modules/admin-full: add wep-open and wep-shared support
[project/luci.git] / modules / admin-full / luasrc / model / cbi / admin_network / wifi.lua
1 --[[
2 LuCI - Lua Configuration Interface
3
4 Copyright 2008 Steven Barth <steven@midlink.org>
5
6 Licensed under the Apache License, Version 2.0 (the "License");
7 you may not use this file except in compliance with the License.
8 You may obtain a copy of the License at
9
10         http://www.apache.org/licenses/LICENSE-2.0
11
12 $Id$
13 ]]--
14
15 local wa = require "luci.tools.webadmin"
16 local nw = require "luci.model.network"
17 local ww = require "luci.model.wireless"
18 local fs = require "nixio.fs"
19
20 arg[1] = arg[1] or ""
21 arg[2] = arg[2] or ""
22
23 m = Map("wireless", "",
24         translate("The <em>Device Configuration</em> section covers physical settings of the radio " ..
25                 "hardware such as channel, transmit power or antenna selection which is shared among all " ..
26                 "defined wireless networks (if the radio hardware is multi-SSID capable). Per network settings " ..
27                 "like encryption or operation mode are grouped in the <em>Interface Configuration</em>."))
28
29 m:chain("network")
30
31 local ifsection
32
33 function m.on_commit(map)
34         nw.init(map.uci)
35         ww.init(map.uci)
36
37         local wnet = ww:get_network(arg[2])
38         if ifsection and wnet then
39                 ifsection.section = wnet.sid
40         end
41 end
42
43 nw.init(m.uci)
44 ww.init(m.uci)
45
46 local wnet = ww:get_network(arg[2])
47
48 -- redirect to overview page if network does not exist anymore (e.g. after a revert)
49 if not wnet then
50         luci.http.redirect(luci.dispatcher.build_url("admin/network/wireless"))
51         return
52 end
53
54 m.title = ww:get_i18n(wnet)
55
56
57 local iw = luci.sys.wifi.getiwinfo(arg[1])
58 local tx_powers = iw.txpwrlist  or { }
59 local hw_modes  = iw.hwmodelist or { }
60
61
62 s = m:section(NamedSection, arg[1], "wifi-device", translate("Device Configuration"))
63 s.addremove = false
64
65 s:tab("general", translate("General Setup"))
66 s:tab("macfilter", translate("MAC-Filter"))
67 s:tab("advanced", translate("Advanced Settings"))
68
69 --[[
70 back = s:option(DummyValue, "_overview", translate("Overview"))
71 back.value = ""
72 back.titleref = luci.dispatcher.build_url("admin", "network", "wireless")
73 ]]
74
75 st = s:taboption("general", DummyValue, "__status", translate("Status"))
76 st.template = "admin_network/wifi_status"
77 st.ifname   = arg[2]
78
79 en = s:taboption("general", Flag, "disabled", translate("Enable device"))
80 en.enabled = "0"
81 en.disabled = "1"
82 en.rmempty = false
83
84 function en.cfgvalue(self, section)
85         return Flag.cfgvalue(self, section) or "0"
86 end
87
88
89 local hwtype = m:get(arg[1], "type")
90 local htcaps = m:get(arg[1], "ht_capab") and true or false
91
92 -- NanoFoo
93 local nsantenna = m:get(arg[1], "antenna")
94
95 ch = s:taboption("general", Value, "channel", translate("Channel"))
96 ch:value("auto", translate("auto"))
97 for _, f in ipairs(iw and iw.freqlist or luci.sys.wifi.channels()) do
98         if not f.restricted then
99                 ch:value(f.channel, "%i (%.3f GHz)" %{ f.channel, f.mhz / 1000 })
100         end
101 end
102
103
104 ------------------- MAC80211 Device ------------------
105
106 if hwtype == "mac80211" then
107         tp = s:taboption("general",
108                 (tx_powers and #tx_powers > 0) and ListValue or Value,
109                 "txpower", translate("Transmit Power"), "dBm")
110
111         tp.rmempty = true
112         tp.default = tostring(iw and iw.txpower or tx_powers[#tx_powers])
113         for _, p in ipairs(tx_powers or {}) do
114                 tp:value(p.dbm, "%i dBm (%i mW)" %{ p.dbm, p.mw })
115         end
116
117         mode = s:taboption("advanced", ListValue, "hwmode", translate("Mode"))
118         mode:value("", translate("auto"))
119         if hw_modes.b then mode:value("11b", "802.11b") end
120         if hw_modes.g then mode:value("11g", "802.11g") end
121         if hw_modes.a then mode:value("11a", "802.11a") end
122
123         if htcaps then
124                 if hw_modes.g and hw_modes.n then mode:value("11ng", "802.11g+n") end
125                 if hw_modes.a and hw_modes.n then mode:value("11na", "802.11a+n") end
126
127                 htmode = s:taboption("advanced", ListValue, "htmode", translate("HT mode"))
128                 htmode:depends("hwmode", "11na")
129                 htmode:depends("hwmode", "11ng")
130                 htmode:value("HT20", "20MHz")
131                 htmode:value("HT40-", translate("40MHz 2nd channel below"))
132                 htmode:value("HT40+", translate("40MHz 2nd channel above"))
133
134                 --htcapab = s:taboption("advanced", DynamicList, "ht_capab", translate("HT capabilities"))
135                 --htcapab:depends("hwmode", "11na")
136                 --htcapab:depends("hwmode", "11ng")
137         end
138
139         local cl = iw and iw.countrylist
140         if cl and #cl > 0 then
141                 cc = s:taboption("advanced", ListValue, "country", translate("Country Code"), translate("Use ISO/IEC 3166 alpha2 country codes."))
142                 cc.default = tostring(iw and iw.country or "00")
143                 for _, c in ipairs(cl) do
144                         cc:value(c.alpha2, "%s - %s" %{ c.alpha2, c.name })
145                 end
146         else
147                 s:taboption("advanced", Value, "country", translate("Country Code"), translate("Use ISO/IEC 3166 alpha2 country codes."))
148         end
149
150         s:taboption("advanced", Value, "distance", translate("Distance Optimization"),
151                 translate("Distance to farthest network member in meters."))
152 end
153
154
155 ------------------- Madwifi Device ------------------
156
157 if hwtype == "atheros" then
158         tp = s:taboption("general",
159                 (#tx_powers > 0) and ListValue or Value,
160                 "txpower", translate("Transmit Power"), "dBm")
161
162         tp.rmempty = true
163         for _, p in ipairs(iw.txpwrlist) do
164                 tp:value(p.dbm, "%i dBm (%i mW)" %{ p.dbm, p.mw })
165         end
166
167         mode = s:taboption("advanced", ListValue, "hwmode", translate("Mode"))
168         mode:value("", translate("auto"))
169         if hw_modes.b then mode:value("11b", "802.11b") end
170         if hw_modes.g then mode:value("11g", "802.11g") end
171         if hw_modes.a then mode:value("11a", "802.11a") end
172         if hw_modes.g then mode:value("11bg", "802.11b+g") end
173         if hw_modes.g then mode:value("11gst", "802.11g + Turbo") end
174         if hw_modes.a then mode:value("11ast", "802.11a + Turbo") end
175         mode:value("fh", translate("Frequency Hopping"))
176
177         s:taboption("advanced", Flag, "diversity", translate("Diversity")).rmempty = false
178
179         if not nsantenna then
180                 ant1 = s:taboption("advanced", ListValue, "txantenna", translate("Transmitter Antenna"))
181                 ant1.widget = "radio"
182                 ant1.orientation = "horizontal"
183                 ant1:depends("diversity", "")
184                 ant1:value("0", translate("auto"))
185                 ant1:value("1", translate("Antenna 1"))
186                 ant1:value("2", translate("Antenna 2"))
187
188                 ant2 = s:taboption("advanced", ListValue, "rxantenna", translate("Receiver Antenna"))
189                 ant2.widget = "radio"
190                 ant2.orientation = "horizontal"
191                 ant2:depends("diversity", "")
192                 ant2:value("0", translate("auto"))
193                 ant2:value("1", translate("Antenna 1"))
194                 ant2:value("2", translate("Antenna 2"))
195
196         else -- NanoFoo
197                 local ant = s:taboption("advanced", ListValue, "antenna", translate("Transmitter Antenna"))
198                 ant:value("auto")
199                 ant:value("vertical")
200                 ant:value("horizontal")
201                 ant:value("external")
202         end
203
204         s:taboption("advanced", Value, "distance", translate("Distance Optimization"),
205                 translate("Distance to farthest network member in meters."))
206         s:taboption("advanced", Value, "regdomain", translate("Regulatory Domain"))
207         s:taboption("advanced", Value, "country", translate("Country Code"))
208         s:taboption("advanced", Flag, "outdoor", translate("Outdoor Channels"))
209
210         --s:option(Flag, "nosbeacon", translate("Disable HW-Beacon timer"))
211 end
212
213
214
215 ------------------- Broadcom Device ------------------
216
217 if hwtype == "broadcom" then
218         tp = s:taboption("general",
219                 (#tx_powers > 0) and ListValue or Value,
220                 "txpower", translate("Transmit Power"), "dBm")
221
222         tp.rmempty = true
223         for _, p in ipairs(iw.txpwrlist) do
224                 tp:value(p.dbm, "%i dBm (%i mW)" %{ p.dbm, p.mw })
225         end
226
227         mode = s:taboption("advanced", ListValue, "hwmode", translate("Mode"))
228         mode:value("11bg", "802.11b+g")
229         mode:value("11b", "802.11b")
230         mode:value("11g", "802.11g")
231         mode:value("11gst", "802.11g + Turbo")
232
233         mp = s:taboption("macfilter", ListValue, "macfilter", translate("MAC-Address Filter"))
234         mp:value("", translate("disable"))
235         mp:value("allow", translate("Allow listed only"))
236         mp:value("deny", translate("Allow all except listed"))
237         ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
238         ml:depends({macfilter="allow"})
239         ml:depends({macfilter="deny"})
240
241         ant1 = s:taboption("advanced", ListValue, "txantenna", translate("Transmitter Antenna"))
242         ant1.widget = "radio"
243         ant1:depends("diversity", "")
244         ant1:value("3", translate("auto"))
245         ant1:value("0", translate("Antenna 1"))
246         ant1:value("1", translate("Antenna 2"))
247
248         ant2 = s:taboption("advanced", ListValue, "rxantenna", translate("Receiver Antenna"))
249         ant2.widget = "radio"
250         ant2:depends("diversity", "")
251         ant2:value("3", translate("auto"))
252         ant2:value("0", translate("Antenna 1"))
253         ant2:value("1", translate("Antenna 2"))
254
255         s:taboption("advanced", Flag, "frameburst", translate("Frame Bursting"))
256
257         s:taboption("advanced", Value, "distance", translate("Distance Optimization"))
258         --s:option(Value, "slottime", translate("Slot time"))
259
260         s:taboption("advanced", Value, "country", translate("Country Code"))
261         s:taboption("advanced", Value, "maxassoc", translate("Connection Limit"))
262 end
263
264
265 --------------------- HostAP Device ---------------------
266
267 if hwtype == "prism2" then
268         s:taboption("advanced", Value, "txpower", translate("Transmit Power"), "att units").rmempty = true
269
270         s:taboption("advanced", Flag, "diversity", translate("Diversity")).rmempty = false
271
272         s:taboption("advanced", Value, "txantenna", translate("Transmitter Antenna"))
273         s:taboption("advanced", Value, "rxantenna", translate("Receiver Antenna"))
274 end
275
276
277 ----------------------- Interface -----------------------
278
279 local wnet = ww:get_network(arg[2])
280
281 if wnet then
282         s = m:section(NamedSection, wnet.sid, "wifi-iface", translate("Interface Configuration"))
283         ifsection = s
284         s.addremove = false
285         s.anonymous = true
286         s.defaults.device = arg[1]
287
288         s:tab("general", translate("General Setup"))
289         s:tab("encryption", translate("Wireless Security"))
290         s:tab("macfilter", translate("MAC-Filter"))
291         s:tab("advanced", translate("Advanced Settings"))
292
293         s:taboption("general", Value, "ssid", translate("<abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
294
295         mode = s:taboption("general", ListValue, "mode", translate("Mode"))
296         mode.override_values = true
297         mode:value("ap", translate("Access Point"))
298         mode:value("sta", translate("Client"))
299         mode:value("adhoc", translate("Ad-Hoc"))
300
301         bssid = s:taboption("general", Value, "bssid", translate("<abbr title=\"Basic Service Set Identifier\">BSSID</abbr>"))
302
303         network = s:taboption("general", Value, "network", translate("Network"),
304                 translate("Choose the network you want to attach to this wireless interface. " ..
305                         "Select <em>unspecified</em> to not attach any network or fill out the " ..
306                         "<em>create</em> field to define a new network."))
307
308         network.rmempty = true
309         network.template = "cbi/network_netlist"
310         network.widget = "radio"
311
312         function network.write(self, section, value)
313                 local i = nw:get_interface(section)
314                 if i then
315                         if value == '-' then
316                                 value = m:formvalue(self:cbid(section) .. ".newnet")
317                                 if value and #value > 0 then
318                                         local n = nw:add_network(value, {proto="none"})
319                                         if n then n:add_interface(i) end
320                                 else
321                                         local n = i:get_network()
322                                         if n then n:del_interface(i) end
323                                 end
324                         else
325                                 local n = nw:get_network(value)
326                                 if n then
327                                         n:type("bridge")
328                                         n:add_interface(i)
329                                 end
330                         end
331                 end
332         end
333
334         -------------------- MAC80211 Interface ----------------------
335
336         if hwtype == "mac80211" then
337                 if fs.access("/usr/sbin/iw") then
338                         mode:value("mesh", "802.11s")
339                 end
340
341                 mode:value("ahdemo", translate("Pseudo Ad-Hoc (ahdemo)"))
342                 mode:value("monitor", translate("Monitor"))
343                 bssid:depends({mode="adhoc"})
344
345                 s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
346                 s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
347
348                 mode:value("ap-wds", "%s (%s)" % {translate("Access Point"), translate("WDS")})
349                 mode:value("sta-wds", "%s (%s)" % {translate("Client"), translate("WDS")})
350
351                 function mode.write(self, section, value)
352                         if value == "ap-wds" then
353                                 ListValue.write(self, section, "ap")
354                                 m.uci:set("wireless", section, "wds", 1)
355                         elseif value == "sta-wds" then
356                                 ListValue.write(self, section, "sta")
357                                 m.uci:set("wireless", section, "wds", 1)
358                         else
359                                 ListValue.write(self, section, value)
360                                 m.uci:delete("wireless", section, "wds")
361                         end
362                 end
363
364                 function mode.cfgvalue(self, section)
365                         local mode = ListValue.cfgvalue(self, section)
366                         local wds  = m.uci:get("wireless", section, "wds") == "1"
367
368                         if mode == "ap" and wds then
369                                 return "ap-wds"
370                         elseif mode == "sta" and wds then
371                                 return "sta-wds"
372                         else
373                                 return mode
374                         end
375                 end
376
377                 hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
378                 hidden:depends({mode="ap"})
379                 hidden:depends({mode="ap-wds"})
380         end
381
382
383
384         -------------------- Madwifi Interface ----------------------
385
386         if hwtype == "atheros" then
387                 mode:value("ahdemo", translate("Pseudo Ad-Hoc (ahdemo)"))
388                 mode:value("monitor", translate("Monitor"))
389                 mode:value("ap-wds", "%s (%s)" % {translate("Access Point"), translate("WDS")})
390                 mode:value("sta-wds", "%s (%s)" % {translate("Client"), translate("WDS")})
391                 mode:value("wds", translate("Static WDS"))
392
393                 function mode.write(self, section, value)
394                         if value == "ap-wds" then
395                                 ListValue.write(self, section, "ap")
396                                 m.uci:set("wireless", section, "wds", 1)
397                         elseif value == "sta-wds" then
398                                 ListValue.write(self, section, "sta")
399                                 m.uci:set("wireless", section, "wds", 1)
400                         else
401                                 ListValue.write(self, section, value)
402                                 m.uci:delete("wireless", section, "wds")
403                         end
404                 end
405
406                 function mode.cfgvalue(self, section)
407                         local mode = ListValue.cfgvalue(self, section)
408                         local wds  = m.uci:get("wireless", section, "wds") == "1"
409
410                         if mode == "ap" and wds then
411                                 return "ap-wds"
412                         elseif mode == "sta" and wds then
413                                 return "sta-wds"
414                         else
415                                 return mode
416                         end
417                 end
418
419                 bssid:depends({mode="adhoc"})
420                 bssid:depends({mode="ahdemo"})
421                 bssid:depends({mode="wds"})
422
423                 wdssep = s:taboption("advanced", Flag, "wdssep", translate("Separate WDS"))
424                 wdssep:depends({mode="ap-wds"})
425
426                 s:taboption("advanced", Flag, "doth", "802.11h")
427                 hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
428                 hidden:depends({mode="ap"})
429                 hidden:depends({mode="adhoc"})
430                 hidden:depends({mode="ap-wds"})
431                 hidden:depends({mode="sta-wds"})
432                 isolate = s:taboption("advanced", Flag, "isolate", translate("Separate Clients"),
433                  translate("Prevents client-to-client communication"))
434                 isolate:depends({mode="ap"})
435                 s:taboption("advanced", Flag, "bgscan", translate("Background Scan"))
436
437                 mp = s:taboption("macfilter", ListValue, "macpolicy", translate("MAC-Address Filter"))
438                 mp:value("", translate("disable"))
439                 mp:value("deny", translate("Allow listed only"))
440                 mp:value("allow", translate("Allow all except listed"))
441                 ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
442                 ml:depends({macpolicy="allow"})
443                 ml:depends({macpolicy="deny"})
444
445                 s:taboption("advanced", Value, "rate", translate("Transmission Rate"))
446                 s:taboption("advanced", Value, "mcast_rate", translate("Multicast Rate"))
447                 s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
448                 s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
449                 s:taboption("advanced", Value, "minrate", translate("Minimum Rate"))
450                 s:taboption("advanced", Value, "maxrate", translate("Maximum Rate"))
451                 s:taboption("advanced", Flag, "compression", translate("Compression"))
452
453                 s:taboption("advanced", Flag, "bursting", translate("Frame Bursting"))
454                 s:taboption("advanced", Flag, "turbo", translate("Turbo Mode"))
455                 s:taboption("advanced", Flag, "ff", translate("Fast Frames"))
456
457                 s:taboption("advanced", Flag, "wmm", translate("WMM Mode"))
458                 s:taboption("advanced", Flag, "xr", translate("XR Support"))
459                 s:taboption("advanced", Flag, "ar", translate("AR Support"))
460
461                 local swm = s:taboption("advanced", Flag, "sw_merge", translate("Disable HW-Beacon timer"))
462                 swm:depends({mode="adhoc"})
463
464                 local nos = s:taboption("advanced", Flag, "nosbeacon", translate("Disable HW-Beacon timer"))
465                 nos:depends({mode="sta"})
466                 nos:depends({mode="sta-wds"})
467
468                 local probereq = s:taboption("advanced", Flag, "probereq", translate("Do not send probe responses"))
469                 probereq.enabled  = "0"
470                 probereq.disabled = "1"
471         end
472
473
474         -------------------- Broadcom Interface ----------------------
475
476         if hwtype == "broadcom" then
477                 mode:value("wds", translate("WDS"))
478                 mode:value("monitor", translate("Monitor"))
479
480                 hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
481                 hidden:depends({mode="ap"})
482                 hidden:depends({mode="adhoc"})
483                 hidden:depends({mode="wds"})
484
485                 isolate = s:taboption("advanced", Flag, "isolate", translate("Separate Clients"),
486                  translate("Prevents client-to-client communication"))
487                 isolate:depends({mode="ap"})
488
489                 s:taboption("advanced", Flag, "doth", "802.11h")
490                 s:taboption("advanced", Flag, "wmm", translate("WMM Mode"))
491
492                 bssid:depends({mode="wds"})
493                 bssid:depends({mode="adhoc"})
494         end
495
496
497         ----------------------- HostAP Interface ---------------------
498
499         if hwtype == "prism2" then
500                 mode:value("wds", translate("WDS"))
501                 mode:value("monitor", translate("Monitor"))
502
503                 hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
504                 hidden:depends({mode="ap"})
505                 hidden:depends({mode="adhoc"})
506                 hidden:depends({mode="wds"})
507
508                 bssid:depends({mode="sta"})
509
510                 mp = s:taboption("macfilter", ListValue, "macpolicy", translate("MAC-Address Filter"))
511                 mp:value("", translate("disable"))
512                 mp:value("deny", translate("Allow listed only"))
513                 mp:value("allow", translate("Allow all except listed"))
514                 ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
515                 ml:depends({macpolicy="allow"})
516                 ml:depends({macpolicy="deny"})
517
518                 s:taboption("advanced", Value, "rate", translate("Transmission Rate"))
519                 s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
520                 s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
521         end
522
523
524         ------------------- WiFI-Encryption -------------------
525
526         encr = s:taboption("encryption", ListValue, "encryption", translate("Encryption"))
527         encr.override_values = true
528         encr.override_depends = true
529         encr:depends({mode="ap"})
530         encr:depends({mode="sta"})
531         encr:depends({mode="adhoc"})
532         encr:depends({mode="ahdemo"})
533         encr:depends({mode="ap-wds"})
534         encr:depends({mode="sta-wds"})
535         encr:depends({mode="mesh"})
536
537         encr:value("none", "No Encryption")
538         encr:value("wep-open",   translate("WEP Open System"), {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
539         encr:value("wep-shared", translate("WEP Shared Key"),  {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
540
541         if hwtype == "atheros" or hwtype == "mac80211" or hwtype == "prism2" then
542                 local supplicant = fs.access("/usr/sbin/wpa_supplicant")
543                 local hostapd = fs.access("/usr/sbin/hostapd")
544
545                 if hostapd and supplicant then
546                         encr:value("psk", "WPA-PSK")
547                         encr:value("psk2", "WPA2-PSK")
548                         encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode")
549                         encr:value("wpa", "WPA-EAP", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
550                         encr:value("wpa2", "WPA2-EAP", {mode="ap"}, {mode="sta"})
551                 elseif hostapd and not supplicant then
552                         encr:value("psk", "WPA-PSK", {mode="ap"}, {mode="ap-wds"}, {mode="adhoc"}, {mode="ahdemo"})
553                         encr:value("psk2", "WPA2-PSK", {mode="ap"}, {mode="ap-wds"}, {mode="adhoc"}, {mode="ahdemo"})
554                         encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode", {mode="ap"}, {mode="ap-wds"}, {mode="adhoc"}, {mode="ahdemo"})
555                         encr:value("wpa", "WPA-EAP", {mode="ap"}, {mode="ap-wds"})
556                         encr:value("wpa2", "WPA2-EAP", {mode="ap"}, {mode="ap-wds"})
557                         encr.description = translate(
558                                 "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
559                                 "and ad-hoc mode) to be installed."
560                         )
561                 elseif not hostapd and supplicant then
562                         encr:value("psk", "WPA-PSK", {mode="sta"}, {mode="sta-wds"})
563                         encr:value("psk2", "WPA2-PSK", {mode="sta"}, {mode="sta-wds"})
564                         encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode", {mode="sta"}, {mode="sta-wds"})
565                         encr:value("wpa", "WPA-EAP", {mode="sta"}, {mode="sta-wds"})
566                         encr:value("wpa2", "WPA2-EAP", {mode="sta"}, {mode="sta-wds"})
567                         encr.description = translate(
568                                 "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
569                                 "and ad-hoc mode) to be installed."
570                         )
571                 else
572                         encr.description = translate(
573                                 "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
574                                 "and ad-hoc mode) to be installed."
575                         )
576                 end
577         elseif hwtype == "broadcom" then
578                 encr:value("psk", "WPA-PSK")
579                 encr:value("psk2", "WPA2-PSK")
580                 encr:value("psk+psk2", "WPA-PSK/WPA2-PSK Mixed Mode")
581         end
582
583         encr:depends("mode", "ap")
584         encr:depends("mode", "sta")
585         encr:depends("mode", "ap-wds")
586         encr:depends("mode", "sta-wds")
587         encr:depends("mode", "wds")
588
589         server = s:taboption("encryption", Value, "server", translate("Radius-Server"))
590         server:depends({mode="ap", encryption="wpa"})
591         server:depends({mode="ap", encryption="wpa2"})
592         server:depends({mode="ap-wds", encryption="wpa"})
593         server:depends({mode="ap-wds", encryption="wpa2"})
594         server.rmempty = true
595
596         port = s:taboption("encryption", Value, "port", translate("Radius-Port"))
597         port:depends({mode="ap", encryption="wpa"})
598         port:depends({mode="ap", encryption="wpa2"})
599         port:depends({mode="ap-wds", encryption="wpa"})
600         port:depends({mode="ap-wds", encryption="wpa2"})
601         port.rmempty = true
602
603         key = s:taboption("encryption", Value, "key", translate("Key"))
604         key:depends("encryption", "wep")
605         key:depends("encryption", "psk")
606         key:depends("encryption", "psk2")
607         key:depends("encryption", "psk+psk2")
608         key:depends("encryption", "psk-mixed")
609         key:depends({mode="ap", encryption="wpa"})
610         key:depends({mode="ap", encryption="wpa2"})
611         key:depends({mode="ap-wds", encryption="wpa"})
612         key:depends({mode="ap-wds", encryption="wpa2"})
613         key.rmempty = true
614         key.password = true
615
616         if hwtype == "atheros" or hwtype == "mac80211" or hwtype == "prism2" then
617                 nasid = s:taboption("encryption", Value, "nasid", translate("NAS ID"))
618                 nasid:depends({mode="ap", encryption="wpa"})
619                 nasid:depends({mode="ap", encryption="wpa2"})
620                 nasid:depends({mode="ap-wds", encryption="wpa"})
621                 nasid:depends({mode="ap-wds", encryption="wpa2"})
622                 nasid.rmempty = true
623
624                 eaptype = s:taboption("encryption", ListValue, "eap_type", translate("EAP-Method"))
625                 eaptype:value("tls",  "TLS")
626                 eaptype:value("ttls", "TTLS")
627                 eaptype:value("peap", "PEAP")
628                 eaptype:depends({mode="sta", encryption="wpa"})
629                 eaptype:depends({mode="sta", encryption="wpa2"})
630
631                 cacert = s:taboption("encryption", FileUpload, "ca_cert", translate("Path to CA-Certificate"))
632                 cacert:depends({mode="sta", encryption="wpa"})
633                 cacert:depends({mode="sta", encryption="wpa2"})
634
635                 privkey = s:taboption("encryption", FileUpload, "priv_key", translate("Path to Private Key"))
636                 privkey:depends({mode="sta", eap_type="tls", encryption="wpa2"})
637                 privkey:depends({mode="sta", eap_type="tls", encryption="wpa"})
638
639                 privkeypwd = s:taboption("encryption", Value, "priv_key_pwd", translate("Password of Private Key"))
640                 privkeypwd:depends({mode="sta", eap_type="tls", encryption="wpa2"})
641                 privkeypwd:depends({mode="sta", eap_type="tls", encryption="wpa"})
642
643
644                 auth = s:taboption("encryption", Value, "auth", translate("Authentication"))
645                 auth:value("PAP")
646                 auth:value("CHAP")
647                 auth:value("MSCHAP")
648                 auth:value("MSCHAPV2")
649                 auth:depends({mode="sta", eap_type="peap", encryption="wpa2"})
650                 auth:depends({mode="sta", eap_type="peap", encryption="wpa"})
651                 auth:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
652                 auth:depends({mode="sta", eap_type="ttls", encryption="wpa"})
653
654
655                 identity = s:taboption("encryption", Value, "identity", translate("Identity"))
656                 identity:depends({mode="sta", eap_type="peap", encryption="wpa2"})
657                 identity:depends({mode="sta", eap_type="peap", encryption="wpa"})
658                 identity:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
659                 identity:depends({mode="sta", eap_type="ttls", encryption="wpa"})
660
661                 password = s:taboption("encryption", Value, "password", translate("Password"))
662                 password:depends({mode="sta", eap_type="peap", encryption="wpa2"})
663                 password:depends({mode="sta", eap_type="peap", encryption="wpa"})
664                 password:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
665                 password:depends({mode="sta", eap_type="ttls", encryption="wpa"})
666         end
667 end
668
669 return m