modules/admin-full: rework wifi configuration
[project/luci.git] / modules / admin-full / luasrc / model / cbi / admin_network / wifi.lua
1 --[[
2 LuCI - Lua Configuration Interface
3
4 Copyright 2008 Steven Barth <steven@midlink.org>
5
6 Licensed under the Apache License, Version 2.0 (the "License");
7 you may not use this file except in compliance with the License.
8 You may obtain a copy of the License at
9
10         http://www.apache.org/licenses/LICENSE-2.0
11
12 $Id$
13 ]]--
14
15 local wa = require "luci.tools.webadmin"
16 local nw = require "luci.model.network"
17 local ww = require "luci.model.wireless"
18 local fs = require "nixio.fs"
19
20 arg[1] = arg[1] or ""
21 arg[2] = arg[2] or ""
22
23 m = Map("wireless", "",
24         translate("The <em>Device Configuration</em> section covers physical settings of the radio " ..
25                 "hardware such as channel, transmit power or antenna selection which is shared among all " ..
26                 "defined wireless networks (if the radio hardware is multi-SSID capable). Per network settings " ..
27                 "like encryption or operation mode are grouped in the <em>Interface Configuration</em>."))
28
29 m:chain("network")
30
31 m.breadcrumb = {
32         { luci.dispatcher.build_url("admin/network/wireless"), translate("Wireless Networks") }
33 }
34
35 local ifsection
36
37 function m.on_commit(map)
38         nw.init(map.uci)
39         ww.init(map.uci)
40
41         local wnet = ww:get_network(arg[2])
42         if ifsection and wnet then
43                 ifsection.section = wnet.sid
44         end
45 end
46
47 nw.init(m.uci)
48 ww.init(m.uci)
49
50 local wnet = ww:get_network(arg[2])
51
52 -- redirect to overview page if network does not exist anymore (e.g. after a revert)
53 if not wnet then
54         luci.http.redirect(luci.dispatcher.build_url("admin/network/wireless"))
55         return
56 end
57
58 m.title = ww:get_i18n(wnet)
59
60
61 local iw = luci.sys.wifi.getiwinfo(arg[1])
62 local tx_powers = iw.txpwrlist or { }
63
64
65 s = m:section(NamedSection, arg[1], "wifi-device", translate("Device Configuration"))
66 s.addremove = false
67
68 s:tab("general", translate("General Setup"))
69 s:tab("macfilter", translate("MAC-Filter"))
70 s:tab("advanced", translate("Advanced Settings"))
71
72 --[[
73 back = s:option(DummyValue, "_overview", translate("Overview"))
74 back.value = ""
75 back.titleref = luci.dispatcher.build_url("admin", "network", "wireless")
76 ]]
77
78 st = s:taboption("general", DummyValue, "__status", translate("Status"))
79 st.template = "admin_network/wifi_status"
80 st.ifname   = arg[1]
81
82 en = s:taboption("general", Flag, "disabled", translate("Enable device"))
83 en.enabled = "0"
84 en.disabled = "1"
85 en.rmempty = false
86
87 function en.cfgvalue(self, section)
88         return Flag.cfgvalue(self, section) or "0"
89 end
90
91
92 local hwtype = m:get(arg[1], "type")
93 local htcaps = m:get(arg[1], "ht_capab") and true or false
94
95 -- NanoFoo
96 local nsantenna = m:get(arg[1], "antenna")
97
98 ch = s:taboption("general", Value, "channel", translate("Channel"))
99 ch:value("auto", translate("auto"))
100 for _, f in ipairs(iw and iw.freqlist or luci.sys.wifi.channels()) do
101         if not f.restricted then
102                 ch:value(f.channel, "%i (%.3f GHz)" %{ f.channel, f.mhz / 1000 })
103         end
104 end
105
106
107 ------------------- MAC80211 Device ------------------
108
109 if hwtype == "mac80211" then
110         tp = s:taboption("general",
111                 (tx_powers and #tx_powers > 0) and ListValue or Value,
112                 "txpower", translate("Transmit Power"), "dBm")
113
114         tp.rmempty = true
115         tp.default = tostring(iw and iw.txpower or tx_powers[#tx_powers])
116         for _, p in ipairs(tx_powers or {}) do
117                 tp:value(p.dbm, "%i dBm (%i mW)" %{ p.dbm, p.mw })
118         end
119
120         mode = s:taboption("advanced", ListValue, "hwmode", translate("Mode"))
121         mode:value("", translate("auto"))
122         mode:value("11b", "802.11b")
123         mode:value("11g", "802.11g")
124         mode:value("11a", "802.11a")
125
126         if htcaps then
127                 mode:value("11ng", "802.11g+n")
128                 mode:value("11na", "802.11a+n")
129
130                 htmode = s:taboption("advanced", ListValue, "htmode", translate("HT mode"))
131                 htmode:depends("hwmode", "11na")
132                 htmode:depends("hwmode", "11ng")
133                 htmode:value("HT20", "20MHz")
134                 htmode:value("HT40-", translate("40MHz 2nd channel below"))
135                 htmode:value("HT40+", translate("40MHz 2nd channel above"))
136
137                 --htcapab = s:taboption("advanced", DynamicList, "ht_capab", translate("HT capabilities"))
138                 --htcapab:depends("hwmode", "11na")
139                 --htcapab:depends("hwmode", "11ng")
140         end
141
142         local cl = iw and iw.countrylist
143         if cl and #cl > 0 then
144                 cc = s:taboption("advanced", ListValue, "country", translate("Country Code"), translate("Use ISO/IEC 3166 alpha2 country codes."))
145                 cc.default = tostring(iw and iw.country or "00")
146                 for _, c in ipairs(cl) do
147                         cc:value(c.alpha2, "%s - %s" %{ c.alpha2, c.name })
148                 end
149         else
150                 s:taboption("advanced", Value, "country", translate("Country Code"), translate("Use ISO/IEC 3166 alpha2 country codes."))
151         end
152
153         s:taboption("advanced", Value, "distance", translate("Distance Optimization"),
154                 translate("Distance to farthest network member in meters."))
155 end
156
157
158 ------------------- Madwifi Device ------------------
159
160 if hwtype == "atheros" then
161         tp = s:taboption("general",
162                 (#tx_powers > 0) and ListValue or Value,
163                 "txpower", translate("Transmit Power"), "dBm")
164
165         tp.rmempty = true
166         for _, p in ipairs(iw.txpwrlist) do
167                 tp:value(p.dbm, "%i dBm (%i mW)" %{ p.dbm, p.mw })
168         end
169
170         mode = s:taboption("advanced", ListValue, "hwmode", translate("Mode"))
171         mode:value("", translate("auto"))
172         mode:value("11b", "802.11b")
173         mode:value("11g", "802.11g")
174         mode:value("11a", "802.11a")
175         mode:value("11bg", "802.11b+g")
176         mode:value("11gst", "802.11g + Turbo")
177         mode:value("11ast", "802.11a + Turbo")
178         mode:value("fh", translate("Frequency Hopping"))
179
180         s:taboption("advanced", Flag, "diversity", translate("Diversity")).rmempty = false
181
182         if not nsantenna then
183                 ant1 = s:taboption("advanced", ListValue, "txantenna", translate("Transmitter Antenna"))
184                 ant1.widget = "radio"
185                 ant1.orientation = "horizontal"
186                 ant1:depends("diversity", "")
187                 ant1:value("0", translate("auto"))
188                 ant1:value("1", translate("Antenna 1"))
189                 ant1:value("2", translate("Antenna 2"))
190
191                 ant2 = s:taboption("advanced", ListValue, "rxantenna", translate("Receiver Antenna"))
192                 ant2.widget = "radio"
193                 ant2.orientation = "horizontal"
194                 ant2:depends("diversity", "")
195                 ant2:value("0", translate("auto"))
196                 ant2:value("1", translate("Antenna 1"))
197                 ant2:value("2", translate("Antenna 2"))
198
199         else -- NanoFoo
200                 local ant = s:taboption("advanced", ListValue, "antenna", translate("Transmitter Antenna"))
201                 ant:value("auto")
202                 ant:value("vertical")
203                 ant:value("horizontal")
204                 ant:value("external")
205         end
206
207         s:taboption("advanced", Value, "distance", translate("Distance Optimization"),
208                 translate("Distance to farthest network member in meters."))
209         s:taboption("advanced", Value, "regdomain", translate("Regulatory Domain"))
210         s:taboption("advanced", Value, "country", translate("Country Code"))
211         s:taboption("advanced", Flag, "outdoor", translate("Outdoor Channels"))
212
213         --s:option(Flag, "nosbeacon", translate("Disable HW-Beacon timer"))
214 end
215
216
217
218 ------------------- Broadcom Device ------------------
219
220 if hwtype == "broadcom" then
221         tp = s:taboption("general",
222                 (#tx_powers > 0) and ListValue or Value,
223                 "txpower", translate("Transmit Power"), "dBm")
224
225         tp.rmempty = true
226         for _, p in ipairs(iw.txpwrlist) do
227                 tp:value(p.dbm, "%i dBm (%i mW)" %{ p.dbm, p.mw })
228         end
229
230         mode = s:taboption("advanced", ListValue, "hwmode", translate("Mode"))
231         mode:value("11bg", "802.11b+g")
232         mode:value("11b", "802.11b")
233         mode:value("11g", "802.11g")
234         mode:value("11gst", "802.11g + Turbo")
235
236         mp = s:taboption("macfilter", ListValue, "macfilter", translate("MAC-Address Filter"))
237         mp:value("", translate("disable"))
238         mp:value("allow", translate("Allow listed only"))
239         mp:value("deny", translate("Allow all except listed"))
240         ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
241         ml:depends({macfilter="allow"})
242         ml:depends({macfilter="deny"})
243
244         ant1 = s:taboption("advanced", ListValue, "txantenna", translate("Transmitter Antenna"))
245         ant1.widget = "radio"
246         ant1:depends("diversity", "")
247         ant1:value("3", translate("auto"))
248         ant1:value("0", translate("Antenna 1"))
249         ant1:value("1", translate("Antenna 2"))
250
251         ant2 = s:taboption("advanced", ListValue, "rxantenna", translate("Receiver Antenna"))
252         ant2.widget = "radio"
253         ant2:depends("diversity", "")
254         ant2:value("3", translate("auto"))
255         ant2:value("0", translate("Antenna 1"))
256         ant2:value("1", translate("Antenna 2"))
257
258         s:taboption("advanced", Flag, "frameburst", translate("Frame Bursting"))
259
260         s:taboption("advanced", Value, "distance", translate("Distance Optimization"))
261         --s:option(Value, "slottime", translate("Slot time"))
262
263         s:taboption("advanced", Value, "country", translate("Country Code"))
264         s:taboption("advanced", Value, "maxassoc", translate("Connection Limit"))
265 end
266
267
268 --------------------- HostAP Device ---------------------
269
270 if hwtype == "prism2" then
271         s:taboption("advanced", Value, "txpower", translate("Transmit Power"), "att units").rmempty = true
272
273         s:taboption("advanced", Flag, "diversity", translate("Diversity")).rmempty = false
274
275         s:taboption("advanced", Value, "txantenna", translate("Transmitter Antenna"))
276         s:taboption("advanced", Value, "rxantenna", translate("Receiver Antenna"))
277 end
278
279
280 ----------------------- Interface -----------------------
281
282 local wnet = ww:get_network(arg[2])
283
284 if wnet then
285         s = m:section(NamedSection, wnet.sid, "wifi-iface", translate("Interface Configuration"))
286         ifsection = s
287         s.addremove = false
288         s.anonymous = true
289         s.defaults.device = arg[1]
290
291         s:tab("general", translate("General Setup"))
292         s:tab("encryption", translate("Wireless Security"))
293         s:tab("macfilter", translate("MAC-Filter"))
294         s:tab("advanced", translate("Advanced Settings"))
295
296         s:taboption("general", Value, "ssid", translate("<abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
297
298         mode = s:taboption("general", ListValue, "mode", translate("Mode"))
299         mode.override_values = true
300         mode:value("ap", translate("Access Point"))
301         mode:value("sta", translate("Client"))
302         mode:value("adhoc", translate("Ad-Hoc"))
303
304         bssid = s:taboption("general", Value, "bssid", translate("<abbr title=\"Basic Service Set Identifier\">BSSID</abbr>"))
305
306         network = s:taboption("general", Value, "network", translate("Network"),
307                 translate("Choose the network you want to attach to this wireless interface. " ..
308                         "Select <em>unspecified</em> to not attach any network or fill out the " ..
309                         "<em>create</em> field to define a new network."))
310
311         network.rmempty = true
312         network.template = "cbi/network_netlist"
313         network.widget = "radio"
314
315         function network.write(self, section, value)
316                 local i = nw:get_interface(section)
317                 if i then
318                         if value == '-' then
319                                 value = m:formvalue(self:cbid(section) .. ".newnet")
320                                 if value and #value > 0 then
321                                         local n = nw:add_network(value, {type="bridge", proto="none"})
322                                         if n then n:add_interface(i) end
323                                 else
324                                         local n = i:get_network()
325                                         if n then n:del_interface(i) end
326                                 end
327                         else
328                                 local n = nw:get_network(value)
329                                 if n then
330                                         n:type("bridge")
331                                         n:add_interface(i)
332                                 end
333                         end
334                 end
335         end
336
337         -------------------- MAC80211 Interface ----------------------
338
339         if hwtype == "mac80211" then
340                 if fs.access("/usr/sbin/iw") then
341                         mode:value("mesh", "802.11s")
342                 end
343
344                 mode:value("ahdemo", translate("Pseudo Ad-Hoc (ahdemo)"))
345                 mode:value("monitor", translate("Monitor"))
346                 bssid:depends({mode="adhoc"})
347
348                 s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
349                 s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
350
351                 mode:value("ap-wds", "%s (%s)" % {translate("Access Point"), translate("WDS")})
352                 mode:value("sta-wds", "%s (%s)" % {translate("Client"), translate("WDS")})
353
354                 function mode.write(self, section, value)
355                         if value == "ap-wds" then
356                                 ListValue.write(self, section, "ap")
357                                 m.uci:set("wireless", section, "wds", 1)
358                         elseif value == "sta-wds" then
359                                 ListValue.write(self, section, "sta")
360                                 m.uci:set("wireless", section, "wds", 1)
361                         else
362                                 ListValue.write(self, section, value)
363                                 m.uci:delete("wireless", section, "wds")
364                         end
365                 end
366
367                 function mode.cfgvalue(self, section)
368                         local mode = ListValue.cfgvalue(self, section)
369                         local wds  = m.uci:get("wireless", section, "wds") == "1"
370
371                         if mode == "ap" and wds then
372                                 return "ap-wds"
373                         elseif mode == "sta" and wds then
374                                 return "sta-wds"
375                         else
376                                 return mode
377                         end
378                 end
379
380                 hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
381                 hidden:depends({mode="ap"})
382                 hidden:depends({mode="ap-wds"})
383         end
384
385
386
387         -------------------- Madwifi Interface ----------------------
388
389         if hwtype == "atheros" then
390                 mode:value("ahdemo", translate("Pseudo Ad-Hoc (ahdemo)"))
391                 mode:value("monitor", translate("Monitor"))
392                 mode:value("ap-wds", "%s (%s)" % {translate("Access Point"), translate("WDS")})
393                 mode:value("sta-wds", "%s (%s)" % {translate("Client"), translate("WDS")})
394                 mode:value("wds", translate("Static WDS"))
395
396                 function mode.write(self, section, value)
397                         if value == "ap-wds" then
398                                 ListValue.write(self, section, "ap")
399                                 m.uci:set("wireless", section, "wds", 1)
400                         elseif value == "sta-wds" then
401                                 ListValue.write(self, section, "sta")
402                                 m.uci:set("wireless", section, "wds", 1)
403                         else
404                                 ListValue.write(self, section, value)
405                                 m.uci:delete("wireless", section, "wds")
406                         end
407                 end
408
409                 function mode.cfgvalue(self, section)
410                         local mode = ListValue.cfgvalue(self, section)
411                         local wds  = m.uci:get("wireless", section, "wds") == "1"
412
413                         if mode == "ap" and wds then
414                                 return "ap-wds"
415                         elseif mode == "sta" and wds then
416                                 return "sta-wds"
417                         else
418                                 return mode
419                         end
420                 end
421
422                 bssid:depends({mode="adhoc"})
423                 bssid:depends({mode="ahdemo"})
424                 bssid:depends({mode="wds"})
425
426                 wdssep = s:taboption("advanced", Flag, "wdssep", translate("Separate WDS"))
427                 wdssep:depends({mode="ap-wds"})
428
429                 s:taboption("advanced", Flag, "doth", "802.11h")
430                 hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
431                 hidden:depends({mode="ap"})
432                 hidden:depends({mode="adhoc"})
433                 hidden:depends({mode="ap-wds"})
434                 hidden:depends({mode="sta-wds"})
435                 isolate = s:taboption("advanced", Flag, "isolate", translate("Separate Clients"),
436                  translate("Prevents client-to-client communication"))
437                 isolate:depends({mode="ap"})
438                 s:taboption("advanced", Flag, "bgscan", translate("Background Scan"))
439
440                 mp = s:taboption("macfilter", ListValue, "macpolicy", translate("MAC-Address Filter"))
441                 mp:value("", translate("disable"))
442                 mp:value("deny", translate("Allow listed only"))
443                 mp:value("allow", translate("Allow all except listed"))
444                 ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
445                 ml:depends({macpolicy="allow"})
446                 ml:depends({macpolicy="deny"})
447
448                 s:taboption("advanced", Value, "rate", translate("Transmission Rate"))
449                 s:taboption("advanced", Value, "mcast_rate", translate("Multicast Rate"))
450                 s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
451                 s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
452                 s:taboption("advanced", Value, "minrate", translate("Minimum Rate"))
453                 s:taboption("advanced", Value, "maxrate", translate("Maximum Rate"))
454                 s:taboption("advanced", Flag, "compression", translate("Compression"))
455
456                 s:taboption("advanced", Flag, "bursting", translate("Frame Bursting"))
457                 s:taboption("advanced", Flag, "turbo", translate("Turbo Mode"))
458                 s:taboption("advanced", Flag, "ff", translate("Fast Frames"))
459
460                 s:taboption("advanced", Flag, "wmm", translate("WMM Mode"))
461                 s:taboption("advanced", Flag, "xr", translate("XR Support"))
462                 s:taboption("advanced", Flag, "ar", translate("AR Support"))
463
464                 local swm = s:taboption("advanced", Flag, "sw_merge", translate("Disable HW-Beacon timer"))
465                 swm:depends({mode="adhoc"})
466
467                 local nos = s:taboption("advanced", Flag, "nosbeacon", translate("Disable HW-Beacon timer"))
468                 nos:depends({mode="sta"})
469                 nos:depends({mode="sta-wds"})
470
471                 local probereq = s:taboption("advanced", Flag, "probereq", translate("Do not send probe responses"))
472                 probereq.enabled  = "0"
473                 probereq.disabled = "1"
474         end
475
476
477         -------------------- Broadcom Interface ----------------------
478
479         if hwtype == "broadcom" then
480                 mode:value("wds", translate("WDS"))
481                 mode:value("monitor", translate("Monitor"))
482
483                 hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
484                 hidden:depends({mode="ap"})
485                 hidden:depends({mode="adhoc"})
486                 hidden:depends({mode="wds"})
487
488                 isolate = s:taboption("advanced", Flag, "isolate", translate("Separate Clients"),
489                  translate("Prevents client-to-client communication"))
490                 isolate:depends({mode="ap"})
491
492                 s:taboption("advanced", Flag, "doth", "802.11h")
493                 s:taboption("advanced", Flag, "wmm", translate("WMM Mode"))
494
495                 bssid:depends({mode="wds"})
496                 bssid:depends({mode="adhoc"})
497         end
498
499
500         ----------------------- HostAP Interface ---------------------
501
502         if hwtype == "prism2" then
503                 mode:value("wds", translate("WDS"))
504                 mode:value("monitor", translate("Monitor"))
505
506                 hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
507                 hidden:depends({mode="ap"})
508                 hidden:depends({mode="adhoc"})
509                 hidden:depends({mode="wds"})
510
511                 bssid:depends({mode="sta"})
512
513                 mp = s:taboption("macfilter", ListValue, "macpolicy", translate("MAC-Address Filter"))
514                 mp:value("", translate("disable"))
515                 mp:value("deny", translate("Allow listed only"))
516                 mp:value("allow", translate("Allow all except listed"))
517                 ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
518                 ml:depends({macpolicy="allow"})
519                 ml:depends({macpolicy="deny"})
520
521                 s:taboption("advanced", Value, "rate", translate("Transmission Rate"))
522                 s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
523                 s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
524         end
525
526
527         ------------------- WiFI-Encryption -------------------
528
529         encr = s:taboption("encryption", ListValue, "encryption", translate("Encryption"))
530         encr.override_values = true
531         encr.override_depends = true
532         encr:depends({mode="ap"})
533         encr:depends({mode="sta"})
534         encr:depends({mode="adhoc"})
535         encr:depends({mode="ahdemo"})
536         encr:depends({mode="ap-wds"})
537         encr:depends({mode="sta-wds"})
538         encr:depends({mode="mesh"})
539
540         encr:value("none", "No Encryption")
541         encr:value("wep", "WEP", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
542
543         if hwtype == "atheros" or hwtype == "mac80211" or hwtype == "prism2" then
544                 local supplicant = fs.access("/usr/sbin/wpa_supplicant")
545                 local hostapd = fs.access("/usr/sbin/hostapd")
546
547                 if hostapd and supplicant then
548                         encr:value("psk", "WPA-PSK")
549                         encr:value("psk2", "WPA2-PSK")
550                         encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode")
551                         encr:value("wpa", "WPA-EAP", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
552                         encr:value("wpa2", "WPA2-EAP", {mode="ap"}, {mode="sta"})
553                 elseif hostapd and not supplicant then
554                         encr:value("psk", "WPA-PSK", {mode="ap"}, {mode="ap-wds"}, {mode="adhoc"}, {mode="ahdemo"})
555                         encr:value("psk2", "WPA2-PSK", {mode="ap"}, {mode="ap-wds"}, {mode="adhoc"}, {mode="ahdemo"})
556                         encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode", {mode="ap"}, {mode="ap-wds"}, {mode="adhoc"}, {mode="ahdemo"})
557                         encr:value("wpa", "WPA-EAP", {mode="ap"}, {mode="ap-wds"})
558                         encr:value("wpa2", "WPA2-EAP", {mode="ap"}, {mode="ap-wds"})
559                         encr.description = translate(
560                                 "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
561                                 "and ad-hoc mode) to be installed."
562                         )
563                 elseif not hostapd and supplicant then
564                         encr:value("psk", "WPA-PSK", {mode="sta"}, {mode="sta-wds"})
565                         encr:value("psk2", "WPA2-PSK", {mode="sta"}, {mode="sta-wds"})
566                         encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode", {mode="sta"}, {mode="sta-wds"})
567                         encr:value("wpa", "WPA-EAP", {mode="sta"}, {mode="sta-wds"})
568                         encr:value("wpa2", "WPA2-EAP", {mode="sta"}, {mode="sta-wds"})
569                         encr.description = translate(
570                                 "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
571                                 "and ad-hoc mode) to be installed."
572                         )
573                 else
574                         encr.description = translate(
575                                 "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
576                                 "and ad-hoc mode) to be installed."
577                         )
578                 end
579         elseif hwtype == "broadcom" then
580                 encr:value("psk", "WPA-PSK")
581                 encr:value("psk2", "WPA2-PSK")
582                 encr:value("psk+psk2", "WPA-PSK/WPA2-PSK Mixed Mode")
583         end
584
585         encr:depends("mode", "ap")
586         encr:depends("mode", "sta")
587         encr:depends("mode", "ap-wds")
588         encr:depends("mode", "sta-wds")
589         encr:depends("mode", "wds")
590
591         server = s:taboption("encryption", Value, "server", translate("Radius-Server"))
592         server:depends({mode="ap", encryption="wpa"})
593         server:depends({mode="ap", encryption="wpa2"})
594         server:depends({mode="ap-wds", encryption="wpa"})
595         server:depends({mode="ap-wds", encryption="wpa2"})
596         server.rmempty = true
597
598         port = s:taboption("encryption", Value, "port", translate("Radius-Port"))
599         port:depends({mode="ap", encryption="wpa"})
600         port:depends({mode="ap", encryption="wpa2"})
601         port:depends({mode="ap-wds", encryption="wpa"})
602         port:depends({mode="ap-wds", encryption="wpa2"})
603         port.rmempty = true
604
605         key = s:taboption("encryption", Value, "key", translate("Key"))
606         key:depends("encryption", "wep")
607         key:depends("encryption", "psk")
608         key:depends("encryption", "psk2")
609         key:depends("encryption", "psk+psk2")
610         key:depends("encryption", "psk-mixed")
611         key:depends({mode="ap", encryption="wpa"})
612         key:depends({mode="ap", encryption="wpa2"})
613         key:depends({mode="ap-wds", encryption="wpa"})
614         key:depends({mode="ap-wds", encryption="wpa2"})
615         key.rmempty = true
616         key.password = true
617
618         if hwtype == "atheros" or hwtype == "mac80211" or hwtype == "prism2" then
619                 nasid = s:taboption("encryption", Value, "nasid", translate("NAS ID"))
620                 nasid:depends({mode="ap", encryption="wpa"})
621                 nasid:depends({mode="ap", encryption="wpa2"})
622                 nasid:depends({mode="ap-wds", encryption="wpa"})
623                 nasid:depends({mode="ap-wds", encryption="wpa2"})
624                 nasid.rmempty = true
625
626                 eaptype = s:taboption("encryption", ListValue, "eap_type", translate("EAP-Method"))
627                 eaptype:value("tls")
628                 eaptype:value("ttls")
629                 eaptype:value("peap")
630                 eaptype:depends({mode="sta", encryption="wpa"})
631                 eaptype:depends({mode="sta", encryption="wpa2"})
632
633                 cacert = s:taboption("encryption", FileUpload, "ca_cert", translate("Path to CA-Certificate"))
634                 cacert:depends({mode="sta", encryption="wpa"})
635                 cacert:depends({mode="sta", encryption="wpa2"})
636
637                 privkey = s:taboption("encryption", FileUpload, "priv_key", translate("Path to Private Key"))
638                 privkey:depends({mode="sta", eap_type="tls", encryption="wpa2"})
639                 privkey:depends({mode="sta", eap_type="tls", encryption="wpa"})
640
641                 privkeypwd = s:taboption("encryption", Value, "priv_key_pwd", translate("Password of Private Key"))
642                 privkeypwd:depends({mode="sta", eap_type="tls", encryption="wpa2"})
643                 privkeypwd:depends({mode="sta", eap_type="tls", encryption="wpa"})
644
645
646                 auth = s:taboption("encryption", Value, "auth", translate("Authentication"))
647                 auth:value("PAP")
648                 auth:value("CHAP")
649                 auth:value("MSCHAP")
650                 auth:value("MSCHAPV2")
651                 auth:depends({mode="sta", eap_type="peap", encryption="wpa2"})
652                 auth:depends({mode="sta", eap_type="peap", encryption="wpa"})
653                 auth:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
654                 auth:depends({mode="sta", eap_type="ttls", encryption="wpa"})
655
656
657                 identity = s:taboption("encryption", Value, "identity", translate("Identity"))
658                 identity:depends({mode="sta", eap_type="peap", encryption="wpa2"})
659                 identity:depends({mode="sta", eap_type="peap", encryption="wpa"})
660                 identity:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
661                 identity:depends({mode="sta", eap_type="ttls", encryption="wpa"})
662
663                 password = s:taboption("encryption", Value, "password", translate("Password"))
664                 password:depends({mode="sta", eap_type="peap", encryption="wpa2"})
665                 password:depends({mode="sta", eap_type="peap", encryption="wpa"})
666                 password:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
667                 password:depends({mode="sta", eap_type="ttls", encryption="wpa"})
668         end
669 end
670
671 return m