modules/admin-full: add mac address suggestions to mac filter settings
[project/luci.git] / modules / admin-full / luasrc / model / cbi / admin_network / wifi.lua
1 --[[
2 LuCI - Lua Configuration Interface
3
4 Copyright 2008 Steven Barth <steven@midlink.org>
5
6 Licensed under the Apache License, Version 2.0 (the "License");
7 you may not use this file except in compliance with the License.
8 You may obtain a copy of the License at
9
10         http://www.apache.org/licenses/LICENSE-2.0
11
12 $Id$
13 ]]--
14
15 local wa = require "luci.tools.webadmin"
16 local nw = require "luci.model.network"
17 local fs = require "nixio.fs"
18
19 arg[1] = arg[1] or ""
20
21 m = Map("wireless", "",
22         translate("The <em>Device Configuration</em> section covers physical settings of the radio " ..
23                 "hardware such as channel, transmit power or antenna selection which is shared among all " ..
24                 "defined wireless networks (if the radio hardware is multi-SSID capable). Per network settings " ..
25                 "like encryption or operation mode are grouped in the <em>Interface Configuration</em>."))
26
27 m:chain("network")
28 m:chain("firewall")
29
30 local ifsection
31
32 function m.on_commit(map)
33         local wnet = nw:get_wifinet(arg[1])
34         if ifsection and wnet then
35                 ifsection.section = wnet.sid
36                 m.title = luci.util.pcdata(wnet:get_i18n())
37         end
38 end
39
40 nw.init(m.uci)
41
42 local wnet = nw:get_wifinet(arg[1])
43 local wdev = wnet and wnet:get_device()
44
45 -- redirect to overview page if network does not exist anymore (e.g. after a revert)
46 if not wnet or not wdev then
47         luci.http.redirect(luci.dispatcher.build_url("admin/network/wireless"))
48         return
49 end
50
51 -- wireless toggle was requested, commit and reload page
52 function m.parse(map)
53         if m:formvalue("cbid.wireless.%s.__toggle" % wdev:name()) then
54                 if wdev:get("disabled") == "1" or wnet:get("disabled") == "1" then
55                         wnet:set("disabled", nil)
56                 else
57                         wnet:set("disabled", "1")
58                 end
59                 wdev:set("disabled", nil)
60
61                 nw:commit("wireless")
62                 luci.sys.call("(env -i /sbin/wifi down; env -i /sbin/wifi up) >/dev/null 2>/dev/null")
63
64                 luci.http.redirect(luci.dispatcher.build_url("admin/network/wireless", arg[1]))
65                 return
66         end
67         Map.parse(map)
68 end
69
70 m.title = luci.util.pcdata(wnet:get_i18n())
71
72
73 local function txpower_list(iw)
74         local list = iw.txpwrlist or { }
75         local off  = tonumber(iw.txpower_offset) or 0
76         local new  = { }
77         local prev = -1
78         local _, val
79         for _, val in ipairs(list) do
80                 local dbm = val.dbm + off
81                 local mw  = math.floor(10 ^ (dbm / 10))
82                 if mw ~= prev then
83                         prev = mw
84                         new[#new+1] = {
85                                 display_dbm = dbm,
86                                 display_mw  = mw,
87                                 driver_dbm  = val.dbm,
88                                 driver_mw   = val.mw
89                         }
90                 end
91         end
92         return new
93 end
94
95 local function txpower_current(pwr, list)
96         pwr = tonumber(pwr)
97         if pwr ~= nil then
98                 local _, item
99                 for _, item in ipairs(list) do
100                         if item.driver_dbm >= pwr then
101                                 return item.driver_dbm
102                         end
103                 end
104         end
105         return (list[#list] and list[#list].driver_dbm) or pwr or 0
106 end
107
108 local function arplist(opt)
109         local _, e, mac, ip, name
110         local arp = { }
111
112         for _, e in ipairs(luci.sys.net.arptable()) do
113                 arp[e["HW address"]:upper()] = { e["IP address"] }
114         end
115
116         for e in io.lines("/etc/ethers") do
117                 mac, ip = e:match("^([a-f0-9]%S+) (%S+)")
118                 if mac and ip then arp[mac:upper()] = { ip } end
119         end
120
121         for e in io.lines("/var/dhcp.leases") do
122                 mac, ip, name = e:match("^%d+ (%S+) (%S+) (%S+)")
123                 if mac and ip then arp[mac:upper()] = { ip, name ~= "*" and name } end
124         end
125
126         for mac, e in luci.util.kspairs(arp) do
127                 opt:value(mac, "%s (%s)" %{ mac, e[2] or e[1] })
128         end
129 end
130
131 local iw = luci.sys.wifi.getiwinfo(arg[1])
132 local hw_modes      = iw.hwmodelist or { }
133 local tx_power_list = txpower_list(iw)
134 local tx_power_cur  = txpower_current(wdev:get("txpower"), tx_power_list)
135
136 s = m:section(NamedSection, wdev:name(), "wifi-device", translate("Device Configuration"))
137 s.addremove = false
138
139 s:tab("general", translate("General Setup"))
140 s:tab("macfilter", translate("MAC-Filter"))
141 s:tab("advanced", translate("Advanced Settings"))
142
143 --[[
144 back = s:option(DummyValue, "_overview", translate("Overview"))
145 back.value = ""
146 back.titleref = luci.dispatcher.build_url("admin", "network", "wireless")
147 ]]
148
149 st = s:taboption("general", DummyValue, "__status", translate("Status"))
150 st.template = "admin_network/wifi_status"
151 st.ifname   = arg[1]
152
153 en = s:taboption("general", Button, "__toggle")
154
155 if wdev:get("disabled") == "1" or wnet:get("disabled") == "1" then
156         en.title      = translate("Wireless network is disabled")
157         en.inputtitle = translate("Enable")
158         en.inputstyle = "apply"
159 else
160         en.title      = translate("Wireless network is enabled")
161         en.inputtitle = translate("Disable")
162         en.inputstyle = "reset"
163 end
164
165
166 local hwtype = wdev:get("type")
167 local htcaps = wdev:get("ht_capab") and true or false
168
169 -- NanoFoo
170 local nsantenna = wdev:get("antenna")
171
172 -- Check whether there is a client interface on the same radio,
173 -- if yes, lock the channel choice as the station will dicatate the freq
174 local has_sta = nil
175 local _, net
176 for _, net in ipairs(wdev:get_wifinets()) do
177         if net:mode() == "sta" and net:id() ~= wnet:id() then
178                 has_sta = net
179                 break
180         end
181 end
182
183 if has_sta then
184         ch = s:taboption("general", DummyValue, "choice", translate("Channel"))
185         ch.value = translatef("Locked to channel %d used by %s",
186                 has_sta:channel(), has_sta:shortname())
187 else
188         ch = s:taboption("general", Value, "channel", translate("Channel"))
189         ch:value("auto", translate("auto"))
190         for _, f in ipairs(iw and iw.freqlist or luci.sys.wifi.channels()) do
191                 if not f.restricted then
192                         ch:value(f.channel, "%i (%.3f GHz)" %{ f.channel, f.mhz / 1000 })
193                 end
194         end
195 end
196
197 ------------------- MAC80211 Device ------------------
198
199 if hwtype == "mac80211" then
200         tp = s:taboption("general",
201                 (#tx_power_list > 0) and ListValue or Value,
202                 "txpower", translate("Transmit Power"), "dBm")
203
204         tp.rmempty = true
205         tp.default = tx_power_cur
206
207         function tp.cfgvalue(...)
208                 return txpower_current(Value.cfgvalue(...), tx_power_list)
209         end
210
211         for _, p in ipairs(tx_power_list) do
212                 tp:value(p.driver_dbm, "%i dBm (%i mW)"
213                         %{ p.display_dbm, p.display_mw })
214         end
215
216         mode = s:taboption("advanced", ListValue, "hwmode", translate("Mode"))
217         mode:value("", translate("auto"))
218         if hw_modes.b then mode:value("11b", "802.11b") end
219         if hw_modes.g then mode:value("11g", "802.11g") end
220         if hw_modes.a then mode:value("11a", "802.11a") end
221
222         if htcaps then
223                 if hw_modes.g and hw_modes.n then mode:value("11ng", "802.11g+n") end
224                 if hw_modes.a and hw_modes.n then mode:value("11na", "802.11a+n") end
225
226                 htmode = s:taboption("advanced", ListValue, "htmode", translate("HT mode"))
227                 htmode:depends("hwmode", "11na")
228                 htmode:depends("hwmode", "11ng")
229                 htmode:value("HT20", "20MHz")
230                 htmode:value("HT40-", translate("40MHz 2nd channel below"))
231                 htmode:value("HT40+", translate("40MHz 2nd channel above"))
232
233                 --htcapab = s:taboption("advanced", DynamicList, "ht_capab", translate("HT capabilities"))
234                 --htcapab:depends("hwmode", "11na")
235                 --htcapab:depends("hwmode", "11ng")
236         end
237
238         local cl = iw and iw.countrylist
239         if cl and #cl > 0 then
240                 cc = s:taboption("advanced", ListValue, "country", translate("Country Code"), translate("Use ISO/IEC 3166 alpha2 country codes."))
241                 cc.default = tostring(iw and iw.country or "00")
242                 for _, c in ipairs(cl) do
243                         cc:value(c.alpha2, "%s - %s" %{ c.alpha2, c.name })
244                 end
245         else
246                 s:taboption("advanced", Value, "country", translate("Country Code"), translate("Use ISO/IEC 3166 alpha2 country codes."))
247         end
248
249         s:taboption("advanced", Value, "distance", translate("Distance Optimization"),
250                 translate("Distance to farthest network member in meters."))
251
252         s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
253         s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
254 end
255
256
257 ------------------- Madwifi Device ------------------
258
259 if hwtype == "atheros" then
260         tp = s:taboption("general",
261                 (#tx_power_list > 0) and ListValue or Value,
262                 "txpower", translate("Transmit Power"), "dBm")
263
264         tp.rmempty = true
265         tp.default = tx_power_cur
266
267         function tp.cfgvalue(...)
268                 return txpower_current(Value.cfgvalue(...), tx_power_list)
269         end
270
271         for _, p in ipairs(tx_power_list) do
272                 tp:value(p.driver_dbm, "%i dBm (%i mW)"
273                         %{ p.display_dbm, p.display_mw })
274         end
275
276         mode = s:taboption("advanced", ListValue, "hwmode", translate("Mode"))
277         mode:value("", translate("auto"))
278         if hw_modes.b then mode:value("11b", "802.11b") end
279         if hw_modes.g then mode:value("11g", "802.11g") end
280         if hw_modes.a then mode:value("11a", "802.11a") end
281         if hw_modes.g then mode:value("11bg", "802.11b+g") end
282         if hw_modes.g then mode:value("11gst", "802.11g + Turbo") end
283         if hw_modes.a then mode:value("11ast", "802.11a + Turbo") end
284         mode:value("fh", translate("Frequency Hopping"))
285
286         s:taboption("advanced", Flag, "diversity", translate("Diversity")).rmempty = false
287
288         if not nsantenna then
289                 ant1 = s:taboption("advanced", ListValue, "txantenna", translate("Transmitter Antenna"))
290                 ant1.widget = "radio"
291                 ant1.orientation = "horizontal"
292                 ant1:depends("diversity", "")
293                 ant1:value("0", translate("auto"))
294                 ant1:value("1", translate("Antenna 1"))
295                 ant1:value("2", translate("Antenna 2"))
296
297                 ant2 = s:taboption("advanced", ListValue, "rxantenna", translate("Receiver Antenna"))
298                 ant2.widget = "radio"
299                 ant2.orientation = "horizontal"
300                 ant2:depends("diversity", "")
301                 ant2:value("0", translate("auto"))
302                 ant2:value("1", translate("Antenna 1"))
303                 ant2:value("2", translate("Antenna 2"))
304
305         else -- NanoFoo
306                 local ant = s:taboption("advanced", ListValue, "antenna", translate("Transmitter Antenna"))
307                 ant:value("auto")
308                 ant:value("vertical")
309                 ant:value("horizontal")
310                 ant:value("external")
311         end
312
313         s:taboption("advanced", Value, "distance", translate("Distance Optimization"),
314                 translate("Distance to farthest network member in meters."))
315         s:taboption("advanced", Value, "regdomain", translate("Regulatory Domain"))
316         s:taboption("advanced", Value, "country", translate("Country Code"))
317         s:taboption("advanced", Flag, "outdoor", translate("Outdoor Channels"))
318
319         --s:option(Flag, "nosbeacon", translate("Disable HW-Beacon timer"))
320 end
321
322
323
324 ------------------- Broadcom Device ------------------
325
326 if hwtype == "broadcom" then
327         tp = s:taboption("general",
328                 (#tx_power_list > 0) and ListValue or Value,
329                 "txpower", translate("Transmit Power"), "dBm")
330
331         tp.rmempty = true
332         tp.default = tx_power_cur
333
334         function tp.cfgvalue(...)
335                 return txpower_current(Value.cfgvalue(...), tx_power_list)
336         end
337
338         for _, p in ipairs(tx_power_list) do
339                 tp:value(p.driver_dbm, "%i dBm (%i mW)"
340                         %{ p.display_dbm, p.display_mw })
341         end
342
343         mode = s:taboption("advanced", ListValue, "hwmode", translate("Mode"))
344         mode:value("11bg", "802.11b+g")
345         mode:value("11b", "802.11b")
346         mode:value("11g", "802.11g")
347         mode:value("11gst", "802.11g + Turbo")
348
349         ant1 = s:taboption("advanced", ListValue, "txantenna", translate("Transmitter Antenna"))
350         ant1.widget = "radio"
351         ant1:depends("diversity", "")
352         ant1:value("3", translate("auto"))
353         ant1:value("0", translate("Antenna 1"))
354         ant1:value("1", translate("Antenna 2"))
355
356         ant2 = s:taboption("advanced", ListValue, "rxantenna", translate("Receiver Antenna"))
357         ant2.widget = "radio"
358         ant2:depends("diversity", "")
359         ant2:value("3", translate("auto"))
360         ant2:value("0", translate("Antenna 1"))
361         ant2:value("1", translate("Antenna 2"))
362
363         s:taboption("advanced", Flag, "frameburst", translate("Frame Bursting"))
364
365         s:taboption("advanced", Value, "distance", translate("Distance Optimization"))
366         --s:option(Value, "slottime", translate("Slot time"))
367
368         s:taboption("advanced", Value, "country", translate("Country Code"))
369         s:taboption("advanced", Value, "maxassoc", translate("Connection Limit"))
370 end
371
372
373 --------------------- HostAP Device ---------------------
374
375 if hwtype == "prism2" then
376         s:taboption("advanced", Value, "txpower", translate("Transmit Power"), "att units").rmempty = true
377
378         s:taboption("advanced", Flag, "diversity", translate("Diversity")).rmempty = false
379
380         s:taboption("advanced", Value, "txantenna", translate("Transmitter Antenna"))
381         s:taboption("advanced", Value, "rxantenna", translate("Receiver Antenna"))
382 end
383
384
385 ----------------------- Interface -----------------------
386
387 s = m:section(NamedSection, wnet.sid, "wifi-iface", translate("Interface Configuration"))
388 ifsection = s
389 s.addremove = false
390 s.anonymous = true
391 s.defaults.device = wdev:name()
392
393 s:tab("general", translate("General Setup"))
394 s:tab("encryption", translate("Wireless Security"))
395 s:tab("macfilter", translate("MAC-Filter"))
396 s:tab("advanced", translate("Advanced Settings"))
397
398 s:taboption("general", Value, "ssid", translate("<abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
399
400 mode = s:taboption("general", ListValue, "mode", translate("Mode"))
401 mode.override_values = true
402 mode:value("ap", translate("Access Point"))
403 mode:value("sta", translate("Client"))
404 mode:value("adhoc", translate("Ad-Hoc"))
405
406 bssid = s:taboption("general", Value, "bssid", translate("<abbr title=\"Basic Service Set Identifier\">BSSID</abbr>"))
407
408 network = s:taboption("general", Value, "network", translate("Network"),
409         translate("Choose the network you want to attach to this wireless interface. " ..
410                 "Select <em>unspecified</em> to not attach any network or fill out the " ..
411                 "<em>create</em> field to define a new network."))
412
413 network.rmempty = true
414 network.template = "cbi/network_netlist"
415 network.widget = "radio"
416
417 function network.write(self, section, value)
418         local i = nw:get_interface(section)
419         if i then
420                 if value == '-' then
421                         value = m:formvalue(self:cbid(section) .. ".newnet")
422                         if value and #value > 0 then
423                                 local n = nw:add_network(value, {proto="none"})
424                                 if n then n:add_interface(i) end
425                         else
426                                 local n = i:get_network()
427                                 if n then n:del_interface(i) end
428                         end
429                 else
430                         local n = nw:get_network(value)
431                         if n then
432                                 n:set("type", "bridge")
433                                 n:add_interface(i)
434                         end
435                 end
436         end
437 end
438
439 -------------------- MAC80211 Interface ----------------------
440
441 if hwtype == "mac80211" then
442         if fs.access("/usr/sbin/iw") then
443                 mode:value("mesh", "802.11s")
444         end
445
446         mode:value("ahdemo", translate("Pseudo Ad-Hoc (ahdemo)"))
447         mode:value("monitor", translate("Monitor"))
448         bssid:depends({mode="adhoc"})
449         bssid:depends({mode="sta"})
450         bssid:depends({mode="sta-wds"})
451
452         mp = s:taboption("macfilter", ListValue, "macfilter", translate("MAC-Address Filter"))
453         mp:depends({mode="ap"})
454         mp:depends({mode="ap-wds"})
455         mp:value("", translate("disable"))
456         mp:value("allow", translate("Allow listed only"))
457         mp:value("deny", translate("Allow all except listed"))
458
459         ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
460         ml.datatype = "macaddr"
461         ml:depends({macfilter="allow"})
462         ml:depends({macfilter="deny"})
463         arplist(ml)
464
465         mode:value("ap-wds", "%s (%s)" % {translate("Access Point"), translate("WDS")})
466         mode:value("sta-wds", "%s (%s)" % {translate("Client"), translate("WDS")})
467
468         function mode.write(self, section, value)
469                 if value == "ap-wds" then
470                         ListValue.write(self, section, "ap")
471                         m.uci:set("wireless", section, "wds", 1)
472                 elseif value == "sta-wds" then
473                         ListValue.write(self, section, "sta")
474                         m.uci:set("wireless", section, "wds", 1)
475                 else
476                         ListValue.write(self, section, value)
477                         m.uci:delete("wireless", section, "wds")
478                 end
479         end
480
481         function mode.cfgvalue(self, section)
482                 local mode = ListValue.cfgvalue(self, section)
483                 local wds  = m.uci:get("wireless", section, "wds") == "1"
484
485                 if mode == "ap" and wds then
486                         return "ap-wds"
487                 elseif mode == "sta" and wds then
488                         return "sta-wds"
489                 else
490                         return mode
491                 end
492         end
493
494         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
495         hidden:depends({mode="ap"})
496         hidden:depends({mode="ap-wds"})
497 end
498
499
500
501 -------------------- Madwifi Interface ----------------------
502
503 if hwtype == "atheros" then
504         mode:value("ahdemo", translate("Pseudo Ad-Hoc (ahdemo)"))
505         mode:value("monitor", translate("Monitor"))
506         mode:value("ap-wds", "%s (%s)" % {translate("Access Point"), translate("WDS")})
507         mode:value("sta-wds", "%s (%s)" % {translate("Client"), translate("WDS")})
508         mode:value("wds", translate("Static WDS"))
509
510         function mode.write(self, section, value)
511                 if value == "ap-wds" then
512                         ListValue.write(self, section, "ap")
513                         m.uci:set("wireless", section, "wds", 1)
514                 elseif value == "sta-wds" then
515                         ListValue.write(self, section, "sta")
516                         m.uci:set("wireless", section, "wds", 1)
517                 else
518                         ListValue.write(self, section, value)
519                         m.uci:delete("wireless", section, "wds")
520                 end
521         end
522
523         function mode.cfgvalue(self, section)
524                 local mode = ListValue.cfgvalue(self, section)
525                 local wds  = m.uci:get("wireless", section, "wds") == "1"
526
527                 if mode == "ap" and wds then
528                         return "ap-wds"
529                 elseif mode == "sta" and wds then
530                         return "sta-wds"
531                 else
532                         return mode
533                 end
534         end
535
536         bssid:depends({mode="adhoc"})
537         bssid:depends({mode="ahdemo"})
538         bssid:depends({mode="wds"})
539
540         wdssep = s:taboption("advanced", Flag, "wdssep", translate("Separate WDS"))
541         wdssep:depends({mode="ap-wds"})
542
543         s:taboption("advanced", Flag, "doth", "802.11h")
544         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
545         hidden:depends({mode="ap"})
546         hidden:depends({mode="adhoc"})
547         hidden:depends({mode="ap-wds"})
548         hidden:depends({mode="sta-wds"})
549         isolate = s:taboption("advanced", Flag, "isolate", translate("Separate Clients"),
550          translate("Prevents client-to-client communication"))
551         isolate:depends({mode="ap"})
552         s:taboption("advanced", Flag, "bgscan", translate("Background Scan"))
553
554         mp = s:taboption("macfilter", ListValue, "macpolicy", translate("MAC-Address Filter"))
555         mp:value("", translate("disable"))
556         mp:value("allow", translate("Allow listed only"))
557         mp:value("deny", translate("Allow all except listed"))
558
559         ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
560         ml.datatype = "macaddr"
561         ml:depends({macpolicy="allow"})
562         ml:depends({macpolicy="deny"})
563         arplist(ml)
564
565         s:taboption("advanced", Value, "rate", translate("Transmission Rate"))
566         s:taboption("advanced", Value, "mcast_rate", translate("Multicast Rate"))
567         s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
568         s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
569         s:taboption("advanced", Value, "minrate", translate("Minimum Rate"))
570         s:taboption("advanced", Value, "maxrate", translate("Maximum Rate"))
571         s:taboption("advanced", Flag, "compression", translate("Compression"))
572
573         s:taboption("advanced", Flag, "bursting", translate("Frame Bursting"))
574         s:taboption("advanced", Flag, "turbo", translate("Turbo Mode"))
575         s:taboption("advanced", Flag, "ff", translate("Fast Frames"))
576
577         s:taboption("advanced", Flag, "wmm", translate("WMM Mode"))
578         s:taboption("advanced", Flag, "xr", translate("XR Support"))
579         s:taboption("advanced", Flag, "ar", translate("AR Support"))
580
581         local swm = s:taboption("advanced", Flag, "sw_merge", translate("Disable HW-Beacon timer"))
582         swm:depends({mode="adhoc"})
583
584         local nos = s:taboption("advanced", Flag, "nosbeacon", translate("Disable HW-Beacon timer"))
585         nos:depends({mode="sta"})
586         nos:depends({mode="sta-wds"})
587
588         local probereq = s:taboption("advanced", Flag, "probereq", translate("Do not send probe responses"))
589         probereq.enabled  = "0"
590         probereq.disabled = "1"
591 end
592
593
594 -------------------- Broadcom Interface ----------------------
595
596 if hwtype == "broadcom" then
597         mode:value("wds", translate("WDS"))
598         mode:value("monitor", translate("Monitor"))
599
600         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
601         hidden:depends({mode="ap"})
602         hidden:depends({mode="adhoc"})
603         hidden:depends({mode="wds"})
604
605         isolate = s:taboption("advanced", Flag, "isolate", translate("Separate Clients"),
606          translate("Prevents client-to-client communication"))
607         isolate:depends({mode="ap"})
608
609         s:taboption("advanced", Flag, "doth", "802.11h")
610         s:taboption("advanced", Flag, "wmm", translate("WMM Mode"))
611
612         bssid:depends({mode="wds"})
613         bssid:depends({mode="adhoc"})
614 end
615
616
617 ----------------------- HostAP Interface ---------------------
618
619 if hwtype == "prism2" then
620         mode:value("wds", translate("WDS"))
621         mode:value("monitor", translate("Monitor"))
622
623         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
624         hidden:depends({mode="ap"})
625         hidden:depends({mode="adhoc"})
626         hidden:depends({mode="wds"})
627
628         bssid:depends({mode="sta"})
629
630         mp = s:taboption("macfilter", ListValue, "macpolicy", translate("MAC-Address Filter"))
631         mp:value("", translate("disable"))
632         mp:value("allow", translate("Allow listed only"))
633         mp:value("deny", translate("Allow all except listed"))
634         ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
635         ml:depends({macpolicy="allow"})
636         ml:depends({macpolicy="deny"})
637         arplist(ml)
638
639         s:taboption("advanced", Value, "rate", translate("Transmission Rate"))
640         s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
641         s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
642 end
643
644
645 ------------------- WiFI-Encryption -------------------
646
647 encr = s:taboption("encryption", ListValue, "encryption", translate("Encryption"))
648 encr.override_values = true
649 encr.override_depends = true
650 encr:depends({mode="ap"})
651 encr:depends({mode="sta"})
652 encr:depends({mode="adhoc"})
653 encr:depends({mode="ahdemo"})
654 encr:depends({mode="ap-wds"})
655 encr:depends({mode="sta-wds"})
656 encr:depends({mode="mesh"})
657
658 cipher = s:taboption("encryption", ListValue, "cipher", translate("Cipher"))
659 cipher:depends({encryption="wpa"})
660 cipher:depends({encryption="wpa2"})
661 cipher:depends({encryption="psk"})
662 cipher:depends({encryption="psk2"})
663 cipher:depends({encryption="wpa-mixed"})
664 cipher:depends({encryption="psk-mixed"})
665 cipher:value("auto", translate("auto"))
666 cipher:value("ccmp", translate("Force CCMP (AES)"))
667 cipher:value("tkip", translate("Force TKIP"))
668 cipher:value("tkip+ccmp", translate("Force TKIP and CCMP (AES)"))
669
670 function encr.cfgvalue(self, section)
671         local v = tostring(ListValue.cfgvalue(self, section))
672         if v == "wep" then
673                 return "wep-open"
674         elseif v and v:match("%+") then
675                 return (v:gsub("%+.+$", ""))
676         end
677         return v
678 end
679
680 function encr.write(self, section, value)
681         local e = tostring(encr:formvalue(section))
682         local c = tostring(cipher:formvalue(section))
683         if value == "wpa" or value == "wpa2"  then
684                 self.map.uci:delete("wireless", section, "key")
685         end
686         if e and (c == "tkip" or c == "ccmp" or c == "tkip+ccmp") then
687                 e = e .. "+" .. c
688         end
689         self.map:set(section, "encryption", e)
690 end
691
692 function cipher.cfgvalue(self, section)
693         local v = tostring(ListValue.cfgvalue(encr, section))
694         if v and v:match("%+") then
695                 v = v:gsub("^[^%+]+%+", "")
696                 if v == "aes" then v = "ccmp"
697                 elseif v == "tkip+aes" then v = "tkip+ccmp"
698                 elseif v == "aes+tkip" then v = "tkip+ccmp"
699                 elseif v == "ccmp+tkip" then v = "tkip+ccmp"
700                 end
701         end
702         return v
703 end
704
705 function cipher.write(self, section)
706         return encr:write(section)
707 end
708
709
710 encr:value("none", "No Encryption")
711 encr:value("wep-open",   translate("WEP Open System"), {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"}, {mode="adhoc"}, {mode="ahdemo"}, {mode="wds"})
712 encr:value("wep-shared", translate("WEP Shared Key"),  {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"}, {mode="adhoc"}, {mode="ahdemo"}, {mode="wds"})
713
714 if hwtype == "atheros" or hwtype == "mac80211" or hwtype == "prism2" then
715         local supplicant = fs.access("/usr/sbin/wpa_supplicant")
716         local hostapd = fs.access("/usr/sbin/hostapd")
717
718         -- Probe EAP support                                                                                                
719         local has_ap_eap  = (os.execute("hostapd -veap >/dev/null 2>/dev/null") == 0)                                                        
720         local has_sta_eap = (os.execute("wpa_supplicant -veap >/dev/null 2>/dev/null") == 0)
721
722         if hostapd and supplicant then
723                 encr:value("psk", "WPA-PSK", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
724                 encr:value("psk2", "WPA2-PSK", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
725                 encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
726                 if has_ap_eap and has_sta_eap then
727                         encr:value("wpa", "WPA-EAP", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
728                         encr:value("wpa2", "WPA2-EAP", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
729                 end
730         elseif hostapd and not supplicant then
731                 encr:value("psk", "WPA-PSK", {mode="ap"}, {mode="ap-wds"})
732                 encr:value("psk2", "WPA2-PSK", {mode="ap"}, {mode="ap-wds"})
733                 encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode", {mode="ap"}, {mode="ap-wds"})
734                 if has_ap_eap then
735                         encr:value("wpa", "WPA-EAP", {mode="ap"}, {mode="ap-wds"})
736                         encr:value("wpa2", "WPA2-EAP", {mode="ap"}, {mode="ap-wds"})
737                 end
738                 encr.description = translate(
739                         "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
740                         "and ad-hoc mode) to be installed."
741                 )
742         elseif not hostapd and supplicant then
743                 encr:value("psk", "WPA-PSK", {mode="sta"}, {mode="sta-wds"})
744                 encr:value("psk2", "WPA2-PSK", {mode="sta"}, {mode="sta-wds"})
745                 encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode", {mode="sta"}, {mode="sta-wds"})
746                 if has_sta_eap then
747                         encr:value("wpa", "WPA-EAP", {mode="sta"}, {mode="sta-wds"})
748                         encr:value("wpa2", "WPA2-EAP", {mode="sta"}, {mode="sta-wds"})
749                 end
750                 encr.description = translate(
751                         "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
752                         "and ad-hoc mode) to be installed."
753                 )
754         else
755                 encr.description = translate(
756                         "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
757                         "and ad-hoc mode) to be installed."
758                 )
759         end
760 elseif hwtype == "broadcom" then
761         encr:value("psk", "WPA-PSK")
762         encr:value("psk2", "WPA2-PSK")
763         encr:value("psk+psk2", "WPA-PSK/WPA2-PSK Mixed Mode")
764 end
765
766 auth_server = s:taboption("encryption", Value, "auth_server", translate("Radius-Authentication-Server"))
767 auth_server:depends({mode="ap", encryption="wpa"})
768 auth_server:depends({mode="ap", encryption="wpa2"})
769 auth_server:depends({mode="ap-wds", encryption="wpa"})
770 auth_server:depends({mode="ap-wds", encryption="wpa2"})
771 auth_server.rmempty = true
772 auth_server.datatype = "host"
773
774 auth_port = s:taboption("encryption", Value, "auth_port", translate("Radius-Authentication-Port"), translatef("Default %d", 1812))
775 auth_port:depends({mode="ap", encryption="wpa"})
776 auth_port:depends({mode="ap", encryption="wpa2"})
777 auth_port:depends({mode="ap-wds", encryption="wpa"})
778 auth_port:depends({mode="ap-wds", encryption="wpa2"})
779 auth_port.rmempty = true
780 auth_port.datatype = "port"
781
782 auth_secret = s:taboption("encryption", Value, "auth_secret", translate("Radius-Authentication-Secret"))
783 auth_secret:depends({mode="ap", encryption="wpa"})
784 auth_secret:depends({mode="ap", encryption="wpa2"})
785 auth_secret:depends({mode="ap-wds", encryption="wpa"})
786 auth_secret:depends({mode="ap-wds", encryption="wpa2"})
787 auth_secret.rmempty = true
788 auth_secret.password = true
789
790 acct_server = s:taboption("encryption", Value, "acct_server", translate("Radius-Accounting-Server"))
791 acct_server:depends({mode="ap", encryption="wpa"})
792 acct_server:depends({mode="ap", encryption="wpa2"})
793 acct_server:depends({mode="ap-wds", encryption="wpa"})
794 acct_server:depends({mode="ap-wds", encryption="wpa2"})
795 acct_server.rmempty = true
796 acct_server.datatype = "host"
797
798 acct_port = s:taboption("encryption", Value, "acct_port", translate("Radius-Accounting-Port"), translatef("Default %d", 1813))
799 acct_port:depends({mode="ap", encryption="wpa"})
800 acct_port:depends({mode="ap", encryption="wpa2"})
801 acct_port:depends({mode="ap-wds", encryption="wpa"})
802 acct_port:depends({mode="ap-wds", encryption="wpa2"})
803 acct_port.rmempty = true
804 acct_port.datatype = "port"
805
806 acct_secret = s:taboption("encryption", Value, "acct_secret", translate("Radius-Accounting-Secret"))
807 acct_secret:depends({mode="ap", encryption="wpa"})
808 acct_secret:depends({mode="ap", encryption="wpa2"})
809 acct_secret:depends({mode="ap-wds", encryption="wpa"})
810 acct_secret:depends({mode="ap-wds", encryption="wpa2"})
811 acct_secret.rmempty = true
812 acct_secret.password = true
813
814 wpakey = s:taboption("encryption", Value, "_wpa_key", translate("Key"))
815 wpakey:depends("encryption", "psk")
816 wpakey:depends("encryption", "psk2")
817 wpakey:depends("encryption", "psk+psk2")
818 wpakey:depends("encryption", "psk-mixed")
819 wpakey.datatype = "wpakey"
820 wpakey.rmempty = true
821 wpakey.password = true
822
823 wpakey.cfgvalue = function(self, section, value)
824         local key = m.uci:get("wireless", section, "key")
825         if key == "1" or key == "2" or key == "3" or key == "4" then
826                 return nil
827         end
828         return key
829 end
830
831 wpakey.write = function(self, section, value)
832         self.map.uci:set("wireless", section, "key", value)
833         self.map.uci:delete("wireless", section, "key1")
834 end
835
836
837 wepslot = s:taboption("encryption", ListValue, "_wep_key", translate("Used Key Slot"))
838 wepslot:depends("encryption", "wep-open")
839 wepslot:depends("encryption", "wep-shared")
840 wepslot:value("1", translatef("Key #%d", 1))
841 wepslot:value("2", translatef("Key #%d", 2))
842 wepslot:value("3", translatef("Key #%d", 3))
843 wepslot:value("4", translatef("Key #%d", 4))
844
845 wepslot.cfgvalue = function(self, section)
846         local slot = tonumber(m.uci:get("wireless", section, "key"))
847         if not slot or slot < 1 or slot > 4 then
848                 return 1
849         end
850         return slot
851 end
852
853 wepslot.write = function(self, section, value)
854         self.map.uci:set("wireless", section, "key", value)
855 end
856
857 local slot
858 for slot=1,4 do
859         wepkey = s:taboption("encryption", Value, "key" .. slot, translatef("Key #%d", slot))
860         wepkey:depends("encryption", "wep-open")
861         wepkey:depends("encryption", "wep-shared")
862         wepkey.datatype = "wepkey"
863         wepkey.rmempty = true
864         wepkey.password = true
865
866         function wepkey.write(self, section, value)
867                 if value and (#value == 5 or #value == 13) then
868                         value = "s:" .. value
869                 end
870                 return Value.write(self, section, value)
871         end
872 end
873
874
875 if hwtype == "atheros" or hwtype == "mac80211" or hwtype == "prism2" then
876         nasid = s:taboption("encryption", Value, "nasid", translate("NAS ID"))
877         nasid:depends({mode="ap", encryption="wpa"})
878         nasid:depends({mode="ap", encryption="wpa2"})
879         nasid:depends({mode="ap-wds", encryption="wpa"})
880         nasid:depends({mode="ap-wds", encryption="wpa2"})
881         nasid.rmempty = true
882
883         eaptype = s:taboption("encryption", ListValue, "eap_type", translate("EAP-Method"))
884         eaptype:value("tls",  "TLS")
885         eaptype:value("ttls", "TTLS")
886         eaptype:value("peap", "PEAP")
887         eaptype:depends({mode="sta", encryption="wpa"})
888         eaptype:depends({mode="sta", encryption="wpa2"})
889         eaptype:depends({mode="sta-wds", encryption="wpa"})
890         eaptype:depends({mode="sta-wds", encryption="wpa2"})
891
892         cacert = s:taboption("encryption", FileUpload, "ca_cert", translate("Path to CA-Certificate"))
893         cacert:depends({mode="sta", encryption="wpa"})
894         cacert:depends({mode="sta", encryption="wpa2"})
895         cacert:depends({mode="sta-wds", encryption="wpa"})
896         cacert:depends({mode="sta-wds", encryption="wpa2"})
897
898         clientcert = s:taboption("encryption", FileUpload, "client_cert", translate("Path to Client-Certificate"))
899         clientcert:depends({mode="sta", encryption="wpa"})
900         clientcert:depends({mode="sta", encryption="wpa2"})
901         clientcert:depends({mode="sta-wds", encryption="wpa"})
902         clientcert:depends({mode="sta-wds", encryption="wpa2"})
903
904         privkey = s:taboption("encryption", FileUpload, "priv_key", translate("Path to Private Key"))
905         privkey:depends({mode="sta", eap_type="tls", encryption="wpa2"})
906         privkey:depends({mode="sta", eap_type="tls", encryption="wpa"})
907         privkey:depends({mode="sta-wds", eap_type="tls", encryption="wpa2"})
908         privkey:depends({mode="sta-wds", eap_type="tls", encryption="wpa"})
909
910         privkeypwd = s:taboption("encryption", Value, "priv_key_pwd", translate("Password of Private Key"))
911         privkeypwd:depends({mode="sta", eap_type="tls", encryption="wpa2"})
912         privkeypwd:depends({mode="sta", eap_type="tls", encryption="wpa"})
913         privkeypwd:depends({mode="sta-wds", eap_type="tls", encryption="wpa2"})
914         privkeypwd:depends({mode="sta-wds", eap_type="tls", encryption="wpa"})
915
916
917         auth = s:taboption("encryption", Value, "auth", translate("Authentication"))
918         auth:value("PAP")
919         auth:value("CHAP")
920         auth:value("MSCHAP")
921         auth:value("MSCHAPV2")
922         auth:depends({mode="sta", eap_type="peap", encryption="wpa2"})
923         auth:depends({mode="sta", eap_type="peap", encryption="wpa"})
924         auth:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
925         auth:depends({mode="sta", eap_type="ttls", encryption="wpa"})
926         auth:depends({mode="sta-wds", eap_type="peap", encryption="wpa2"})
927         auth:depends({mode="sta-wds", eap_type="peap", encryption="wpa"})
928         auth:depends({mode="sta-wds", eap_type="ttls", encryption="wpa2"})
929         auth:depends({mode="sta-wds", eap_type="ttls", encryption="wpa"})
930
931
932         identity = s:taboption("encryption", Value, "identity", translate("Identity"))
933         identity:depends({mode="sta", eap_type="peap", encryption="wpa2"})
934         identity:depends({mode="sta", eap_type="peap", encryption="wpa"})
935         identity:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
936         identity:depends({mode="sta", eap_type="ttls", encryption="wpa"})
937         identity:depends({mode="sta-wds", eap_type="peap", encryption="wpa2"})
938         identity:depends({mode="sta-wds", eap_type="peap", encryption="wpa"})
939         identity:depends({mode="sta-wds", eap_type="ttls", encryption="wpa2"})
940         identity:depends({mode="sta-wds", eap_type="ttls", encryption="wpa"})
941
942         password = s:taboption("encryption", Value, "password", translate("Password"))
943         password:depends({mode="sta", eap_type="peap", encryption="wpa2"})
944         password:depends({mode="sta", eap_type="peap", encryption="wpa"})
945         password:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
946         password:depends({mode="sta", eap_type="ttls", encryption="wpa"})
947         password:depends({mode="sta-wds", eap_type="peap", encryption="wpa2"})
948         password:depends({mode="sta-wds", eap_type="peap", encryption="wpa"})
949         password:depends({mode="sta-wds", eap_type="ttls", encryption="wpa2"})
950         password:depends({mode="sta-wds", eap_type="ttls", encryption="wpa"})
951 end
952
953 return m