hotspot-to-wpa-cleanup.wifi.rsc


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69

#!rsc by RouterOS
# RouterOS script: hotspot-to-wpa-cleanup.wifi
# Copyright (c) 2021-2024 Christian Hesse <mail@eworm.de>
# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
#
# provides: lease-script, order=80
# requires RouterOS, version=7.12
#
# manage and clean up private WPA passphrase after hotspot login
# https://git.eworm.de/cgit/routeros-scripts/about/doc/hotspot-to-wpa.md
#
# !! Do not edit this file, it is generated from template!

:local 0 [ :jobname ];
:global GlobalFunctionsReady;
:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }

:global EitherOr;
:global LogPrintExit2;
:global ParseKeyValueStore;
:global ScriptLock;

$ScriptLock $0 false 10;

:local DHCPServers ({});
:foreach Server in=[ /ip/dhcp-server/find where comment~"hotspot-to-wpa" ] do={
  :local ServerVal [ /ip/dhcp-server/get $Server ]
  :local ServerInfo [ $ParseKeyValueStore ($ServerVal->"comment") ];
  :if (($ServerInfo->"hotspot-to-wpa") = "wpa") do={
    :set ($DHCPServers->($ServerVal->"name")) \
      [ :totime [ $EitherOr ($ServerInfo->"timeout") 4w ] ];
  }
}

:foreach Client in=[ /interface/wifi/registration-table/find where comment~"^hotspot-to-wpa:" ] do={
  :local ClientVal [ /interface/wifi/registration-table/get $Client ];
  :foreach Lease in=[ /ip/dhcp-server/lease/find where dynamic \
      mac-address=($ClientVal->"mac-address") ] do={
    :if (($DHCPServers->[ /ip/dhcp-server/lease/get $Lease server ]) > 0s) do={
      $LogPrintExit2 info $0 ("Client with mac address " . ($ClientVal->"mac-address") . \
        " connected to WPA, making lease static.") false;
      /ip/dhcp-server/lease/make-static $Lease;
      /ip/dhcp-server/lease/set comment=($ClientVal->"comment") $Lease;
    }
  }
}

:foreach Client in=[ /interface/wifi/access-list/find where comment~"^hotspot-to-wpa:" \
    !(comment~[ /system/clock/get date ]) ] do={
  :local ClientVal [ /interface/wifi/access-list/get $Client ];
  :if ([ :len [ /ip/dhcp-server/lease/find where !dynamic comment~"^hotspot-to-wpa:" \
       mac-address=($ClientVal->"mac-address") ] ] = 0) do={
    $LogPrintExit2 info $0 ("Client with mac address " . ($ClientVal->"mac-address") . \
      " did not connect to WPA, removing from access list.") false;
    /interface/wifi/access-list/remove $Client;
  }
}

:foreach Server,Timeout in=$DHCPServers do={
  :foreach Lease in=[ /ip/dhcp-server/lease/find where !dynamic status="waiting" \
      server=$Server last-seen>$Timeout comment~"^hotspot-to-wpa:" ] do={
    :local LeaseVal [ /ip/dhcp-server/lease/get $Lease ];
    $LogPrintExit2 info $0 ("Client with mac address " . ($LeaseVal->"mac-address") . \
      " was not seen for " . ($LeaseVal->"last-seen") . ", removing.") false;
    /interface/wifi/access-list/remove [ find where comment~"^hotspot-to-wpa:" \
      mac-address=($LeaseVal->"mac-address") ];
    /ip/dhcp-server/lease/remove $Lease;
  }
}