#!/usr/bin/env bash
#
# Author: Georg Voell - georg.voell@standby.cloud
# Version: @(#)vip-management 3.3.0 19.01.2026 (c)2026 Standby.cloud
# Licensed under the Universal Permissive License v 1.0 as shown at https://oss.oracle.com/licenses/upl/
#
# This script can be used free of charge. Use it as is or customize as needed. It is not guaranteed to be
# error free and you will not be reimbursed for any damage it may cause.
#
#@  Add or delete secondary private IP (Virtual IP)
#@  Docs: https://docs.oracle.com/en-us/iaas/Content/Network/Tasks/managingIPaddresses.htm
#@
#@Usage: vip-management [options] action [ipv4]
#@  Options: -h, --help                 : Displays helptext.
#@           -v, --version              : Displays the version of the script.
#@  Action:
#@    status: Show current state (default).
#@       add: Attach ipv4 to instance.
#@    delete: Detach ipv4 from instance.
#@     route: Add ipv4 to default gateway.
#@     start: Start network manager profile and check route.
#@      stop: Stop network manager profile and if needed vip routing.
#@  ipv4:
#@    A valid IPv4 that is not used somewhere else
#@
#@Examples:
#@  vip-management add 10.0.1.50
#@    Create a second interface using private IP (from primary VNIC).
#@  vip-management route
#@    Add vip to default route.
#@  vip-management delete
#@    Delete the second interface.
#
# Exit codes:
#  01: Unknown or wrong parameter and only LINUX supported and script needs to be executed with ROOT privileges.
#  02: Unknown action.
#  03: No 'ifconfig' or 'ip' in PATH.
#  04: No suitable interface found in 'ifconfig'.
#  05: No IPv4 found in interface.
#  06: VIP already defined (add) or does not exists (delete)
#  07: No VIP attached
#  08: Error while deleting or adding vip
#  09: Error while changing route
#  99: User interrupt.
#
# See also:
#  **install-scripts**(1)
#
# Update history:
#
# V 3.0.0 14.05.2021 New version
# V 3.0.1 21.05.2021 Try sudo if user isn't root
# V 3.0.2 22.05.2021 New action: show
# V 3.1.0 05.06.2023 New copyright
# V 3.2.0 09.09.2024 New minor version: Options
# V 3.2.1 25.09.2024 Use nmcli with OEL8 and OEL9
# V 3.3.0 19.01.2026 Revised with support of Claude Code
#

# Find executable bash library and source it
lib=$(command -v lib.bash 2>/dev/null)
if [[ -n "$lib" ]]; then
	source "$lib"
else
	# lib.bash was not in PATH - try to find it in script path
	# readlink -f is not available on macOS, use a portable alternative
	progdir=$(readlink -f "$0" 2>/dev/null || realpath "$0" 2>/dev/null || echo "$0")
	progdir=$(dirname "$progdir")
	if [[ -r "${progdir}/lib.bash" ]]; then
		source "${progdir}/lib.bash"
	else
		echo "Unexpected error: Unable to locate bash library 'lib.bash'."
		exit 1
	fi
fi

# Needed by the some functions
readonly bitArray=(0 128 192 224 240 248 252 254 255)
readonly vnicURL="http://169.254.169.254/opc/v2/vnics"
readonly vipURL="http://169.254.169.254/opc/v2/instance/freeformTags/VIP"
readonly configFilenames="/etc/sysconfig/network-scripts/ifcfg"

# Convert CIDR to Netmask
function CidrToNetmask() {
	local cidr=${1}
	local netmask=0
	local stat=1

	if [[ "$cidr" != "" ]]; then
		if [[ $cidr -ge 0 && $cidr -lt 33 ]]; then
			netmask=$(( 0xffffffff ^ ((1 << (32 - $cidr)) - 1) ))
			stat=$?
		fi
	fi
	
	if (( stat == 0 )); then
		echo "$(( (netmask >> 24) & 0xff )).$(( (netmask >> 16) & 0xff )).$(( (netmask >> 8) & 0xff )).$(( netmask & 0xff ))"
	fi
	
	return $stat
}

# Convert Netmask to CIDR
function NetmaskToCidr() {
	local netmask=${1}
	local found=false
	local cidr=0
	local octet=0
	local binbits=0
	local ibase=0
	local len=0
	local i=0
	local stat=1
	
	if [[ "$netmask" != "" ]]; then
		if [[ "$netmask" = "0.0.0.0" ]]; then
			stat=0
		else
			netmask=$(echo "$netmask" | sed 's|\.| |g')
			len=$(echo "$netmask" | wc -w)
			
			if (( len == 4 )); then
				len=${#bitArray[@]}
				for octet in $netmask; do
					i=0
					found=false
					while (( i < len )); do
						# Check if octet is valid (containing in bitArray)
						if [[ "$octet" = "${bitArray[$i]}" ]]; then
							found=true
						fi
						
						(( i++ ))
					done
					
					if [[ "$found" = true ]]; then
						binbits=$(echo "obase=2; ibase=10; ${octet}"| bc | sed 's|0||g')
						stat=$?
						
						if (( stat == 0 )); then
							cidr=$(expr $cidr + ${#binbits})
						fi
					else
						return 1
					fi
				done
			fi
		fi
	fi
	
	if (( stat == 0 )); then
		echo "$cidr"
	fi
	
	return $stat
}

function VnicsFromInstance() {
	local stat=1
	
	if [[ "$jq" != "" ]]; then
		transfer --quiet --auth "$vnicURL" | norm-json --quiet > "$scratchfile"
		stat=$?
		
		if (( stat == 0 )); then
			# printf '%s\t%s\t%s\t%s\t%s\t%s\n' "macAddr" "privateIp" "subnetCidrBlock" "virtualRouterIp" "vlanTag" "vnicId"
			printf '%s\t%s\t%s\t%s\t%s\n' "macAddr" "privateIp" "subnetCidrBlock" "virtualRouterIp" "vlanTag"
			cat "$scratchfile" | $jq -r '(.[] | [.macAddr, .privateIp, .subnetCidrBlock, .virtualRouterIp, .vlanTag, .vnicId]) | @tsv'
			stat=$?
		fi
	fi
	
	return $stat
}

function SplitDefaultRoute() {
	local result=""
	local line=""
	local key=""
	local via=""
	local dev=""
	local proto=""
	local src=""
	local metric=""
	local comment=""

	if [[ "$ip" != "" ]]; then
		result=$("$ip" route show 2>/dev/null | grep '^default ' | sed 's|^default ||')
		if [[ "$result" != "" ]]; then
			for key in via dev proto src metric; do
				result=$(echo "$result" | sed 's|'$key' |'$key'=|g')
			done
			
			printf '%s\t%s\t%s\t%s\t%s\t%s\n' "via" "dev" "proto" "src" "metric" "viprouted"
			while read -r line; do
				line=$(echo "$line" | tr ' ' '\n' | grep '=')
				via=$(echo "$line" | grep '^via=' | cut -d'=' -f2)
				dev=$(echo "$line" | grep '^dev=' | cut -d'=' -f2)
				proto=$(echo "$line" | grep '^proto=' | cut -d'=' -f2)
				src=$(echo "$line" | grep '^src=' | cut -d'=' -f2)
				metric=$(echo "$line" | grep '^metric=' | cut -d'=' -f2)
				if [[ "$comment" = "" ]]; then
					if [[ "$usedvip" != "" && "$src" = "$usedvip" ]]; then
						comment="yes"
					else
						comment="no"
					fi
				fi
				printf '%s\t%s\t%s\t%s\t%s\t%s\n' "$via" "$dev" "$proto" "$src" "$metric" "$comment"
			done < <(echo "$result")
		fi
	fi
}

function GetInterfaces() {
	local result=""
	local line=""
	local key=""
	local link=""
	local dev=""
	local mtu=""
	local qdisc=""
	local state=""
	local group=""
	local qlen=""

	if [[ "$ip" != "" ]]; then
		result=$("$ip" a s | grep ': <' | sed 's|^.: |dev=|g' | tr -d ':')
		for key in mtu qdisc state group qlen; do
			result=$(echo "$result" | sed 's|'$key' |'$key'=|g')
		done
		
		printf '%s\t%s\t%s\t%s\t%s\t%s\t%s\n' "link" "dev" "mtu" "qdisc" "state" "group" "qlen"
		while read -r line; do
			line=$(echo "$line" | tr ' ' '\n' | grep '=')
			dev=$(echo "$line" | grep '^dev=' | cut -d'=' -f2)
			link=$("$ip" a s "$dev" | grep 'link/' | tr -s ' ' | cut -d' ' -f3 | ToUpper)
			mtu=$(echo "$line" | grep '^mtu=' | cut -d'=' -f2)
			qdisc=$(echo "$line" | grep '^qdisc=' | cut -d'=' -f2)
			state=$(echo "$line" | grep '^state=' | cut -d'=' -f2)
			group=$(echo "$line" | grep '^group=' | cut -d'=' -f2)
			qlen=$(echo "$line" | grep '^qlen=' | cut -d'=' -f2)
			printf '%s\t%s\t%s\t%s\t%s\t%s\t%s\n' "$link" "$dev" "$mtu" "$qdisc" "$state" "$group" "$qlen"
		done < <(echo "$result")
	fi
}

function GetIPs() {
	local interface=${1}
	local result=""
	local line=""
	local key=""
	local inet=""
	local brd=""
	local scope=""
	local comment=""
	
	if [[ "$ip" != "" && "" != "$interface" ]]; then
		result=$("$ip" a s "$interface" | grep 'inet ')
		for key in inet brd scope; do
			result=$(echo "$result" | sed 's|'$key' |'$key'=|g')
		done
		
		printf '%s\t%s\t%s\t%s\n' "inet" "brd" "scope" "comment"
		while read -r line; do
			line=$(echo "$line" | tr ' ' '\n' | grep '=')
			inet=$(echo "$line" | grep '^inet=' | cut -d'=' -f2)
			brd=$(echo "$line" | grep '^brd=' | cut -d'=' -f2)
			scope=$(echo "$line" | grep '^scope=' | cut -d'=' -f2)
			comment=""
			result=$(echo "$inet" | cut -d'/' -f1)
			if [[ "$result" = "$lip" ]]; then
				comment="primary"
			else
				if [[ "$result" = "$usedvip" ]]; then
					comment="vip"
				fi
			fi
			printf '%s\t%s\t%s\t%s\n' "$inet" "$brd" "$scope" "$comment"
		done < <(echo "$result")
	fi
}

# Manipulate network interface config file
function ConfigFile() {
	local action=${1}		# Could be show, create, delete or change
	local interface=${2}	# Network interface e.g. ens3 or enp0s5
	local defroute=${3}		# yes or no
	local pip=${4}			# Primary IP
	local vip=${5}			# Virtual IP address
	local netmask=${6}		# e.g. 255.255.255.0
	local gateway=${7}		# Network gateway (ip)
	local broadcast=${8}	# Broadcast ip - could be empty
	
	local filename=""
	local bp=""
	local dr=""
	local ob=""
	local name=""
	local stat=1
	
	if [[ "$interface" != "" ]]; then
		filename="${configFilenames}-${interface}:vip"
		case "$action" in
			show)
				if [[ -r "$filename" ]]; then
					printf '%s\t%s\t%s\t%s\t%s\t%s\t%s\t%s\t%s\t%s\n' "DEVICE" "BOOTPROTO" "PRIMIP" "IPADDR" "NETMASK" "BROADCAST" "GATEWAY" "DEFROUTE" "ONBOOT" "ORIGINAL"
					interface=$(grep '^DEVICE=' "$filename" | cut -d'=' -f2 | tr -d '"')
					bp=$(grep '^BOOTPROTO=' "$filename" | cut -d'=' -f2)
					pip=$(grep '^PRIMIP=' "$filename" | cut -d'=' -f2)
					vip=$(grep '^IPADDR=' "$filename" | cut -d'=' -f2)
					netmask=$(grep '^NETMASK=' "$filename" | cut -d'=' -f2)
					broadcast=$(grep '^BROADCAST=' "$filename" | cut -d'=' -f2)
					gateway=$(grep '^GATEWAY=' "$filename" | cut -d'=' -f2)
					dr=$(grep '^DEFROUTE=' "$filename" | cut -d'=' -f2)
					ob=$(grep '^ONBOOT=' "$filename" | cut -d'=' -f2)
					name=$(grep '^ORIGINAL=' "$filename" | cut -d'=' -f2 | tr -d '"')
					printf '%s\t%s\t%s\t%s\t%s\t%s\t%s\t%s\t%s\t%s\n' "$interface" "$bp" "$pip" "$vip" "$netmask" "$broadcast" "$gateway" "$dr" "$ob" "$name"
					stat=$?
				fi
				;;
			create)
				printf 'DEVICE="%s:vip"\n' "$interface" > "$filename" 2>/dev/null
				stat=$?
				
				if (( stat == 0 )); then
					printf 'BOOTPROTO=static\n' >> "$filename"
					printf 'PRIMIP=%s\n' "$pip" >> "$filename"
					printf 'IPADDR=%s\n' "$vip" >> "$filename"
					printf 'NETMASK=%s\n' "$netmask" >> "$filename"
					if [[ "$broadcast" != "" ]]; then
						printf 'BROADCAST=%s\n' "$broadcast" >> "$filename"
					fi
					printf 'GATEWAY=%s\n' "$gateway" >> "$filename"
					printf 'DEFROUTE=%s\n' "$defroute" >> "$filename"
					printf 'ONBOOT=yes\n' >> "$filename"
				fi
				;;
			delete)
				if [[ -f "$filename" ]]; then
					rm -f "$filename" 2>/dev/null
					stat=$?
				fi
				;;
			change)
				if [[ -r "$filename" ]]; then
					if [[ "$defroute" = "yes" ]]; then
						cat "$filename" | sed 's|^DEFROUTE=no$|DEFROUTE=yes|' > "$scratchfile"
					else
						cat "$filename" | sed 's|^DEFROUTE=yes$|DEFROUTE=no|' > "$scratchfile"
					fi
					
					mv -f "$scratchfile" "$filename" 2>/dev/null
					stat=$?
				fi
				;;
		esac
	fi
	
	return $stat
}

# Add an additional parameter to network interface config file
function AddToConfigFile() {
	local paramname=${1}	# Could be ORIGINAL or something else
	local interface=${2}	# Network interface e.g. ens3 or enp0s5
	local param=${3}		# Value of the parameter
	local stat=1
	
	if [[ "$interface" != "" && "$paramname" != "" ]]; then
		paramname="$(ToUpper "$paramname")"
		filename="${configFilenames}-${interface}:vip"
		grep -v "^${paramname}=" "$filename" > "$scratchfile"
		mv -f "$scratchfile" "$filename" 2>/dev/null
		stat=$?
		
		if (( stat == 0 )); then
			printf '%s="%s"\n' "$paramname" "$param" >> "$filename" 2>/dev/null
			stat=$?
		fi
	fi
	
	return $stat
}

# Replace default route
function ReplaceRoute() {
	local iface=${1}
	local gateway=${2}
	local src=${3}
	local usedsrc=""
	local result=""
	local proto=""
	local metric=""
	local protostr=""
	local metricstr=""
	local lines=0
	local stat=1

	if [[ "$ip" != "" && "$iface" != "" && "$gateway" != "" && "$src" != "" ]]; then
		# Check if we have more then one default route and delete all but the last one
		result=$("$ip" route show | grep '^default ')
		lines=$(echo "$result" | wc -l)
		if (( lines == 0 )); then
			# No default route - create one
			$ip route add default via $gateway dev $iface src $src 2>/dev/null
			stat=$?
		else
			if (( lines > 1 )); then
				# To many default routes - delete the first one
				result=$(echo "$result" | head -n 1)
				$ip route delete $result 2>/dev/null
				stat=$?
			fi
			
			# Replace last default route with new IP
			result=$(SplitDefaultRoute | tail -n 1)
			if [[ "$result" != "" ]]; then
				gateway=$(echo "$result" | cut -d$'\t' -f1)
				iface=$(echo "$result" | cut -d$'\t' -f2)
				proto=$(echo "$result" | cut -d$'\t' -f3)
				usedsrc=$(echo "$result" | cut -d$'\t' -f4)
				metric=$(echo "$result" | cut -d$'\t' -f5)
				
				if [[ "$usedsrc" != "$src" ]]; then
					if [[ "$proto" != "" ]]; then
						protostr="proto $proto"
					fi
					if [[ "$metric" != "" ]]; then
						metricstr="metric $metric"
					fi
					
					$ip route replace default via $gateway dev $iface $protostr src $src $metricstr 2>/dev/null
					stat=$?
				fi
			fi
		fi
	fi
	
	return $stat
}

# Add a second IP as a Virtual IP
function AddVIP() {
	local interface=${1}
	local pip=${2}
	local vip=${3}
	local netmask=${4}
	local gateway=${5}
	local broadcast=${6}
	local name=""
	local result=""
	local cidr=0
	local stat=0
	
	# Create entry in ifconfig
	if [[ "$ip" != "" && "$interface" != "" && "$vip" != "" && "$netmask" != "" ]]; then
		cidr=$(NetmaskToCidr "$netmask")
		if [[ "$broadcast" != "" ]]; then
			"$ip" addr add "${vip}/${cidr}" dev "$interface" label "${interface}:vip" broadcast "$broadcast"
			stat=$?
		else
			"$ip" addr add "${vip}/${cidr}" dev "$interface" label "${interface}:vip"
			stat=$?
		fi
		
		# Create file to make it persitent abfter reboot
		if (( stat == 0 )); then
			ConfigFile create "$interface" "no" "$pip" "$vip" "$netmask" "$gateway" "$broadcast"
			stat=$?
			
			if (( stat == 0 )); then
				# Create a link for reboot
				ln -s $script /etc/rc.d/init.d 2>/dev/null
				ln -s ../init.d/${progstr} /etc/rc.d/rc3.d/S80${progstr} 2>/dev/null
				
				# Use nmcli if using Oracle Linux 8+
				if [[ $vers -ge 8 && "$nmcli" != "" ]]; then
					# Get name of current active profile
					name=$("$nmcli" --get-values name con show --active | head -n 1)
					if [[ "$name" != "" ]]; then
						# Save original network profile name
						AddToConfigFile "ORIGINAL" "$interface" "$name"
						
						# Make sure, network manager notice the changes
						# result=$("$nmcli" con reload 2>/dev/null)
						# stat=$?

						# Clone current profile
						result=$("$nmcli" con clone "$name" "${interface}-vip")
						stat=$?
						
						if (( stat == 0 )); then
							# Add vip to cloned profile
							result=$("$nmcli" con mod "${interface}-vip" +ipv4.addresses ${vip}/$cidr)
							stat=$?
							
							if (( stat == 0 )); then
								result=$("$nmcli" --terse con show | grep "^${interface}-vip:")
								stat=$?
								
								if [[ "$result" != "" ]]; then
									# Start cloned profile
									result=$("$nmcli" --wait 3 con up "${interface}-vip")
									stat=$?
								fi
							fi
						fi
					fi
				fi
				
				# Display success
				if (( stat == 0 )); then
					printf "\nVIP '%s' added to interface '%s'.\n" "$vip" "$interface"
				else
					exitcode=8
					errormsg $exitcode "Error while adding VIP '$vip' to interface '$iface'."
				fi
			fi
		fi
	fi
}

# Delete the second IP (Virtual IP)
function DeleteVIP() {
	local interface=${1}
	local vip=${2}
	local netmask=${3}
	local name=${4}
	local result=""
	local cidr=0
	local stat=1

	# Create entry in ifconfig
	if [[ "$interface" != "" && "$vip" != "" && "$netmask" != "" ]]; then
		# Delete file to make it persistent after reboot
		ConfigFile delete "$interface"
		stat=$?
		
		if (( stat == 0 )); then
			# Delete link for reboot
			rm -f /etc/rc.d/init.d/${progstr} 2>/dev/null
			rm -f /etc/rc.d/rc3.d/S80${progstr} 2>/dev/null
			stat=$?
		fi
		
		if [[ $vers -ge 8 && "$nmcli" != "" ]]; then
			result=$("$nmcli" --terse con show --active | grep "^${interface}-vip:")
			stat=$?
				
			if [[ "$result" != "" ]]; then
				result=$("$nmcli" --wait 2 con down "${interface}-vip" 2>/dev/null)
				stat=$?
			fi
			
			result=$("$nmcli" --terse con show | grep "^${interface}-vip:")
			stat=$?
			
			if [[ "$result" != "" ]]; then
				result=$("$nmcli" con delete "${interface}-vip" 2>/dev/null)
				stat=$?
				
				# Wait a few seconds for the profile to change
				sleep 3
			fi
		fi
		
		# Delete the VIP from interface
		if [[ "$ifconfig" != "" && "$ip" != "" ]]; then
			result=$("$ifconfig" "${interface}:vip" | grep "inet $vip")
			if [[ "$result" != "" ]]; then
				cidr=$(NetmaskToCidr "$netmask")
				"$ip" addr del "${vip}/${cidr}" dev "${interface}:vip"
				stat=$?
			fi
		fi
		
		if (( stat == 0 )); then
			if [[ $vers -ge 8 && "$nmcli" != "" && "$name" != "" ]]; then
				# Make sure, network manager notice the changes
				result=$("$nmcli" con reload 2>/dev/null)
				stat=$?
				
				result=$("$nmcli" --terse con show | grep "^${name}:")
				if [[ "$result" != "" ]]; then
					# Activate original profile
					if [[ "$name" != "" ]]; then
						result=$("$nmcli" --wait 3 con up "$name" 2>/dev/null)
						stat=$?
					fi
				fi
			fi
		fi
		
		if (( stat == 0 )); then
			# Display success
			printf "\nVIP '%s' deleted from interface '%s'.\n" "$vip" "$interface"
		else
			exitcode=8
			errormsg $exitcode "Error while deleting VIP '$vip' from interface '$iface'."
		fi
	fi
}

# Preset
action=""
vip=""

# Check parameters: Loop until all parameters are used up
while [[ $# -gt 0 ]]; do
	pname=${1}
	case "$pname" in
		-v | --version)
			shift
			showversion=true
			;;
		-h | --help)
			shift
			showhelp=true
			;;
		*)
			shift
			if [[ "$pname" == -* ]]; then  # Options begin with '-'
				errstr="Unknown option '$pname'."
			else
				if [[ "$action" = "" ]]; then
					action="$(ToLower "$pname")"
				else
					if [[ "$vip" = "" ]]; then
						vip="$pname"
					else
						errstr="VIP was already specified '$vip'. Unknown additional parameter: '$pname'."
					fi
				fi
			fi
	esac
done

# Get infos about the platform
result=$(get-platform --output keys)
id=$(GrepKey "$result" "id")
vers=$(GrepKey "$result" "version_main")
gateway=$(GrepKey "$result" "gateway")
iface=$(GrepKey "$result" "interface")
ifup=$(GrepKey "$result" "up")
lip=$(GrepKey "$result" "ip_v4")

# Check if we are running on Linux
if [[ "$id" != "ol" ]]; then
	errstr="This script only supports Oracle Linux."
else
	# Plausibility check
	if [[ "$action" = "" ]]; then
		action="status"
	elif [[ "$action" = "add" && "$vip" = "" ]]; then
		errstr="Parameter action needs a virtual ip as second paramater."
	fi
fi

# Display help or error message
DisplayHelp

### Main

if [[ "$USER" != "root" ]]; then
	# Try sudo
	check-sudo
	stat=$?

	if (( stat == 0 )); then
		sudo --preserve-env=PATH "$script" "$action" "$vip"
	else
		exitcode=1
		errormsg $exitcode "Need to be root."
	fi
else
	ifconfig=$(filecheck -x ifconfig)
	jq=$(filecheck -x jq)
	ip=$(filecheck -x ip)
	nmcli=$(filecheck -x nmcli)
	
	if [[ "$ip" = "" ]]; then
		exitcode=3
		errormsg $exitcode "No 'ip' in PATH."
	else
		if [[ "$iface" = "" || "$ifup" = false ]]; then
			exitcode=4
			errormsg $exitcode "No suitable interface found."
		else
			if [[ "$lip" = "" ]]; then
				exitcode=5
				errormsg $exitcode "No IPv4 found in interface '$iface'."
			else
				result=$(ConfigFile show "$iface" | tail -n 1)
				if [[ "$result" != "" ]]; then
					lip=$(echo "$result" | cut -d$'\t' -f3)
					usedvip=$(echo "$result" | cut -d$'\t' -f4)
					netmask=$(echo "$result" | cut -d$'\t' -f5)
					broadcast=$(echo "$result" | cut -d$'\t' -f6)
					gateway=$(echo "$result" | cut -d$'\t' -f7)
					viproute=$(echo "$result" | cut -d$'\t' -f8)
					original=$(echo "$result" | cut -d$'\t' -f10)
				else
					usedvip=""
					viproute=no
					result=$(GetIPs "$iface" | grep "^${lip}/")
					netmask=$(echo "$result" | cut -d$'\t' -f1 | cut -d'/' -f2)
					netmask=$(CidrToNetmask "$netmask")
					broadcast=$(echo "$result" | cut -d$'\t' -f2)
				fi
				
				case "$action" in
					status)
						printf "\nVNICs on instance:\n\n"
						VnicsFromInstance | print-table
						
						printf "\nDefined interfaces:\n\n"
						GetInterfaces | print-table
						
						printf "\nPlan:\n\n"
						printf "  Primary interface: '%s'\n" "$iface"
						printf "  Primary IP: '%s'\n" "$lip"
						if [[ "$usedvip" != "" ]]; then
							printf "  Used VIP: '%s'\n" "$usedvip"
						else
							result=$(transfer --quiet --auth "$vipURL" | head -n 1)
							stat=$?
							if [[ $stat -ne 0 || "$result" = "<html>" ]]; then
								result=""
							fi
							
							if [[ "$result" != "" ]]; then
								printf "  Suggested VIP '%s' not used.\n" "$result"
							else
								echo "  VIP not used."
							fi
						fi
						if [[ "$viproute" = "yes" ]]; then
							echo "  VIP attached to default route."
						else
							echo "  VIP not attached to default route."
						fi

						printf "\nPrivate ip_v4 on interface '%s':\n\n" "$iface"
						GetIPs "$iface" | print-table
						
						printf "\nDefault route:\n\n"
						SplitDefaultRoute | print-table
						;;
					start)
						if [[ "$usedvip" != "" ]]; then
							# Startup network manager profile
							if [[ $vers -ge 8 && "$nmcli" != "" ]]; then
								stat=1
								i=0
								while [[ $stat -ne 0 && $i -lt 10 ]]; do
									sleep 1
									(( i++ ))
									
									result=$("$nmcli" --terse con show --active | grep "^${iface}-vip:")
									stat=$?
									
									if [[ "$result" = "" ]]; then
										# We don't use the right profile - check if it exists and then start it
										result=$("$nmcli" --terse con show | grep "^${iface}-vip:")
										if [[ "$result" != "" ]]; then
											result=$("$nmcli" con up "${iface}-vip" 2>/dev/null)
											stat=$?
										fi
									fi
								done
							fi
							
							if [[ "$viproute" = "yes" ]]; then
								ReplaceRoute $iface $gateway $usedvip
								stat=$?
								
								if (( stat != 0 )); then
									exitcode=9
									errormsg $exitcode "Error while changing default route for interface '$iface'."
								fi
							fi
						else
							exitcode=7
							errormsg $exitcode "No VIP attached to interface '$iface'."
						fi
						;;
					stop)
						if [[ "$usedvip" != "" ]]; then
							if [[ "$viproute" = "yes" ]]; then
								ReplaceRoute $iface $gateway $lip
								stat=$?
								
								if (( stat != 0 )); then
									exitcode=9
									errormsg $exitcode "Error while changing default route for interface '$iface'."
								fi
							fi
							
							# Startup network manager profile
							if [[ $vers -ge 8 && "$nmcli" != "" ]]; then
								stat=1
								i=0
								while [[ $stat -ne 0 && $i -lt 10 ]]; do
									sleep 1
									(( i++ ))
									
									result=$("$nmcli" --terse con show --active | grep "^${iface}-vip:")
									stat=$?
									
									if [[ "$result" != "" ]]; then
										# We don't use the right profile - check if it exists and then start it
										# result=$("$nmcli" --terse con show | grep "^${iface}-vip:")
										result=$("$nmcli" --terse con show | grep "^${original}:")
										if [[ "$result" != "" ]]; then
											# result=$("$nmcli" con down "${iface}-vip" 2>/dev/null)
											result=$("$nmcli" con up "$original" 2>/dev/null)
											stat=$?
										fi
									fi
								done
							fi
						else
							exitcode=7
							errormsg $exitcode "No VIP attached to interface '$iface'."
						fi
						;;
					route)
						if [[ "$usedvip" != "" ]]; then
							if [[ "$vip" = "$usedvip" || "$vip" = "" ]]; then
								ReplaceRoute $iface $gateway $usedvip
								stat=$?
								
								if (( stat != 0 )); then
									exitcode=9
									errormsg $exitcode "Error while changing default route for interface '$iface'."
								else
									if [[ "$viproute" = "no" ]]; then
										ConfigFile change "$iface" "yes"
									fi
								fi
							else
								ReplaceRoute $iface $gateway $vip
								stat=$?
								
								if (( stat != 0 )); then
									exitcode=9
									errormsg $exitcode "Error while changing default route for interface '$iface'."
								else
									if [[ "$viproute" = "yes" ]]; then
										ConfigFile change "$iface" "no"
									fi
								fi
							fi
						
							printf "\nDefault route:\n\n"
							SplitDefaultRoute | print-table
						else
							exitcode=7
							errormsg $exitcode "No VIP attached to interface '$iface'."
						fi
						;;
					add)
						if [[ "$vip" = "$lip" ]]; then
							exitcode=6
							errormsg $exitcode "Primary IP on interface '${iface}' can't be used as VIP."
						else
							if [[ "$usedvip" != "" ]]; then
								exitcode=6
								errormsg $exitcode "VIP for '$iface' already defined: '$usedvip'."
							else
								AddVIP "$iface" "$lip" "$vip" "$netmask" "$gateway" "$broadcast"
							fi
						fi
						;;
					delete)
						if [[ "$usedvip" = "" ]]; then
							exitcode=7
							errormsg $exitcode "No VIP attached to interface '$iface'."
						else
							# defroute=$(ConfigFile show "$iface" | print-table DEFROUTE --output plain)
							if [[ "$viproute" = "yes" ]]; then
								ReplaceRoute $iface $gateway $lip
								stat=$?
								
								if (( stat != 0 )); then
									exitcode=9
									errormsg $exitcode "Error while changing default route for interface '$iface'."
								fi
							fi
							
							DeleteVIP "$iface" "$usedvip" "$netmask" "$original"
						fi
						;;
					*)
						exitcode=2
						errormsg $exitcode "Unknown action: '$action'."
				esac
			fi
		fi
	fi
fi

# Cleanup and exit
Cleanup
exit $exitcode