package/hostapd/files/hostapd.sh

   1 hostapd_setup_vif() {
   2         local vif="$1"
   3         local driver="$2"
   4         local hostapd_cfg=
   5
   6         # Examples:
   7         # psk-mixed/tkip        => WPA1+2 PSK, TKIP
   8         # wpa-psk2/tkip+aes     => WPA2 PSK, CCMP+TKIP
   9         # wpa2/tkip+aes         => WPA2 RADIUS, CCMP+TKIP
  10         # ...
  11
  12         # TODO: move this parsing function somewhere generic, so that
  13         # later it can be reused by drivers that don't use hostapd
  14
  15         # crypto defaults: WPA2 vs WPA1
  16         case "$enc" in
  17                 wpa2*|WPA2*|*PSK2*|*psk2*)
  18                         wpa=2
  19                         crypto="CCMP"
  20                 ;;
  21                 *mixed*)
  22                         wpa=3
  23                         crypto="CCMP TKIP"
  24                 ;;
  25                 *)
  26                         wpa=1
  27                         crypto="TKIP"
  28                 ;;
  29         esac
  30
  31         # explicit override for crypto setting
  32         case "$enc" in
  33                 *tkip+aes|*TKIP+AES|*tkip+ccmp|*TKIP+CCMP) crypto="CCMP TKIP";;
  34                 *tkip|*TKIP) crypto="TKIP";;
  35                 *aes|*AES|*ccmp|*CCMP) crypto="CCMP";;
  36         esac
  37
  38         # use crypto/auth settings for building the hostapd config
  39         case "$enc" in
  40                 *psk*|*PSK*)
  41                         config_get psk "$vif" key
  42                         if [ ${#psk} -eq 64 ]; then
  43                                 append hostapd_cfg "wpa_psk=$psk" "$N"
  44                         else
  45                                 append hostapd_cfg "wpa_passphrase=$psk" "$N"
  46                         fi
  47                 ;;
  48                 *wpa*|*WPA*)
  49                         # required fields? formats?
  50                         # hostapd is particular, maybe a default configuration for failures
  51                         config_get server "$vif" server
  52                         append hostapd_cfg "auth_server_addr=$server" "$N"
  53                         config_get port "$vif" port
  54                         port=${port:-1812}
  55                         append hostapd_cfg "auth_server_port=$port" "$N"
  56                         config_get secret "$vif" key
  57                         append hostapd_cfg "auth_server_shared_secret=$secret" "$N"
  58                         config_get nasid "$vif" nasid
  59                         append hostapd_cfg "nas_identifier=$nasid" "$N"
  60                         append hostapd_cfg "eapol_key_index_workaround=1" "$N"
  61                         append hostapd_cfg "radius_acct_interim_interval=300" "$N"
  62                         append hostapd_cfg "ieee8021x=1" "$N"
  63                         append hostapd_cfg "auth_algs=1" "$N"
  64                         append hostapd_cfg "wpa_key_mgmt=WPA-EAP" "$N"
  65                         append hostapd_cfg "wpa_group_rekey=300" "$N"
  66                         append hostapd_cfg "wpa_gmk_rekey=640" "$N"
  67                 ;;
  68                 *)
  69                         wpa=0
  70                         crypto=
  71                 ;;
  72         esac
  73         config_get ifname "$vif" ifname
  74         config_get bridge "$vif" bridge
  75         config_get ssid "$vif" ssid
  76         config_get device "$vif" device
  77         config_get channel "$device" channel
  78         config_get hwmode "$device" hwmode
  79         config_get wpa_group_rekey "$vif" wpa_group_rekey
  80         config_get ieee80211d "$vif" ieee80211d
  81         case "$hwmode" in
  82                 bg) hwmode=g;;
  83         esac
  84         config_get country "$device" country
  85         [ "$channel" = auto ] && channel=
  86         [ -n "$channel" -a -z "$hwmode" ] && wifi_fixup_hwmode "$device"
  87         [ -n "$hwmode" ] && {
  88                 config_get hwmode_11n "$device" hwmode_11n
  89                 [ -n "$hwmode_11n" ] && {
  90                         hwmode="$hwmode_11n"
  91                         config_get ht_capab "$device" ht_capab
  92                 }
  93         }
  94         cat > /var/run/hostapd-$ifname.conf <<EOF
  95 ctrl_interface=/var/run/hostapd-$ifname
  96 driver=$driver
  97 interface=$ifname
  98 ${hwmode:+hw_mode=$hwmode}
  99 ${channel:+channel=$channel}
 100 ${bridge:+bridge=$bridge}
 101 ssid=$ssid
 102 wpa=$wpa
 103 ${crypto:+wpa_pairwise=$crypto}
 104 ${country:+country_code=$country}
 105 ${hwmode_11n:+ieee80211n=1}
 106 ${ht_capab:+ht_capab=$ht_capab}
 107 ${wpa_group_rekey:+wpa_group_rekey=$wpa_group_rekey}
 108 ${ieee80211d:+ieee80211d=$ieee80211d}
 109 $hostapd_cfg
 110 wme_enabled=1
 111 wme_ac_bk_cwmin=4
 112 wme_ac_bk_cwmax=10
 113 wme_ac_bk_aifs=7
 114 wme_ac_bk_txop_limit=0
 115 wme_ac_bk_acm=0
 116 wme_ac_be_aifs=3
 117 wme_ac_be_cwmin=4
 118 wme_ac_be_cwmax=10
 119 wme_ac_be_txop_limit=0
 120 wme_ac_be_acm=0
 121 wme_ac_vi_aifs=2
 122 wme_ac_vi_cwmin=3
 123 wme_ac_vi_cwmax=4
 124 wme_ac_vi_txop_limit=94
 125 wme_ac_vi_acm=0
 126 wme_ac_vo_aifs=2
 127 wme_ac_vo_cwmin=2
 128 wme_ac_vo_cwmax=3
 129 wme_ac_vo_txop_limit=47
 130 wme_ac_vo_acm=0
 131 tx_queue_data3_aifs=7
 132 tx_queue_data3_cwmin=15
 133 tx_queue_data3_cwmax=1023
 134 tx_queue_data3_burst=0
 135 tx_queue_data2_aifs=3
 136 tx_queue_data2_cwmin=15
 137 tx_queue_data2_cwmax=63
 138 tx_queue_data2_burst=0
 139 tx_queue_data1_aifs=1
 140 tx_queue_data1_cwmin=7
 141 tx_queue_data1_cwmax=15
 142 tx_queue_data1_burst=3.0
 143 tx_queue_data0_aifs=1
 144 tx_queue_data0_cwmin=3
 145 tx_queue_data0_cwmax=7
 146 tx_queue_data0_burst=1.5
 147 EOF
 148         hostapd -P /var/run/wifi-$ifname.pid -B /var/run/hostapd-$ifname.conf
 149 }
 150