modules/admin-full: rework wep/wpa key handling
[project/luci.git] / modules / admin-full / luasrc / model / cbi / admin_network / wifi.lua
1 --[[
2 LuCI - Lua Configuration Interface
3
4 Copyright 2008 Steven Barth <steven@midlink.org>
5
6 Licensed under the Apache License, Version 2.0 (the "License");
7 you may not use this file except in compliance with the License.
8 You may obtain a copy of the License at
9
10         http://www.apache.org/licenses/LICENSE-2.0
11
12 $Id$
13 ]]--
14
15 local wa = require "luci.tools.webadmin"
16 local nw = require "luci.model.network"
17 local fs = require "nixio.fs"
18
19 arg[1] = arg[1] or ""
20 arg[2] = arg[2] or ""
21
22 m = Map("wireless", "",
23         translate("The <em>Device Configuration</em> section covers physical settings of the radio " ..
24                 "hardware such as channel, transmit power or antenna selection which is shared among all " ..
25                 "defined wireless networks (if the radio hardware is multi-SSID capable). Per network settings " ..
26                 "like encryption or operation mode are grouped in the <em>Interface Configuration</em>."))
27
28 m:chain("network")
29
30 local ifsection
31
32 function m.on_commit(map)
33         local wnet = nw:get_wifinet(arg[2])
34         if ifsection and wnet then
35                 ifsection.section = wnet.sid
36                 m.title = wnet:get_i18n()
37         end
38 end
39
40 nw.init(m.uci)
41
42 local wnet = nw:get_wifinet(arg[2])
43
44 -- redirect to overview page if network does not exist anymore (e.g. after a revert)
45 if not wnet then
46         luci.http.redirect(luci.dispatcher.build_url("admin/network/wireless"))
47         return
48 end
49
50 m.title = wnet:get_i18n()
51
52
53 local iw = luci.sys.wifi.getiwinfo(arg[1])
54 local tx_powers = iw.txpwrlist  or { }
55 local hw_modes  = iw.hwmodelist or { }
56
57
58 s = m:section(NamedSection, arg[1], "wifi-device", translate("Device Configuration"))
59 s.addremove = false
60
61 s:tab("general", translate("General Setup"))
62 s:tab("macfilter", translate("MAC-Filter"))
63 s:tab("advanced", translate("Advanced Settings"))
64
65 --[[
66 back = s:option(DummyValue, "_overview", translate("Overview"))
67 back.value = ""
68 back.titleref = luci.dispatcher.build_url("admin", "network", "wireless")
69 ]]
70
71 st = s:taboption("general", DummyValue, "__status", translate("Status"))
72 st.template = "admin_network/wifi_status"
73 st.ifname   = arg[2]
74
75 en = s:taboption("general", Flag, "disabled", translate("Enable device"))
76 en.enabled = "0"
77 en.disabled = "1"
78 en.rmempty = false
79
80 function en.cfgvalue(self, section)
81         return Flag.cfgvalue(self, section) or "0"
82 end
83
84
85 local hwtype = m:get(arg[1], "type")
86 local htcaps = m:get(arg[1], "ht_capab") and true or false
87
88 -- NanoFoo
89 local nsantenna = m:get(arg[1], "antenna")
90
91 ch = s:taboption("general", Value, "channel", translate("Channel"))
92 ch:value("auto", translate("auto"))
93 for _, f in ipairs(iw and iw.freqlist or luci.sys.wifi.channels()) do
94         if not f.restricted then
95                 ch:value(f.channel, "%i (%.3f GHz)" %{ f.channel, f.mhz / 1000 })
96         end
97 end
98
99
100 ------------------- MAC80211 Device ------------------
101
102 if hwtype == "mac80211" then
103         tp = s:taboption("general",
104                 (tx_powers and #tx_powers > 0) and ListValue or Value,
105                 "txpower", translate("Transmit Power"), "dBm")
106
107         tp.rmempty = true
108         tp.default = tostring(iw and iw.txpower or tx_powers[#tx_powers])
109         for _, p in ipairs(tx_powers or {}) do
110                 tp:value(p.dbm, "%i dBm (%i mW)" %{ p.dbm, p.mw })
111         end
112
113         mode = s:taboption("advanced", ListValue, "hwmode", translate("Mode"))
114         mode:value("", translate("auto"))
115         if hw_modes.b then mode:value("11b", "802.11b") end
116         if hw_modes.g then mode:value("11g", "802.11g") end
117         if hw_modes.a then mode:value("11a", "802.11a") end
118
119         if htcaps then
120                 if hw_modes.g and hw_modes.n then mode:value("11ng", "802.11g+n") end
121                 if hw_modes.a and hw_modes.n then mode:value("11na", "802.11a+n") end
122
123                 htmode = s:taboption("advanced", ListValue, "htmode", translate("HT mode"))
124                 htmode:depends("hwmode", "11na")
125                 htmode:depends("hwmode", "11ng")
126                 htmode:value("HT20", "20MHz")
127                 htmode:value("HT40-", translate("40MHz 2nd channel below"))
128                 htmode:value("HT40+", translate("40MHz 2nd channel above"))
129
130                 --htcapab = s:taboption("advanced", DynamicList, "ht_capab", translate("HT capabilities"))
131                 --htcapab:depends("hwmode", "11na")
132                 --htcapab:depends("hwmode", "11ng")
133         end
134
135         local cl = iw and iw.countrylist
136         if cl and #cl > 0 then
137                 cc = s:taboption("advanced", ListValue, "country", translate("Country Code"), translate("Use ISO/IEC 3166 alpha2 country codes."))
138                 cc.default = tostring(iw and iw.country or "00")
139                 for _, c in ipairs(cl) do
140                         cc:value(c.alpha2, "%s - %s" %{ c.alpha2, c.name })
141                 end
142         else
143                 s:taboption("advanced", Value, "country", translate("Country Code"), translate("Use ISO/IEC 3166 alpha2 country codes."))
144         end
145
146         s:taboption("advanced", Value, "distance", translate("Distance Optimization"),
147                 translate("Distance to farthest network member in meters."))
148 end
149
150
151 ------------------- Madwifi Device ------------------
152
153 if hwtype == "atheros" then
154         tp = s:taboption("general",
155                 (#tx_powers > 0) and ListValue or Value,
156                 "txpower", translate("Transmit Power"), "dBm")
157
158         tp.rmempty = true
159         for _, p in ipairs(iw.txpwrlist) do
160                 tp:value(p.dbm, "%i dBm (%i mW)" %{ p.dbm, p.mw })
161         end
162
163         mode = s:taboption("advanced", ListValue, "hwmode", translate("Mode"))
164         mode:value("", translate("auto"))
165         if hw_modes.b then mode:value("11b", "802.11b") end
166         if hw_modes.g then mode:value("11g", "802.11g") end
167         if hw_modes.a then mode:value("11a", "802.11a") end
168         if hw_modes.g then mode:value("11bg", "802.11b+g") end
169         if hw_modes.g then mode:value("11gst", "802.11g + Turbo") end
170         if hw_modes.a then mode:value("11ast", "802.11a + Turbo") end
171         mode:value("fh", translate("Frequency Hopping"))
172
173         s:taboption("advanced", Flag, "diversity", translate("Diversity")).rmempty = false
174
175         if not nsantenna then
176                 ant1 = s:taboption("advanced", ListValue, "txantenna", translate("Transmitter Antenna"))
177                 ant1.widget = "radio"
178                 ant1.orientation = "horizontal"
179                 ant1:depends("diversity", "")
180                 ant1:value("0", translate("auto"))
181                 ant1:value("1", translate("Antenna 1"))
182                 ant1:value("2", translate("Antenna 2"))
183
184                 ant2 = s:taboption("advanced", ListValue, "rxantenna", translate("Receiver Antenna"))
185                 ant2.widget = "radio"
186                 ant2.orientation = "horizontal"
187                 ant2:depends("diversity", "")
188                 ant2:value("0", translate("auto"))
189                 ant2:value("1", translate("Antenna 1"))
190                 ant2:value("2", translate("Antenna 2"))
191
192         else -- NanoFoo
193                 local ant = s:taboption("advanced", ListValue, "antenna", translate("Transmitter Antenna"))
194                 ant:value("auto")
195                 ant:value("vertical")
196                 ant:value("horizontal")
197                 ant:value("external")
198         end
199
200         s:taboption("advanced", Value, "distance", translate("Distance Optimization"),
201                 translate("Distance to farthest network member in meters."))
202         s:taboption("advanced", Value, "regdomain", translate("Regulatory Domain"))
203         s:taboption("advanced", Value, "country", translate("Country Code"))
204         s:taboption("advanced", Flag, "outdoor", translate("Outdoor Channels"))
205
206         --s:option(Flag, "nosbeacon", translate("Disable HW-Beacon timer"))
207 end
208
209
210
211 ------------------- Broadcom Device ------------------
212
213 if hwtype == "broadcom" then
214         tp = s:taboption("general",
215                 (#tx_powers > 0) and ListValue or Value,
216                 "txpower", translate("Transmit Power"), "dBm")
217
218         tp.rmempty = true
219         for _, p in ipairs(iw.txpwrlist) do
220                 tp:value(p.dbm, "%i dBm (%i mW)" %{ p.dbm, p.mw })
221         end
222
223         mode = s:taboption("advanced", ListValue, "hwmode", translate("Mode"))
224         mode:value("11bg", "802.11b+g")
225         mode:value("11b", "802.11b")
226         mode:value("11g", "802.11g")
227         mode:value("11gst", "802.11g + Turbo")
228
229         mp = s:taboption("macfilter", ListValue, "macfilter", translate("MAC-Address Filter"))
230         mp:value("", translate("disable"))
231         mp:value("allow", translate("Allow listed only"))
232         mp:value("deny", translate("Allow all except listed"))
233         ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
234         ml:depends({macfilter="allow"})
235         ml:depends({macfilter="deny"})
236
237         ant1 = s:taboption("advanced", ListValue, "txantenna", translate("Transmitter Antenna"))
238         ant1.widget = "radio"
239         ant1:depends("diversity", "")
240         ant1:value("3", translate("auto"))
241         ant1:value("0", translate("Antenna 1"))
242         ant1:value("1", translate("Antenna 2"))
243
244         ant2 = s:taboption("advanced", ListValue, "rxantenna", translate("Receiver Antenna"))
245         ant2.widget = "radio"
246         ant2:depends("diversity", "")
247         ant2:value("3", translate("auto"))
248         ant2:value("0", translate("Antenna 1"))
249         ant2:value("1", translate("Antenna 2"))
250
251         s:taboption("advanced", Flag, "frameburst", translate("Frame Bursting"))
252
253         s:taboption("advanced", Value, "distance", translate("Distance Optimization"))
254         --s:option(Value, "slottime", translate("Slot time"))
255
256         s:taboption("advanced", Value, "country", translate("Country Code"))
257         s:taboption("advanced", Value, "maxassoc", translate("Connection Limit"))
258 end
259
260
261 --------------------- HostAP Device ---------------------
262
263 if hwtype == "prism2" then
264         s:taboption("advanced", Value, "txpower", translate("Transmit Power"), "att units").rmempty = true
265
266         s:taboption("advanced", Flag, "diversity", translate("Diversity")).rmempty = false
267
268         s:taboption("advanced", Value, "txantenna", translate("Transmitter Antenna"))
269         s:taboption("advanced", Value, "rxantenna", translate("Receiver Antenna"))
270 end
271
272
273 ----------------------- Interface -----------------------
274
275 s = m:section(NamedSection, wnet.sid, "wifi-iface", translate("Interface Configuration"))
276 ifsection = s
277 s.addremove = false
278 s.anonymous = true
279 s.defaults.device = arg[1]
280
281 s:tab("general", translate("General Setup"))
282 s:tab("encryption", translate("Wireless Security"))
283 s:tab("macfilter", translate("MAC-Filter"))
284 s:tab("advanced", translate("Advanced Settings"))
285
286 s:taboption("general", Value, "ssid", translate("<abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
287
288 mode = s:taboption("general", ListValue, "mode", translate("Mode"))
289 mode.override_values = true
290 mode:value("ap", translate("Access Point"))
291 mode:value("sta", translate("Client"))
292 mode:value("adhoc", translate("Ad-Hoc"))
293
294 bssid = s:taboption("general", Value, "bssid", translate("<abbr title=\"Basic Service Set Identifier\">BSSID</abbr>"))
295
296 network = s:taboption("general", Value, "network", translate("Network"),
297         translate("Choose the network you want to attach to this wireless interface. " ..
298                 "Select <em>unspecified</em> to not attach any network or fill out the " ..
299                 "<em>create</em> field to define a new network."))
300
301 network.rmempty = true
302 network.template = "cbi/network_netlist"
303 network.widget = "radio"
304
305 function network.write(self, section, value)
306         local i = nw:get_interface(section)
307         if i then
308                 if value == '-' then
309                         value = m:formvalue(self:cbid(section) .. ".newnet")
310                         if value and #value > 0 then
311                                 local n = nw:add_network(value, {proto="none"})
312                                 if n then n:add_interface(i) end
313                         else
314                                 local n = i:get_network()
315                                 if n then n:del_interface(i) end
316                         end
317                 else
318                         local n = nw:get_network(value)
319                         if n then
320                                 n:type("bridge")
321                                 n:add_interface(i)
322                         end
323                 end
324         end
325 end
326
327 -------------------- MAC80211 Interface ----------------------
328
329 if hwtype == "mac80211" then
330         if fs.access("/usr/sbin/iw") then
331                 mode:value("mesh", "802.11s")
332         end
333
334         mode:value("ahdemo", translate("Pseudo Ad-Hoc (ahdemo)"))
335         mode:value("monitor", translate("Monitor"))
336         bssid:depends({mode="adhoc"})
337
338         s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
339         s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
340
341         mode:value("ap-wds", "%s (%s)" % {translate("Access Point"), translate("WDS")})
342         mode:value("sta-wds", "%s (%s)" % {translate("Client"), translate("WDS")})
343
344         function mode.write(self, section, value)
345                 if value == "ap-wds" then
346                         ListValue.write(self, section, "ap")
347                         m.uci:set("wireless", section, "wds", 1)
348                 elseif value == "sta-wds" then
349                         ListValue.write(self, section, "sta")
350                         m.uci:set("wireless", section, "wds", 1)
351                 else
352                         ListValue.write(self, section, value)
353                         m.uci:delete("wireless", section, "wds")
354                 end
355         end
356
357         function mode.cfgvalue(self, section)
358                 local mode = ListValue.cfgvalue(self, section)
359                 local wds  = m.uci:get("wireless", section, "wds") == "1"
360
361                 if mode == "ap" and wds then
362                         return "ap-wds"
363                 elseif mode == "sta" and wds then
364                         return "sta-wds"
365                 else
366                         return mode
367                 end
368         end
369
370         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
371         hidden:depends({mode="ap"})
372         hidden:depends({mode="ap-wds"})
373 end
374
375
376
377 -------------------- Madwifi Interface ----------------------
378
379 if hwtype == "atheros" then
380         mode:value("ahdemo", translate("Pseudo Ad-Hoc (ahdemo)"))
381         mode:value("monitor", translate("Monitor"))
382         mode:value("ap-wds", "%s (%s)" % {translate("Access Point"), translate("WDS")})
383         mode:value("sta-wds", "%s (%s)" % {translate("Client"), translate("WDS")})
384         mode:value("wds", translate("Static WDS"))
385
386         function mode.write(self, section, value)
387                 if value == "ap-wds" then
388                         ListValue.write(self, section, "ap")
389                         m.uci:set("wireless", section, "wds", 1)
390                 elseif value == "sta-wds" then
391                         ListValue.write(self, section, "sta")
392                         m.uci:set("wireless", section, "wds", 1)
393                 else
394                         ListValue.write(self, section, value)
395                         m.uci:delete("wireless", section, "wds")
396                 end
397         end
398
399         function mode.cfgvalue(self, section)
400                 local mode = ListValue.cfgvalue(self, section)
401                 local wds  = m.uci:get("wireless", section, "wds") == "1"
402
403                 if mode == "ap" and wds then
404                         return "ap-wds"
405                 elseif mode == "sta" and wds then
406                         return "sta-wds"
407                 else
408                         return mode
409                 end
410         end
411
412         bssid:depends({mode="adhoc"})
413         bssid:depends({mode="ahdemo"})
414         bssid:depends({mode="wds"})
415
416         wdssep = s:taboption("advanced", Flag, "wdssep", translate("Separate WDS"))
417         wdssep:depends({mode="ap-wds"})
418
419         s:taboption("advanced", Flag, "doth", "802.11h")
420         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
421         hidden:depends({mode="ap"})
422         hidden:depends({mode="adhoc"})
423         hidden:depends({mode="ap-wds"})
424         hidden:depends({mode="sta-wds"})
425         isolate = s:taboption("advanced", Flag, "isolate", translate("Separate Clients"),
426          translate("Prevents client-to-client communication"))
427         isolate:depends({mode="ap"})
428         s:taboption("advanced", Flag, "bgscan", translate("Background Scan"))
429
430         mp = s:taboption("macfilter", ListValue, "macpolicy", translate("MAC-Address Filter"))
431         mp:value("", translate("disable"))
432         mp:value("deny", translate("Allow listed only"))
433         mp:value("allow", translate("Allow all except listed"))
434         ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
435         ml:depends({macpolicy="allow"})
436         ml:depends({macpolicy="deny"})
437
438         s:taboption("advanced", Value, "rate", translate("Transmission Rate"))
439         s:taboption("advanced", Value, "mcast_rate", translate("Multicast Rate"))
440         s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
441         s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
442         s:taboption("advanced", Value, "minrate", translate("Minimum Rate"))
443         s:taboption("advanced", Value, "maxrate", translate("Maximum Rate"))
444         s:taboption("advanced", Flag, "compression", translate("Compression"))
445
446         s:taboption("advanced", Flag, "bursting", translate("Frame Bursting"))
447         s:taboption("advanced", Flag, "turbo", translate("Turbo Mode"))
448         s:taboption("advanced", Flag, "ff", translate("Fast Frames"))
449
450         s:taboption("advanced", Flag, "wmm", translate("WMM Mode"))
451         s:taboption("advanced", Flag, "xr", translate("XR Support"))
452         s:taboption("advanced", Flag, "ar", translate("AR Support"))
453
454         local swm = s:taboption("advanced", Flag, "sw_merge", translate("Disable HW-Beacon timer"))
455         swm:depends({mode="adhoc"})
456
457         local nos = s:taboption("advanced", Flag, "nosbeacon", translate("Disable HW-Beacon timer"))
458         nos:depends({mode="sta"})
459         nos:depends({mode="sta-wds"})
460
461         local probereq = s:taboption("advanced", Flag, "probereq", translate("Do not send probe responses"))
462         probereq.enabled  = "0"
463         probereq.disabled = "1"
464 end
465
466
467 -------------------- Broadcom Interface ----------------------
468
469 if hwtype == "broadcom" then
470         mode:value("wds", translate("WDS"))
471         mode:value("monitor", translate("Monitor"))
472
473         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
474         hidden:depends({mode="ap"})
475         hidden:depends({mode="adhoc"})
476         hidden:depends({mode="wds"})
477
478         isolate = s:taboption("advanced", Flag, "isolate", translate("Separate Clients"),
479          translate("Prevents client-to-client communication"))
480         isolate:depends({mode="ap"})
481
482         s:taboption("advanced", Flag, "doth", "802.11h")
483         s:taboption("advanced", Flag, "wmm", translate("WMM Mode"))
484
485         bssid:depends({mode="wds"})
486         bssid:depends({mode="adhoc"})
487 end
488
489
490 ----------------------- HostAP Interface ---------------------
491
492 if hwtype == "prism2" then
493         mode:value("wds", translate("WDS"))
494         mode:value("monitor", translate("Monitor"))
495
496         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
497         hidden:depends({mode="ap"})
498         hidden:depends({mode="adhoc"})
499         hidden:depends({mode="wds"})
500
501         bssid:depends({mode="sta"})
502
503         mp = s:taboption("macfilter", ListValue, "macpolicy", translate("MAC-Address Filter"))
504         mp:value("", translate("disable"))
505         mp:value("deny", translate("Allow listed only"))
506         mp:value("allow", translate("Allow all except listed"))
507         ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
508         ml:depends({macpolicy="allow"})
509         ml:depends({macpolicy="deny"})
510
511         s:taboption("advanced", Value, "rate", translate("Transmission Rate"))
512         s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
513         s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
514 end
515
516
517 ------------------- WiFI-Encryption -------------------
518
519 encr = s:taboption("encryption", ListValue, "encryption", translate("Encryption"))
520 encr.override_values = true
521 encr.override_depends = true
522 encr:depends({mode="ap"})
523 encr:depends({mode="sta"})
524 encr:depends({mode="adhoc"})
525 encr:depends({mode="ahdemo"})
526 encr:depends({mode="ap-wds"})
527 encr:depends({mode="sta-wds"})
528 encr:depends({mode="mesh"})
529
530 encr:value("none", "No Encryption")
531 encr:value("wep-open",   translate("WEP Open System"), {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
532 encr:value("wep-shared", translate("WEP Shared Key"),  {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
533
534 if hwtype == "atheros" or hwtype == "mac80211" or hwtype == "prism2" then
535         local supplicant = fs.access("/usr/sbin/wpa_supplicant")
536         local hostapd = fs.access("/usr/sbin/hostapd")
537
538         if hostapd and supplicant then
539                 encr:value("psk", "WPA-PSK")
540                 encr:value("psk2", "WPA2-PSK")
541                 encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode")
542                 encr:value("wpa", "WPA-EAP", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
543                 encr:value("wpa2", "WPA2-EAP", {mode="ap"}, {mode="sta"})
544         elseif hostapd and not supplicant then
545                 encr:value("psk", "WPA-PSK", {mode="ap"}, {mode="ap-wds"}, {mode="adhoc"}, {mode="ahdemo"})
546                 encr:value("psk2", "WPA2-PSK", {mode="ap"}, {mode="ap-wds"}, {mode="adhoc"}, {mode="ahdemo"})
547                 encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode", {mode="ap"}, {mode="ap-wds"}, {mode="adhoc"}, {mode="ahdemo"})
548                 encr:value("wpa", "WPA-EAP", {mode="ap"}, {mode="ap-wds"})
549                 encr:value("wpa2", "WPA2-EAP", {mode="ap"}, {mode="ap-wds"})
550                 encr.description = translate(
551                         "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
552                         "and ad-hoc mode) to be installed."
553                 )
554         elseif not hostapd and supplicant then
555                 encr:value("psk", "WPA-PSK", {mode="sta"}, {mode="sta-wds"})
556                 encr:value("psk2", "WPA2-PSK", {mode="sta"}, {mode="sta-wds"})
557                 encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode", {mode="sta"}, {mode="sta-wds"})
558                 encr:value("wpa", "WPA-EAP", {mode="sta"}, {mode="sta-wds"})
559                 encr:value("wpa2", "WPA2-EAP", {mode="sta"}, {mode="sta-wds"})
560                 encr.description = translate(
561                         "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
562                         "and ad-hoc mode) to be installed."
563                 )
564         else
565                 encr.description = translate(
566                         "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
567                         "and ad-hoc mode) to be installed."
568                 )
569         end
570 elseif hwtype == "broadcom" then
571         encr:value("psk", "WPA-PSK")
572         encr:value("psk2", "WPA2-PSK")
573         encr:value("psk+psk2", "WPA-PSK/WPA2-PSK Mixed Mode")
574 end
575
576 encr:depends("mode", "ap")
577 encr:depends("mode", "sta")
578 encr:depends("mode", "ap-wds")
579 encr:depends("mode", "sta-wds")
580 encr:depends("mode", "wds")
581
582 server = s:taboption("encryption", Value, "server", translate("Radius-Server"))
583 server:depends({mode="ap", encryption="wpa"})
584 server:depends({mode="ap", encryption="wpa2"})
585 server:depends({mode="ap-wds", encryption="wpa"})
586 server:depends({mode="ap-wds", encryption="wpa2"})
587 server.rmempty = true
588
589 port = s:taboption("encryption", Value, "port", translate("Radius-Port"))
590 port:depends({mode="ap", encryption="wpa"})
591 port:depends({mode="ap", encryption="wpa2"})
592 port:depends({mode="ap-wds", encryption="wpa"})
593 port:depends({mode="ap-wds", encryption="wpa2"})
594 port.rmempty = true
595
596 wpakey = s:taboption("encryption", Value, "_wpa_key", translate("Key"))
597 wpakey:depends("encryption", "psk")
598 wpakey:depends("encryption", "psk2")
599 wpakey:depends("encryption", "psk+psk2")
600 wpakey:depends("encryption", "psk-mixed")
601 wpakey:depends({mode="ap", encryption="wpa"})
602 wpakey:depends({mode="ap", encryption="wpa2"})
603 wpakey:depends({mode="ap-wds", encryption="wpa"})
604 wpakey:depends({mode="ap-wds", encryption="wpa2"})
605 wpakey.datatype = "wpakey"
606 wpakey.rmempty = true
607 wpakey.password = true
608
609 wpakey.cfgvalue = function(self, section, value)
610         local key = m.uci:get("wireless", section, "key")
611         if key == "1" or key == "2" or key == "3" or key == "4" then
612                 return nil
613         end
614         return key
615 end
616
617 wpakey.write = function(self, section, value)
618         self.map.uci:set("wireless", section, "key", value)
619         self.map.uci:delete("wireless", section, "key1")
620 end
621
622
623 wepslot = s:taboption("encryption", ListValue, "_wep_key", translate("Used Key Slot"))
624 wepslot:depends("encryption", "wep-open")
625 wepslot:depends("encryption", "wep-shared")
626 wepslot:value("1", translatef("Key #%d", 1))
627 wepslot:value("2", translatef("Key #%d", 2))
628 wepslot:value("3", translatef("Key #%d", 3))
629 wepslot:value("4", translatef("Key #%d", 4))
630
631 wepslot.cfgvalue = function(self, section)
632         local slot = tonumber(m.uci:get("wireless", section, "key"))
633         if not slot or slot < 1 or slot > 4 then
634                 return 1
635         end
636         return slot             
637 end
638
639 wepslot.write = function(self, section, value)
640         self.map.uci:set("wireless", section, "key", value)
641 end
642
643 local slot
644 for slot=1,4 do
645         wepkey = s:taboption("encryption", Value, "key" .. slot, translatef("Key #%d", slot))
646         wepkey:depends("encryption", "wep-open")
647         wepkey:depends("encryption", "wep-shared")
648         wepkey.datatype = "wepkey"
649         wepkey.rmempty = true
650         wepkey.password = true
651         
652         function wepkey.write(self, section, value)
653                 if value and (#value == 5 or #value == 13) then
654                         value = "s:" .. value
655                 end
656                 return Value.write(self, section, value)
657         end
658 end
659
660
661 if hwtype == "atheros" or hwtype == "mac80211" or hwtype == "prism2" then
662         nasid = s:taboption("encryption", Value, "nasid", translate("NAS ID"))
663         nasid:depends({mode="ap", encryption="wpa"})
664         nasid:depends({mode="ap", encryption="wpa2"})
665         nasid:depends({mode="ap-wds", encryption="wpa"})
666         nasid:depends({mode="ap-wds", encryption="wpa2"})
667         nasid.rmempty = true
668
669         eaptype = s:taboption("encryption", ListValue, "eap_type", translate("EAP-Method"))
670         eaptype:value("tls",  "TLS")
671         eaptype:value("ttls", "TTLS")
672         eaptype:value("peap", "PEAP")
673         eaptype:depends({mode="sta", encryption="wpa"})
674         eaptype:depends({mode="sta", encryption="wpa2"})
675
676         cacert = s:taboption("encryption", FileUpload, "ca_cert", translate("Path to CA-Certificate"))
677         cacert:depends({mode="sta", encryption="wpa"})
678         cacert:depends({mode="sta", encryption="wpa2"})
679
680         privkey = s:taboption("encryption", FileUpload, "priv_key", translate("Path to Private Key"))
681         privkey:depends({mode="sta", eap_type="tls", encryption="wpa2"})
682         privkey:depends({mode="sta", eap_type="tls", encryption="wpa"})
683
684         privkeypwd = s:taboption("encryption", Value, "priv_key_pwd", translate("Password of Private Key"))
685         privkeypwd:depends({mode="sta", eap_type="tls", encryption="wpa2"})
686         privkeypwd:depends({mode="sta", eap_type="tls", encryption="wpa"})
687
688
689         auth = s:taboption("encryption", Value, "auth", translate("Authentication"))
690         auth:value("PAP")
691         auth:value("CHAP")
692         auth:value("MSCHAP")
693         auth:value("MSCHAPV2")
694         auth:depends({mode="sta", eap_type="peap", encryption="wpa2"})
695         auth:depends({mode="sta", eap_type="peap", encryption="wpa"})
696         auth:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
697         auth:depends({mode="sta", eap_type="ttls", encryption="wpa"})
698
699
700         identity = s:taboption("encryption", Value, "identity", translate("Identity"))
701         identity:depends({mode="sta", eap_type="peap", encryption="wpa2"})
702         identity:depends({mode="sta", eap_type="peap", encryption="wpa"})
703         identity:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
704         identity:depends({mode="sta", eap_type="ttls", encryption="wpa"})
705
706         password = s:taboption("encryption", Value, "password", translate("Password"))
707         password:depends({mode="sta", eap_type="peap", encryption="wpa2"})
708         password:depends({mode="sta", eap_type="peap", encryption="wpa"})
709         password:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
710         password:depends({mode="sta", eap_type="ttls", encryption="wpa"})
711 end
712
713 return m