aboutsummaryrefslogblamecommitdiffstats
path: root/hotspot-to-wpa-cleanup
blob: 15f63f90777982768ea320a09768354cbe0b29cc (plain) (tree)
1
2
3
4
5
6
                                         
                                                         
                                                             
                                  







                                                                        

                        
 

                                                                                              
                                              

                                                                                        
                                                                     

   


                                                                                      
                                                            
                                                                                        
                                         

   
                                                                              
                                                  
                                                       
                                                                                     
                                                                        
                                              
                                      
 
#!rsc by RouterOS
# RouterOS script: hotspot-to-wpa-cleanup
# Copyright (c) 2021-2023 Christian Hesse <mail@eworm.de>
# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
#
# provides: lease-script, order=80
#
# manage and clean up private WPA passphrase after hotspot login
# https://git.eworm.de/cgit/routeros-scripts/about/doc/hotspot-to-wpa.md

:local 0 "hotspot-to-wpa-cleanup";
:global GlobalFunctionsReady;
:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

:global LogPrintExit2;
:global ScriptLock;

$ScriptLock $0 false 10;

:foreach Client in=[ /caps-man/registration-table/find where comment~"^hotspot-to-wpa:" ] do={
  :local ClientVal [ /caps-man/registration-table/get $Client ];
  :local Lease [ /ip/dhcp-server/lease/find where server~"wpa" dynamic \
    mac-address=($ClientVal->"mac-address") ];
  :if ([ :len $Lease ] > 0) do={
    $LogPrintExit2 info $0 ("Client with mac address " . ($ClientVal->"mac-address") . \
      " connected to WPA, making lease static.") false;
    /ip/dhcp-server/lease/make-static $Lease;
    /ip/dhcp-server/lease/set comment=($ClientVal->"comment") $Lease;
  }
}

:foreach Client in=[ /caps-man/access-list/find where comment~"^hotspot-to-wpa:" and \
    !(comment~[ /system/clock/get date ]) ] do={
  :local ClientVal [ /caps-man/access-list/get $Client ];
  :if ([ :len [ /ip/dhcp-server/lease/find where server~"wpa" !dynamic \
       mac-address=($ClientVal->"mac-address") ] ] = 0) do={
    $LogPrintExit2 info $0 ("Client with mac address " . ($ClientVal->"mac-address") . \
      " did not connect to WPA, removing from access list.") false;
    /caps-man/access-list/remove $Client;
  }
}

:foreach Lease in=[ /ip/dhcp-server/lease/find where !dynamic status=waiting \
    last-seen>4w comment~"^hotspot-to-wpa:" ] do={
  :local LeaseVal [ /ip/dhcp-server/lease/get $Lease ];
  $LogPrintExit2 info $0 ("Client with mac address " . ($LeaseVal->"mac-address") . \
    " was not seen for long time, removing.") false;
  /caps-man/access-list/remove [ find where comment~"^hotspot-to-wpa:" \
     mac-address=($LeaseVal->"mac-address") ];
  /ip/dhcp-server/lease/remove $Lease;
}