openwrt一键设置为旁路由脚本

#!/bin/sh
# OpenWrt bypass-router quick setup: static IP, disable IPv6, disable DHCP

# Tunable parameters (override via env if needed)
LAN_DEV="${LAN_DEV:-br-lan}"
LAN_IP="${LAN_IP:-172.17.0.211}"
LAN_MASK="${LAN_MASK:-255.255.255.0}"
LAN_GW="${LAN_GW:-172.17.0.209}"
LAN_DNS="${LAN_DNS:-172.17.0.209}"

stop_and_disable_if_exists() {
    local svc="$1"
    if [ -x "/etc/init.d/${svc}" ]; then
        /etc/init.d/${svc} stop >/dev/null 2>&1 || true
        /etc/init.d/${svc} disable >/dev/null 2>&1 || true
    else
        echo "Service ${svc} not installed, skipping."
    fi
}

echo "=========================================="
echo "Start bypass-router setup (LAN: ${LAN_IP})"
echo "=========================================="

echo "[1/5] Configure static IP..."
uci set network.lan.device="${LAN_DEV}"
uci set network.lan.proto='static'
uci set network.lan.ipaddr="${LAN_IP}"
uci set network.lan.netmask="${LAN_MASK}"
uci set network.lan.gateway="${LAN_GW}"
uci set network.lan.dns="${LAN_DNS}"

echo "[2/5] Disable IPv6..."
uci delete network.lan.ip6assign 2>/dev/null
uci set network.lan.ipv6='0'
uci set network.lan.delegate='0'
uci set network.globals.ula_prefix='' 2>/dev/null
uci commit network

echo "[3/5] Disable DHCP / IPv6 services..."
uci set dhcp.lan.ignore='1'
uci set dhcp.lan.dhcpv6='disabled'
uci set dhcp.lan.ra='disabled'
uci delete dhcp.lan.ndp 2>/dev/null
uci commit dhcp

echo "[4/5] Adjust firewall (LAN ACCEPT; do not open WAN)..."
# 找到或创建 LAN 区域（默认 firewall 匿名区块时不能直接用 firewall.lan）
LAN_ZONE=""
if uci -q get firewall.lan >/dev/null; then
    LAN_ZONE="lan"
else
    i=0
    while uci -q get firewall.@zone[$i] >/dev/null; do
        if [ "$(uci -q get firewall.@zone[$i].name)" = "lan" ]; then
            LAN_ZONE="@zone[$i]"
            break
        fi
        i=$((i + 1))
    done
fi

if [ -z "${LAN_ZONE}" ]; then
    echo "LAN firewall zone not found, creating one..."
    LAN_ZONE="$(uci add firewall zone)"
    uci set firewall.${LAN_ZONE}.name='lan'
    uci add_list firewall.${LAN_ZONE}.network='lan'
fi

uci set firewall.${LAN_ZONE}.input='ACCEPT'
uci set firewall.${LAN_ZONE}.output='ACCEPT'
uci set firewall.${LAN_ZONE}.forward='ACCEPT'
uci commit firewall

echo "[5/5] Stop IPv6 related services..."
stop_and_disable_if_exists "odhcpd"

echo "Restarting network services..."
/etc/init.d/network restart
sleep 3
/etc/init.d/dnsmasq restart
/etc/init.d/firewall restart

echo "=========================================="
echo "Configuration complete, verifying:"
echo "=========================================="
echo "Interface ${LAN_DEV} address:"
ip addr show "${LAN_DEV}" | grep -E "inet "
echo ""
echo "Ping gateway:"
ping -c 3 "${LAN_GW}"
echo ""
echo "DHCP status:"
uci show dhcp.lan | grep ignore
echo ""
echo "IPv6 status:"
uci show network.lan | grep -E "ipv6|ip6|ula"
echo "=========================================="
echo "Bypass-router setup done!"
echo "=========================================="