Alessio Molteni Dot Com

[cc lang=”bash” width=”600px” tab_size=”2″]
IPSec gateway YOURGATEWAY
IPSec ID YOURID
IPSec obfuscated secret YOURREALYLONGHEXVALUE (you can use your clear text password here if you remove obfuscated)
Xauth username YOURUSERNAME
Xauth password YOURPASSWORD
Interface name VPN
Interface mode tap
Local Port 0

[/cc]

// ————————————————————–
// Utilities
// ————————————————————–

function echo(msg)
{
WScript.echo(msg);
}

function run(cmd)
{
return (ws.Exec(cmd).StdOut.ReadAll());
}

// function getDefaultGateway()
// {
// if (run(“route print”).match(/Default Gateway: *(.*)/)) {
// return (RegExp.$1);
// }
// return (“”);
// }

function getDefaultGateway()
{
var stuff = run(“route print 0.0.0.0 mask 0.0.0.0”);
var res;
var inal;
//echo (“Stuff” + stuff);
if (res = stuff.match(/0.0.0.0 *(.*) 0.0.0.0 *(.*)10/)) {
// echo (“RegExp: “+RegExp.$1+”2: “+ RegExp.$2+” 3:”+RegExp.$3);
//echo (“res :” + res[0]+” THE END!!!”);
inal = res[0].split(/\s/);
for (var i = 0; i < inal.length; i++) {
echo (“inal :” + inal[i]);
}

return (inal[2]);
}
return (“”);
}

function getDefaultGatewayOnDisconnect()
{
var stuff = run(“route print ” + env(“VPNGATEWAY”) + ” mask 255.255.255.255″);
var res;
var inal;
//echo (“Stuff” + stuff);
if (res = stuff.match(new RegExp(env(“VPNGATEWAY”) + ” *(.*) 255.255.255.255 *(.*)10″,”ig”))) {
//echo (“RegExp: “+RegExp.$1+”2: “+ RegExp.$2+” 3:”+RegExp.$3);
//echo (“res :” + res[0]+” THE END!!!”);
inal = res[0].split(/\s/);
for (var i = 0; i < inal.length; i++) {
echo (“inal :” + inal[i]);
}

return (inal[2]);
}
return (“”);
}

// ————————————————————–
// Script starts here
// ————————————————————–

var internal_ip4_netmask = “255.255.255.0”

var ws = WScript.CreateObject(“WScript.Shell”);
var env = ws.Environment(“Process”);

switch (env(“reason”)) {
case “pre-init”:
break;
case “connect”:
var gw = getDefaultGateway();
echo(“Default GW: ” + gw );
echo(“VPN Gateway: ” + env(“VPNGATEWAY”));
echo(“Internal Address: ” + env(“INTERNAL_IP4_ADDRESS”));
echo(“Internal Netmask: ” + env(“INTERNAL_IP4_NETMASK”));
echo(“Interface: \”” + env(“TUNDEV”) + “\””);

if (env(“INTERNAL_IP4_NETMASK”)) {
internal_ip4_netmask = env(“INTERNAL_IP4_NETMASK”);
}

echo(“Configuring \”” + env(“TUNDEV”) + “\” interface…”);

run(“netsh interface ip set address \”” + env(“TUNDEV”) + “\” static ” +
env(“INTERNAL_IP4_ADDRESS”) + ” ” + internal_ip4_netmask);

echo(“Delete Default Route Output: ” + run(“route delete 0.0.0.0 mask 0.0.0.0”));
echo(“Waiting 5 seconds to add new default route…”);
run(“sleep 5”);
echo(“Adding new VPN Default Route: ” + run(“route add 0.0.0.0 mask 0.0.0.0 ” + env(“INTERNAL_IP4_ADDRESS”)));
echo(“”);

// Add direct route for the VPN gateway to avoid routing loops
echo(“Add direct route for the VPN gateway to avoid routing loops”);
echo(“route add ” + env(“VPNGATEWAY”) + ” mask 255.255.255.255 ” + gw);
run(“route add ” + env(“VPNGATEWAY”) +
” mask 255.255.255.255 ” + gw);

echo(“Checking for WINS Servers…”);
if (env(“INTERNAL_IP4_NBNS”)) {
echo(“WINS Found, adding them to the TAP Device…”);
var wins = env(“INTERNAL_IP4_NBNS”).split(/ /);
for (var i = 0; i < wins.length; i++) {
run(“netsh interface ip add wins \”” +
env(“TUNDEV”) + “\” ” + wins[i]
+ ” index=” + (i+1));
}
}

echo(“Checking for DNS Servers…”);
if (env(“INTERNAL_IP4_DNS”)) {
echo(“DNS Found, adding them to the TAP Device…”);
var dns = env(“INTERNAL_IP4_DNS”).split(/ /);
for (var i = 0; i < dns.length; i++) {
run(“netsh interface ip add dns \”” +
env(“TUNDEV”) + “\” ” + dns[i]
+ ” index=” + (i+1));
}
}

echo(“done.”);

// Add internal network routes
echo(“Configuring networks:”);

if (env(“CISCO_SPLIT_INC”)) {
for (var i = 0 ; i < parseInt(env(“CISCO_SPLIT_INC”)); i++) {
var network = env(“CISCO_SPLIT_INC_” + i + “_ADDR”);
var netmask = env(“CISCO_SPLIT_INC_” + i + “_MASK”);
var netmasklen = env(“CISCO_SPLIT_INC_” + i +
“_MASKLEN”);
run(“route add ” + network + ” mask ” + netmask +
” ” + env(“INTERNAL_IP4_ADDRESS”));
}

} else {
echo(“Gateway did not provide network configuration.”);
}
echo(“Route configuration done.”);

if (env(“CISCO_BANNER”)) {
echo(“————————————————–“);
echo(env(“CISCO_BANNER”));
echo(“————————————————–“);
}

break;
case “disconnect”:
// Delete direct route for the VPN gateway to avoid
echo(“Cleaning Routes…”);

var gw = getDefaultGatewayOnDisconnect()
echo(“DefaultGW: ” + gw);

echo(“route delete ” + env(“VPNGATEWAY”) + ” mask 255.255.255.255″);
run(“route delete ” + env(“VPNGATEWAY”) + ” mask 255.255.255.255″);

echo(“route delete 0.0.0.0 mask 0.0.0.0 “);
run(“route delete 0.0.0.0 mask 0.0.0.0 “);

echo(“route add 0.0.0.0 mask 0.0.0.0 ” + gw);
run(“route add 0.0.0.0 mask 0.0.0.0 ” + gw);
}

[/cc]