1 -- Copyright 2008 Steven Barth <steven@midlink.org>
2 -- Licensed to the public under the Apache License 2.0.
4 local wa = require "luci.tools.webadmin"
5 local nw = require "luci.model.network"
6 local ut = require "luci.util"
7 local nt = require "luci.sys".net
8 local fs = require "nixio.fs"
12 m = Map("wireless", "",
13 translate("The <em>Device Configuration</em> section covers physical settings of the radio " ..
14 "hardware such as channel, transmit power or antenna selection which are shared among all " ..
15 "defined wireless networks (if the radio hardware is multi-SSID capable). Per network settings " ..
16 "like encryption or operation mode are grouped in the <em>Interface Configuration</em>."))
20 m.redirect = luci.dispatcher.build_url("admin/network/wireless")
24 function m.on_commit(map)
25 local wnet = nw:get_wifinet(arg[1])
26 if ifsection and wnet then
27 ifsection.section = wnet.sid
28 m.title = luci.util.pcdata(wnet:get_i18n())
34 local wnet = nw:get_wifinet(arg[1])
35 local wdev = wnet and wnet:get_device()
37 -- redirect to overview page if network does not exist anymore (e.g. after a revert)
38 if not wnet or not wdev then
39 luci.http.redirect(luci.dispatcher.build_url("admin/network/wireless"))
43 -- wireless toggle was requested, commit and reload page
45 if m:formvalue("cbid.wireless.%s.__toggle" % wdev:name()) then
46 if wdev:get("disabled") == "1" or wnet:get("disabled") == "1" then
47 wnet:set("disabled", nil)
49 wnet:set("disabled", "1")
51 wdev:set("disabled", nil)
54 luci.sys.call("(env -i /bin/ubus call network reload) >/dev/null 2>/dev/null")
56 luci.http.redirect(luci.dispatcher.build_url("admin/network/wireless", arg[1]))
62 m.title = luci.util.pcdata(wnet:get_i18n())
65 local function txpower_list(iw)
66 local list = iw.txpwrlist or { }
67 local off = tonumber(iw.txpower_offset) or 0
71 for _, val in ipairs(list) do
72 local dbm = val.dbm + off
73 local mw = math.floor(10 ^ (dbm / 10))
87 local function txpower_current(pwr, list)
91 for _, item in ipairs(list) do
92 if item.driver_dbm >= pwr then
93 return item.driver_dbm
97 return (list[#list] and list[#list].driver_dbm) or pwr or 0
100 local iw = luci.sys.wifi.getiwinfo(arg[1])
101 local hw_modes = iw.hwmodelist or { }
102 local tx_power_list = txpower_list(iw)
103 local tx_power_cur = txpower_current(wdev:get("txpower"), tx_power_list)
105 s = m:section(NamedSection, wdev:name(), "wifi-device", translate("Device Configuration"))
108 s:tab("general", translate("General Setup"))
109 s:tab("macfilter", translate("MAC-Filter"))
110 s:tab("advanced", translate("Advanced Settings"))
113 back = s:option(DummyValue, "_overview", translate("Overview"))
115 back.titleref = luci.dispatcher.build_url("admin", "network", "wireless")
118 st = s:taboption("general", DummyValue, "__status", translate("Status"))
119 st.template = "admin_network/wifi_status"
122 en = s:taboption("general", Button, "__toggle")
124 if wdev:get("disabled") == "1" or wnet:get("disabled") == "1" then
125 en.title = translate("Wireless network is disabled")
126 en.inputtitle = translate("Enable")
127 en.inputstyle = "apply"
129 en.title = translate("Wireless network is enabled")
130 en.inputtitle = translate("Disable")
131 en.inputstyle = "reset"
135 local hwtype = wdev:get("type")
138 local nsantenna = wdev:get("antenna")
140 -- Check whether there are client interfaces on the same radio,
141 -- if yes, lock the channel choice as these stations will dicatate the freq
142 local found_sta = nil
144 if wnet:mode() ~= "sta" then
145 for _, net in ipairs(wdev:get_wifinets()) do
146 if net:mode() == "sta" and net:get("disabled") ~= "1" then
147 if not found_sta then
149 found_sta.channel = net:channel()
152 found_sta.names[#found_sta.names+1] = net:shortname()
158 ch = s:taboption("general", DummyValue, "choice", translate("Channel"))
159 ch.value = translatef("Locked to channel %s used by: %s",
160 found_sta.channel or "(auto)", table.concat(found_sta.names, ", "))
162 ch = s:taboption("general", Value, "_mode_freq", '<br />'..translate("Operating frequency"))
163 ch.hwmodes = hw_modes
164 ch.htmodes = iw.htmodelist
165 ch.freqlist = iw.freqlist
166 ch.template = "cbi/wireless_modefreq"
168 function ch.cfgvalue(self, section)
170 m:get(section, "hwmode") or "",
171 m:get(section, "channel") or "auto",
172 m:get(section, "htmode") or ""
176 function ch.formvalue(self, section)
178 m:formvalue(self:cbid(section) .. ".band") or (hw_modes.g and "11g" or "11a"),
179 m:formvalue(self:cbid(section) .. ".channel") or "auto",
180 m:formvalue(self:cbid(section) .. ".htmode") or ""
184 function ch.write(self, section, value)
185 m:set(section, "hwmode", value[1])
186 m:set(section, "channel", value[2])
187 m:set(section, "htmode", value[3])
191 ------------------- MAC80211 Device ------------------
193 if hwtype == "mac80211" then
194 if #tx_power_list > 1 then
195 tp = s:taboption("general", ListValue,
196 "txpower", translate("Transmit Power"), "dBm")
198 tp.default = tx_power_cur
199 function tp.cfgvalue(...)
200 return txpower_current(Value.cfgvalue(...), tx_power_list)
203 for _, p in ipairs(tx_power_list) do
204 tp:value(p.driver_dbm, "%i dBm (%i mW)"
205 %{ p.display_dbm, p.display_mw })
209 local cl = iw and iw.countrylist
210 if cl and #cl > 0 then
211 cc = s:taboption("advanced", ListValue, "country", translate("Country Code"), translate("Use ISO/IEC 3166 alpha2 country codes."))
212 cc.default = tostring(iw and iw.country or "00")
213 for _, c in ipairs(cl) do
214 cc:value(c.alpha2, "%s - %s" %{ c.alpha2, c.name })
217 s:taboption("advanced", Value, "country", translate("Country Code"), translate("Use ISO/IEC 3166 alpha2 country codes."))
220 s:taboption("advanced", Value, "distance", translate("Distance Optimization"),
221 translate("Distance to farthest network member in meters."))
223 -- external antenna profiles
224 local eal = iw and iw.extant
225 if eal and #eal > 0 then
226 ea = s:taboption("advanced", ListValue, "extant", translate("Antenna Configuration"))
227 for _, eap in ipairs(eal) do
228 ea:value(eap.id, "%s (%s)" %{ eap.name, eap.description })
235 s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
236 s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
240 ------------------- Madwifi Device ------------------
242 if hwtype == "atheros" then
243 tp = s:taboption("general",
244 (#tx_power_list > 0) and ListValue or Value,
245 "txpower", translate("Transmit Power"), "dBm")
248 tp.default = tx_power_cur
250 function tp.cfgvalue(...)
251 return txpower_current(Value.cfgvalue(...), tx_power_list)
254 for _, p in ipairs(tx_power_list) do
255 tp:value(p.driver_dbm, "%i dBm (%i mW)"
256 %{ p.display_dbm, p.display_mw })
259 s:taboption("advanced", Flag, "diversity", translate("Diversity")).rmempty = false
261 if not nsantenna then
262 ant1 = s:taboption("advanced", ListValue, "txantenna", translate("Transmitter Antenna"))
263 ant1.widget = "radio"
264 ant1.orientation = "horizontal"
265 ant1:depends("diversity", "")
266 ant1:value("0", translate("auto"))
267 ant1:value("1", translate("Antenna 1"))
268 ant1:value("2", translate("Antenna 2"))
270 ant2 = s:taboption("advanced", ListValue, "rxantenna", translate("Receiver Antenna"))
271 ant2.widget = "radio"
272 ant2.orientation = "horizontal"
273 ant2:depends("diversity", "")
274 ant2:value("0", translate("auto"))
275 ant2:value("1", translate("Antenna 1"))
276 ant2:value("2", translate("Antenna 2"))
279 local ant = s:taboption("advanced", ListValue, "antenna", translate("Transmitter Antenna"))
281 ant:value("vertical")
282 ant:value("horizontal")
283 ant:value("external")
286 s:taboption("advanced", Value, "distance", translate("Distance Optimization"),
287 translate("Distance to farthest network member in meters."))
288 s:taboption("advanced", Value, "regdomain", translate("Regulatory Domain"))
289 s:taboption("advanced", Value, "country", translate("Country Code"))
290 s:taboption("advanced", Flag, "outdoor", translate("Outdoor Channels"))
292 --s:option(Flag, "nosbeacon", translate("Disable HW-Beacon timer"))
297 ------------------- Broadcom Device ------------------
299 if hwtype == "broadcom" then
300 tp = s:taboption("general",
301 (#tx_power_list > 0) and ListValue or Value,
302 "txpower", translate("Transmit Power"), "dBm")
305 tp.default = tx_power_cur
307 function tp.cfgvalue(...)
308 return txpower_current(Value.cfgvalue(...), tx_power_list)
311 for _, p in ipairs(tx_power_list) do
312 tp:value(p.driver_dbm, "%i dBm (%i mW)"
313 %{ p.display_dbm, p.display_mw })
316 ant1 = s:taboption("advanced", ListValue, "txantenna", translate("Transmitter Antenna"))
317 ant1.widget = "radio"
318 ant1:depends("diversity", "")
319 ant1:value("3", translate("auto"))
320 ant1:value("0", translate("Antenna 1"))
321 ant1:value("1", translate("Antenna 2"))
323 ant2 = s:taboption("advanced", ListValue, "rxantenna", translate("Receiver Antenna"))
324 ant2.widget = "radio"
325 ant2:depends("diversity", "")
326 ant2:value("3", translate("auto"))
327 ant2:value("0", translate("Antenna 1"))
328 ant2:value("1", translate("Antenna 2"))
330 s:taboption("advanced", Flag, "frameburst", translate("Frame Bursting"))
332 s:taboption("advanced", Value, "distance", translate("Distance Optimization"))
333 --s:option(Value, "slottime", translate("Slot time"))
335 s:taboption("advanced", Value, "country", translate("Country Code"))
336 s:taboption("advanced", Value, "maxassoc", translate("Connection Limit"))
340 --------------------- HostAP Device ---------------------
342 if hwtype == "prism2" then
343 s:taboption("advanced", Value, "txpower", translate("Transmit Power"), "att units").rmempty = true
345 s:taboption("advanced", Flag, "diversity", translate("Diversity")).rmempty = false
347 s:taboption("advanced", Value, "txantenna", translate("Transmitter Antenna"))
348 s:taboption("advanced", Value, "rxantenna", translate("Receiver Antenna"))
352 ----------------------- Interface -----------------------
354 s = m:section(NamedSection, wnet.sid, "wifi-iface", translate("Interface Configuration"))
358 s.defaults.device = wdev:name()
360 s:tab("general", translate("General Setup"))
361 s:tab("encryption", translate("Wireless Security"))
362 s:tab("macfilter", translate("MAC-Filter"))
363 s:tab("advanced", translate("Advanced Settings"))
365 ssid = s:taboption("general", Value, "ssid", translate("<abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
366 ssid.datatype = "maxlength(32)"
368 mode = s:taboption("general", ListValue, "mode", translate("Mode"))
369 mode.override_values = true
370 mode:value("ap", translate("Access Point"))
371 mode:value("sta", translate("Client"))
372 mode:value("adhoc", translate("Ad-Hoc"))
374 bssid = s:taboption("general", Value, "bssid", translate("<abbr title=\"Basic Service Set Identifier\">BSSID</abbr>"))
376 network = s:taboption("general", Value, "network", translate("Network"),
377 translate("Choose the network(s) you want to attach to this wireless interface or " ..
378 "fill out the <em>create</em> field to define a new network."))
380 network.rmempty = true
381 network.template = "cbi/network_netlist"
382 network.widget = "checkbox"
383 network.novirtual = true
385 function network.write(self, section, value)
386 local i = nw:get_interface(section)
389 value = m:formvalue(self:cbid(section) .. ".newnet")
390 if value and #value > 0 then
391 local n = nw:add_network(value, {proto="none"})
392 if n then n:add_interface(i) end
394 local n = i:get_network()
395 if n then n:del_interface(i) end
399 for _, v in ipairs(i:get_networks()) do
402 for v in ut.imatch(value) do
403 local n = nw:get_network(v)
405 if not n:is_empty() then
406 n:set("type", "bridge")
415 -------------------- MAC80211 Interface ----------------------
417 if hwtype == "mac80211" then
418 if fs.access("/usr/sbin/iw") then
419 mode:value("mesh", "802.11s")
422 mode:value("ahdemo", translate("Pseudo Ad-Hoc (ahdemo)"))
423 mode:value("monitor", translate("Monitor"))
424 bssid:depends({mode="adhoc"})
425 bssid:depends({mode="sta"})
426 bssid:depends({mode="sta-wds"})
428 mp = s:taboption("macfilter", ListValue, "macfilter", translate("MAC-Address Filter"))
429 mp:depends({mode="ap"})
430 mp:depends({mode="ap-wds"})
431 mp:value("", translate("disable"))
432 mp:value("allow", translate("Allow listed only"))
433 mp:value("deny", translate("Allow all except listed"))
435 ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
436 ml.datatype = "macaddr"
437 ml:depends({macfilter="allow"})
438 ml:depends({macfilter="deny"})
439 nt.mac_hints(function(mac, name) ml:value(mac, "%s (%s)" %{ mac, name }) end)
441 mode:value("ap-wds", "%s (%s)" % {translate("Access Point"), translate("WDS")})
442 mode:value("sta-wds", "%s (%s)" % {translate("Client"), translate("WDS")})
444 function mode.write(self, section, value)
445 if value == "ap-wds" then
446 ListValue.write(self, section, "ap")
447 m.uci:set("wireless", section, "wds", 1)
448 elseif value == "sta-wds" then
449 ListValue.write(self, section, "sta")
450 m.uci:set("wireless", section, "wds", 1)
452 ListValue.write(self, section, value)
453 m.uci:delete("wireless", section, "wds")
457 function mode.cfgvalue(self, section)
458 local mode = ListValue.cfgvalue(self, section)
459 local wds = m.uci:get("wireless", section, "wds") == "1"
461 if mode == "ap" and wds then
463 elseif mode == "sta" and wds then
470 hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
471 hidden:depends({mode="ap"})
472 hidden:depends({mode="ap-wds"})
474 wmm = s:taboption("general", Flag, "wmm", translate("WMM Mode"))
475 wmm:depends({mode="ap"})
476 wmm:depends({mode="ap-wds"})
477 wmm.default = wmm.enabled
479 ifname = s:taboption("advanced", Value, "ifname", translate("Interface name"), translate("Override default interface name"))
480 ifname.optional = true
485 -------------------- Madwifi Interface ----------------------
487 if hwtype == "atheros" then
488 mode:value("ahdemo", translate("Pseudo Ad-Hoc (ahdemo)"))
489 mode:value("monitor", translate("Monitor"))
490 mode:value("ap-wds", "%s (%s)" % {translate("Access Point"), translate("WDS")})
491 mode:value("sta-wds", "%s (%s)" % {translate("Client"), translate("WDS")})
492 mode:value("wds", translate("Static WDS"))
494 function mode.write(self, section, value)
495 if value == "ap-wds" then
496 ListValue.write(self, section, "ap")
497 m.uci:set("wireless", section, "wds", 1)
498 elseif value == "sta-wds" then
499 ListValue.write(self, section, "sta")
500 m.uci:set("wireless", section, "wds", 1)
502 ListValue.write(self, section, value)
503 m.uci:delete("wireless", section, "wds")
507 function mode.cfgvalue(self, section)
508 local mode = ListValue.cfgvalue(self, section)
509 local wds = m.uci:get("wireless", section, "wds") == "1"
511 if mode == "ap" and wds then
513 elseif mode == "sta" and wds then
520 bssid:depends({mode="adhoc"})
521 bssid:depends({mode="ahdemo"})
522 bssid:depends({mode="wds"})
524 wdssep = s:taboption("advanced", Flag, "wdssep", translate("Separate WDS"))
525 wdssep:depends({mode="ap-wds"})
527 s:taboption("advanced", Flag, "doth", "802.11h")
528 hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
529 hidden:depends({mode="ap"})
530 hidden:depends({mode="adhoc"})
531 hidden:depends({mode="ap-wds"})
532 hidden:depends({mode="sta-wds"})
533 isolate = s:taboption("advanced", Flag, "isolate", translate("Separate Clients"),
534 translate("Prevents client-to-client communication"))
535 isolate:depends({mode="ap"})
536 s:taboption("advanced", Flag, "bgscan", translate("Background Scan"))
538 mp = s:taboption("macfilter", ListValue, "macpolicy", translate("MAC-Address Filter"))
539 mp:value("", translate("disable"))
540 mp:value("allow", translate("Allow listed only"))
541 mp:value("deny", translate("Allow all except listed"))
543 ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
544 ml.datatype = "macaddr"
545 ml:depends({macpolicy="allow"})
546 ml:depends({macpolicy="deny"})
547 nt.mac_hints(function(mac, name) ml:value(mac, "%s (%s)" %{ mac, name }) end)
549 s:taboption("advanced", Value, "rate", translate("Transmission Rate"))
550 s:taboption("advanced", Value, "mcast_rate", translate("Multicast Rate"))
551 s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
552 s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
553 s:taboption("advanced", Value, "minrate", translate("Minimum Rate"))
554 s:taboption("advanced", Value, "maxrate", translate("Maximum Rate"))
555 s:taboption("advanced", Flag, "compression", translate("Compression"))
557 s:taboption("advanced", Flag, "bursting", translate("Frame Bursting"))
558 s:taboption("advanced", Flag, "turbo", translate("Turbo Mode"))
559 s:taboption("advanced", Flag, "ff", translate("Fast Frames"))
561 s:taboption("advanced", Flag, "wmm", translate("WMM Mode"))
562 s:taboption("advanced", Flag, "xr", translate("XR Support"))
563 s:taboption("advanced", Flag, "ar", translate("AR Support"))
565 local swm = s:taboption("advanced", Flag, "sw_merge", translate("Disable HW-Beacon timer"))
566 swm:depends({mode="adhoc"})
568 local nos = s:taboption("advanced", Flag, "nosbeacon", translate("Disable HW-Beacon timer"))
569 nos:depends({mode="sta"})
570 nos:depends({mode="sta-wds"})
572 local probereq = s:taboption("advanced", Flag, "probereq", translate("Do not send probe responses"))
573 probereq.enabled = "0"
574 probereq.disabled = "1"
578 -------------------- Broadcom Interface ----------------------
580 if hwtype == "broadcom" then
581 mode:value("wds", translate("WDS"))
582 mode:value("monitor", translate("Monitor"))
584 hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
585 hidden:depends({mode="ap"})
586 hidden:depends({mode="adhoc"})
587 hidden:depends({mode="wds"})
589 isolate = s:taboption("advanced", Flag, "isolate", translate("Separate Clients"),
590 translate("Prevents client-to-client communication"))
591 isolate:depends({mode="ap"})
593 s:taboption("advanced", Flag, "doth", "802.11h")
594 s:taboption("advanced", Flag, "wmm", translate("WMM Mode"))
596 bssid:depends({mode="wds"})
597 bssid:depends({mode="adhoc"})
601 ----------------------- HostAP Interface ---------------------
603 if hwtype == "prism2" then
604 mode:value("wds", translate("WDS"))
605 mode:value("monitor", translate("Monitor"))
607 hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
608 hidden:depends({mode="ap"})
609 hidden:depends({mode="adhoc"})
610 hidden:depends({mode="wds"})
612 bssid:depends({mode="sta"})
614 mp = s:taboption("macfilter", ListValue, "macpolicy", translate("MAC-Address Filter"))
615 mp:value("", translate("disable"))
616 mp:value("allow", translate("Allow listed only"))
617 mp:value("deny", translate("Allow all except listed"))
618 ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
619 ml:depends({macpolicy="allow"})
620 ml:depends({macpolicy="deny"})
621 nt.mac_hints(function(mac, name) ml:value(mac, "%s (%s)" %{ mac, name }) end)
623 s:taboption("advanced", Value, "rate", translate("Transmission Rate"))
624 s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
625 s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
629 ------------------- WiFI-Encryption -------------------
631 encr = s:taboption("encryption", ListValue, "encryption", translate("Encryption"))
632 encr.override_values = true
633 encr.override_depends = true
634 encr:depends({mode="ap"})
635 encr:depends({mode="sta"})
636 encr:depends({mode="adhoc"})
637 encr:depends({mode="ahdemo"})
638 encr:depends({mode="ap-wds"})
639 encr:depends({mode="sta-wds"})
640 encr:depends({mode="mesh"})
642 cipher = s:taboption("encryption", ListValue, "cipher", translate("Cipher"))
643 cipher:depends({encryption="wpa"})
644 cipher:depends({encryption="wpa2"})
645 cipher:depends({encryption="psk"})
646 cipher:depends({encryption="psk2"})
647 cipher:depends({encryption="wpa-mixed"})
648 cipher:depends({encryption="psk-mixed"})
649 cipher:value("auto", translate("auto"))
650 cipher:value("ccmp", translate("Force CCMP (AES)"))
651 cipher:value("tkip", translate("Force TKIP"))
652 cipher:value("tkip+ccmp", translate("Force TKIP and CCMP (AES)"))
654 function encr.cfgvalue(self, section)
655 local v = tostring(ListValue.cfgvalue(self, section))
658 elseif v and v:match("%+") then
659 return (v:gsub("%+.+$", ""))
664 function encr.write(self, section, value)
665 local e = tostring(encr:formvalue(section))
666 local c = tostring(cipher:formvalue(section))
667 if value == "wpa" or value == "wpa2" then
668 self.map.uci:delete("wireless", section, "key")
670 if e and (c == "tkip" or c == "ccmp" or c == "tkip+ccmp") then
673 self.map:set(section, "encryption", e)
676 function cipher.cfgvalue(self, section)
677 local v = tostring(ListValue.cfgvalue(encr, section))
678 if v and v:match("%+") then
679 v = v:gsub("^[^%+]+%+", "")
680 if v == "aes" then v = "ccmp"
681 elseif v == "tkip+aes" then v = "tkip+ccmp"
682 elseif v == "aes+tkip" then v = "tkip+ccmp"
683 elseif v == "ccmp+tkip" then v = "tkip+ccmp"
689 function cipher.write(self, section)
690 return encr:write(section)
694 encr:value("none", "No Encryption")
695 encr:value("wep-open", translate("WEP Open System"), {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"}, {mode="adhoc"}, {mode="ahdemo"}, {mode="wds"})
696 encr:value("wep-shared", translate("WEP Shared Key"), {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"}, {mode="adhoc"}, {mode="ahdemo"}, {mode="wds"})
698 if hwtype == "atheros" or hwtype == "mac80211" or hwtype == "prism2" then
699 local supplicant = fs.access("/usr/sbin/wpa_supplicant")
700 local hostapd = fs.access("/usr/sbin/hostapd")
703 local has_ap_eap = (os.execute("hostapd -veap >/dev/null 2>/dev/null") == 0)
704 local has_sta_eap = (os.execute("wpa_supplicant -veap >/dev/null 2>/dev/null") == 0)
706 if hostapd and supplicant then
707 encr:value("psk", "WPA-PSK", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
708 encr:value("psk2", "WPA2-PSK", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
709 encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
710 if has_ap_eap and has_sta_eap then
711 encr:value("wpa", "WPA-EAP", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
712 encr:value("wpa2", "WPA2-EAP", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
714 elseif hostapd and not supplicant then
715 encr:value("psk", "WPA-PSK", {mode="ap"}, {mode="ap-wds"})
716 encr:value("psk2", "WPA2-PSK", {mode="ap"}, {mode="ap-wds"})
717 encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode", {mode="ap"}, {mode="ap-wds"})
719 encr:value("wpa", "WPA-EAP", {mode="ap"}, {mode="ap-wds"})
720 encr:value("wpa2", "WPA2-EAP", {mode="ap"}, {mode="ap-wds"})
722 encr.description = translate(
723 "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
724 "and ad-hoc mode) to be installed."
726 elseif not hostapd and supplicant then
727 encr:value("psk", "WPA-PSK", {mode="sta"}, {mode="sta-wds"})
728 encr:value("psk2", "WPA2-PSK", {mode="sta"}, {mode="sta-wds"})
729 encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode", {mode="sta"}, {mode="sta-wds"})
731 encr:value("wpa", "WPA-EAP", {mode="sta"}, {mode="sta-wds"})
732 encr:value("wpa2", "WPA2-EAP", {mode="sta"}, {mode="sta-wds"})
734 encr.description = translate(
735 "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
736 "and ad-hoc mode) to be installed."
739 encr.description = translate(
740 "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
741 "and ad-hoc mode) to be installed."
744 elseif hwtype == "broadcom" then
745 encr:value("psk", "WPA-PSK")
746 encr:value("psk2", "WPA2-PSK")
747 encr:value("psk+psk2", "WPA-PSK/WPA2-PSK Mixed Mode")
750 auth_server = s:taboption("encryption", Value, "auth_server", translate("Radius-Authentication-Server"))
751 auth_server:depends({mode="ap", encryption="wpa"})
752 auth_server:depends({mode="ap", encryption="wpa2"})
753 auth_server:depends({mode="ap-wds", encryption="wpa"})
754 auth_server:depends({mode="ap-wds", encryption="wpa2"})
755 auth_server.rmempty = true
756 auth_server.datatype = "host(0)"
758 auth_port = s:taboption("encryption", Value, "auth_port", translate("Radius-Authentication-Port"), translatef("Default %d", 1812))
759 auth_port:depends({mode="ap", encryption="wpa"})
760 auth_port:depends({mode="ap", encryption="wpa2"})
761 auth_port:depends({mode="ap-wds", encryption="wpa"})
762 auth_port:depends({mode="ap-wds", encryption="wpa2"})
763 auth_port.rmempty = true
764 auth_port.datatype = "port"
766 auth_secret = s:taboption("encryption", Value, "auth_secret", translate("Radius-Authentication-Secret"))
767 auth_secret:depends({mode="ap", encryption="wpa"})
768 auth_secret:depends({mode="ap", encryption="wpa2"})
769 auth_secret:depends({mode="ap-wds", encryption="wpa"})
770 auth_secret:depends({mode="ap-wds", encryption="wpa2"})
771 auth_secret.rmempty = true
772 auth_secret.password = true
774 acct_server = s:taboption("encryption", Value, "acct_server", translate("Radius-Accounting-Server"))
775 acct_server:depends({mode="ap", encryption="wpa"})
776 acct_server:depends({mode="ap", encryption="wpa2"})
777 acct_server:depends({mode="ap-wds", encryption="wpa"})
778 acct_server:depends({mode="ap-wds", encryption="wpa2"})
779 acct_server.rmempty = true
780 acct_server.datatype = "host(0)"
782 acct_port = s:taboption("encryption", Value, "acct_port", translate("Radius-Accounting-Port"), translatef("Default %d", 1813))
783 acct_port:depends({mode="ap", encryption="wpa"})
784 acct_port:depends({mode="ap", encryption="wpa2"})
785 acct_port:depends({mode="ap-wds", encryption="wpa"})
786 acct_port:depends({mode="ap-wds", encryption="wpa2"})
787 acct_port.rmempty = true
788 acct_port.datatype = "port"
790 acct_secret = s:taboption("encryption", Value, "acct_secret", translate("Radius-Accounting-Secret"))
791 acct_secret:depends({mode="ap", encryption="wpa"})
792 acct_secret:depends({mode="ap", encryption="wpa2"})
793 acct_secret:depends({mode="ap-wds", encryption="wpa"})
794 acct_secret:depends({mode="ap-wds", encryption="wpa2"})
795 acct_secret.rmempty = true
796 acct_secret.password = true
798 wpakey = s:taboption("encryption", Value, "_wpa_key", translate("Key"))
799 wpakey:depends("encryption", "psk")
800 wpakey:depends("encryption", "psk2")
801 wpakey:depends("encryption", "psk+psk2")
802 wpakey:depends("encryption", "psk-mixed")
803 wpakey.datatype = "wpakey"
804 wpakey.rmempty = true
805 wpakey.password = true
807 wpakey.cfgvalue = function(self, section, value)
808 local key = m.uci:get("wireless", section, "key")
809 if key == "1" or key == "2" or key == "3" or key == "4" then
815 wpakey.write = function(self, section, value)
816 self.map.uci:set("wireless", section, "key", value)
817 self.map.uci:delete("wireless", section, "key1")
821 wepslot = s:taboption("encryption", ListValue, "_wep_key", translate("Used Key Slot"))
822 wepslot:depends("encryption", "wep-open")
823 wepslot:depends("encryption", "wep-shared")
824 wepslot:value("1", translatef("Key #%d", 1))
825 wepslot:value("2", translatef("Key #%d", 2))
826 wepslot:value("3", translatef("Key #%d", 3))
827 wepslot:value("4", translatef("Key #%d", 4))
829 wepslot.cfgvalue = function(self, section)
830 local slot = tonumber(m.uci:get("wireless", section, "key"))
831 if not slot or slot < 1 or slot > 4 then
837 wepslot.write = function(self, section, value)
838 self.map.uci:set("wireless", section, "key", value)
843 wepkey = s:taboption("encryption", Value, "key" .. slot, translatef("Key #%d", slot))
844 wepkey:depends("encryption", "wep-open")
845 wepkey:depends("encryption", "wep-shared")
846 wepkey.datatype = "wepkey"
847 wepkey.rmempty = true
848 wepkey.password = true
850 function wepkey.write(self, section, value)
851 if value and (#value == 5 or #value == 13) then
852 value = "s:" .. value
854 return Value.write(self, section, value)
859 if hwtype == "atheros" or hwtype == "mac80211" or hwtype == "prism2" then
860 nasid = s:taboption("encryption", Value, "nasid", translate("NAS ID"))
861 nasid:depends({mode="ap", encryption="wpa"})
862 nasid:depends({mode="ap", encryption="wpa2"})
863 nasid:depends({mode="ap-wds", encryption="wpa"})
864 nasid:depends({mode="ap-wds", encryption="wpa2"})
867 eaptype = s:taboption("encryption", ListValue, "eap_type", translate("EAP-Method"))
868 eaptype:value("tls", "TLS")
869 eaptype:value("ttls", "TTLS")
870 eaptype:value("peap", "PEAP")
871 eaptype:value("fast", "FAST")
872 eaptype:depends({mode="sta", encryption="wpa"})
873 eaptype:depends({mode="sta", encryption="wpa2"})
874 eaptype:depends({mode="sta-wds", encryption="wpa"})
875 eaptype:depends({mode="sta-wds", encryption="wpa2"})
877 cacert = s:taboption("encryption", FileUpload, "ca_cert", translate("Path to CA-Certificate"))
878 cacert:depends({mode="sta", encryption="wpa"})
879 cacert:depends({mode="sta", encryption="wpa2"})
880 cacert:depends({mode="sta-wds", encryption="wpa"})
881 cacert:depends({mode="sta-wds", encryption="wpa2"})
882 cacert.rmempty = true
884 clientcert = s:taboption("encryption", FileUpload, "client_cert", translate("Path to Client-Certificate"))
885 clientcert:depends({mode="sta", eap_type="tls", encryption="wpa"})
886 clientcert:depends({mode="sta", eap_type="tls", encryption="wpa2"})
887 clientcert:depends({mode="sta-wds", eap_type="tls", encryption="wpa"})
888 clientcert:depends({mode="sta-wds", eap_type="tls", encryption="wpa2"})
890 privkey = s:taboption("encryption", FileUpload, "priv_key", translate("Path to Private Key"))
891 privkey:depends({mode="sta", eap_type="tls", encryption="wpa2"})
892 privkey:depends({mode="sta", eap_type="tls", encryption="wpa"})
893 privkey:depends({mode="sta-wds", eap_type="tls", encryption="wpa2"})
894 privkey:depends({mode="sta-wds", eap_type="tls", encryption="wpa"})
896 privkeypwd = s:taboption("encryption", Value, "priv_key_pwd", translate("Password of Private Key"))
897 privkeypwd:depends({mode="sta", eap_type="tls", encryption="wpa2"})
898 privkeypwd:depends({mode="sta", eap_type="tls", encryption="wpa"})
899 privkeypwd:depends({mode="sta-wds", eap_type="tls", encryption="wpa2"})
900 privkeypwd:depends({mode="sta-wds", eap_type="tls", encryption="wpa"})
901 privkeypwd.rmempty = true
902 privkeypwd.password = true
904 auth = s:taboption("encryption", ListValue, "auth", translate("Authentication"))
905 auth:value("PAP", "PAP", {eap_type="ttls"})
906 auth:value("CHAP", "CHAP", {eap_type="ttls"})
907 auth:value("MSCHAP", "MSCHAP", {eap_type="ttls"})
908 auth:value("MSCHAPV2", "MSCHAPv2", {eap_type="ttls"})
909 auth:value("EAP-GTC")
910 auth:value("EAP-MD5")
911 auth:value("EAP-MSCHAPV2")
912 auth:value("EAP-TLS")
913 auth:depends({mode="sta", eap_type="fast", encryption="wpa2"})
914 auth:depends({mode="sta", eap_type="fast", encryption="wpa"})
915 auth:depends({mode="sta", eap_type="peap", encryption="wpa2"})
916 auth:depends({mode="sta", eap_type="peap", encryption="wpa"})
917 auth:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
918 auth:depends({mode="sta", eap_type="ttls", encryption="wpa"})
919 auth:depends({mode="sta-wds", eap_type="fast", encryption="wpa2"})
920 auth:depends({mode="sta-wds", eap_type="fast", encryption="wpa"})
921 auth:depends({mode="sta-wds", eap_type="peap", encryption="wpa2"})
922 auth:depends({mode="sta-wds", eap_type="peap", encryption="wpa"})
923 auth:depends({mode="sta-wds", eap_type="ttls", encryption="wpa2"})
924 auth:depends({mode="sta-wds", eap_type="ttls", encryption="wpa"})
926 cacert2 = s:taboption("encryption", FileUpload, "ca_cert2", translate("Path to inner CA-Certificate"))
927 cacert2:depends({mode="sta", auth="EAP-TLS", encryption="wpa"})
928 cacert2:depends({mode="sta", auth="EAP-TLS", encryption="wpa2"})
929 cacert2:depends({mode="sta-wds", auth="EAP-TLS", encryption="wpa"})
930 cacert2:depends({mode="sta-wds", auth="EAP-TLS", encryption="wpa2"})
932 clientcert2 = s:taboption("encryption", FileUpload, "client_cert2", translate("Path to inner Client-Certificate"))
933 clientcert2:depends({mode="sta", auth="EAP-TLS", encryption="wpa"})
934 clientcert2:depends({mode="sta", auth="EAP-TLS", encryption="wpa2"})
935 clientcert2:depends({mode="sta-wds", auth="EAP-TLS", encryption="wpa"})
936 clientcert2:depends({mode="sta-wds", auth="EAP-TLS", encryption="wpa2"})
938 privkey2 = s:taboption("encryption", FileUpload, "priv_key2", translate("Path to inner Private Key"))
939 privkey2:depends({mode="sta", auth="EAP-TLS", encryption="wpa"})
940 privkey2:depends({mode="sta", auth="EAP-TLS", encryption="wpa2"})
941 privkey2:depends({mode="sta-wds", auth="EAP-TLS", encryption="wpa"})
942 privkey2:depends({mode="sta-wds", auth="EAP-TLS", encryption="wpa2"})
944 privkeypwd2 = s:taboption("encryption", Value, "priv_key2_pwd", translate("Password of inner Private Key"))
945 privkeypwd2:depends({mode="sta", auth="EAP-TLS", encryption="wpa"})
946 privkeypwd2:depends({mode="sta", auth="EAP-TLS", encryption="wpa2"})
947 privkeypwd2:depends({mode="sta-wds", auth="EAP-TLS", encryption="wpa"})
948 privkeypwd2:depends({mode="sta-wds", auth="EAP-TLS", encryption="wpa2"})
949 privkeypwd2.rmempty = true
950 privkeypwd2.password = true
952 identity = s:taboption("encryption", Value, "identity", translate("Identity"))
953 identity:depends({mode="sta", eap_type="fast", encryption="wpa2"})
954 identity:depends({mode="sta", eap_type="fast", encryption="wpa"})
955 identity:depends({mode="sta", eap_type="peap", encryption="wpa2"})
956 identity:depends({mode="sta", eap_type="peap", encryption="wpa"})
957 identity:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
958 identity:depends({mode="sta", eap_type="ttls", encryption="wpa"})
959 identity:depends({mode="sta-wds", eap_type="fast", encryption="wpa2"})
960 identity:depends({mode="sta-wds", eap_type="fast", encryption="wpa"})
961 identity:depends({mode="sta-wds", eap_type="peap", encryption="wpa2"})
962 identity:depends({mode="sta-wds", eap_type="peap", encryption="wpa"})
963 identity:depends({mode="sta-wds", eap_type="ttls", encryption="wpa2"})
964 identity:depends({mode="sta-wds", eap_type="ttls", encryption="wpa"})
965 identity:depends({mode="sta", eap_type="tls", encryption="wpa2"})
966 identity:depends({mode="sta", eap_type="tls", encryption="wpa"})
967 identity:depends({mode="sta-wds", eap_type="tls", encryption="wpa2"})
968 identity:depends({mode="sta-wds", eap_type="tls", encryption="wpa"})
970 password = s:taboption("encryption", Value, "password", translate("Password"))
971 password:depends({mode="sta", eap_type="fast", encryption="wpa2"})
972 password:depends({mode="sta", eap_type="fast", encryption="wpa"})
973 password:depends({mode="sta", eap_type="peap", encryption="wpa2"})
974 password:depends({mode="sta", eap_type="peap", encryption="wpa"})
975 password:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
976 password:depends({mode="sta", eap_type="ttls", encryption="wpa"})
977 password:depends({mode="sta-wds", eap_type="fast", encryption="wpa2"})
978 password:depends({mode="sta-wds", eap_type="fast", encryption="wpa"})
979 password:depends({mode="sta-wds", eap_type="peap", encryption="wpa2"})
980 password:depends({mode="sta-wds", eap_type="peap", encryption="wpa"})
981 password:depends({mode="sta-wds", eap_type="ttls", encryption="wpa2"})
982 password:depends({mode="sta-wds", eap_type="ttls", encryption="wpa"})
983 password.rmempty = true
984 password.password = true
987 if hwtype == "atheros" or hwtype == "mac80211" or hwtype == "prism2" then
988 local wpasupplicant = fs.access("/usr/sbin/wpa_supplicant")
989 local hostcli = fs.access("/usr/sbin/hostapd_cli")
990 if hostcli and wpasupplicant then
991 wps = s:taboption("encryption", Flag, "wps_pushbutton", translate("Enable WPS pushbutton, requires WPA(2)-PSK"))
995 wps:depends("encryption", "psk")
996 wps:depends("encryption", "psk2")
997 wps:depends("encryption", "psk-mixed")