modules/admin-full: fix wifi join when "wwan" (or other iface) already exists but...
[project/luci.git] / modules / admin-full / luasrc / model / cbi / admin_network / wifi.lua
1 --[[
2 LuCI - Lua Configuration Interface
3
4 Copyright 2008 Steven Barth <steven@midlink.org>
5
6 Licensed under the Apache License, Version 2.0 (the "License");
7 you may not use this file except in compliance with the License.
8 You may obtain a copy of the License at
9
10         http://www.apache.org/licenses/LICENSE-2.0
11
12 $Id$
13 ]]--
14
15 local wa = require "luci.tools.webadmin"
16 local nw = require "luci.model.network"
17 local fs = require "nixio.fs"
18
19 arg[1] = arg[1] or ""
20
21 m = Map("wireless", "",
22         translate("The <em>Device Configuration</em> section covers physical settings of the radio " ..
23                 "hardware such as channel, transmit power or antenna selection which is shared among all " ..
24                 "defined wireless networks (if the radio hardware is multi-SSID capable). Per network settings " ..
25                 "like encryption or operation mode are grouped in the <em>Interface Configuration</em>."))
26
27 m:chain("network")
28 m:chain("firewall")
29
30 local ifsection
31
32 function m.on_commit(map)
33         local wnet = nw:get_wifinet(arg[1])
34         if ifsection and wnet then
35                 ifsection.section = wnet.sid
36                 m.title = luci.util.pcdata(wnet:get_i18n())
37         end
38 end
39
40 nw.init(m.uci)
41
42 local wnet = nw:get_wifinet(arg[1])
43 local wdev = wnet and wnet:get_device()
44
45 -- redirect to overview page if network does not exist anymore (e.g. after a revert)
46 if not wnet or not wdev then
47         luci.http.redirect(luci.dispatcher.build_url("admin/network/wireless"))
48         return
49 end
50
51 -- wireless toggle was requested, commit and reload page
52 function m.parse(map)
53         if m:formvalue("cbid.wireless.%s.__toggle" % wdev:name()) then
54                 if wdev:get("disabled") == "1" or wnet:get("disabled") == "1" then
55                         wnet:set("disabled", nil)
56                 else
57                         wnet:set("disabled", "1")
58                 end
59                 wdev:set("disabled", nil)
60
61                 nw:commit("wireless")
62                 luci.sys.call("(env -i /sbin/wifi down; env -i /sbin/wifi up) >/dev/null 2>/dev/null")
63
64                 luci.http.redirect(luci.dispatcher.build_url("admin/network/wireless", arg[1]))
65                 return
66         end
67         Map.parse(map)
68 end
69
70 m.title = luci.util.pcdata(wnet:get_i18n())
71
72
73 local iw = luci.sys.wifi.getiwinfo(arg[1])
74 local hw_modes  = iw.hwmodelist or { }
75 local tx_powers = iw.txpwrlist  or { }
76 local tx_power  = tostring(
77         (iw.txpower and iw.txpower > 0 and iw.txpower) or
78         (#tx_powers > 0 and tx_powers[#tx_powers].dbm)
79 )
80
81 s = m:section(NamedSection, wdev:name(), "wifi-device", translate("Device Configuration"))
82 s.addremove = false
83
84 s:tab("general", translate("General Setup"))
85 s:tab("macfilter", translate("MAC-Filter"))
86 s:tab("advanced", translate("Advanced Settings"))
87
88 --[[
89 back = s:option(DummyValue, "_overview", translate("Overview"))
90 back.value = ""
91 back.titleref = luci.dispatcher.build_url("admin", "network", "wireless")
92 ]]
93
94 st = s:taboption("general", DummyValue, "__status", translate("Status"))
95 st.template = "admin_network/wifi_status"
96 st.ifname   = arg[1]
97
98 en = s:taboption("general", Button, "__toggle")
99
100 if wdev:get("disabled") == "1" or wnet:get("disabled") == "1" then
101         en.title      = translate("Wireless network is disabled")
102         en.inputtitle = translate("Enable")
103         en.inputstyle = "apply"
104 else
105         en.title      = translate("Wireless network is enabled")
106         en.inputtitle = translate("Disable")
107         en.inputstyle = "reset"
108 end
109
110
111 local hwtype = wdev:get("type")
112 local htcaps = wdev:get("ht_capab") and true or false
113
114 -- NanoFoo
115 local nsantenna = wdev:get("antenna")
116
117 ch = s:taboption("general", Value, "channel", translate("Channel"))
118 ch:value("auto", translate("auto"))
119 for _, f in ipairs(iw and iw.freqlist or luci.sys.wifi.channels()) do
120         if not f.restricted then
121                 ch:value(f.channel, "%i (%.3f GHz)" %{ f.channel, f.mhz / 1000 })
122         end
123 end
124
125
126 ------------------- MAC80211 Device ------------------
127
128 if hwtype == "mac80211" then
129         tp = s:taboption("general",
130                 (tx_powers and #tx_powers > 0) and ListValue or Value,
131                 "txpower", translate("Transmit Power"), "dBm")
132
133         tp.rmempty = true
134         tp.default = tx_power
135         for _, p in ipairs(tx_powers or {}) do
136                 tp:value(p.dbm, "%i dBm (%i mW)" %{ p.dbm, p.mw })
137         end
138
139         mode = s:taboption("advanced", ListValue, "hwmode", translate("Mode"))
140         mode:value("", translate("auto"))
141         if hw_modes.b then mode:value("11b", "802.11b") end
142         if hw_modes.g then mode:value("11g", "802.11g") end
143         if hw_modes.a then mode:value("11a", "802.11a") end
144
145         if htcaps then
146                 if hw_modes.g and hw_modes.n then mode:value("11ng", "802.11g+n") end
147                 if hw_modes.a and hw_modes.n then mode:value("11na", "802.11a+n") end
148
149                 htmode = s:taboption("advanced", ListValue, "htmode", translate("HT mode"))
150                 htmode:depends("hwmode", "11na")
151                 htmode:depends("hwmode", "11ng")
152                 htmode:value("HT20", "20MHz")
153                 htmode:value("HT40-", translate("40MHz 2nd channel below"))
154                 htmode:value("HT40+", translate("40MHz 2nd channel above"))
155
156                 --htcapab = s:taboption("advanced", DynamicList, "ht_capab", translate("HT capabilities"))
157                 --htcapab:depends("hwmode", "11na")
158                 --htcapab:depends("hwmode", "11ng")
159         end
160
161         local cl = iw and iw.countrylist
162         if cl and #cl > 0 then
163                 cc = s:taboption("advanced", ListValue, "country", translate("Country Code"), translate("Use ISO/IEC 3166 alpha2 country codes."))
164                 cc.default = tostring(iw and iw.country or "00")
165                 for _, c in ipairs(cl) do
166                         cc:value(c.alpha2, "%s - %s" %{ c.alpha2, c.name })
167                 end
168         else
169                 s:taboption("advanced", Value, "country", translate("Country Code"), translate("Use ISO/IEC 3166 alpha2 country codes."))
170         end
171
172         s:taboption("advanced", Value, "distance", translate("Distance Optimization"),
173                 translate("Distance to farthest network member in meters."))
174
175         s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
176         s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
177 end
178
179
180 ------------------- Madwifi Device ------------------
181
182 if hwtype == "atheros" then
183         tp = s:taboption("general",
184                 (#tx_powers > 0) and ListValue or Value,
185                 "txpower", translate("Transmit Power"), "dBm")
186
187         tp.rmempty = true
188         tp.default = tx_power
189         for _, p in ipairs(tx_powers or {}) do
190                 tp:value(p.dbm, "%i dBm (%i mW)" %{ p.dbm, p.mw })
191         end
192
193         mode = s:taboption("advanced", ListValue, "hwmode", translate("Mode"))
194         mode:value("", translate("auto"))
195         if hw_modes.b then mode:value("11b", "802.11b") end
196         if hw_modes.g then mode:value("11g", "802.11g") end
197         if hw_modes.a then mode:value("11a", "802.11a") end
198         if hw_modes.g then mode:value("11bg", "802.11b+g") end
199         if hw_modes.g then mode:value("11gst", "802.11g + Turbo") end
200         if hw_modes.a then mode:value("11ast", "802.11a + Turbo") end
201         mode:value("fh", translate("Frequency Hopping"))
202
203         s:taboption("advanced", Flag, "diversity", translate("Diversity")).rmempty = false
204
205         if not nsantenna then
206                 ant1 = s:taboption("advanced", ListValue, "txantenna", translate("Transmitter Antenna"))
207                 ant1.widget = "radio"
208                 ant1.orientation = "horizontal"
209                 ant1:depends("diversity", "")
210                 ant1:value("0", translate("auto"))
211                 ant1:value("1", translate("Antenna 1"))
212                 ant1:value("2", translate("Antenna 2"))
213
214                 ant2 = s:taboption("advanced", ListValue, "rxantenna", translate("Receiver Antenna"))
215                 ant2.widget = "radio"
216                 ant2.orientation = "horizontal"
217                 ant2:depends("diversity", "")
218                 ant2:value("0", translate("auto"))
219                 ant2:value("1", translate("Antenna 1"))
220                 ant2:value("2", translate("Antenna 2"))
221
222         else -- NanoFoo
223                 local ant = s:taboption("advanced", ListValue, "antenna", translate("Transmitter Antenna"))
224                 ant:value("auto")
225                 ant:value("vertical")
226                 ant:value("horizontal")
227                 ant:value("external")
228         end
229
230         s:taboption("advanced", Value, "distance", translate("Distance Optimization"),
231                 translate("Distance to farthest network member in meters."))
232         s:taboption("advanced", Value, "regdomain", translate("Regulatory Domain"))
233         s:taboption("advanced", Value, "country", translate("Country Code"))
234         s:taboption("advanced", Flag, "outdoor", translate("Outdoor Channels"))
235
236         --s:option(Flag, "nosbeacon", translate("Disable HW-Beacon timer"))
237 end
238
239
240
241 ------------------- Broadcom Device ------------------
242
243 if hwtype == "broadcom" then
244         tp = s:taboption("general",
245                 (#tx_powers > 0) and ListValue or Value,
246                 "txpower", translate("Transmit Power"), "dBm")
247
248         tp.rmempty = true
249         tp.default = tx_power
250         for _, p in ipairs(tx_powers or {}) do
251                 tp:value(p.dbm, "%i dBm (%i mW)" %{ p.dbm, p.mw })
252         end
253
254         mode = s:taboption("advanced", ListValue, "hwmode", translate("Mode"))
255         mode:value("11bg", "802.11b+g")
256         mode:value("11b", "802.11b")
257         mode:value("11g", "802.11g")
258         mode:value("11gst", "802.11g + Turbo")
259
260         ant1 = s:taboption("advanced", ListValue, "txantenna", translate("Transmitter Antenna"))
261         ant1.widget = "radio"
262         ant1:depends("diversity", "")
263         ant1:value("3", translate("auto"))
264         ant1:value("0", translate("Antenna 1"))
265         ant1:value("1", translate("Antenna 2"))
266
267         ant2 = s:taboption("advanced", ListValue, "rxantenna", translate("Receiver Antenna"))
268         ant2.widget = "radio"
269         ant2:depends("diversity", "")
270         ant2:value("3", translate("auto"))
271         ant2:value("0", translate("Antenna 1"))
272         ant2:value("1", translate("Antenna 2"))
273
274         s:taboption("advanced", Flag, "frameburst", translate("Frame Bursting"))
275
276         s:taboption("advanced", Value, "distance", translate("Distance Optimization"))
277         --s:option(Value, "slottime", translate("Slot time"))
278
279         s:taboption("advanced", Value, "country", translate("Country Code"))
280         s:taboption("advanced", Value, "maxassoc", translate("Connection Limit"))
281 end
282
283
284 --------------------- HostAP Device ---------------------
285
286 if hwtype == "prism2" then
287         s:taboption("advanced", Value, "txpower", translate("Transmit Power"), "att units").rmempty = true
288
289         s:taboption("advanced", Flag, "diversity", translate("Diversity")).rmempty = false
290
291         s:taboption("advanced", Value, "txantenna", translate("Transmitter Antenna"))
292         s:taboption("advanced", Value, "rxantenna", translate("Receiver Antenna"))
293 end
294
295
296 ----------------------- Interface -----------------------
297
298 s = m:section(NamedSection, wnet.sid, "wifi-iface", translate("Interface Configuration"))
299 ifsection = s
300 s.addremove = false
301 s.anonymous = true
302 s.defaults.device = wdev:name()
303
304 s:tab("general", translate("General Setup"))
305 s:tab("encryption", translate("Wireless Security"))
306 s:tab("macfilter", translate("MAC-Filter"))
307 s:tab("advanced", translate("Advanced Settings"))
308
309 s:taboption("general", Value, "ssid", translate("<abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
310
311 mode = s:taboption("general", ListValue, "mode", translate("Mode"))
312 mode.override_values = true
313 mode:value("ap", translate("Access Point"))
314 mode:value("sta", translate("Client"))
315 mode:value("adhoc", translate("Ad-Hoc"))
316
317 bssid = s:taboption("general", Value, "bssid", translate("<abbr title=\"Basic Service Set Identifier\">BSSID</abbr>"))
318
319 network = s:taboption("general", Value, "network", translate("Network"),
320         translate("Choose the network you want to attach to this wireless interface. " ..
321                 "Select <em>unspecified</em> to not attach any network or fill out the " ..
322                 "<em>create</em> field to define a new network."))
323
324 network.rmempty = true
325 network.template = "cbi/network_netlist"
326 network.widget = "radio"
327
328 function network.write(self, section, value)
329         local i = nw:get_interface(section)
330         if i then
331                 if value == '-' then
332                         value = m:formvalue(self:cbid(section) .. ".newnet")
333                         if value and #value > 0 then
334                                 local n = nw:add_network(value, {proto="none"})
335                                 if n then n:add_interface(i) end
336                         else
337                                 local n = i:get_network()
338                                 if n then n:del_interface(i) end
339                         end
340                 else
341                         local n = nw:get_network(value)
342                         if n then
343                                 n:set("type", "bridge")
344                                 n:add_interface(i)
345                         end
346                 end
347         end
348 end
349
350 -------------------- MAC80211 Interface ----------------------
351
352 if hwtype == "mac80211" then
353         if fs.access("/usr/sbin/iw") then
354                 mode:value("mesh", "802.11s")
355         end
356
357         mode:value("ahdemo", translate("Pseudo Ad-Hoc (ahdemo)"))
358         mode:value("monitor", translate("Monitor"))
359         bssid:depends({mode="adhoc"})
360
361         mp = s:taboption("macfilter", ListValue, "macfilter", translate("MAC-Address Filter"))
362         mp:depends({mode="ap"})
363         mp:depends({mode="ap-wds"})
364         mp:value("", translate("disable"))
365         mp:value("allow", translate("Allow listed only"))
366         mp:value("deny", translate("Allow all except listed"))
367
368         ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
369         ml.datatype = "macaddr"
370         ml:depends({macfilter="allow"})
371         ml:depends({macfilter="deny"})
372
373         mode:value("ap-wds", "%s (%s)" % {translate("Access Point"), translate("WDS")})
374         mode:value("sta-wds", "%s (%s)" % {translate("Client"), translate("WDS")})
375
376         function mode.write(self, section, value)
377                 if value == "ap-wds" then
378                         ListValue.write(self, section, "ap")
379                         m.uci:set("wireless", section, "wds", 1)
380                 elseif value == "sta-wds" then
381                         ListValue.write(self, section, "sta")
382                         m.uci:set("wireless", section, "wds", 1)
383                 else
384                         ListValue.write(self, section, value)
385                         m.uci:delete("wireless", section, "wds")
386                 end
387         end
388
389         function mode.cfgvalue(self, section)
390                 local mode = ListValue.cfgvalue(self, section)
391                 local wds  = m.uci:get("wireless", section, "wds") == "1"
392
393                 if mode == "ap" and wds then
394                         return "ap-wds"
395                 elseif mode == "sta" and wds then
396                         return "sta-wds"
397                 else
398                         return mode
399                 end
400         end
401
402         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
403         hidden:depends({mode="ap"})
404         hidden:depends({mode="ap-wds"})
405 end
406
407
408
409 -------------------- Madwifi Interface ----------------------
410
411 if hwtype == "atheros" then
412         mode:value("ahdemo", translate("Pseudo Ad-Hoc (ahdemo)"))
413         mode:value("monitor", translate("Monitor"))
414         mode:value("ap-wds", "%s (%s)" % {translate("Access Point"), translate("WDS")})
415         mode:value("sta-wds", "%s (%s)" % {translate("Client"), translate("WDS")})
416         mode:value("wds", translate("Static WDS"))
417
418         function mode.write(self, section, value)
419                 if value == "ap-wds" then
420                         ListValue.write(self, section, "ap")
421                         m.uci:set("wireless", section, "wds", 1)
422                 elseif value == "sta-wds" then
423                         ListValue.write(self, section, "sta")
424                         m.uci:set("wireless", section, "wds", 1)
425                 else
426                         ListValue.write(self, section, value)
427                         m.uci:delete("wireless", section, "wds")
428                 end
429         end
430
431         function mode.cfgvalue(self, section)
432                 local mode = ListValue.cfgvalue(self, section)
433                 local wds  = m.uci:get("wireless", section, "wds") == "1"
434
435                 if mode == "ap" and wds then
436                         return "ap-wds"
437                 elseif mode == "sta" and wds then
438                         return "sta-wds"
439                 else
440                         return mode
441                 end
442         end
443
444         bssid:depends({mode="adhoc"})
445         bssid:depends({mode="ahdemo"})
446         bssid:depends({mode="wds"})
447
448         wdssep = s:taboption("advanced", Flag, "wdssep", translate("Separate WDS"))
449         wdssep:depends({mode="ap-wds"})
450
451         s:taboption("advanced", Flag, "doth", "802.11h")
452         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
453         hidden:depends({mode="ap"})
454         hidden:depends({mode="adhoc"})
455         hidden:depends({mode="ap-wds"})
456         hidden:depends({mode="sta-wds"})
457         isolate = s:taboption("advanced", Flag, "isolate", translate("Separate Clients"),
458          translate("Prevents client-to-client communication"))
459         isolate:depends({mode="ap"})
460         s:taboption("advanced", Flag, "bgscan", translate("Background Scan"))
461
462         mp = s:taboption("macfilter", ListValue, "macpolicy", translate("MAC-Address Filter"))
463         mp:value("", translate("disable"))
464         mp:value("allow", translate("Allow listed only"))
465         mp:value("deny", translate("Allow all except listed"))
466
467         ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
468         ml.datatype = "macaddr"
469         ml:depends({macpolicy="allow"})
470         ml:depends({macpolicy="deny"})
471
472         s:taboption("advanced", Value, "rate", translate("Transmission Rate"))
473         s:taboption("advanced", Value, "mcast_rate", translate("Multicast Rate"))
474         s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
475         s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
476         s:taboption("advanced", Value, "minrate", translate("Minimum Rate"))
477         s:taboption("advanced", Value, "maxrate", translate("Maximum Rate"))
478         s:taboption("advanced", Flag, "compression", translate("Compression"))
479
480         s:taboption("advanced", Flag, "bursting", translate("Frame Bursting"))
481         s:taboption("advanced", Flag, "turbo", translate("Turbo Mode"))
482         s:taboption("advanced", Flag, "ff", translate("Fast Frames"))
483
484         s:taboption("advanced", Flag, "wmm", translate("WMM Mode"))
485         s:taboption("advanced", Flag, "xr", translate("XR Support"))
486         s:taboption("advanced", Flag, "ar", translate("AR Support"))
487
488         local swm = s:taboption("advanced", Flag, "sw_merge", translate("Disable HW-Beacon timer"))
489         swm:depends({mode="adhoc"})
490
491         local nos = s:taboption("advanced", Flag, "nosbeacon", translate("Disable HW-Beacon timer"))
492         nos:depends({mode="sta"})
493         nos:depends({mode="sta-wds"})
494
495         local probereq = s:taboption("advanced", Flag, "probereq", translate("Do not send probe responses"))
496         probereq.enabled  = "0"
497         probereq.disabled = "1"
498 end
499
500
501 -------------------- Broadcom Interface ----------------------
502
503 if hwtype == "broadcom" then
504         mode:value("wds", translate("WDS"))
505         mode:value("monitor", translate("Monitor"))
506
507         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
508         hidden:depends({mode="ap"})
509         hidden:depends({mode="adhoc"})
510         hidden:depends({mode="wds"})
511
512         isolate = s:taboption("advanced", Flag, "isolate", translate("Separate Clients"),
513          translate("Prevents client-to-client communication"))
514         isolate:depends({mode="ap"})
515
516         s:taboption("advanced", Flag, "doth", "802.11h")
517         s:taboption("advanced", Flag, "wmm", translate("WMM Mode"))
518
519         bssid:depends({mode="wds"})
520         bssid:depends({mode="adhoc"})
521 end
522
523
524 ----------------------- HostAP Interface ---------------------
525
526 if hwtype == "prism2" then
527         mode:value("wds", translate("WDS"))
528         mode:value("monitor", translate("Monitor"))
529
530         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
531         hidden:depends({mode="ap"})
532         hidden:depends({mode="adhoc"})
533         hidden:depends({mode="wds"})
534
535         bssid:depends({mode="sta"})
536
537         mp = s:taboption("macfilter", ListValue, "macpolicy", translate("MAC-Address Filter"))
538         mp:value("", translate("disable"))
539         mp:value("allow", translate("Allow listed only"))
540         mp:value("deny", translate("Allow all except listed"))
541         ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
542         ml:depends({macpolicy="allow"})
543         ml:depends({macpolicy="deny"})
544
545         s:taboption("advanced", Value, "rate", translate("Transmission Rate"))
546         s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
547         s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
548 end
549
550
551 ------------------- WiFI-Encryption -------------------
552
553 encr = s:taboption("encryption", ListValue, "encryption", translate("Encryption"))
554 encr.override_values = true
555 encr.override_depends = true
556 encr:depends({mode="ap"})
557 encr:depends({mode="sta"})
558 encr:depends({mode="adhoc"})
559 encr:depends({mode="ahdemo"})
560 encr:depends({mode="ap-wds"})
561 encr:depends({mode="sta-wds"})
562 encr:depends({mode="mesh"})
563
564 function encr.write(self, section, value)
565         if value == "wpa" or value == "wpa2"  then
566                 self.map.uci:delete("wireless", section, "key")
567         end
568         self.map.uci:set("wireless", section, "encryption", value)
569 end
570
571
572 encr:value("none", "No Encryption")
573 encr:value("wep-open",   translate("WEP Open System"), {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
574 encr:value("wep-shared", translate("WEP Shared Key"),  {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
575
576 if hwtype == "atheros" or hwtype == "mac80211" or hwtype == "prism2" then
577         local supplicant = fs.access("/usr/sbin/wpa_supplicant")
578         local hostapd = fs.access("/usr/sbin/hostapd")
579
580         if hostapd and supplicant then
581                 encr:value("psk", "WPA-PSK")
582                 encr:value("psk2", "WPA2-PSK")
583                 encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode")
584                 encr:value("wpa", "WPA-EAP", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
585                 encr:value("wpa2", "WPA2-EAP", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
586         elseif hostapd and not supplicant then
587                 encr:value("psk", "WPA-PSK", {mode="ap"}, {mode="ap-wds"}, {mode="adhoc"}, {mode="ahdemo"})
588                 encr:value("psk2", "WPA2-PSK", {mode="ap"}, {mode="ap-wds"}, {mode="adhoc"}, {mode="ahdemo"})
589                 encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode", {mode="ap"}, {mode="ap-wds"}, {mode="adhoc"}, {mode="ahdemo"})
590                 encr:value("wpa", "WPA-EAP", {mode="ap"}, {mode="ap-wds"})
591                 encr:value("wpa2", "WPA2-EAP", {mode="ap"}, {mode="ap-wds"})
592                 encr.description = translate(
593                         "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
594                         "and ad-hoc mode) to be installed."
595                 )
596         elseif not hostapd and supplicant then
597                 encr:value("psk", "WPA-PSK", {mode="sta"}, {mode="sta-wds"})
598                 encr:value("psk2", "WPA2-PSK", {mode="sta"}, {mode="sta-wds"})
599                 encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode", {mode="sta"}, {mode="sta-wds"})
600                 encr:value("wpa", "WPA-EAP", {mode="sta"}, {mode="sta-wds"})
601                 encr:value("wpa2", "WPA2-EAP", {mode="sta"}, {mode="sta-wds"})
602                 encr.description = translate(
603                         "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
604                         "and ad-hoc mode) to be installed."
605                 )
606         else
607                 encr.description = translate(
608                         "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
609                         "and ad-hoc mode) to be installed."
610                 )
611         end
612 elseif hwtype == "broadcom" then
613         encr:value("psk", "WPA-PSK")
614         encr:value("psk2", "WPA2-PSK")
615         encr:value("psk+psk2", "WPA-PSK/WPA2-PSK Mixed Mode")
616 end
617
618 auth_server = s:taboption("encryption", Value, "auth_server", translate("Radius-Authentication-Server"))
619 auth_server:depends({mode="ap", encryption="wpa"})
620 auth_server:depends({mode="ap", encryption="wpa2"})
621 auth_server:depends({mode="ap-wds", encryption="wpa"})
622 auth_server:depends({mode="ap-wds", encryption="wpa2"})
623 auth_server.rmempty = true
624 auth_server.datatype = "host"
625
626 auth_port = s:taboption("encryption", Value, "auth_port", translate("Radius-Authentication-Port"), translatef("Default %d", 1812))
627 auth_port:depends({mode="ap", encryption="wpa"})
628 auth_port:depends({mode="ap", encryption="wpa2"})
629 auth_port:depends({mode="ap-wds", encryption="wpa"})
630 auth_port:depends({mode="ap-wds", encryption="wpa2"})
631 auth_port.rmempty = true
632 auth_port.datatype = "port"
633
634 auth_secret = s:taboption("encryption", Value, "auth_secret", translate("Radius-Authentication-Secret"))
635 auth_secret:depends({mode="ap", encryption="wpa"})
636 auth_secret:depends({mode="ap", encryption="wpa2"})
637 auth_secret:depends({mode="ap-wds", encryption="wpa"})
638 auth_secret:depends({mode="ap-wds", encryption="wpa2"})
639 auth_secret.rmempty = true
640 auth_secret.password = true
641
642 acct_server = s:taboption("encryption", Value, "acct_server", translate("Radius-Accounting-Server"))
643 acct_server:depends({mode="ap", encryption="wpa"})
644 acct_server:depends({mode="ap", encryption="wpa2"})
645 acct_server:depends({mode="ap-wds", encryption="wpa"})
646 acct_server:depends({mode="ap-wds", encryption="wpa2"})
647 acct_server.rmempty = true
648 acct_server.datatype = "host"
649
650 acct_port = s:taboption("encryption", Value, "acct_port", translate("Radius-Accounting-Port"), translatef("Default %d", 1813))
651 acct_port:depends({mode="ap", encryption="wpa"})
652 acct_port:depends({mode="ap", encryption="wpa2"})
653 acct_port:depends({mode="ap-wds", encryption="wpa"})
654 acct_port:depends({mode="ap-wds", encryption="wpa2"})
655 acct_port.rmempty = true
656 acct_port.datatype = "port"
657
658 acct_secret = s:taboption("encryption", Value, "acct_secret", translate("Radius-Accounting-Secret"))
659 acct_secret:depends({mode="ap", encryption="wpa"})
660 acct_secret:depends({mode="ap", encryption="wpa2"})
661 acct_secret:depends({mode="ap-wds", encryption="wpa"})
662 acct_secret:depends({mode="ap-wds", encryption="wpa2"})
663 acct_secret.rmempty = true
664 acct_secret.password = true
665
666 wpakey = s:taboption("encryption", Value, "_wpa_key", translate("Key"))
667 wpakey:depends("encryption", "psk")
668 wpakey:depends("encryption", "psk2")
669 wpakey:depends("encryption", "psk+psk2")
670 wpakey:depends("encryption", "psk-mixed")
671 wpakey.datatype = "wpakey"
672 wpakey.rmempty = true
673 wpakey.password = true
674
675 wpakey.cfgvalue = function(self, section, value)
676         local key = m.uci:get("wireless", section, "key")
677         if key == "1" or key == "2" or key == "3" or key == "4" then
678                 return nil
679         end
680         return key
681 end
682
683 wpakey.write = function(self, section, value)
684         self.map.uci:set("wireless", section, "key", value)
685         self.map.uci:delete("wireless", section, "key1")
686 end
687
688
689 wepslot = s:taboption("encryption", ListValue, "_wep_key", translate("Used Key Slot"))
690 wepslot:depends("encryption", "wep-open")
691 wepslot:depends("encryption", "wep-shared")
692 wepslot:value("1", translatef("Key #%d", 1))
693 wepslot:value("2", translatef("Key #%d", 2))
694 wepslot:value("3", translatef("Key #%d", 3))
695 wepslot:value("4", translatef("Key #%d", 4))
696
697 wepslot.cfgvalue = function(self, section)
698         local slot = tonumber(m.uci:get("wireless", section, "key"))
699         if not slot or slot < 1 or slot > 4 then
700                 return 1
701         end
702         return slot
703 end
704
705 wepslot.write = function(self, section, value)
706         self.map.uci:set("wireless", section, "key", value)
707 end
708
709 local slot
710 for slot=1,4 do
711         wepkey = s:taboption("encryption", Value, "key" .. slot, translatef("Key #%d", slot))
712         wepkey:depends("encryption", "wep-open")
713         wepkey:depends("encryption", "wep-shared")
714         wepkey.datatype = "wepkey"
715         wepkey.rmempty = true
716         wepkey.password = true
717
718         function wepkey.write(self, section, value)
719                 if value and (#value == 5 or #value == 13) then
720                         value = "s:" .. value
721                 end
722                 return Value.write(self, section, value)
723         end
724 end
725
726
727 if hwtype == "atheros" or hwtype == "mac80211" or hwtype == "prism2" then
728         nasid = s:taboption("encryption", Value, "nasid", translate("NAS ID"))
729         nasid:depends({mode="ap", encryption="wpa"})
730         nasid:depends({mode="ap", encryption="wpa2"})
731         nasid:depends({mode="ap-wds", encryption="wpa"})
732         nasid:depends({mode="ap-wds", encryption="wpa2"})
733         nasid.rmempty = true
734
735         eaptype = s:taboption("encryption", ListValue, "eap_type", translate("EAP-Method"))
736         eaptype:value("tls",  "TLS")
737         eaptype:value("ttls", "TTLS")
738         eaptype:value("peap", "PEAP")
739         eaptype:depends({mode="sta", encryption="wpa"})
740         eaptype:depends({mode="sta", encryption="wpa2"})
741         eaptype:depends({mode="sta-wds", encryption="wpa"})
742         eaptype:depends({mode="sta-wds", encryption="wpa2"})
743
744         cacert = s:taboption("encryption", FileUpload, "ca_cert", translate("Path to CA-Certificate"))
745         cacert:depends({mode="sta", encryption="wpa"})
746         cacert:depends({mode="sta", encryption="wpa2"})
747         cacert:depends({mode="sta-wds", encryption="wpa"})
748         cacert:depends({mode="sta-wds", encryption="wpa2"})
749
750         privkey = s:taboption("encryption", FileUpload, "priv_key", translate("Path to Private Key"))
751         privkey:depends({mode="sta", eap_type="tls", encryption="wpa2"})
752         privkey:depends({mode="sta", eap_type="tls", encryption="wpa"})
753         privkey:depends({mode="sta-wds", eap_type="tls", encryption="wpa2"})
754         privkey:depends({mode="sta-wds", eap_type="tls", encryption="wpa"})
755
756         privkeypwd = s:taboption("encryption", Value, "priv_key_pwd", translate("Password of Private Key"))
757         privkeypwd:depends({mode="sta", eap_type="tls", encryption="wpa2"})
758         privkeypwd:depends({mode="sta", eap_type="tls", encryption="wpa"})
759         privkeypwd:depends({mode="sta-wds", eap_type="tls", encryption="wpa2"})
760         privkeypwd:depends({mode="sta-wds", eap_type="tls", encryption="wpa"})
761
762
763         auth = s:taboption("encryption", Value, "auth", translate("Authentication"))
764         auth:value("PAP")
765         auth:value("CHAP")
766         auth:value("MSCHAP")
767         auth:value("MSCHAPV2")
768         auth:depends({mode="sta", eap_type="peap", encryption="wpa2"})
769         auth:depends({mode="sta", eap_type="peap", encryption="wpa"})
770         auth:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
771         auth:depends({mode="sta", eap_type="ttls", encryption="wpa"})
772         auth:depends({mode="sta-wds", eap_type="peap", encryption="wpa2"})
773         auth:depends({mode="sta-wds", eap_type="peap", encryption="wpa"})
774         auth:depends({mode="sta-wds", eap_type="ttls", encryption="wpa2"})
775         auth:depends({mode="sta-wds", eap_type="ttls", encryption="wpa"})
776
777
778         identity = s:taboption("encryption", Value, "identity", translate("Identity"))
779         identity:depends({mode="sta", eap_type="peap", encryption="wpa2"})
780         identity:depends({mode="sta", eap_type="peap", encryption="wpa"})
781         identity:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
782         identity:depends({mode="sta", eap_type="ttls", encryption="wpa"})
783         identity:depends({mode="sta-wds", eap_type="peap", encryption="wpa2"})
784         identity:depends({mode="sta-wds", eap_type="peap", encryption="wpa"})
785         identity:depends({mode="sta-wds", eap_type="ttls", encryption="wpa2"})
786         identity:depends({mode="sta-wds", eap_type="ttls", encryption="wpa"})
787
788         password = s:taboption("encryption", Value, "password", translate("Password"))
789         password:depends({mode="sta", eap_type="peap", encryption="wpa2"})
790         password:depends({mode="sta", eap_type="peap", encryption="wpa"})
791         password:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
792         password:depends({mode="sta", eap_type="ttls", encryption="wpa"})
793         password:depends({mode="sta-wds", eap_type="peap", encryption="wpa2"})
794         password:depends({mode="sta-wds", eap_type="peap", encryption="wpa"})
795         password:depends({mode="sta-wds", eap_type="ttls", encryption="wpa2"})
796         password:depends({mode="sta-wds", eap_type="ttls", encryption="wpa"})
797 end
798
799 return m