# http://static.tp-link.com/res/down/doc/TL-SG3210(UN)_V2.0_CLI_.pdf
{ self, pkgs, hostName, config, hostConfig, ... }:
with pkgs;
with lib;
''
  #! ${pkgs.expect}/bin/expect -f

  spawn ${pkgs.inetutils}/bin/telnet ${config.site.net.mgmt.hosts4.${hostName}}
  expect "Password:"
  send "${hostConfig.password}\r"
  expect ">"
  send "\r"
  expect ">"
  send "enable\r"
  expect "Password:"
  send "${hostConfig.password}\r"
  expect "#"
  send "configure\r"
  expect "(config)#"

  send "enable secret 0 ${hostConfig.password}\r"
  expect "(config)#"
  #send "enable password 0 ${hostConfig.password}\r"
  #expect "(config)#"
  send "service password-encryption\r"
  expect "(config)#"
  send "user name admin privilege admin secret 0 ${hostConfig.password}\r"
  expect "(config)#"

  send "hostname \"${hostName}\"\r"
  expect "(config)#"
  send "location \"${hostConfig.location}\"\r"
  expect "(config)#"

  send "logging host index 1 ${config.site.net.mgmt.hosts4.logging} 6\r"
  expect "(config)#"

  send "ip management-vlan ${toString config.site.net.mgmt.vlan}\r"
  expect "(config)#"
  send "ip ssh server\r"
  expect "(config)#"
  send "telnet enable\r"
  expect "(config)#"
  send "line vty 0 15\r"
  expect "(config-line)#"
  send "password 0 ${hostConfig.password}\r"
  expect "(config-line)#"
  send "exit\r"
  expect "(config)#"

  ${concatMapStrings (net:
    let
      netConfig = config.site.net.${net};
      vlan = toString netConfig.vlan;
      inherit (config.site.net.${net}) hosts4;
      hostAddr4 = hosts4.${hostName};
      prefixLength = elemAt (
        builtins.split "/" netConfig.subnet4
      ) 2;
      netmask = self.lib.netmasks.${prefixLength};
    in ''
      ${optionalString (net != "mgmt") ''
        send "vlan ${vlan}\r"
        expect "(config-vlan)#"
        send "name \"${net}\"\r"
        expect "(config-vlan)#"
        send "exit\r"
        expect "(config)#"
      ''}

      # Actually only used for mgmt_vlan, switches are not routers
      send "interface vlan ${vlan}\r"
      expect "(config-if)#"
      ${optionalString (hosts4 ? ${hostName}) ''
        send "ip address ${hostAddr4} ${netmask}\r"
        expect "(config-if)#"
      ''}
      send "exit\r"
      expect "(config)#"
    ''
  ) (builtins.attrNames config.site.net)}

  ${concatMapStrings (name:
    let
      linkConfig = hostConfig.links.${name};
      isAccess = config.site.net ? ${name};
      netConfig = config.site.net.${name};
      isTrunk = !isAccess;
      isBond = isTrunk && builtins.length linkConfig.ports > 1;
      ports = concatStringsSep "," linkConfig.ports;
    in
      if isTrunk
      then ''
        send "interface range gigabitEthernet 1/0/${ports}\r"
        expect "(config-if-range)#"
        send "switchport mode trunk\r"
        expect "(config-if-range)#"
        ${if (builtins.length linkConfig.ports > 1)
          then ''
            send "channel-group ${linkConfig.group} mode active\r"
            expect "(config-if-range)#"
            #send "port-channel load-balance src-dst-ip\r"
            #expect "(config-if-range)#"
          '' else ''
            send "no channel-group\r"
            expect "(config-if-range)#"
          ''}
        send "switchport trunk allowed vlan ${concatStringsSep "," (map toString linkConfig.vlans)}\r"
        expect "(config-if-range)#"
        send "exit\r"
        expect "(config)#"
      '' else ''
        send "interface range gigabitEthernet 1/0/${ports}\r"
        expect "(config-if-range)#"
        send "switchport mode access\r"
        expect "(config-if-range)#"
        send "switchport access vlan ${toString netConfig.vlan}\r"
        expect "(config-if-range)#"
        send "exit\r"
        expect "(config)#"
      ''
  ) (builtins.attrNames hostConfig.links)}

  send "exit\r"
  expect "#"
  send "copy running-config startup-config\r"
  expect "#"
  send "exit\r"
  expect ">"
  send "exit\r"
''