {
	508	NEXT_ARG();
625df645 PS	509	if (check_ifname(*argv))
625df645 PS	510	invarg("\"dev\" not a valid ifname", *argv);
26111ab1	511	medium = *argv;
b88215c4	512	} else {
a96a5d94 SH	513	fprintf(stderr,
a96a5d94 SH	514	"Invalid 6RD parameter \"%s\"\n", *argv);
b88215c4 AC	515	exit(-1);
	516	}
	517	argc--; argv++;
	518	}
26111ab1	519	if (!medium) {
14645ec2	520	fprintf(stderr, "Must specify device\n");
b88215c4 AC	521	exit(-1);
	522	}
	523
	524	return tnl_6rd_ioctl(cmd, medium, &ip6rd);
	525	}
	526
a96a5d94 SH	527	static int tunnel_mode_is_ipv6(char *tunnel_mode)
	528	{
	529	static const char * const ipv6_modes[] = {
cc9c1dfa KS	530	"ipv6/ipv6", "ip6ip6",
	531	"vti6",
	532	"ip/ipv6", "ipv4/ipv6", "ipip6", "ip4ip6",
	533	"ip6gre", "gre/ipv6",
	534	"any/ipv6", "any"
	535	};
	536	int i;
	537
a96a5d94	538	for (i = 0; i < ARRAY_SIZE(ipv6_modes); i++) {
cc9c1dfa KS	539	if (strcmp(ipv6_modes[i], tunnel_mode) == 0)
	540	return 1;
	541	}
	542	return 0;
	543	}
	544
aba5acdf SH	545	int do_iptunnel(int argc, char **argv)
aba5acdf SH	546	{
cc9c1dfa KS	547	int i;
	548
	549	for (i = 0; i < argc - 1; i++) {
	550	if (strcmp(argv[i], "mode") == 0) {
	551	if (tunnel_mode_is_ipv6(argv[i + 1]))
	552	preferred_family = AF_INET6;
	553	break;
	554	}
	555	}
d9bd1bd9 MN	556	switch (preferred_family) {
	557	case AF_UNSPEC:
	558	preferred_family = AF_INET;
	559	break;
	560	case AF_INET:
	561	break;
288384f2 MN	562	/*
	563	* This is silly enough but we have no easy way to make it
	564	* protocol-independent because of unarranged structure between
	565	* IPv4 and IPv6.
	566	*/
	567	case AF_INET6:
	568	return do_ip6tunnel(argc, argv);
d9bd1bd9	569	default:
14645ec2	570	fprintf(stderr, "Unsupported protocol family: %d\n", preferred_family);
d9bd1bd9 MN	571	exit(-1);
	572	}
	573
aba5acdf SH	574	if (argc > 0) {
aba5acdf SH	575	if (matches(*argv, "add") == 0)
04ce8d3e	576	return do_add(SIOCADDTUNNEL, argc - 1, argv + 1);
aba5acdf	577	if (matches(*argv, "change") == 0)
04ce8d3e	578	return do_add(SIOCCHGTUNNEL, argc - 1, argv + 1);
6e30461e	579	if (matches(*argv, "delete") == 0)
04ce8d3e	580	return do_del(argc - 1, argv + 1);
aba5acdf SH	581	if (matches(*argv, "show") == 0 \|\|
	582	matches(*argv, "lst") == 0 \|\|
	583	matches(*argv, "list") == 0)
04ce8d3e	584	return do_show(argc - 1, argv + 1);
a07e9912	585	if (matches(*argv, "prl") == 0)
04ce8d3e	586	return do_prl(argc - 1, argv + 1);
b88215c4	587	if (matches(*argv, "6rd") == 0)
04ce8d3e	588	return do_6rd(argc - 1, argv + 1);
aba5acdf SH	589	if (matches(*argv, "help") == 0)
	590	usage();
	591	} else
	592	return do_show(0, NULL);
	593
14645ec2	594	fprintf(stderr, "Command \"%s\" is unknown, try \"ip tunnel help\"\n", *argv);
aba5acdf SH	595	exit(-1);
aba5acdf SH	596	}