如何把文本文件內(nèi)容，結(jié)合ipfw命令寫入帶寬限制表中去?

lhm_3000

現(xiàn)在有文本bandwidth.conf內(nèi)容：
11.0.0.2 512 256
11.0.0.3 256 128
。。。。。。
11.0.0.2為限制的ip,512為下載值，256為上傳值。

現(xiàn)在想通過shell腳本，結(jié)合ipfw帶寬限制命令，批量把文本內(nèi)的：ip、下載值和上傳值寫入帶寬限制表

中去。通過這幾個命令：
ipfw pipe 1 config bw 下載值Kbit/s
ipfw pipe 2 config bw 上傳值Kbit/s
ipfw add 9000 pipe 1 ip from any to ip地址 in
ipfw add 9001 pipe 2 ip from ip地址 to any out
ipfw add 9002 permit ip from any to ip地址
ipfw add 9003 permit ip from ip地址 to any

請教這個腳本如何寫啊

cooljean2008

awk '{
printf "ipfw pipe 1 config bw %dKbit/s\n",$2;
printf "ipfw pipe 2 config bw %dKbit/s\n",$3;
printf "ipfw add 9000 pipe 1 %s from any to ip地址 in\n",$1
}' bandwidth.conf

lhm_3000

不太明白啊

我是DBA

while read line
do
IP=`echo "$line"|awk '{print $1}'`
DOWNLOAD=`echo "$line"|awk '{print $2}'`
UPLOAD=`echo "$line"|awk '{print $3}'`

ipfw pipe 1 config bw ${DOWNLOAD} Kbit/s
ipfw pipe 2 config bw ${UPLOAD} Kbit/s
ipfw add 9000 pipe 1 ip from any to $IP in
ipfw add 9001 pipe 2 ip from $IP to any out
ipfw add 9002 permit ip from any to $IP
ipfw add 9003 permit ip from $IP to any
done < bandwidth.conf

lhm_3000

while read line
do
IP=`echo "$line"|awk '{print $1}'`
DOWNLOAD=`echo "$line"|awk '{print $2}'`
UPLOAD=`echo "$line"|awk '{print $3}'`

ipfw pipe 1 config bw ${DOWNLOAD} Kbit/s
ipfw pipe 2 config bw ${UPLOAD} Kbit/s
ipfw add 9000 pipe 1 ip from any to $IP in
ipfw add 9001 pipe 2 ip from $IP to any out
ipfw add 9002 permit ip from any to $IP
ipfw add 9003 permit ip from $IP to any
done < bandwidth.conf
"test.sh" 17 lines, 563 characters
router# ./test.sh
while: Expression Syntax.
router# ipfw show
65535 7497 3625045 allow ip from any to any
不行,不能加入限制表

我是DBA

不明白你哪的問題
我這邊測試過是可以的。
你用sh -x 調(diào)試看一下

liaosnet

這個是體力活.....沒什么技巧可言...

lhm_3000

已經(jīng)基本搞好現(xiàn)在文本文件:
11.0.0.2 500 80 1
11.0.0.3 4096 2048 2
11.0.0.4 512 80 3
......
11.0.0.2為地址,500為下行,80為上行值,1為序號
腳本修改了以下:
router# cat test.sh
fwcmd=/sbin/ipfw
$fwcmd flush
$fwcmd pipe flush

while read line
do
usernum=`echo "$line"|awk '{print $4}'`
pipein=`echo $usernum*2 | bc`
pipeout=`expr $pipein + 1`
fwrulein=`expr $pipein + 1000`
fwruleout=`expr $fwrulein + 1`
fwholein=`expr $pipein + 33000`
fwholeout=`expr $fwholein + 1`
#LIST=`echo "$line"|awk '{print $4}'`
#PIPE=`expr $LIST + 1`

IP=`echo "$line"|awk '{print $1}'`
DOWNLOAD=`echo "$line"|awk '{print $2}'`
UPLOAD=`echo "$line"|awk '{print $3}'`

$fwcmd pipe $pipein config bw ${DOWNLOAD}Kbit/s
$fwcmd pipe $pipeout config bw ${UPLOAD}Kbit/s
$fwcmd add $fwrulein pipe $pipein ip from any to $IP in
$fwcmd add $fwruleout pipe $pipeout ip from $IP to any out
$fwcmd add $fwholein permit ip from any to $IP
$fwcmd add $fwholeout permit ip from $IP to any
done < /usr/local/etc/mpd/bandwidth.conf

現(xiàn)在規(guī)則可以加入了,請看:
router# ipfw pipe show
00002: 500.000 Kbit/s    0 ms   50 sl. 1 queues (1 buckets) droptail
    mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp
  0 tcp      58.60.14.45/80           11.0.0.2/2640    76     8660  0    0   0
00003:  80.000 Kbit/s    0 ms   50 sl. 0 queues (1 buckets) droptail
00004:   4.096 Mbit/s    0 ms   50 sl. 0 queues (1 buckets) droptail
00005:   2.048 Mbit/s    0 ms   50 sl. 0 queues (1 buckets) droptail
00006: 512.000 Kbit/s    0 ms   50 sl. 0 queues (1 buckets) droptail
00007:  80.000 Kbit/s    0 ms   50 sl. 0 queues (1 buckets) droptail
router# ipfw show
01002     76      8660 pipe 2 ip from any to 11.0.0.2 in
01003      0         0 pipe 3 ip from 11.0.0.2 to any out
01004      0         0 pipe 4 ip from any to 11.0.0.3 in
01005      0         0 pipe 5 ip from 11.0.0.3 to any out
01006      0         0 pipe 6 ip from any to 11.0.0.4 in
01007      0         0 pipe 7 ip from 11.0.0.4 to any out
33002     76      8660 allow ip from any to 11.0.0.2
33003      0         0 allow ip from 11.0.0.2 to any
33004      0         0 allow ip from any to 11.0.0.3
33005      0         0 allow ip from 11.0.0.3 to any
33006      0         0 allow ip from any to 11.0.0.4
33007      0         0 allow ip from 11.0.0.4 to any
65535 136273 137116246 allow ip from any to any


謝謝大家!