]> git.ipfire.org Git - thirdparty/hostap.git/blame - src/ap/ap_config.h
HS 2.0: Add advertisement of Connection Capability
[thirdparty/hostap.git] / src / ap / ap_config.h
CommitLineData
6fc6879b 1/*
41d719d6 2 * hostapd / Configuration definitions and helpers functions
86f6053a 3 * Copyright (c) 2003-2012, Jouni Malinen <j@w1.fi>
6fc6879b 4 *
0f3d578e
JM
5 * This software may be distributed under the terms of the BSD license.
6 * See README for more details.
6fc6879b
JM
7 */
8
094393b1
JM
9#ifndef HOSTAPD_CONFIG_H
10#define HOSTAPD_CONFIG_H
6fc6879b 11
90973fb2 12#include "common/defs.h"
6fc6879b 13#include "ip_addr.h"
90973fb2 14#include "common/wpa_common.h"
eda070f1 15#include "common/ieee802_11_common.h"
2f646b6e 16#include "wps/wps.h"
6fc6879b 17
41d719d6
JM
18#define MAX_STA_COUNT 2007
19#define MAX_VLAN_ID 4094
20
6fc6879b
JM
21typedef u8 macaddr[ETH_ALEN];
22
271d2830
JM
23struct mac_acl_entry {
24 macaddr addr;
25 int vlan_id;
26};
27
6fc6879b
JM
28struct hostapd_radius_servers;
29struct ft_remote_r0kh;
30struct ft_remote_r1kh;
31
32#define HOSTAPD_MAX_SSID_LEN 32
33
34#define NUM_WEP_KEYS 4
35struct hostapd_wep_keys {
36 u8 idx;
37 u8 *key[NUM_WEP_KEYS];
38 size_t len[NUM_WEP_KEYS];
39 int keys_set;
40 size_t default_len; /* key length used for dynamic key generation */
41};
42
43typedef enum hostap_security_policy {
44 SECURITY_PLAINTEXT = 0,
45 SECURITY_STATIC_WEP = 1,
46 SECURITY_IEEE_802_1X = 2,
47 SECURITY_WPA_PSK = 3,
48 SECURITY_WPA = 4
49} secpolicy;
50
51struct hostapd_ssid {
986de33d 52 u8 ssid[HOSTAPD_MAX_SSID_LEN];
6fc6879b
JM
53 size_t ssid_len;
54 int ssid_set;
55
56 char vlan[IFNAMSIZ + 1];
57 secpolicy security_policy;
58
59 struct hostapd_wpa_psk *wpa_psk;
60 char *wpa_passphrase;
61 char *wpa_psk_file;
62
63 struct hostapd_wep_keys wep;
64
65#define DYNAMIC_VLAN_DISABLED 0
66#define DYNAMIC_VLAN_OPTIONAL 1
67#define DYNAMIC_VLAN_REQUIRED 2
68 int dynamic_vlan;
a00237ce
MB
69#define DYNAMIC_VLAN_NAMING_WITHOUT_DEVICE 0
70#define DYNAMIC_VLAN_NAMING_WITH_DEVICE 1
71#define DYNAMIC_VLAN_NAMING_END 2
72 int vlan_naming;
6fc6879b
JM
73#ifdef CONFIG_FULL_DYNAMIC_VLAN
74 char *vlan_tagged_interface;
75#endif /* CONFIG_FULL_DYNAMIC_VLAN */
76 struct hostapd_wep_keys **dyn_vlan_keys;
77 size_t max_dyn_vlan_keys;
78};
79
80
81#define VLAN_ID_WILDCARD -1
82
83struct hostapd_vlan {
84 struct hostapd_vlan *next;
85 int vlan_id; /* VLAN ID or -1 (VLAN_ID_WILDCARD) for wildcard entry */
86 char ifname[IFNAMSIZ + 1];
87 int dynamic_vlan;
88#ifdef CONFIG_FULL_DYNAMIC_VLAN
89
90#define DVLAN_CLEAN_BR 0x1
91#define DVLAN_CLEAN_VLAN 0x2
92#define DVLAN_CLEAN_VLAN_PORT 0x4
93#define DVLAN_CLEAN_WLAN_PORT 0x8
94 int clean;
95#endif /* CONFIG_FULL_DYNAMIC_VLAN */
96};
97
98#define PMK_LEN 32
99struct hostapd_wpa_psk {
100 struct hostapd_wpa_psk *next;
101 int group;
102 u8 psk[PMK_LEN];
103 u8 addr[ETH_ALEN];
104};
105
6fc6879b
JM
106struct hostapd_eap_user {
107 struct hostapd_eap_user *next;
108 u8 *identity;
109 size_t identity_len;
110 struct {
111 int vendor;
112 u32 method;
e9447a94 113 } methods[EAP_MAX_METHODS];
6fc6879b
JM
114 u8 *password;
115 size_t password_len;
116 int phase2;
117 int force_version;
118 unsigned int wildcard_prefix:1;
119 unsigned int password_hash:1; /* whether password is hashed with
120 * nt_password_hash() */
121 int ttls_auth; /* EAP_TTLS_AUTH_* bitfield */
122};
123
af35e7af
JM
124struct hostapd_radius_attr {
125 u8 type;
126 struct wpabuf *val;
127 struct hostapd_radius_attr *next;
128};
129
6fc6879b 130
7e3c1781 131#define NUM_TX_QUEUES 4
6fc6879b
JM
132
133struct hostapd_tx_queue_params {
134 int aifs;
135 int cwmin;
136 int cwmax;
137 int burst; /* maximum burst time in 0.1 ms, i.e., 10 = 1 ms */
6fc6879b
JM
138};
139
6fc6879b 140
4b2a77ab
JM
141#define MAX_ROAMING_CONSORTIUM_LEN 15
142
143struct hostapd_roaming_consortium {
144 u8 len;
145 u8 oi[MAX_ROAMING_CONSORTIUM_LEN];
146};
147
648cc711
JM
148struct hostapd_venue_name {
149 u8 lang[3];
150 u8 name_len;
151 u8 name[252];
152};
153
6fc6879b
JM
154/**
155 * struct hostapd_bss_config - Per-BSS configuration
156 */
157struct hostapd_bss_config {
158 char iface[IFNAMSIZ + 1];
159 char bridge[IFNAMSIZ + 1];
d38ae2ea 160 char wds_bridge[IFNAMSIZ + 1];
6fc6879b
JM
161
162 enum hostapd_logger_level logger_syslog_level, logger_stdout_level;
163
164 unsigned int logger_syslog; /* module bitfield */
165 unsigned int logger_stdout; /* module bitfield */
166
167 char *dump_log_name; /* file name for state dump (SIGUSR1) */
168
169 int max_num_sta; /* maximum number of STAs in station table */
170
171 int dtim_period;
172
173 int ieee802_1x; /* use IEEE 802.1X */
174 int eapol_version;
175 int eap_server; /* Use internal EAP server instead of external
176 * RADIUS server */
177 struct hostapd_eap_user *eap_user;
178 char *eap_sim_db;
179 struct hostapd_ip_addr own_ip_addr;
180 char *nas_identifier;
181 struct hostapd_radius_servers *radius;
5843e1c9 182 int acct_interim_interval;
86f6053a 183 int radius_request_cui;
af35e7af
JM
184 struct hostapd_radius_attr *radius_auth_req_attr;
185 struct hostapd_radius_attr *radius_acct_req_attr;
b031338c 186 int radius_das_port;
bde7ba6c
JM
187 unsigned int radius_das_time_window;
188 int radius_das_require_event_timestamp;
b031338c
JM
189 struct hostapd_ip_addr radius_das_client_addr;
190 u8 *radius_das_shared_secret;
191 size_t radius_das_shared_secret_len;
6fc6879b
JM
192
193 struct hostapd_ssid ssid;
194
195 char *eap_req_id_text; /* optional displayable message sent with
196 * EAP Request-Identity */
197 size_t eap_req_id_text_len;
198 int eapol_key_index_workaround;
199
200 size_t default_wep_key_len;
201 int individual_wep_key_len;
202 int wep_rekeying_period;
203 int broadcast_key_idx_min, broadcast_key_idx_max;
204 int eap_reauth_period;
205
206 int ieee802_11f; /* use IEEE 802.11f (IAPP) */
207 char iapp_iface[IFNAMSIZ + 1]; /* interface used with IAPP broadcast
208 * frames */
209
6fc6879b
JM
210 enum {
211 ACCEPT_UNLESS_DENIED = 0,
212 DENY_UNLESS_ACCEPTED = 1,
213 USE_EXTERNAL_RADIUS_AUTH = 2
214 } macaddr_acl;
271d2830 215 struct mac_acl_entry *accept_mac;
6fc6879b 216 int num_accept_mac;
271d2830 217 struct mac_acl_entry *deny_mac;
6fc6879b 218 int num_deny_mac;
fbbfcbac 219 int wds_sta;
d3b42869 220 int isolate;
6fc6879b
JM
221
222 int auth_algs; /* bitfield of allowed IEEE 802.11 authentication
223 * algorithms, WPA_AUTH_ALG_{OPEN,SHARED,LEAP} */
224
225 int wpa; /* bitfield of WPA_PROTO_WPA, WPA_PROTO_RSN */
226 int wpa_key_mgmt;
227#ifdef CONFIG_IEEE80211W
c746331b 228 enum mfp_options ieee80211w;
45c94154
JM
229 /* dot11AssociationSAQueryMaximumTimeout (in TUs) */
230 unsigned int assoc_sa_query_max_timeout;
231 /* dot11AssociationSAQueryRetryTimeout (in TUs) */
232 int assoc_sa_query_retry_timeout;
6fc6879b 233#endif /* CONFIG_IEEE80211W */
05ab9712
MB
234 enum {
235 PSK_RADIUS_IGNORED = 0,
236 PSK_RADIUS_ACCEPTED = 1,
237 PSK_RADIUS_REQUIRED = 2
238 } wpa_psk_radius;
6fc6879b
JM
239 int wpa_pairwise;
240 int wpa_group;
241 int wpa_group_rekey;
242 int wpa_strict_rekey;
243 int wpa_gmk_rekey;
581a8cde 244 int wpa_ptk_rekey;
6fc6879b
JM
245 int rsn_pairwise;
246 int rsn_preauth;
247 char *rsn_preauth_interfaces;
248 int peerkey;
249
250#ifdef CONFIG_IEEE80211R
251 /* IEEE 802.11r - Fast BSS Transition */
252 u8 mobility_domain[MOBILITY_DOMAIN_ID_LEN];
253 u8 r1_key_holder[FT_R1KH_ID_LEN];
254 u32 r0_key_lifetime;
255 u32 reassociation_deadline;
256 struct ft_remote_r0kh *r0kh_list;
257 struct ft_remote_r1kh *r1kh_list;
258 int pmk_r1_push;
d7956add 259 int ft_over_ds;
6fc6879b
JM
260#endif /* CONFIG_IEEE80211R */
261
262 char *ctrl_interface; /* directory for UNIX domain sockets */
08230317 263#ifndef CONFIG_NATIVE_WINDOWS
6fc6879b 264 gid_t ctrl_interface_gid;
08230317 265#endif /* CONFIG_NATIVE_WINDOWS */
6fc6879b
JM
266 int ctrl_interface_gid_set;
267
268 char *ca_cert;
269 char *server_cert;
270 char *private_key;
271 char *private_key_passwd;
272 int check_crl;
273 char *dh_file;
274 u8 *pac_opaque_encr_key;
2d867244
JM
275 u8 *eap_fast_a_id;
276 size_t eap_fast_a_id_len;
277 char *eap_fast_a_id_info;
378eae5e 278 int eap_fast_prov;
a11c90a6
JM
279 int pac_key_lifetime;
280 int pac_key_refresh_time;
6fc6879b 281 int eap_sim_aka_result_ind;
da08a7c7 282 int tnc;
7f6ec672 283 int fragment_size;
df684d82 284 u16 pwd_group;
6fc6879b
JM
285
286 char *radius_server_clients;
287 int radius_server_auth_port;
288 int radius_server_ipv6;
289
290 char *test_socket; /* UNIX domain socket path for driver_test */
291
292 int use_pae_group_addr; /* Whether to send EAPOL frames to PAE group
293 * address instead of individual address
294 * (for driver_wired.c).
295 */
296
297 int ap_max_inactivity;
298 int ignore_broadcast_ssid;
299
3ae0800c 300 int wmm_enabled;
721abef9 301 int wmm_uapsd;
6fc6879b
JM
302
303 struct hostapd_vlan *vlan, *vlan_tail;
304
305 macaddr bssid;
b0194fe0
JM
306
307 /*
308 * Maximum listen interval that STAs can use when associating with this
309 * BSS. If a STA tries to use larger value, the association will be
310 * denied with status code 51.
311 */
312 u16 max_listen_interval;
bf98f7f3 313
cb465555 314 int disable_pmksa_caching;
bf98f7f3 315 int okc; /* Opportunistic Key Caching */
ad08c363
JM
316
317 int wps_state;
318#ifdef CONFIG_WPS
319 int ap_setup_locked;
320 u8 uuid[16];
321 char *wps_pin_requests;
322 char *device_name;
323 char *manufacturer;
324 char *model_name;
325 char *model_number;
326 char *serial_number;
2f646b6e 327 u8 device_type[WPS_DEV_TYPE_LEN];
ad08c363
JM
328 char *config_methods;
329 u8 os_version[4];
330 char *ap_pin;
6fa68a0e
JM
331 int skip_cred_build;
332 u8 *extra_cred;
333 size_t extra_cred_len;
d745c7cc 334 int wps_cred_processing;
4c29cae9
JM
335 u8 *ap_settings;
336 size_t ap_settings_len;
f620268f
JM
337 char *upnp_iface;
338 char *friendly_name;
339 char *manufacturer_url;
340 char *model_description;
341 char *model_url;
342 char *upc;
4028a7fd 343 struct wpabuf *wps_vendor_ext[MAX_WPS_VENDOR_EXTENSIONS];
ffdaa05a
JM
344 int wps_nfc_dev_pw_id;
345 struct wpabuf *wps_nfc_dh_pubkey;
346 struct wpabuf *wps_nfc_dh_privkey;
347 struct wpabuf *wps_nfc_dev_pw;
ad08c363 348#endif /* CONFIG_WPS */
fa516558 349 int pbc_in_m1;
e44f8bf2
JM
350
351#define P2P_ENABLED BIT(0)
352#define P2P_GROUP_OWNER BIT(1)
353#define P2P_GROUP_FORMATION BIT(2)
962473c1
JM
354#define P2P_MANAGE BIT(3)
355#define P2P_ALLOW_CROSS_CONNECTION BIT(4)
e44f8bf2 356 int p2p;
0d7e5a3a
JB
357
358 int disassoc_low_ack;
ef01fa7b 359 int skip_inactivity_poll;
1161ff1e
JM
360
361#define TDLS_PROHIBIT BIT(0)
362#define TDLS_PROHIBIT_CHAN_SWITCH BIT(1)
363 int tdls;
f39b07d7 364 int disable_11n;
efe45d14 365 int disable_11ac;
b83e3e93 366
39b97072
JM
367 /* IEEE 802.11v */
368 int time_advertisement;
369 char *time_zone;
370
b83e3e93
JM
371 /* IEEE 802.11u - Interworking */
372 int interworking;
373 int access_network_type;
374 int internet;
375 int asra;
376 int esr;
377 int uesa;
378 int venue_info_set;
379 u8 venue_group;
380 u8 venue_type;
381 u8 hessid[ETH_ALEN];
4b2a77ab
JM
382
383 /* IEEE 802.11u - Roaming Consortium list */
384 unsigned int roaming_consortium_count;
385 struct hostapd_roaming_consortium *roaming_consortium;
8e5f9134 386
648cc711
JM
387 /* IEEE 802.11u - Venue Name duples */
388 unsigned int venue_name_count;
389 struct hostapd_venue_name *venue_name;
390
550a3958
JK
391 /* IEEE 802.11u - Network Authentication Type */
392 u8 *network_auth_type;
393 size_t network_auth_type_len;
394
78bda93e
JK
395 /* IEEE 802.11u - IP Address Type Availability */
396 u8 ipaddr_type_availability;
397 u8 ipaddr_type_configured;
398
7515adb2
JK
399 /* IEEE 802.11u - 3GPP Cellular Network */
400 u8 *anqp_3gpp_cell_net;
401 size_t anqp_3gpp_cell_net_len;
402
26fac8b6
JK
403 /* IEEE 802.11u - Domain Name */
404 u8 *domain_name;
405 size_t domain_name_len;
406
dca30c3f
JK
407 u16 gas_comeback_delay;
408 int gas_frag_limit;
409
159c89ab
JK
410#ifdef CONFIG_HS20
411 int hs20;
83421850 412 int disable_dgaf;
5ccc54aa
JK
413 u8 *hs20_connection_capability;
414 size_t hs20_connection_capability_len;
df5934f1
JK
415 u8 *hs20_operating_class;
416 u8 hs20_operating_class_len;
159c89ab
JK
417#endif /* CONFIG_HS20 */
418
8e5f9134 419 u8 wps_rf_bands; /* RF bands for WPS (WPS_RF_*) */
505a3694
JM
420
421#ifdef CONFIG_RADIUS_TEST
422 char *dump_msk_file;
423#endif /* CONFIG_RADIUS_TEST */
6fc6879b
JM
424};
425
426
6fc6879b
JM
427/**
428 * struct hostapd_config - Per-radio interface configuration
429 */
430struct hostapd_config {
431 struct hostapd_bss_config *bss, *last_bss;
6fc6879b
JM
432 size_t num_bss;
433
434 u16 beacon_int;
435 int rts_threshold;
436 int fragm_threshold;
437 u8 send_probe_response;
438 u8 channel;
71934751 439 enum hostapd_hw_mode hw_mode; /* HOSTAPD_MODE_IEEE80211A, .. */
6fc6879b
JM
440 enum {
441 LONG_PREAMBLE = 0,
442 SHORT_PREAMBLE = 1
443 } preamble;
6fc6879b
JM
444
445 int *supported_rates;
446 int *basic_rates;
447
c5121837 448 const struct wpa_driver_ops *driver;
6fc6879b 449
6fc6879b
JM
450 int ap_table_max_size;
451 int ap_table_expiration_time;
452
453 char country[3]; /* first two octets: country code as described in
454 * ISO/IEC 3166-1. Third octet:
455 * ' ' (ascii 32): all environments
456 * 'O': Outdoor environemnt only
457 * 'I': Indoor environment only
458 */
459
460 int ieee80211d;
6fc6879b
JM
461
462 struct hostapd_tx_queue_params tx_queue[NUM_TX_QUEUES];
463
464 /*
3ae0800c 465 * WMM AC parameters, in same order as 802.1D, i.e.
6fc6879b
JM
466 * 0 = BE (best effort)
467 * 1 = BK (background)
468 * 2 = VI (video)
469 * 3 = VO (voice)
470 */
3ae0800c 471 struct hostapd_wmm_ac_params wmm_ac_params[4];
6fc6879b 472
9d2a76a2
JM
473 int ht_op_mode_fixed;
474 u16 ht_capab;
cfb7e8a0 475 int ieee80211n;
95da9bbc 476 int secondary_channel;
29448243 477 int require_ht;
efe45d14
MP
478 u32 vht_capab;
479 int ieee80211ac;
140e850a 480 int require_vht;
efe45d14 481 u8 vht_oper_chwidth;
9615994e 482 u8 vht_oper_centr_freq_seg0_idx;
6fc6879b
JM
483};
484
485
486int hostapd_mac_comp(const void *a, const void *b);
487int hostapd_mac_comp_empty(const void *a);
89111f3b 488struct hostapd_config * hostapd_config_defaults(void);
41d719d6 489void hostapd_config_defaults_bss(struct hostapd_bss_config *bss);
6fc6879b 490void hostapd_config_free(struct hostapd_config *conf);
271d2830
JM
491int hostapd_maclist_found(struct mac_acl_entry *list, int num_entries,
492 const u8 *addr, int *vlan_id);
6fc6879b
JM
493int hostapd_rate_found(int *list, int rate);
494int hostapd_wep_key_cmp(struct hostapd_wep_keys *a,
495 struct hostapd_wep_keys *b);
496const u8 * hostapd_get_psk(const struct hostapd_bss_config *conf,
497 const u8 *addr, const u8 *prev_psk);
498int hostapd_setup_wpa_psk(struct hostapd_bss_config *conf);
499const char * hostapd_get_vlan_id_ifname(struct hostapd_vlan *vlan,
500 int vlan_id);
501const struct hostapd_eap_user *
502hostapd_get_eap_user(const struct hostapd_bss_config *conf, const u8 *identity,
503 size_t identity_len, int phase2);
af35e7af
JM
504struct hostapd_radius_attr *
505hostapd_config_get_radius_attr(struct hostapd_radius_attr *attr, u8 type);
6fc6879b 506
094393b1 507#endif /* HOSTAPD_CONFIG_H */