Globally reduce copyright headers
[project/luci.git] / modules / luci-mod-admin-full / luasrc / model / cbi / admin_network / wifi.lua
1 -- Copyright 2008 Steven Barth <steven@midlink.org>
2 -- Licensed to the public under the Apache License 2.0.
3
4 local wa = require "luci.tools.webadmin"
5 local nw = require "luci.model.network"
6 local ut = require "luci.util"
7 local nt = require "luci.sys".net
8 local fs = require "nixio.fs"
9
10 arg[1] = arg[1] or ""
11
12 m = Map("wireless", "",
13         translate("The <em>Device Configuration</em> section covers physical settings of the radio " ..
14                 "hardware such as channel, transmit power or antenna selection which are shared among all " ..
15                 "defined wireless networks (if the radio hardware is multi-SSID capable). Per network settings " ..
16                 "like encryption or operation mode are grouped in the <em>Interface Configuration</em>."))
17
18 m:chain("network")
19 m:chain("firewall")
20
21 local ifsection
22
23 function m.on_commit(map)
24         local wnet = nw:get_wifinet(arg[1])
25         if ifsection and wnet then
26                 ifsection.section = wnet.sid
27                 m.title = luci.util.pcdata(wnet:get_i18n())
28         end
29 end
30
31 nw.init(m.uci)
32
33 local wnet = nw:get_wifinet(arg[1])
34 local wdev = wnet and wnet:get_device()
35
36 -- redirect to overview page if network does not exist anymore (e.g. after a revert)
37 if not wnet or not wdev then
38         luci.http.redirect(luci.dispatcher.build_url("admin/network/wireless"))
39         return
40 end
41
42 -- wireless toggle was requested, commit and reload page
43 function m.parse(map)
44         if m:formvalue("cbid.wireless.%s.__toggle" % wdev:name()) then
45                 if wdev:get("disabled") == "1" or wnet:get("disabled") == "1" then
46                         wnet:set("disabled", nil)
47                 else
48                         wnet:set("disabled", "1")
49                 end
50                 wdev:set("disabled", nil)
51
52                 nw:commit("wireless")
53                 luci.sys.call("(env -i /bin/ubus call network reload) >/dev/null 2>/dev/null")
54
55                 luci.http.redirect(luci.dispatcher.build_url("admin/network/wireless", arg[1]))
56                 return
57         end
58         Map.parse(map)
59 end
60
61 m.title = luci.util.pcdata(wnet:get_i18n())
62
63
64 local function txpower_list(iw)
65         local list = iw.txpwrlist or { }
66         local off  = tonumber(iw.txpower_offset) or 0
67         local new  = { }
68         local prev = -1
69         local _, val
70         for _, val in ipairs(list) do
71                 local dbm = val.dbm + off
72                 local mw  = math.floor(10 ^ (dbm / 10))
73                 if mw ~= prev then
74                         prev = mw
75                         new[#new+1] = {
76                                 display_dbm = dbm,
77                                 display_mw  = mw,
78                                 driver_dbm  = val.dbm,
79                                 driver_mw   = val.mw
80                         }
81                 end
82         end
83         return new
84 end
85
86 local function txpower_current(pwr, list)
87         pwr = tonumber(pwr)
88         if pwr ~= nil then
89                 local _, item
90                 for _, item in ipairs(list) do
91                         if item.driver_dbm >= pwr then
92                                 return item.driver_dbm
93                         end
94                 end
95         end
96         return (list[#list] and list[#list].driver_dbm) or pwr or 0
97 end
98
99 local iw = luci.sys.wifi.getiwinfo(arg[1])
100 local hw_modes      = iw.hwmodelist or { }
101 local tx_power_list = txpower_list(iw)
102 local tx_power_cur  = txpower_current(wdev:get("txpower"), tx_power_list)
103
104 s = m:section(NamedSection, wdev:name(), "wifi-device", translate("Device Configuration"))
105 s.addremove = false
106
107 s:tab("general", translate("General Setup"))
108 s:tab("macfilter", translate("MAC-Filter"))
109 s:tab("advanced", translate("Advanced Settings"))
110
111 --[[
112 back = s:option(DummyValue, "_overview", translate("Overview"))
113 back.value = ""
114 back.titleref = luci.dispatcher.build_url("admin", "network", "wireless")
115 ]]
116
117 st = s:taboption("general", DummyValue, "__status", translate("Status"))
118 st.template = "admin_network/wifi_status"
119 st.ifname   = arg[1]
120
121 en = s:taboption("general", Button, "__toggle")
122
123 if wdev:get("disabled") == "1" or wnet:get("disabled") == "1" then
124         en.title      = translate("Wireless network is disabled")
125         en.inputtitle = translate("Enable")
126         en.inputstyle = "apply"
127 else
128         en.title      = translate("Wireless network is enabled")
129         en.inputtitle = translate("Disable")
130         en.inputstyle = "reset"
131 end
132
133
134 local hwtype = wdev:get("type")
135
136 -- NanoFoo
137 local nsantenna = wdev:get("antenna")
138
139 -- Check whether there are client interfaces on the same radio,
140 -- if yes, lock the channel choice as these stations will dicatate the freq
141 local found_sta = nil
142 local _, net
143 if wnet:mode() ~= "sta" then
144         for _, net in ipairs(wdev:get_wifinets()) do
145                 if net:mode() == "sta" then
146                         if not found_sta then
147                                 found_sta = {}
148                                 found_sta.channel = net:channel()
149                                 found_sta.names = {}
150                         end
151                         found_sta.names[#found_sta.names+1] = net:shortname()
152                 end
153         end
154 end
155
156 if found_sta then
157         ch = s:taboption("general", DummyValue, "choice", translate("Channel"))
158         ch.value = translatef("Locked to channel %d used by: %s",
159                 found_sta.channel, table.concat(found_sta.names, ", "))
160 else
161         ch = s:taboption("general", Value, "_mode_freq", '<br />'..translate("Operating frequency"))
162         ch.hwmodes = iw.hwmodelist
163         ch.freqlist = iw.freqlist
164         ch.template = "cbi/wireless_modefreq"
165
166         function ch.cfgvalue(self, section)
167                 return {
168                         m:get(section, "hwmode") or "",
169                         m:get(section, "channel") or "auto",
170                         m:get(section, "htmode") or ""
171                 }
172         end
173
174         function ch.formvalue(self, section)
175                 return {
176                         m:formvalue(self:cbid(section) .. ".band") or (iw.hwmodelist.g and "11g" or "11a"),
177                         m:formvalue(self:cbid(section) .. ".channel") or "auto",
178                         m:formvalue(self:cbid(section) .. ".htmode") or ""
179                 }
180         end
181
182         function ch.write(self, section, value)
183                 m:set(section, "hwmode", value[1])
184                 m:set(section, "channel", value[2])
185                 m:set(section, "htmode", value[3])
186         end
187 end
188
189 ------------------- MAC80211 Device ------------------
190
191 if hwtype == "mac80211" then
192         if #tx_power_list > 1 then
193                 tp = s:taboption("general", ListValue,
194                         "txpower", translate("Transmit Power"), "dBm")
195                 tp.rmempty = true
196                 tp.default = tx_power_cur
197                 function tp.cfgvalue(...)
198                         return txpower_current(Value.cfgvalue(...), tx_power_list)
199                 end
200
201                 for _, p in ipairs(tx_power_list) do
202                         tp:value(p.driver_dbm, "%i dBm (%i mW)"
203                                 %{ p.display_dbm, p.display_mw })
204                 end
205         end
206
207         local cl = iw and iw.countrylist
208         if cl and #cl > 0 then
209                 cc = s:taboption("advanced", ListValue, "country", translate("Country Code"), translate("Use ISO/IEC 3166 alpha2 country codes."))
210                 cc.default = tostring(iw and iw.country or "00")
211                 for _, c in ipairs(cl) do
212                         cc:value(c.alpha2, "%s - %s" %{ c.alpha2, c.name })
213                 end
214         else
215                 s:taboption("advanced", Value, "country", translate("Country Code"), translate("Use ISO/IEC 3166 alpha2 country codes."))
216         end
217
218         s:taboption("advanced", Value, "distance", translate("Distance Optimization"),
219                 translate("Distance to farthest network member in meters."))
220
221         -- external antenna profiles
222         local eal = iw and iw.extant
223         if eal and #eal > 0 then
224                 ea = s:taboption("advanced", ListValue, "extant", translate("Antenna Configuration"))
225                 for _, eap in ipairs(eal) do
226                         ea:value(eap.id, "%s (%s)" %{ eap.name, eap.description })
227                         if eap.selected then
228                                 ea.default = eap.id
229                         end
230                 end
231         end
232
233         s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
234         s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
235 end
236
237
238 ------------------- Madwifi Device ------------------
239
240 if hwtype == "atheros" then
241         tp = s:taboption("general",
242                 (#tx_power_list > 0) and ListValue or Value,
243                 "txpower", translate("Transmit Power"), "dBm")
244
245         tp.rmempty = true
246         tp.default = tx_power_cur
247
248         function tp.cfgvalue(...)
249                 return txpower_current(Value.cfgvalue(...), tx_power_list)
250         end
251
252         for _, p in ipairs(tx_power_list) do
253                 tp:value(p.driver_dbm, "%i dBm (%i mW)"
254                         %{ p.display_dbm, p.display_mw })
255         end
256
257         s:taboption("advanced", Flag, "diversity", translate("Diversity")).rmempty = false
258
259         if not nsantenna then
260                 ant1 = s:taboption("advanced", ListValue, "txantenna", translate("Transmitter Antenna"))
261                 ant1.widget = "radio"
262                 ant1.orientation = "horizontal"
263                 ant1:depends("diversity", "")
264                 ant1:value("0", translate("auto"))
265                 ant1:value("1", translate("Antenna 1"))
266                 ant1:value("2", translate("Antenna 2"))
267
268                 ant2 = s:taboption("advanced", ListValue, "rxantenna", translate("Receiver Antenna"))
269                 ant2.widget = "radio"
270                 ant2.orientation = "horizontal"
271                 ant2:depends("diversity", "")
272                 ant2:value("0", translate("auto"))
273                 ant2:value("1", translate("Antenna 1"))
274                 ant2:value("2", translate("Antenna 2"))
275
276         else -- NanoFoo
277                 local ant = s:taboption("advanced", ListValue, "antenna", translate("Transmitter Antenna"))
278                 ant:value("auto")
279                 ant:value("vertical")
280                 ant:value("horizontal")
281                 ant:value("external")
282         end
283
284         s:taboption("advanced", Value, "distance", translate("Distance Optimization"),
285                 translate("Distance to farthest network member in meters."))
286         s:taboption("advanced", Value, "regdomain", translate("Regulatory Domain"))
287         s:taboption("advanced", Value, "country", translate("Country Code"))
288         s:taboption("advanced", Flag, "outdoor", translate("Outdoor Channels"))
289
290         --s:option(Flag, "nosbeacon", translate("Disable HW-Beacon timer"))
291 end
292
293
294
295 ------------------- Broadcom Device ------------------
296
297 if hwtype == "broadcom" then
298         tp = s:taboption("general",
299                 (#tx_power_list > 0) and ListValue or Value,
300                 "txpower", translate("Transmit Power"), "dBm")
301
302         tp.rmempty = true
303         tp.default = tx_power_cur
304
305         function tp.cfgvalue(...)
306                 return txpower_current(Value.cfgvalue(...), tx_power_list)
307         end
308
309         for _, p in ipairs(tx_power_list) do
310                 tp:value(p.driver_dbm, "%i dBm (%i mW)"
311                         %{ p.display_dbm, p.display_mw })
312         end
313
314         ant1 = s:taboption("advanced", ListValue, "txantenna", translate("Transmitter Antenna"))
315         ant1.widget = "radio"
316         ant1:depends("diversity", "")
317         ant1:value("3", translate("auto"))
318         ant1:value("0", translate("Antenna 1"))
319         ant1:value("1", translate("Antenna 2"))
320
321         ant2 = s:taboption("advanced", ListValue, "rxantenna", translate("Receiver Antenna"))
322         ant2.widget = "radio"
323         ant2:depends("diversity", "")
324         ant2:value("3", translate("auto"))
325         ant2:value("0", translate("Antenna 1"))
326         ant2:value("1", translate("Antenna 2"))
327
328         s:taboption("advanced", Flag, "frameburst", translate("Frame Bursting"))
329
330         s:taboption("advanced", Value, "distance", translate("Distance Optimization"))
331         --s:option(Value, "slottime", translate("Slot time"))
332
333         s:taboption("advanced", Value, "country", translate("Country Code"))
334         s:taboption("advanced", Value, "maxassoc", translate("Connection Limit"))
335 end
336
337
338 --------------------- HostAP Device ---------------------
339
340 if hwtype == "prism2" then
341         s:taboption("advanced", Value, "txpower", translate("Transmit Power"), "att units").rmempty = true
342
343         s:taboption("advanced", Flag, "diversity", translate("Diversity")).rmempty = false
344
345         s:taboption("advanced", Value, "txantenna", translate("Transmitter Antenna"))
346         s:taboption("advanced", Value, "rxantenna", translate("Receiver Antenna"))
347 end
348
349
350 ----------------------- Interface -----------------------
351
352 s = m:section(NamedSection, wnet.sid, "wifi-iface", translate("Interface Configuration"))
353 ifsection = s
354 s.addremove = false
355 s.anonymous = true
356 s.defaults.device = wdev:name()
357
358 s:tab("general", translate("General Setup"))
359 s:tab("encryption", translate("Wireless Security"))
360 s:tab("macfilter", translate("MAC-Filter"))
361 s:tab("advanced", translate("Advanced Settings"))
362
363 s:taboption("general", Value, "ssid", translate("<abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
364
365 mode = s:taboption("general", ListValue, "mode", translate("Mode"))
366 mode.override_values = true
367 mode:value("ap", translate("Access Point"))
368 mode:value("sta", translate("Client"))
369 mode:value("adhoc", translate("Ad-Hoc"))
370
371 bssid = s:taboption("general", Value, "bssid", translate("<abbr title=\"Basic Service Set Identifier\">BSSID</abbr>"))
372
373 network = s:taboption("general", Value, "network", translate("Network"),
374         translate("Choose the network(s) you want to attach to this wireless interface or " ..
375                 "fill out the <em>create</em> field to define a new network."))
376
377 network.rmempty = true
378 network.template = "cbi/network_netlist"
379 network.widget = "checkbox"
380 network.novirtual = true
381
382 function network.write(self, section, value)
383         local i = nw:get_interface(section)
384         if i then
385                 if value == '-' then
386                         value = m:formvalue(self:cbid(section) .. ".newnet")
387                         if value and #value > 0 then
388                                 local n = nw:add_network(value, {proto="none"})
389                                 if n then n:add_interface(i) end
390                         else
391                                 local n = i:get_network()
392                                 if n then n:del_interface(i) end
393                         end
394                 else
395                         local v
396                         for _, v in ipairs(i:get_networks()) do
397                                 v:del_interface(i)
398                         end
399                         for v in ut.imatch(value) do
400                                 local n = nw:get_network(v)
401                                 if n then
402                                         if not n:is_empty() then
403                                                 n:set("type", "bridge")
404                                         end
405                                         n:add_interface(i)
406                                 end
407                         end
408                 end
409         end
410 end
411
412 -------------------- MAC80211 Interface ----------------------
413
414 if hwtype == "mac80211" then
415         if fs.access("/usr/sbin/iw") then
416                 mode:value("mesh", "802.11s")
417         end
418
419         mode:value("ahdemo", translate("Pseudo Ad-Hoc (ahdemo)"))
420         mode:value("monitor", translate("Monitor"))
421         bssid:depends({mode="adhoc"})
422         bssid:depends({mode="sta"})
423         bssid:depends({mode="sta-wds"})
424
425         mp = s:taboption("macfilter", ListValue, "macfilter", translate("MAC-Address Filter"))
426         mp:depends({mode="ap"})
427         mp:depends({mode="ap-wds"})
428         mp:value("", translate("disable"))
429         mp:value("allow", translate("Allow listed only"))
430         mp:value("deny", translate("Allow all except listed"))
431
432         ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
433         ml.datatype = "macaddr"
434         ml:depends({macfilter="allow"})
435         ml:depends({macfilter="deny"})
436         nt.mac_hints(function(mac, name) ml:value(mac, "%s (%s)" %{ mac, name }) end)
437
438         mode:value("ap-wds", "%s (%s)" % {translate("Access Point"), translate("WDS")})
439         mode:value("sta-wds", "%s (%s)" % {translate("Client"), translate("WDS")})
440
441         function mode.write(self, section, value)
442                 if value == "ap-wds" then
443                         ListValue.write(self, section, "ap")
444                         m.uci:set("wireless", section, "wds", 1)
445                 elseif value == "sta-wds" then
446                         ListValue.write(self, section, "sta")
447                         m.uci:set("wireless", section, "wds", 1)
448                 else
449                         ListValue.write(self, section, value)
450                         m.uci:delete("wireless", section, "wds")
451                 end
452         end
453
454         function mode.cfgvalue(self, section)
455                 local mode = ListValue.cfgvalue(self, section)
456                 local wds  = m.uci:get("wireless", section, "wds") == "1"
457
458                 if mode == "ap" and wds then
459                         return "ap-wds"
460                 elseif mode == "sta" and wds then
461                         return "sta-wds"
462                 else
463                         return mode
464                 end
465         end
466
467         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
468         hidden:depends({mode="ap"})
469         hidden:depends({mode="ap-wds"})
470
471         wmm = s:taboption("general", Flag, "wmm", translate("WMM Mode"))
472         wmm:depends({mode="ap"})
473         wmm:depends({mode="ap-wds"})
474         wmm.default = wmm.enabled
475 end
476
477
478
479 -------------------- Madwifi Interface ----------------------
480
481 if hwtype == "atheros" then
482         mode:value("ahdemo", translate("Pseudo Ad-Hoc (ahdemo)"))
483         mode:value("monitor", translate("Monitor"))
484         mode:value("ap-wds", "%s (%s)" % {translate("Access Point"), translate("WDS")})
485         mode:value("sta-wds", "%s (%s)" % {translate("Client"), translate("WDS")})
486         mode:value("wds", translate("Static WDS"))
487
488         function mode.write(self, section, value)
489                 if value == "ap-wds" then
490                         ListValue.write(self, section, "ap")
491                         m.uci:set("wireless", section, "wds", 1)
492                 elseif value == "sta-wds" then
493                         ListValue.write(self, section, "sta")
494                         m.uci:set("wireless", section, "wds", 1)
495                 else
496                         ListValue.write(self, section, value)
497                         m.uci:delete("wireless", section, "wds")
498                 end
499         end
500
501         function mode.cfgvalue(self, section)
502                 local mode = ListValue.cfgvalue(self, section)
503                 local wds  = m.uci:get("wireless", section, "wds") == "1"
504
505                 if mode == "ap" and wds then
506                         return "ap-wds"
507                 elseif mode == "sta" and wds then
508                         return "sta-wds"
509                 else
510                         return mode
511                 end
512         end
513
514         bssid:depends({mode="adhoc"})
515         bssid:depends({mode="ahdemo"})
516         bssid:depends({mode="wds"})
517
518         wdssep = s:taboption("advanced", Flag, "wdssep", translate("Separate WDS"))
519         wdssep:depends({mode="ap-wds"})
520
521         s:taboption("advanced", Flag, "doth", "802.11h")
522         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
523         hidden:depends({mode="ap"})
524         hidden:depends({mode="adhoc"})
525         hidden:depends({mode="ap-wds"})
526         hidden:depends({mode="sta-wds"})
527         isolate = s:taboption("advanced", Flag, "isolate", translate("Separate Clients"),
528          translate("Prevents client-to-client communication"))
529         isolate:depends({mode="ap"})
530         s:taboption("advanced", Flag, "bgscan", translate("Background Scan"))
531
532         mp = s:taboption("macfilter", ListValue, "macpolicy", translate("MAC-Address Filter"))
533         mp:value("", translate("disable"))
534         mp:value("allow", translate("Allow listed only"))
535         mp:value("deny", translate("Allow all except listed"))
536
537         ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
538         ml.datatype = "macaddr"
539         ml:depends({macpolicy="allow"})
540         ml:depends({macpolicy="deny"})
541         nt.mac_hints(function(mac, name) ml:value(mac, "%s (%s)" %{ mac, name }) end)
542
543         s:taboption("advanced", Value, "rate", translate("Transmission Rate"))
544         s:taboption("advanced", Value, "mcast_rate", translate("Multicast Rate"))
545         s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
546         s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
547         s:taboption("advanced", Value, "minrate", translate("Minimum Rate"))
548         s:taboption("advanced", Value, "maxrate", translate("Maximum Rate"))
549         s:taboption("advanced", Flag, "compression", translate("Compression"))
550
551         s:taboption("advanced", Flag, "bursting", translate("Frame Bursting"))
552         s:taboption("advanced", Flag, "turbo", translate("Turbo Mode"))
553         s:taboption("advanced", Flag, "ff", translate("Fast Frames"))
554
555         s:taboption("advanced", Flag, "wmm", translate("WMM Mode"))
556         s:taboption("advanced", Flag, "xr", translate("XR Support"))
557         s:taboption("advanced", Flag, "ar", translate("AR Support"))
558
559         local swm = s:taboption("advanced", Flag, "sw_merge", translate("Disable HW-Beacon timer"))
560         swm:depends({mode="adhoc"})
561
562         local nos = s:taboption("advanced", Flag, "nosbeacon", translate("Disable HW-Beacon timer"))
563         nos:depends({mode="sta"})
564         nos:depends({mode="sta-wds"})
565
566         local probereq = s:taboption("advanced", Flag, "probereq", translate("Do not send probe responses"))
567         probereq.enabled  = "0"
568         probereq.disabled = "1"
569 end
570
571
572 -------------------- Broadcom Interface ----------------------
573
574 if hwtype == "broadcom" then
575         mode:value("wds", translate("WDS"))
576         mode:value("monitor", translate("Monitor"))
577
578         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
579         hidden:depends({mode="ap"})
580         hidden:depends({mode="adhoc"})
581         hidden:depends({mode="wds"})
582
583         isolate = s:taboption("advanced", Flag, "isolate", translate("Separate Clients"),
584          translate("Prevents client-to-client communication"))
585         isolate:depends({mode="ap"})
586
587         s:taboption("advanced", Flag, "doth", "802.11h")
588         s:taboption("advanced", Flag, "wmm", translate("WMM Mode"))
589
590         bssid:depends({mode="wds"})
591         bssid:depends({mode="adhoc"})
592 end
593
594
595 ----------------------- HostAP Interface ---------------------
596
597 if hwtype == "prism2" then
598         mode:value("wds", translate("WDS"))
599         mode:value("monitor", translate("Monitor"))
600
601         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
602         hidden:depends({mode="ap"})
603         hidden:depends({mode="adhoc"})
604         hidden:depends({mode="wds"})
605
606         bssid:depends({mode="sta"})
607
608         mp = s:taboption("macfilter", ListValue, "macpolicy", translate("MAC-Address Filter"))
609         mp:value("", translate("disable"))
610         mp:value("allow", translate("Allow listed only"))
611         mp:value("deny", translate("Allow all except listed"))
612         ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
613         ml:depends({macpolicy="allow"})
614         ml:depends({macpolicy="deny"})
615         nt.mac_hints(function(mac, name) ml:value(mac, "%s (%s)" %{ mac, name }) end)
616
617         s:taboption("advanced", Value, "rate", translate("Transmission Rate"))
618         s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
619         s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
620 end
621
622
623 ------------------- WiFI-Encryption -------------------
624
625 encr = s:taboption("encryption", ListValue, "encryption", translate("Encryption"))
626 encr.override_values = true
627 encr.override_depends = true
628 encr:depends({mode="ap"})
629 encr:depends({mode="sta"})
630 encr:depends({mode="adhoc"})
631 encr:depends({mode="ahdemo"})
632 encr:depends({mode="ap-wds"})
633 encr:depends({mode="sta-wds"})
634 encr:depends({mode="mesh"})
635
636 cipher = s:taboption("encryption", ListValue, "cipher", translate("Cipher"))
637 cipher:depends({encryption="wpa"})
638 cipher:depends({encryption="wpa2"})
639 cipher:depends({encryption="psk"})
640 cipher:depends({encryption="psk2"})
641 cipher:depends({encryption="wpa-mixed"})
642 cipher:depends({encryption="psk-mixed"})
643 cipher:value("auto", translate("auto"))
644 cipher:value("ccmp", translate("Force CCMP (AES)"))
645 cipher:value("tkip", translate("Force TKIP"))
646 cipher:value("tkip+ccmp", translate("Force TKIP and CCMP (AES)"))
647
648 function encr.cfgvalue(self, section)
649         local v = tostring(ListValue.cfgvalue(self, section))
650         if v == "wep" then
651                 return "wep-open"
652         elseif v and v:match("%+") then
653                 return (v:gsub("%+.+$", ""))
654         end
655         return v
656 end
657
658 function encr.write(self, section, value)
659         local e = tostring(encr:formvalue(section))
660         local c = tostring(cipher:formvalue(section))
661         if value == "wpa" or value == "wpa2"  then
662                 self.map.uci:delete("wireless", section, "key")
663         end
664         if e and (c == "tkip" or c == "ccmp" or c == "tkip+ccmp") then
665                 e = e .. "+" .. c
666         end
667         self.map:set(section, "encryption", e)
668 end
669
670 function cipher.cfgvalue(self, section)
671         local v = tostring(ListValue.cfgvalue(encr, section))
672         if v and v:match("%+") then
673                 v = v:gsub("^[^%+]+%+", "")
674                 if v == "aes" then v = "ccmp"
675                 elseif v == "tkip+aes" then v = "tkip+ccmp"
676                 elseif v == "aes+tkip" then v = "tkip+ccmp"
677                 elseif v == "ccmp+tkip" then v = "tkip+ccmp"
678                 end
679         end
680         return v
681 end
682
683 function cipher.write(self, section)
684         return encr:write(section)
685 end
686
687
688 encr:value("none", "No Encryption")
689 encr:value("wep-open",   translate("WEP Open System"), {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"}, {mode="adhoc"}, {mode="ahdemo"}, {mode="wds"})
690 encr:value("wep-shared", translate("WEP Shared Key"),  {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"}, {mode="adhoc"}, {mode="ahdemo"}, {mode="wds"})
691
692 if hwtype == "atheros" or hwtype == "mac80211" or hwtype == "prism2" then
693         local supplicant = fs.access("/usr/sbin/wpa_supplicant")
694         local hostapd = fs.access("/usr/sbin/hostapd")
695
696         -- Probe EAP support
697         local has_ap_eap  = (os.execute("hostapd -veap >/dev/null 2>/dev/null") == 0)
698         local has_sta_eap = (os.execute("wpa_supplicant -veap >/dev/null 2>/dev/null") == 0)
699
700         if hostapd and supplicant then
701                 encr:value("psk", "WPA-PSK", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
702                 encr:value("psk2", "WPA2-PSK", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
703                 encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
704                 if has_ap_eap and has_sta_eap then
705                         encr:value("wpa", "WPA-EAP", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
706                         encr:value("wpa2", "WPA2-EAP", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
707                 end
708         elseif hostapd and not supplicant then
709                 encr:value("psk", "WPA-PSK", {mode="ap"}, {mode="ap-wds"})
710                 encr:value("psk2", "WPA2-PSK", {mode="ap"}, {mode="ap-wds"})
711                 encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode", {mode="ap"}, {mode="ap-wds"})
712                 if has_ap_eap then
713                         encr:value("wpa", "WPA-EAP", {mode="ap"}, {mode="ap-wds"})
714                         encr:value("wpa2", "WPA2-EAP", {mode="ap"}, {mode="ap-wds"})
715                 end
716                 encr.description = translate(
717                         "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
718                         "and ad-hoc mode) to be installed."
719                 )
720         elseif not hostapd and supplicant then
721                 encr:value("psk", "WPA-PSK", {mode="sta"}, {mode="sta-wds"})
722                 encr:value("psk2", "WPA2-PSK", {mode="sta"}, {mode="sta-wds"})
723                 encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode", {mode="sta"}, {mode="sta-wds"})
724                 if has_sta_eap then
725                         encr:value("wpa", "WPA-EAP", {mode="sta"}, {mode="sta-wds"})
726                         encr:value("wpa2", "WPA2-EAP", {mode="sta"}, {mode="sta-wds"})
727                 end
728                 encr.description = translate(
729                         "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
730                         "and ad-hoc mode) to be installed."
731                 )
732         else
733                 encr.description = translate(
734                         "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
735                         "and ad-hoc mode) to be installed."
736                 )
737         end
738 elseif hwtype == "broadcom" then
739         encr:value("psk", "WPA-PSK")
740         encr:value("psk2", "WPA2-PSK")
741         encr:value("psk+psk2", "WPA-PSK/WPA2-PSK Mixed Mode")
742 end
743
744 auth_server = s:taboption("encryption", Value, "auth_server", translate("Radius-Authentication-Server"))
745 auth_server:depends({mode="ap", encryption="wpa"})
746 auth_server:depends({mode="ap", encryption="wpa2"})
747 auth_server:depends({mode="ap-wds", encryption="wpa"})
748 auth_server:depends({mode="ap-wds", encryption="wpa2"})
749 auth_server.rmempty = true
750 auth_server.datatype = "host"
751
752 auth_port = s:taboption("encryption", Value, "auth_port", translate("Radius-Authentication-Port"), translatef("Default %d", 1812))
753 auth_port:depends({mode="ap", encryption="wpa"})
754 auth_port:depends({mode="ap", encryption="wpa2"})
755 auth_port:depends({mode="ap-wds", encryption="wpa"})
756 auth_port:depends({mode="ap-wds", encryption="wpa2"})
757 auth_port.rmempty = true
758 auth_port.datatype = "port"
759
760 auth_secret = s:taboption("encryption", Value, "auth_secret", translate("Radius-Authentication-Secret"))
761 auth_secret:depends({mode="ap", encryption="wpa"})
762 auth_secret:depends({mode="ap", encryption="wpa2"})
763 auth_secret:depends({mode="ap-wds", encryption="wpa"})
764 auth_secret:depends({mode="ap-wds", encryption="wpa2"})
765 auth_secret.rmempty = true
766 auth_secret.password = true
767
768 acct_server = s:taboption("encryption", Value, "acct_server", translate("Radius-Accounting-Server"))
769 acct_server:depends({mode="ap", encryption="wpa"})
770 acct_server:depends({mode="ap", encryption="wpa2"})
771 acct_server:depends({mode="ap-wds", encryption="wpa"})
772 acct_server:depends({mode="ap-wds", encryption="wpa2"})
773 acct_server.rmempty = true
774 acct_server.datatype = "host"
775
776 acct_port = s:taboption("encryption", Value, "acct_port", translate("Radius-Accounting-Port"), translatef("Default %d", 1813))
777 acct_port:depends({mode="ap", encryption="wpa"})
778 acct_port:depends({mode="ap", encryption="wpa2"})
779 acct_port:depends({mode="ap-wds", encryption="wpa"})
780 acct_port:depends({mode="ap-wds", encryption="wpa2"})
781 acct_port.rmempty = true
782 acct_port.datatype = "port"
783
784 acct_secret = s:taboption("encryption", Value, "acct_secret", translate("Radius-Accounting-Secret"))
785 acct_secret:depends({mode="ap", encryption="wpa"})
786 acct_secret:depends({mode="ap", encryption="wpa2"})
787 acct_secret:depends({mode="ap-wds", encryption="wpa"})
788 acct_secret:depends({mode="ap-wds", encryption="wpa2"})
789 acct_secret.rmempty = true
790 acct_secret.password = true
791
792 wpakey = s:taboption("encryption", Value, "_wpa_key", translate("Key"))
793 wpakey:depends("encryption", "psk")
794 wpakey:depends("encryption", "psk2")
795 wpakey:depends("encryption", "psk+psk2")
796 wpakey:depends("encryption", "psk-mixed")
797 wpakey.datatype = "wpakey"
798 wpakey.rmempty = true
799 wpakey.password = true
800
801 wpakey.cfgvalue = function(self, section, value)
802         local key = m.uci:get("wireless", section, "key")
803         if key == "1" or key == "2" or key == "3" or key == "4" then
804                 return nil
805         end
806         return key
807 end
808
809 wpakey.write = function(self, section, value)
810         self.map.uci:set("wireless", section, "key", value)
811         self.map.uci:delete("wireless", section, "key1")
812 end
813
814
815 wepslot = s:taboption("encryption", ListValue, "_wep_key", translate("Used Key Slot"))
816 wepslot:depends("encryption", "wep-open")
817 wepslot:depends("encryption", "wep-shared")
818 wepslot:value("1", translatef("Key #%d", 1))
819 wepslot:value("2", translatef("Key #%d", 2))
820 wepslot:value("3", translatef("Key #%d", 3))
821 wepslot:value("4", translatef("Key #%d", 4))
822
823 wepslot.cfgvalue = function(self, section)
824         local slot = tonumber(m.uci:get("wireless", section, "key"))
825         if not slot or slot < 1 or slot > 4 then
826                 return 1
827         end
828         return slot
829 end
830
831 wepslot.write = function(self, section, value)
832         self.map.uci:set("wireless", section, "key", value)
833 end
834
835 local slot
836 for slot=1,4 do
837         wepkey = s:taboption("encryption", Value, "key" .. slot, translatef("Key #%d", slot))
838         wepkey:depends("encryption", "wep-open")
839         wepkey:depends("encryption", "wep-shared")
840         wepkey.datatype = "wepkey"
841         wepkey.rmempty = true
842         wepkey.password = true
843
844         function wepkey.write(self, section, value)
845                 if value and (#value == 5 or #value == 13) then
846                         value = "s:" .. value
847                 end
848                 return Value.write(self, section, value)
849         end
850 end
851
852
853 if hwtype == "atheros" or hwtype == "mac80211" or hwtype == "prism2" then
854         nasid = s:taboption("encryption", Value, "nasid", translate("NAS ID"))
855         nasid:depends({mode="ap", encryption="wpa"})
856         nasid:depends({mode="ap", encryption="wpa2"})
857         nasid:depends({mode="ap-wds", encryption="wpa"})
858         nasid:depends({mode="ap-wds", encryption="wpa2"})
859         nasid.rmempty = true
860
861         eaptype = s:taboption("encryption", ListValue, "eap_type", translate("EAP-Method"))
862         eaptype:value("tls",  "TLS")
863         eaptype:value("ttls", "TTLS")
864         eaptype:value("peap", "PEAP")
865         eaptype:depends({mode="sta", encryption="wpa"})
866         eaptype:depends({mode="sta", encryption="wpa2"})
867         eaptype:depends({mode="sta-wds", encryption="wpa"})
868         eaptype:depends({mode="sta-wds", encryption="wpa2"})
869
870         cacert = s:taboption("encryption", FileUpload, "ca_cert", translate("Path to CA-Certificate"))
871         cacert:depends({mode="sta", encryption="wpa"})
872         cacert:depends({mode="sta", encryption="wpa2"})
873         cacert:depends({mode="sta-wds", encryption="wpa"})
874         cacert:depends({mode="sta-wds", encryption="wpa2"})
875
876         clientcert = s:taboption("encryption", FileUpload, "client_cert", translate("Path to Client-Certificate"))
877         clientcert:depends({mode="sta", encryption="wpa"})
878         clientcert:depends({mode="sta", encryption="wpa2"})
879         clientcert:depends({mode="sta-wds", encryption="wpa"})
880         clientcert:depends({mode="sta-wds", encryption="wpa2"})
881
882         privkey = s:taboption("encryption", FileUpload, "priv_key", translate("Path to Private Key"))
883         privkey:depends({mode="sta", eap_type="tls", encryption="wpa2"})
884         privkey:depends({mode="sta", eap_type="tls", encryption="wpa"})
885         privkey:depends({mode="sta-wds", eap_type="tls", encryption="wpa2"})
886         privkey:depends({mode="sta-wds", eap_type="tls", encryption="wpa"})
887
888         privkeypwd = s:taboption("encryption", Value, "priv_key_pwd", translate("Password of Private Key"))
889         privkeypwd:depends({mode="sta", eap_type="tls", encryption="wpa2"})
890         privkeypwd:depends({mode="sta", eap_type="tls", encryption="wpa"})
891         privkeypwd:depends({mode="sta-wds", eap_type="tls", encryption="wpa2"})
892         privkeypwd:depends({mode="sta-wds", eap_type="tls", encryption="wpa"})
893
894
895         auth = s:taboption("encryption", Value, "auth", translate("Authentication"))
896         auth:value("PAP")
897         auth:value("CHAP")
898         auth:value("MSCHAP")
899         auth:value("MSCHAPV2")
900         auth:depends({mode="sta", eap_type="peap", encryption="wpa2"})
901         auth:depends({mode="sta", eap_type="peap", encryption="wpa"})
902         auth:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
903         auth:depends({mode="sta", eap_type="ttls", encryption="wpa"})
904         auth:depends({mode="sta-wds", eap_type="peap", encryption="wpa2"})
905         auth:depends({mode="sta-wds", eap_type="peap", encryption="wpa"})
906         auth:depends({mode="sta-wds", eap_type="ttls", encryption="wpa2"})
907         auth:depends({mode="sta-wds", eap_type="ttls", encryption="wpa"})
908
909
910         identity = s:taboption("encryption", Value, "identity", translate("Identity"))
911         identity:depends({mode="sta", eap_type="peap", encryption="wpa2"})
912         identity:depends({mode="sta", eap_type="peap", encryption="wpa"})
913         identity:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
914         identity:depends({mode="sta", eap_type="ttls", encryption="wpa"})
915         identity:depends({mode="sta-wds", eap_type="peap", encryption="wpa2"})
916         identity:depends({mode="sta-wds", eap_type="peap", encryption="wpa"})
917         identity:depends({mode="sta-wds", eap_type="ttls", encryption="wpa2"})
918         identity:depends({mode="sta-wds", eap_type="ttls", encryption="wpa"})
919
920         password = s:taboption("encryption", Value, "password", translate("Password"))
921         password:depends({mode="sta", eap_type="peap", encryption="wpa2"})
922         password:depends({mode="sta", eap_type="peap", encryption="wpa"})
923         password:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
924         password:depends({mode="sta", eap_type="ttls", encryption="wpa"})
925         password:depends({mode="sta-wds", eap_type="peap", encryption="wpa2"})
926         password:depends({mode="sta-wds", eap_type="peap", encryption="wpa"})
927         password:depends({mode="sta-wds", eap_type="ttls", encryption="wpa2"})
928         password:depends({mode="sta-wds", eap_type="ttls", encryption="wpa"})
929 end
930
931 if hwtype == "atheros" or hwtype == "mac80211" or hwtype == "prism2" then
932         local wpasupplicant = fs.access("/usr/sbin/wpa_supplicant")
933         local hostcli = fs.access("/usr/sbin/hostapd_cli")
934         if hostcli and wpasupplicant then
935                 wps = s:taboption("encryption", Flag, "wps_pushbutton", translate("Enable WPS pushbutton, requires WPA(2)-PSK"))
936                 wps.enabled = "1"
937                 wps.disabled = "0"
938                 wps.rmempty = false
939                 wps:depends("encryption", "psk")
940                 wps:depends("encryption", "psk2")
941                 wps:depends("encryption", "psk-mixed")
942         end
943 end
944
945 return m