From 087e95f6900d665d3c6525dda90bde45ec823a14 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=D0=90=D0=BB=D0=B5=D0=BA=D1=81=D0=B0=D0=BD=D0=B4=D1=80?=
 <48471718+hudoznik@users.noreply.github.com>
Date: Tue, 11 Jun 2024 17:20:12 +0300
Subject: [PATCH] Update add_vpn_user.sh

Set static ip address client
---
 extras/add_vpn_user.sh | 26 ++++++++++++++++++++++++--
 1 file changed, 24 insertions(+), 2 deletions(-)

diff --git a/extras/add_vpn_user.sh b/extras/add_vpn_user.sh
index ec27b31..569b6a6 100755
--- a/extras/add_vpn_user.sh
+++ b/extras/add_vpn_user.sh
@@ -50,6 +50,13 @@ EOF
   fi
   VPN_USER=$1
   VPN_PASSWORD=$2
+  
+  #get ip address parametrs
+  IP_CLIENT=$3
+  if [ -z "$IP_CLIENT" ]; then
+    IP_CLIENT="*"
+  fi
+
   if [ -z "$VPN_USER" ] || [ -z "$VPN_PASSWORD" ]; then
     show_intro
     echo
@@ -113,15 +120,30 @@ EOF
   conf_bk "/etc/ipsec.d/passwd"
   # Add or update VPN user
   sed -i "/^\"$VPN_USER\" /d" /etc/ppp/chap-secrets
+  # Set static ip to l2tp
 cat >> /etc/ppp/chap-secrets <<EOF
-"$VPN_USER" l2tpd "$VPN_PASSWORD" *
+"$VPN_USER" l2tpd "$VPN_PASSWORD" $IP_CLIENT
 EOF
   # shellcheck disable=SC2016
   sed -i '/^'"$VPN_USER"':\$1\$/d' /etc/ipsec.d/passwd
   VPN_PASSWORD_ENC=$(openssl passwd -1 "$VPN_PASSWORD")
-cat >> /etc/ipsec.d/passwd <<EOF
+  # Set static ip to ipsec
+  if [ $IP_CLIENT != "*" ]; then
+  cat > /etc/ipsec.d/$VPN_USER.conf <<EOF
+conn $VPN_USER
+  rightid=@$VPN_USER
+  rightaddresspool=$IP_CLIENT-$IP_CLIENT
+  also=ikev2-cp
+EOF
+
+    cat >> /etc/ipsec.d/passwd <<EOF
+$VPN_USER:$VPN_PASSWORD_ENC:xauth-psk:$IP_CLIENT
+EOF
+  else
+    cat >> /etc/ipsec.d/passwd <<EOF
 $VPN_USER:$VPN_PASSWORD_ENC:xauth-psk
 EOF
+  fi
   # Update file attributes
   chmod 600 /etc/ppp/chap-secrets* /etc/ipsec.d/passwd*
 cat <<'EOF'