vpnc-script-win: add legacy IP split-exclude handling

Based on https://lists.infradead.org/pipermail/openconnect-devel/2020-June/004869.html

Signed-off-by: Daniel Lenski <dlenski@gmail.com>

diff --git a/vpnc-script-win.js b/vpnc-script-win.js
index 6eac05947076179f2144d9780770b7057dd8eacb..5a3ac57bd075de59f109e78ec913c17fa5b49b33 100644 (file)
--- a/vpnc-script-win.js
+++ b/vpnc-script-win.js
@@ -147,6 +147,17 @@ case "connect":
             run("route add 128.0.0.0 mask 128.0.0.0 " + internal_gw);
         }
     }
+
+    // Add excluded routes
+    if (env("CISCO_SPLIT_EXC")) {
+        for (var i = 0 ; i < parseInt(env("CISCO_SPLIT_EXC")); i++) {
+            var network = env("CISCO_SPLIT_EXC_" + i + "_ADDR");
+            var netmask = env("CISCO_SPLIT_EXC_" + i + "_MASK");
+            var netmasklen = env("CISCO_SPLIT_EXC_" + i + "_MASKLEN");
+            run("route add " + network + " mask " + netmask +
+                " " + gw);
+        }
+    }
     echo("Legacy IP route configuration done.");
 
     if (env("INTERNAL_IP6_ADDRESS")) {
@@ -189,4 +200,14 @@ case "connect":
 case "disconnect":
     // Delete direct route for the VPN gateway
     run("route delete " + env("VPNGATEWAY") + " mask 255.255.255.255");
+
+    // Delete Legacy IP split-exclude routes
+    if (env("CISCO_SPLIT_EXC")) {
+        for (var i = 0 ; i < parseInt(env("CISCO_SPLIT_EXC")); i++) {
+            var network = env("CISCO_SPLIT_EXC_" + i + "_ADDR");
+            var netmask = env("CISCO_SPLIT_EXC_" + i + "_MASK");
+            var netmasklen = env("CISCO_SPLIT_EXC_" + i + "_MASKLEN");
+            exec("route delete " + network + " mask " + netmask );
+        }
+    }
 }