add support for splash leases plugin
[project/luci.git] / modules / admin-full / luasrc / model / cbi / admin_network / wifi.lua
1 --[[
2 LuCI - Lua Configuration Interface
3
4 Copyright 2008 Steven Barth <steven@midlink.org>
5
6 Licensed under the Apache License, Version 2.0 (the "License");
7 you may not use this file except in compliance with the License.
8 You may obtain a copy of the License at
9
10         http://www.apache.org/licenses/LICENSE-2.0
11
12 $Id$
13 ]]--
14
15 local wa = require "luci.tools.webadmin"
16 local nw = require "luci.model.network"
17 local ut = require "luci.util"
18 local nt = require "luci.sys".net
19 local fs = require "nixio.fs"
20
21 arg[1] = arg[1] or ""
22
23 m = Map("wireless", "",
24         translate("The <em>Device Configuration</em> section covers physical settings of the radio " ..
25                 "hardware such as channel, transmit power or antenna selection which are shared among all " ..
26                 "defined wireless networks (if the radio hardware is multi-SSID capable). Per network settings " ..
27                 "like encryption or operation mode are grouped in the <em>Interface Configuration</em>."))
28
29 m:chain("network")
30 m:chain("firewall")
31
32 local ifsection
33
34 function m.on_commit(map)
35         local wnet = nw:get_wifinet(arg[1])
36         if ifsection and wnet then
37                 ifsection.section = wnet.sid
38                 m.title = luci.util.pcdata(wnet:get_i18n())
39         end
40 end
41
42 nw.init(m.uci)
43
44 local wnet = nw:get_wifinet(arg[1])
45 local wdev = wnet and wnet:get_device()
46
47 -- redirect to overview page if network does not exist anymore (e.g. after a revert)
48 if not wnet or not wdev then
49         luci.http.redirect(luci.dispatcher.build_url("admin/network/wireless"))
50         return
51 end
52
53 -- wireless toggle was requested, commit and reload page
54 function m.parse(map)
55         if m:formvalue("cbid.wireless.%s.__toggle" % wdev:name()) then
56                 if wdev:get("disabled") == "1" or wnet:get("disabled") == "1" then
57                         wnet:set("disabled", nil)
58                 else
59                         wnet:set("disabled", "1")
60                 end
61                 wdev:set("disabled", nil)
62
63                 nw:commit("wireless")
64                 luci.sys.call("(env -i /bin/ubus call network reload) >/dev/null 2>/dev/null")
65
66                 luci.http.redirect(luci.dispatcher.build_url("admin/network/wireless", arg[1]))
67                 return
68         end
69         Map.parse(map)
70 end
71
72 m.title = luci.util.pcdata(wnet:get_i18n())
73
74
75 local function txpower_list(iw)
76         local list = iw.txpwrlist or { }
77         local off  = tonumber(iw.txpower_offset) or 0
78         local new  = { }
79         local prev = -1
80         local _, val
81         for _, val in ipairs(list) do
82                 local dbm = val.dbm + off
83                 local mw  = math.floor(10 ^ (dbm / 10))
84                 if mw ~= prev then
85                         prev = mw
86                         new[#new+1] = {
87                                 display_dbm = dbm,
88                                 display_mw  = mw,
89                                 driver_dbm  = val.dbm,
90                                 driver_mw   = val.mw
91                         }
92                 end
93         end
94         return new
95 end
96
97 local function txpower_current(pwr, list)
98         pwr = tonumber(pwr)
99         if pwr ~= nil then
100                 local _, item
101                 for _, item in ipairs(list) do
102                         if item.driver_dbm >= pwr then
103                                 return item.driver_dbm
104                         end
105                 end
106         end
107         return (list[#list] and list[#list].driver_dbm) or pwr or 0
108 end
109
110 local iw = luci.sys.wifi.getiwinfo(arg[1])
111 local hw_modes      = iw.hwmodelist or { }
112 local tx_power_list = txpower_list(iw)
113 local tx_power_cur  = txpower_current(wdev:get("txpower"), tx_power_list)
114
115 s = m:section(NamedSection, wdev:name(), "wifi-device", translate("Device Configuration"))
116 s.addremove = false
117
118 s:tab("general", translate("General Setup"))
119 s:tab("macfilter", translate("MAC-Filter"))
120 s:tab("advanced", translate("Advanced Settings"))
121
122 --[[
123 back = s:option(DummyValue, "_overview", translate("Overview"))
124 back.value = ""
125 back.titleref = luci.dispatcher.build_url("admin", "network", "wireless")
126 ]]
127
128 st = s:taboption("general", DummyValue, "__status", translate("Status"))
129 st.template = "admin_network/wifi_status"
130 st.ifname   = arg[1]
131
132 en = s:taboption("general", Button, "__toggle")
133
134 if wdev:get("disabled") == "1" or wnet:get("disabled") == "1" then
135         en.title      = translate("Wireless network is disabled")
136         en.inputtitle = translate("Enable")
137         en.inputstyle = "apply"
138 else
139         en.title      = translate("Wireless network is enabled")
140         en.inputtitle = translate("Disable")
141         en.inputstyle = "reset"
142 end
143
144
145 local hwtype = wdev:get("type")
146
147 -- NanoFoo
148 local nsantenna = wdev:get("antenna")
149
150 -- Check whether there are client interfaces on the same radio,
151 -- if yes, lock the channel choice as these stations will dicatate the freq
152 local found_sta = nil
153 local _, net
154 if wnet:mode() ~= "sta" then
155         for _, net in ipairs(wdev:get_wifinets()) do
156                 if net:mode() == "sta" then
157                         if not found_sta then
158                                 found_sta = {}
159                                 found_sta.channel = net:channel()
160                                 found_sta.names = {}
161                         end
162                         found_sta.names[#found_sta.names+1] = net:shortname()
163                 end
164         end
165 end
166
167 if found_sta then
168         ch = s:taboption("general", DummyValue, "choice", translate("Channel"))
169         ch.value = translatef("Locked to channel %d used by: %s",
170                 found_sta.channel, table.concat(found_sta.names, ", "))
171 else
172         ch = s:taboption("general", Value, "channel", translate("Channel"))
173         ch:value("auto", translate("auto"))
174         for _, f in ipairs(iw and iw.freqlist or { }) do
175                 if not f.restricted then
176                         ch:value(f.channel, "%i (%.3f GHz)" %{ f.channel, f.mhz / 1000 })
177                 end
178         end
179 end
180
181 ------------------- MAC80211 Device ------------------
182
183 if hwtype == "mac80211" then
184         if #tx_power_list > 1 then
185                 tp = s:taboption("general", ListValue,
186                         "txpower", translate("Transmit Power"), "dBm")
187                 tp.rmempty = true
188                 tp.default = tx_power_cur
189                 function tp.cfgvalue(...)
190                         return txpower_current(Value.cfgvalue(...), tx_power_list)
191                 end
192
193                 for _, p in ipairs(tx_power_list) do
194                         tp:value(p.driver_dbm, "%i dBm (%i mW)"
195                                 %{ p.display_dbm, p.display_mw })
196                 end
197         end
198
199         mode = s:taboption("advanced", ListValue, "hwmode", translate("Band"))
200
201         if hw_modes.ac then
202                 if hw_modes.ac then mode:value("11a", "5GHz (802.11n+ac)") end
203
204                 htmode = s:taboption("advanced", ListValue, "htmode", translate("VHT mode (802.11ac)"))
205                 htmode:value("", translate("disabled"))
206                 htmode:value("VHT20", "20MHz")
207                 htmode:value("VHT40", "40MHz")
208                 htmode:value("VHT80", "80MHz")
209
210         elseif hw_modes.n then
211                 if hw_modes.g then mode:value("11g", "2.4GHz (802.11g+n)") end
212                 if hw_modes.a then mode:value("11a", "5GHz (802.11a+n)") end
213
214                 htmode = s:taboption("advanced", ListValue, "htmode", translate("HT mode (802.11n)"))
215                 htmode:value("", translate("disabled"))
216                 htmode:value("HT20", "20MHz")
217                 htmode:value("HT40", "40MHz")
218
219                 function mode.cfgvalue(...)
220                         local v = Value.cfgvalue(...)
221                         if v == "11na" then
222                                 return "11a"
223                         elseif v == "11ng" then
224                                 return "11g"
225                         end
226                         return v
227                 end
228
229                 noscan = s:taboption("advanced", Flag, "noscan", translate("Force 40MHz mode"),
230                         translate("Always use 40MHz channels even if the secondary channel overlaps. Using this option does not comply with IEEE 802.11n-2009!"))
231                 noscan:depends("htmode", "HT40")
232                 noscan.default = noscan.disabled
233         else
234                 if hw_modes.g then mode:value("11g", "2.4GHz (802.11g)") end
235                 if hw_modes.a then mode:value("11a", "5GHz (802.11a)") end
236         end
237
238         local cl = iw and iw.countrylist
239         if cl and #cl > 0 then
240                 cc = s:taboption("advanced", ListValue, "country", translate("Country Code"), translate("Use ISO/IEC 3166 alpha2 country codes."))
241                 cc.default = tostring(iw and iw.country or "00")
242                 for _, c in ipairs(cl) do
243                         cc:value(c.alpha2, "%s - %s" %{ c.alpha2, c.name })
244                 end
245         else
246                 s:taboption("advanced", Value, "country", translate("Country Code"), translate("Use ISO/IEC 3166 alpha2 country codes."))
247         end
248
249         s:taboption("advanced", Value, "distance", translate("Distance Optimization"),
250                 translate("Distance to farthest network member in meters."))
251
252         -- external antenna profiles
253         local eal = iw and iw.extant
254         if eal and #eal > 0 then
255                 ea = s:taboption("advanced", ListValue, "extant", translate("Antenna Configuration"))
256                 for _, eap in ipairs(eal) do
257                         ea:value(eap.id, "%s (%s)" %{ eap.name, eap.description })
258                         if eap.selected then
259                                 ea.default = eap.id
260                         end
261                 end
262         end
263
264         s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
265         s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
266 end
267
268
269 ------------------- Madwifi Device ------------------
270
271 if hwtype == "atheros" then
272         tp = s:taboption("general",
273                 (#tx_power_list > 0) and ListValue or Value,
274                 "txpower", translate("Transmit Power"), "dBm")
275
276         tp.rmempty = true
277         tp.default = tx_power_cur
278
279         function tp.cfgvalue(...)
280                 return txpower_current(Value.cfgvalue(...), tx_power_list)
281         end
282
283         for _, p in ipairs(tx_power_list) do
284                 tp:value(p.driver_dbm, "%i dBm (%i mW)"
285                         %{ p.display_dbm, p.display_mw })
286         end
287
288         mode = s:taboption("advanced", ListValue, "hwmode", translate("Mode"))
289         mode:value("", translate("auto"))
290         if hw_modes.b then mode:value("11b", "802.11b") end
291         if hw_modes.g then mode:value("11g", "802.11g") end
292         if hw_modes.a then mode:value("11a", "802.11a") end
293         if hw_modes.g then mode:value("11bg", "802.11b+g") end
294         if hw_modes.g then mode:value("11gst", "802.11g + Turbo") end
295         if hw_modes.a then mode:value("11ast", "802.11a + Turbo") end
296         mode:value("fh", translate("Frequency Hopping"))
297
298         s:taboption("advanced", Flag, "diversity", translate("Diversity")).rmempty = false
299
300         if not nsantenna then
301                 ant1 = s:taboption("advanced", ListValue, "txantenna", translate("Transmitter Antenna"))
302                 ant1.widget = "radio"
303                 ant1.orientation = "horizontal"
304                 ant1:depends("diversity", "")
305                 ant1:value("0", translate("auto"))
306                 ant1:value("1", translate("Antenna 1"))
307                 ant1:value("2", translate("Antenna 2"))
308
309                 ant2 = s:taboption("advanced", ListValue, "rxantenna", translate("Receiver Antenna"))
310                 ant2.widget = "radio"
311                 ant2.orientation = "horizontal"
312                 ant2:depends("diversity", "")
313                 ant2:value("0", translate("auto"))
314                 ant2:value("1", translate("Antenna 1"))
315                 ant2:value("2", translate("Antenna 2"))
316
317         else -- NanoFoo
318                 local ant = s:taboption("advanced", ListValue, "antenna", translate("Transmitter Antenna"))
319                 ant:value("auto")
320                 ant:value("vertical")
321                 ant:value("horizontal")
322                 ant:value("external")
323         end
324
325         s:taboption("advanced", Value, "distance", translate("Distance Optimization"),
326                 translate("Distance to farthest network member in meters."))
327         s:taboption("advanced", Value, "regdomain", translate("Regulatory Domain"))
328         s:taboption("advanced", Value, "country", translate("Country Code"))
329         s:taboption("advanced", Flag, "outdoor", translate("Outdoor Channels"))
330
331         --s:option(Flag, "nosbeacon", translate("Disable HW-Beacon timer"))
332 end
333
334
335
336 ------------------- Broadcom Device ------------------
337
338 if hwtype == "broadcom" then
339         tp = s:taboption("general",
340                 (#tx_power_list > 0) and ListValue or Value,
341                 "txpower", translate("Transmit Power"), "dBm")
342
343         tp.rmempty = true
344         tp.default = tx_power_cur
345
346         function tp.cfgvalue(...)
347                 return txpower_current(Value.cfgvalue(...), tx_power_list)
348         end
349
350         for _, p in ipairs(tx_power_list) do
351                 tp:value(p.driver_dbm, "%i dBm (%i mW)"
352                         %{ p.display_dbm, p.display_mw })
353         end
354
355         mode = s:taboption("advanced", ListValue, "hwmode", translate("Mode"))
356         mode:value("11bg", "802.11b+g")
357         mode:value("11b", "802.11b")
358         mode:value("11g", "802.11g")
359         mode:value("11gst", "802.11g + Turbo")
360
361         ant1 = s:taboption("advanced", ListValue, "txantenna", translate("Transmitter Antenna"))
362         ant1.widget = "radio"
363         ant1:depends("diversity", "")
364         ant1:value("3", translate("auto"))
365         ant1:value("0", translate("Antenna 1"))
366         ant1:value("1", translate("Antenna 2"))
367
368         ant2 = s:taboption("advanced", ListValue, "rxantenna", translate("Receiver Antenna"))
369         ant2.widget = "radio"
370         ant2:depends("diversity", "")
371         ant2:value("3", translate("auto"))
372         ant2:value("0", translate("Antenna 1"))
373         ant2:value("1", translate("Antenna 2"))
374
375         s:taboption("advanced", Flag, "frameburst", translate("Frame Bursting"))
376
377         s:taboption("advanced", Value, "distance", translate("Distance Optimization"))
378         --s:option(Value, "slottime", translate("Slot time"))
379
380         s:taboption("advanced", Value, "country", translate("Country Code"))
381         s:taboption("advanced", Value, "maxassoc", translate("Connection Limit"))
382 end
383
384
385 --------------------- HostAP Device ---------------------
386
387 if hwtype == "prism2" then
388         s:taboption("advanced", Value, "txpower", translate("Transmit Power"), "att units").rmempty = true
389
390         s:taboption("advanced", Flag, "diversity", translate("Diversity")).rmempty = false
391
392         s:taboption("advanced", Value, "txantenna", translate("Transmitter Antenna"))
393         s:taboption("advanced", Value, "rxantenna", translate("Receiver Antenna"))
394 end
395
396
397 ----------------------- Interface -----------------------
398
399 s = m:section(NamedSection, wnet.sid, "wifi-iface", translate("Interface Configuration"))
400 ifsection = s
401 s.addremove = false
402 s.anonymous = true
403 s.defaults.device = wdev:name()
404
405 s:tab("general", translate("General Setup"))
406 s:tab("encryption", translate("Wireless Security"))
407 s:tab("macfilter", translate("MAC-Filter"))
408 s:tab("advanced", translate("Advanced Settings"))
409
410 s:taboption("general", Value, "ssid", translate("<abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
411
412 mode = s:taboption("general", ListValue, "mode", translate("Mode"))
413 mode.override_values = true
414 mode:value("ap", translate("Access Point"))
415 mode:value("sta", translate("Client"))
416 mode:value("adhoc", translate("Ad-Hoc"))
417
418 bssid = s:taboption("general", Value, "bssid", translate("<abbr title=\"Basic Service Set Identifier\">BSSID</abbr>"))
419
420 network = s:taboption("general", Value, "network", translate("Network"),
421         translate("Choose the network(s) you want to attach to this wireless interface or " ..
422                 "fill out the <em>create</em> field to define a new network."))
423
424 network.rmempty = true
425 network.template = "cbi/network_netlist"
426 network.widget = "checkbox"
427 network.novirtual = true
428
429 function network.write(self, section, value)
430         local i = nw:get_interface(section)
431         if i then
432                 if value == '-' then
433                         value = m:formvalue(self:cbid(section) .. ".newnet")
434                         if value and #value > 0 then
435                                 local n = nw:add_network(value, {proto="none"})
436                                 if n then n:add_interface(i) end
437                         else
438                                 local n = i:get_network()
439                                 if n then n:del_interface(i) end
440                         end
441                 else
442                         local v
443                         for _, v in ipairs(i:get_networks()) do
444                                 v:del_interface(i)
445                         end
446                         for v in ut.imatch(value) do
447                                 local n = nw:get_network(v)
448                                 if n then
449                                         if not n:is_empty() then
450                                                 n:set("type", "bridge")
451                                         end
452                                         n:add_interface(i)
453                                 end
454                         end
455                 end
456         end
457 end
458
459 -------------------- MAC80211 Interface ----------------------
460
461 if hwtype == "mac80211" then
462         if fs.access("/usr/sbin/iw") then
463                 mode:value("mesh", "802.11s")
464         end
465
466         mode:value("ahdemo", translate("Pseudo Ad-Hoc (ahdemo)"))
467         mode:value("monitor", translate("Monitor"))
468         bssid:depends({mode="adhoc"})
469         bssid:depends({mode="sta"})
470         bssid:depends({mode="sta-wds"})
471
472         mp = s:taboption("macfilter", ListValue, "macfilter", translate("MAC-Address Filter"))
473         mp:depends({mode="ap"})
474         mp:depends({mode="ap-wds"})
475         mp:value("", translate("disable"))
476         mp:value("allow", translate("Allow listed only"))
477         mp:value("deny", translate("Allow all except listed"))
478
479         ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
480         ml.datatype = "macaddr"
481         ml:depends({macfilter="allow"})
482         ml:depends({macfilter="deny"})
483         nt.mac_hints(function(mac, name) ml:value(mac, "%s (%s)" %{ mac, name }) end)
484
485         mode:value("ap-wds", "%s (%s)" % {translate("Access Point"), translate("WDS")})
486         mode:value("sta-wds", "%s (%s)" % {translate("Client"), translate("WDS")})
487
488         function mode.write(self, section, value)
489                 if value == "ap-wds" then
490                         ListValue.write(self, section, "ap")
491                         m.uci:set("wireless", section, "wds", 1)
492                 elseif value == "sta-wds" then
493                         ListValue.write(self, section, "sta")
494                         m.uci:set("wireless", section, "wds", 1)
495                 else
496                         ListValue.write(self, section, value)
497                         m.uci:delete("wireless", section, "wds")
498                 end
499         end
500
501         function mode.cfgvalue(self, section)
502                 local mode = ListValue.cfgvalue(self, section)
503                 local wds  = m.uci:get("wireless", section, "wds") == "1"
504
505                 if mode == "ap" and wds then
506                         return "ap-wds"
507                 elseif mode == "sta" and wds then
508                         return "sta-wds"
509                 else
510                         return mode
511                 end
512         end
513
514         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
515         hidden:depends({mode="ap"})
516         hidden:depends({mode="ap-wds"})
517
518         wmm = s:taboption("general", Flag, "wmm", translate("WMM Mode"))
519         wmm:depends({mode="ap"})
520         wmm:depends({mode="ap-wds"})
521         wmm.default = wmm.enabled
522 end
523
524
525
526 -------------------- Madwifi Interface ----------------------
527
528 if hwtype == "atheros" then
529         mode:value("ahdemo", translate("Pseudo Ad-Hoc (ahdemo)"))
530         mode:value("monitor", translate("Monitor"))
531         mode:value("ap-wds", "%s (%s)" % {translate("Access Point"), translate("WDS")})
532         mode:value("sta-wds", "%s (%s)" % {translate("Client"), translate("WDS")})
533         mode:value("wds", translate("Static WDS"))
534
535         function mode.write(self, section, value)
536                 if value == "ap-wds" then
537                         ListValue.write(self, section, "ap")
538                         m.uci:set("wireless", section, "wds", 1)
539                 elseif value == "sta-wds" then
540                         ListValue.write(self, section, "sta")
541                         m.uci:set("wireless", section, "wds", 1)
542                 else
543                         ListValue.write(self, section, value)
544                         m.uci:delete("wireless", section, "wds")
545                 end
546         end
547
548         function mode.cfgvalue(self, section)
549                 local mode = ListValue.cfgvalue(self, section)
550                 local wds  = m.uci:get("wireless", section, "wds") == "1"
551
552                 if mode == "ap" and wds then
553                         return "ap-wds"
554                 elseif mode == "sta" and wds then
555                         return "sta-wds"
556                 else
557                         return mode
558                 end
559         end
560
561         bssid:depends({mode="adhoc"})
562         bssid:depends({mode="ahdemo"})
563         bssid:depends({mode="wds"})
564
565         wdssep = s:taboption("advanced", Flag, "wdssep", translate("Separate WDS"))
566         wdssep:depends({mode="ap-wds"})
567
568         s:taboption("advanced", Flag, "doth", "802.11h")
569         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
570         hidden:depends({mode="ap"})
571         hidden:depends({mode="adhoc"})
572         hidden:depends({mode="ap-wds"})
573         hidden:depends({mode="sta-wds"})
574         isolate = s:taboption("advanced", Flag, "isolate", translate("Separate Clients"),
575          translate("Prevents client-to-client communication"))
576         isolate:depends({mode="ap"})
577         s:taboption("advanced", Flag, "bgscan", translate("Background Scan"))
578
579         mp = s:taboption("macfilter", ListValue, "macpolicy", translate("MAC-Address Filter"))
580         mp:value("", translate("disable"))
581         mp:value("allow", translate("Allow listed only"))
582         mp:value("deny", translate("Allow all except listed"))
583
584         ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
585         ml.datatype = "macaddr"
586         ml:depends({macpolicy="allow"})
587         ml:depends({macpolicy="deny"})
588         nt.mac_hints(function(mac, name) ml:value(mac, "%s (%s)" %{ mac, name }) end)
589
590         s:taboption("advanced", Value, "rate", translate("Transmission Rate"))
591         s:taboption("advanced", Value, "mcast_rate", translate("Multicast Rate"))
592         s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
593         s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
594         s:taboption("advanced", Value, "minrate", translate("Minimum Rate"))
595         s:taboption("advanced", Value, "maxrate", translate("Maximum Rate"))
596         s:taboption("advanced", Flag, "compression", translate("Compression"))
597
598         s:taboption("advanced", Flag, "bursting", translate("Frame Bursting"))
599         s:taboption("advanced", Flag, "turbo", translate("Turbo Mode"))
600         s:taboption("advanced", Flag, "ff", translate("Fast Frames"))
601
602         s:taboption("advanced", Flag, "wmm", translate("WMM Mode"))
603         s:taboption("advanced", Flag, "xr", translate("XR Support"))
604         s:taboption("advanced", Flag, "ar", translate("AR Support"))
605
606         local swm = s:taboption("advanced", Flag, "sw_merge", translate("Disable HW-Beacon timer"))
607         swm:depends({mode="adhoc"})
608
609         local nos = s:taboption("advanced", Flag, "nosbeacon", translate("Disable HW-Beacon timer"))
610         nos:depends({mode="sta"})
611         nos:depends({mode="sta-wds"})
612
613         local probereq = s:taboption("advanced", Flag, "probereq", translate("Do not send probe responses"))
614         probereq.enabled  = "0"
615         probereq.disabled = "1"
616 end
617
618
619 -------------------- Broadcom Interface ----------------------
620
621 if hwtype == "broadcom" then
622         mode:value("wds", translate("WDS"))
623         mode:value("monitor", translate("Monitor"))
624
625         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
626         hidden:depends({mode="ap"})
627         hidden:depends({mode="adhoc"})
628         hidden:depends({mode="wds"})
629
630         isolate = s:taboption("advanced", Flag, "isolate", translate("Separate Clients"),
631          translate("Prevents client-to-client communication"))
632         isolate:depends({mode="ap"})
633
634         s:taboption("advanced", Flag, "doth", "802.11h")
635         s:taboption("advanced", Flag, "wmm", translate("WMM Mode"))
636
637         bssid:depends({mode="wds"})
638         bssid:depends({mode="adhoc"})
639 end
640
641
642 ----------------------- HostAP Interface ---------------------
643
644 if hwtype == "prism2" then
645         mode:value("wds", translate("WDS"))
646         mode:value("monitor", translate("Monitor"))
647
648         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
649         hidden:depends({mode="ap"})
650         hidden:depends({mode="adhoc"})
651         hidden:depends({mode="wds"})
652
653         bssid:depends({mode="sta"})
654
655         mp = s:taboption("macfilter", ListValue, "macpolicy", translate("MAC-Address Filter"))
656         mp:value("", translate("disable"))
657         mp:value("allow", translate("Allow listed only"))
658         mp:value("deny", translate("Allow all except listed"))
659         ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
660         ml:depends({macpolicy="allow"})
661         ml:depends({macpolicy="deny"})
662         nt.mac_hints(function(mac, name) ml:value(mac, "%s (%s)" %{ mac, name }) end)
663
664         s:taboption("advanced", Value, "rate", translate("Transmission Rate"))
665         s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
666         s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
667 end
668
669
670 ------------------- WiFI-Encryption -------------------
671
672 encr = s:taboption("encryption", ListValue, "encryption", translate("Encryption"))
673 encr.override_values = true
674 encr.override_depends = true
675 encr:depends({mode="ap"})
676 encr:depends({mode="sta"})
677 encr:depends({mode="adhoc"})
678 encr:depends({mode="ahdemo"})
679 encr:depends({mode="ap-wds"})
680 encr:depends({mode="sta-wds"})
681 encr:depends({mode="mesh"})
682
683 cipher = s:taboption("encryption", ListValue, "cipher", translate("Cipher"))
684 cipher:depends({encryption="wpa"})
685 cipher:depends({encryption="wpa2"})
686 cipher:depends({encryption="psk"})
687 cipher:depends({encryption="psk2"})
688 cipher:depends({encryption="wpa-mixed"})
689 cipher:depends({encryption="psk-mixed"})
690 cipher:value("auto", translate("auto"))
691 cipher:value("ccmp", translate("Force CCMP (AES)"))
692 cipher:value("tkip", translate("Force TKIP"))
693 cipher:value("tkip+ccmp", translate("Force TKIP and CCMP (AES)"))
694
695 function encr.cfgvalue(self, section)
696         local v = tostring(ListValue.cfgvalue(self, section))
697         if v == "wep" then
698                 return "wep-open"
699         elseif v and v:match("%+") then
700                 return (v:gsub("%+.+$", ""))
701         end
702         return v
703 end
704
705 function encr.write(self, section, value)
706         local e = tostring(encr:formvalue(section))
707         local c = tostring(cipher:formvalue(section))
708         if value == "wpa" or value == "wpa2"  then
709                 self.map.uci:delete("wireless", section, "key")
710         end
711         if e and (c == "tkip" or c == "ccmp" or c == "tkip+ccmp") then
712                 e = e .. "+" .. c
713         end
714         self.map:set(section, "encryption", e)
715 end
716
717 function cipher.cfgvalue(self, section)
718         local v = tostring(ListValue.cfgvalue(encr, section))
719         if v and v:match("%+") then
720                 v = v:gsub("^[^%+]+%+", "")
721                 if v == "aes" then v = "ccmp"
722                 elseif v == "tkip+aes" then v = "tkip+ccmp"
723                 elseif v == "aes+tkip" then v = "tkip+ccmp"
724                 elseif v == "ccmp+tkip" then v = "tkip+ccmp"
725                 end
726         end
727         return v
728 end
729
730 function cipher.write(self, section)
731         return encr:write(section)
732 end
733
734
735 encr:value("none", "No Encryption")
736 encr:value("wep-open",   translate("WEP Open System"), {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"}, {mode="adhoc"}, {mode="ahdemo"}, {mode="wds"})
737 encr:value("wep-shared", translate("WEP Shared Key"),  {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"}, {mode="adhoc"}, {mode="ahdemo"}, {mode="wds"})
738
739 if hwtype == "atheros" or hwtype == "mac80211" or hwtype == "prism2" then
740         local supplicant = fs.access("/usr/sbin/wpa_supplicant")
741         local hostapd = fs.access("/usr/sbin/hostapd")
742
743         -- Probe EAP support
744         local has_ap_eap  = (os.execute("hostapd -veap >/dev/null 2>/dev/null") == 0)
745         local has_sta_eap = (os.execute("wpa_supplicant -veap >/dev/null 2>/dev/null") == 0)
746
747         if hostapd and supplicant then
748                 encr:value("psk", "WPA-PSK", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
749                 encr:value("psk2", "WPA2-PSK", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
750                 encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
751                 if has_ap_eap and has_sta_eap then
752                         encr:value("wpa", "WPA-EAP", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
753                         encr:value("wpa2", "WPA2-EAP", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
754                 end
755         elseif hostapd and not supplicant then
756                 encr:value("psk", "WPA-PSK", {mode="ap"}, {mode="ap-wds"})
757                 encr:value("psk2", "WPA2-PSK", {mode="ap"}, {mode="ap-wds"})
758                 encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode", {mode="ap"}, {mode="ap-wds"})
759                 if has_ap_eap then
760                         encr:value("wpa", "WPA-EAP", {mode="ap"}, {mode="ap-wds"})
761                         encr:value("wpa2", "WPA2-EAP", {mode="ap"}, {mode="ap-wds"})
762                 end
763                 encr.description = translate(
764                         "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
765                         "and ad-hoc mode) to be installed."
766                 )
767         elseif not hostapd and supplicant then
768                 encr:value("psk", "WPA-PSK", {mode="sta"}, {mode="sta-wds"})
769                 encr:value("psk2", "WPA2-PSK", {mode="sta"}, {mode="sta-wds"})
770                 encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode", {mode="sta"}, {mode="sta-wds"})
771                 if has_sta_eap then
772                         encr:value("wpa", "WPA-EAP", {mode="sta"}, {mode="sta-wds"})
773                         encr:value("wpa2", "WPA2-EAP", {mode="sta"}, {mode="sta-wds"})
774                 end
775                 encr.description = translate(
776                         "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
777                         "and ad-hoc mode) to be installed."
778                 )
779         else
780                 encr.description = translate(
781                         "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
782                         "and ad-hoc mode) to be installed."
783                 )
784         end
785 elseif hwtype == "broadcom" then
786         encr:value("psk", "WPA-PSK")
787         encr:value("psk2", "WPA2-PSK")
788         encr:value("psk+psk2", "WPA-PSK/WPA2-PSK Mixed Mode")
789 end
790
791 auth_server = s:taboption("encryption", Value, "auth_server", translate("Radius-Authentication-Server"))
792 auth_server:depends({mode="ap", encryption="wpa"})
793 auth_server:depends({mode="ap", encryption="wpa2"})
794 auth_server:depends({mode="ap-wds", encryption="wpa"})
795 auth_server:depends({mode="ap-wds", encryption="wpa2"})
796 auth_server.rmempty = true
797 auth_server.datatype = "host"
798
799 auth_port = s:taboption("encryption", Value, "auth_port", translate("Radius-Authentication-Port"), translatef("Default %d", 1812))
800 auth_port:depends({mode="ap", encryption="wpa"})
801 auth_port:depends({mode="ap", encryption="wpa2"})
802 auth_port:depends({mode="ap-wds", encryption="wpa"})
803 auth_port:depends({mode="ap-wds", encryption="wpa2"})
804 auth_port.rmempty = true
805 auth_port.datatype = "port"
806
807 auth_secret = s:taboption("encryption", Value, "auth_secret", translate("Radius-Authentication-Secret"))
808 auth_secret:depends({mode="ap", encryption="wpa"})
809 auth_secret:depends({mode="ap", encryption="wpa2"})
810 auth_secret:depends({mode="ap-wds", encryption="wpa"})
811 auth_secret:depends({mode="ap-wds", encryption="wpa2"})
812 auth_secret.rmempty = true
813 auth_secret.password = true
814
815 acct_server = s:taboption("encryption", Value, "acct_server", translate("Radius-Accounting-Server"))
816 acct_server:depends({mode="ap", encryption="wpa"})
817 acct_server:depends({mode="ap", encryption="wpa2"})
818 acct_server:depends({mode="ap-wds", encryption="wpa"})
819 acct_server:depends({mode="ap-wds", encryption="wpa2"})
820 acct_server.rmempty = true
821 acct_server.datatype = "host"
822
823 acct_port = s:taboption("encryption", Value, "acct_port", translate("Radius-Accounting-Port"), translatef("Default %d", 1813))
824 acct_port:depends({mode="ap", encryption="wpa"})
825 acct_port:depends({mode="ap", encryption="wpa2"})
826 acct_port:depends({mode="ap-wds", encryption="wpa"})
827 acct_port:depends({mode="ap-wds", encryption="wpa2"})
828 acct_port.rmempty = true
829 acct_port.datatype = "port"
830
831 acct_secret = s:taboption("encryption", Value, "acct_secret", translate("Radius-Accounting-Secret"))
832 acct_secret:depends({mode="ap", encryption="wpa"})
833 acct_secret:depends({mode="ap", encryption="wpa2"})
834 acct_secret:depends({mode="ap-wds", encryption="wpa"})
835 acct_secret:depends({mode="ap-wds", encryption="wpa2"})
836 acct_secret.rmempty = true
837 acct_secret.password = true
838
839 wpakey = s:taboption("encryption", Value, "_wpa_key", translate("Key"))
840 wpakey:depends("encryption", "psk")
841 wpakey:depends("encryption", "psk2")
842 wpakey:depends("encryption", "psk+psk2")
843 wpakey:depends("encryption", "psk-mixed")
844 wpakey.datatype = "wpakey"
845 wpakey.rmempty = true
846 wpakey.password = true
847
848 wpakey.cfgvalue = function(self, section, value)
849         local key = m.uci:get("wireless", section, "key")
850         if key == "1" or key == "2" or key == "3" or key == "4" then
851                 return nil
852         end
853         return key
854 end
855
856 wpakey.write = function(self, section, value)
857         self.map.uci:set("wireless", section, "key", value)
858         self.map.uci:delete("wireless", section, "key1")
859 end
860
861
862 wepslot = s:taboption("encryption", ListValue, "_wep_key", translate("Used Key Slot"))
863 wepslot:depends("encryption", "wep-open")
864 wepslot:depends("encryption", "wep-shared")
865 wepslot:value("1", translatef("Key #%d", 1))
866 wepslot:value("2", translatef("Key #%d", 2))
867 wepslot:value("3", translatef("Key #%d", 3))
868 wepslot:value("4", translatef("Key #%d", 4))
869
870 wepslot.cfgvalue = function(self, section)
871         local slot = tonumber(m.uci:get("wireless", section, "key"))
872         if not slot or slot < 1 or slot > 4 then
873                 return 1
874         end
875         return slot
876 end
877
878 wepslot.write = function(self, section, value)
879         self.map.uci:set("wireless", section, "key", value)
880 end
881
882 local slot
883 for slot=1,4 do
884         wepkey = s:taboption("encryption", Value, "key" .. slot, translatef("Key #%d", slot))
885         wepkey:depends("encryption", "wep-open")
886         wepkey:depends("encryption", "wep-shared")
887         wepkey.datatype = "wepkey"
888         wepkey.rmempty = true
889         wepkey.password = true
890
891         function wepkey.write(self, section, value)
892                 if value and (#value == 5 or #value == 13) then
893                         value = "s:" .. value
894                 end
895                 return Value.write(self, section, value)
896         end
897 end
898
899
900 if hwtype == "atheros" or hwtype == "mac80211" or hwtype == "prism2" then
901         nasid = s:taboption("encryption", Value, "nasid", translate("NAS ID"))
902         nasid:depends({mode="ap", encryption="wpa"})
903         nasid:depends({mode="ap", encryption="wpa2"})
904         nasid:depends({mode="ap-wds", encryption="wpa"})
905         nasid:depends({mode="ap-wds", encryption="wpa2"})
906         nasid.rmempty = true
907
908         eaptype = s:taboption("encryption", ListValue, "eap_type", translate("EAP-Method"))
909         eaptype:value("tls",  "TLS")
910         eaptype:value("ttls", "TTLS")
911         eaptype:value("peap", "PEAP")
912         eaptype:depends({mode="sta", encryption="wpa"})
913         eaptype:depends({mode="sta", encryption="wpa2"})
914         eaptype:depends({mode="sta-wds", encryption="wpa"})
915         eaptype:depends({mode="sta-wds", encryption="wpa2"})
916
917         cacert = s:taboption("encryption", FileUpload, "ca_cert", translate("Path to CA-Certificate"))
918         cacert:depends({mode="sta", encryption="wpa"})
919         cacert:depends({mode="sta", encryption="wpa2"})
920         cacert:depends({mode="sta-wds", encryption="wpa"})
921         cacert:depends({mode="sta-wds", encryption="wpa2"})
922
923         clientcert = s:taboption("encryption", FileUpload, "client_cert", translate("Path to Client-Certificate"))
924         clientcert:depends({mode="sta", encryption="wpa"})
925         clientcert:depends({mode="sta", encryption="wpa2"})
926         clientcert:depends({mode="sta-wds", encryption="wpa"})
927         clientcert:depends({mode="sta-wds", encryption="wpa2"})
928
929         privkey = s:taboption("encryption", FileUpload, "priv_key", translate("Path to Private Key"))
930         privkey:depends({mode="sta", eap_type="tls", encryption="wpa2"})
931         privkey:depends({mode="sta", eap_type="tls", encryption="wpa"})
932         privkey:depends({mode="sta-wds", eap_type="tls", encryption="wpa2"})
933         privkey:depends({mode="sta-wds", eap_type="tls", encryption="wpa"})
934
935         privkeypwd = s:taboption("encryption", Value, "priv_key_pwd", translate("Password of Private Key"))
936         privkeypwd:depends({mode="sta", eap_type="tls", encryption="wpa2"})
937         privkeypwd:depends({mode="sta", eap_type="tls", encryption="wpa"})
938         privkeypwd:depends({mode="sta-wds", eap_type="tls", encryption="wpa2"})
939         privkeypwd:depends({mode="sta-wds", eap_type="tls", encryption="wpa"})
940
941
942         auth = s:taboption("encryption", Value, "auth", translate("Authentication"))
943         auth:value("PAP")
944         auth:value("CHAP")
945         auth:value("MSCHAP")
946         auth:value("MSCHAPV2")
947         auth:depends({mode="sta", eap_type="peap", encryption="wpa2"})
948         auth:depends({mode="sta", eap_type="peap", encryption="wpa"})
949         auth:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
950         auth:depends({mode="sta", eap_type="ttls", encryption="wpa"})
951         auth:depends({mode="sta-wds", eap_type="peap", encryption="wpa2"})
952         auth:depends({mode="sta-wds", eap_type="peap", encryption="wpa"})
953         auth:depends({mode="sta-wds", eap_type="ttls", encryption="wpa2"})
954         auth:depends({mode="sta-wds", eap_type="ttls", encryption="wpa"})
955
956
957         identity = s:taboption("encryption", Value, "identity", translate("Identity"))
958         identity:depends({mode="sta", eap_type="peap", encryption="wpa2"})
959         identity:depends({mode="sta", eap_type="peap", encryption="wpa"})
960         identity:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
961         identity:depends({mode="sta", eap_type="ttls", encryption="wpa"})
962         identity:depends({mode="sta-wds", eap_type="peap", encryption="wpa2"})
963         identity:depends({mode="sta-wds", eap_type="peap", encryption="wpa"})
964         identity:depends({mode="sta-wds", eap_type="ttls", encryption="wpa2"})
965         identity:depends({mode="sta-wds", eap_type="ttls", encryption="wpa"})
966
967         password = s:taboption("encryption", Value, "password", translate("Password"))
968         password:depends({mode="sta", eap_type="peap", encryption="wpa2"})
969         password:depends({mode="sta", eap_type="peap", encryption="wpa"})
970         password:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
971         password:depends({mode="sta", eap_type="ttls", encryption="wpa"})
972         password:depends({mode="sta-wds", eap_type="peap", encryption="wpa2"})
973         password:depends({mode="sta-wds", eap_type="peap", encryption="wpa"})
974         password:depends({mode="sta-wds", eap_type="ttls", encryption="wpa2"})
975         password:depends({mode="sta-wds", eap_type="ttls", encryption="wpa"})
976 end
977
978 return m