2 * hostapd / Configuration file
3 * Copyright (c) 2003-2007, Jouni Malinen <j@w1.fi>
4 * Copyright (c) 2007-2008, Intel Corporation
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License version 2 as
8 * published by the Free Software Foundation.
10 * Alternatively, this software may be distributed under the terms of BSD
13 * See README and COPYING for more details.
21 #include "wpa_common.h"
27 typedef u8 macaddr
[ETH_ALEN
];
29 struct mac_acl_entry
{
34 struct hostapd_radius_servers
;
35 struct ft_remote_r0kh
;
36 struct ft_remote_r1kh
;
38 #define HOSTAPD_MAX_SSID_LEN 32
40 #define NUM_WEP_KEYS 4
41 struct hostapd_wep_keys
{
43 u8
*key
[NUM_WEP_KEYS
];
44 size_t len
[NUM_WEP_KEYS
];
46 size_t default_len
; /* key length used for dynamic key generation */
49 typedef enum hostap_security_policy
{
50 SECURITY_PLAINTEXT
= 0,
51 SECURITY_STATIC_WEP
= 1,
52 SECURITY_IEEE_802_1X
= 2,
58 char ssid
[HOSTAPD_MAX_SSID_LEN
+ 1];
62 char vlan
[IFNAMSIZ
+ 1];
63 secpolicy security_policy
;
65 struct hostapd_wpa_psk
*wpa_psk
;
69 struct hostapd_wep_keys wep
;
71 #define DYNAMIC_VLAN_DISABLED 0
72 #define DYNAMIC_VLAN_OPTIONAL 1
73 #define DYNAMIC_VLAN_REQUIRED 2
75 #ifdef CONFIG_FULL_DYNAMIC_VLAN
76 char *vlan_tagged_interface
;
77 #endif /* CONFIG_FULL_DYNAMIC_VLAN */
78 struct hostapd_wep_keys
**dyn_vlan_keys
;
79 size_t max_dyn_vlan_keys
;
83 #define VLAN_ID_WILDCARD -1
86 struct hostapd_vlan
*next
;
87 int vlan_id
; /* VLAN ID or -1 (VLAN_ID_WILDCARD) for wildcard entry */
88 char ifname
[IFNAMSIZ
+ 1];
90 #ifdef CONFIG_FULL_DYNAMIC_VLAN
92 #define DVLAN_CLEAN_BR 0x1
93 #define DVLAN_CLEAN_VLAN 0x2
94 #define DVLAN_CLEAN_VLAN_PORT 0x4
95 #define DVLAN_CLEAN_WLAN_PORT 0x8
97 #endif /* CONFIG_FULL_DYNAMIC_VLAN */
101 struct hostapd_wpa_psk
{
102 struct hostapd_wpa_psk
*next
;
108 #define EAP_USER_MAX_METHODS 8
109 struct hostapd_eap_user
{
110 struct hostapd_eap_user
*next
;
116 } methods
[EAP_USER_MAX_METHODS
];
121 unsigned int wildcard_prefix
:1;
122 unsigned int password_hash
:1; /* whether password is hashed with
123 * nt_password_hash() */
124 int ttls_auth
; /* EAP_TTLS_AUTH_* bitfield */
128 #define NUM_TX_QUEUES 8
130 struct hostapd_tx_queue_params
{
134 int burst
; /* maximum burst time in 0.1 ms, i.e., 10 = 1 ms */
138 struct hostapd_wme_ac_params
{
142 int txopLimit
; /* in units of 32us */
143 int admission_control_mandatory
;
148 * struct hostapd_bss_config - Per-BSS configuration
150 struct hostapd_bss_config
{
151 char iface
[IFNAMSIZ
+ 1];
152 char bridge
[IFNAMSIZ
+ 1];
154 enum hostapd_logger_level logger_syslog_level
, logger_stdout_level
;
156 unsigned int logger_syslog
; /* module bitfield */
157 unsigned int logger_stdout
; /* module bitfield */
159 char *dump_log_name
; /* file name for state dump (SIGUSR1) */
161 int max_num_sta
; /* maximum number of STAs in station table */
165 int ieee802_1x
; /* use IEEE 802.1X */
167 int eap_server
; /* Use internal EAP server instead of external
169 struct hostapd_eap_user
*eap_user
;
171 struct hostapd_ip_addr own_ip_addr
;
172 char *nas_identifier
;
173 struct hostapd_radius_servers
*radius
;
175 struct hostapd_ssid ssid
;
177 char *eap_req_id_text
; /* optional displayable message sent with
178 * EAP Request-Identity */
179 size_t eap_req_id_text_len
;
180 int eapol_key_index_workaround
;
182 size_t default_wep_key_len
;
183 int individual_wep_key_len
;
184 int wep_rekeying_period
;
185 int broadcast_key_idx_min
, broadcast_key_idx_max
;
186 int eap_reauth_period
;
188 int ieee802_11f
; /* use IEEE 802.11f (IAPP) */
189 char iapp_iface
[IFNAMSIZ
+ 1]; /* interface used with IAPP broadcast
192 u8 assoc_ap_addr
[ETH_ALEN
];
193 int assoc_ap
; /* whether assoc_ap_addr is set */
196 ACCEPT_UNLESS_DENIED
= 0,
197 DENY_UNLESS_ACCEPTED
= 1,
198 USE_EXTERNAL_RADIUS_AUTH
= 2
200 struct mac_acl_entry
*accept_mac
;
202 struct mac_acl_entry
*deny_mac
;
205 int auth_algs
; /* bitfield of allowed IEEE 802.11 authentication
206 * algorithms, WPA_AUTH_ALG_{OPEN,SHARED,LEAP} */
208 int wpa
; /* bitfield of WPA_PROTO_WPA, WPA_PROTO_RSN */
210 #ifdef CONFIG_IEEE80211W
213 IEEE80211W_OPTIONAL
= 1,
214 IEEE80211W_REQUIRED
= 2
216 #endif /* CONFIG_IEEE80211W */
220 int wpa_strict_rekey
;
224 char *rsn_preauth_interfaces
;
227 #ifdef CONFIG_IEEE80211R
228 /* IEEE 802.11r - Fast BSS Transition */
229 u8 mobility_domain
[MOBILITY_DOMAIN_ID_LEN
];
230 u8 r1_key_holder
[FT_R1KH_ID_LEN
];
232 u32 reassociation_deadline
;
233 struct ft_remote_r0kh
*r0kh_list
;
234 struct ft_remote_r1kh
*r1kh_list
;
236 #endif /* CONFIG_IEEE80211R */
238 char *ctrl_interface
; /* directory for UNIX domain sockets */
239 gid_t ctrl_interface_gid
;
240 int ctrl_interface_gid_set
;
245 char *private_key_passwd
;
248 u8
*pac_opaque_encr_key
;
250 int eap_sim_aka_result_ind
;
253 char *radius_server_clients
;
254 int radius_server_auth_port
;
255 int radius_server_ipv6
;
257 char *test_socket
; /* UNIX domain socket path for driver_test */
259 int use_pae_group_addr
; /* Whether to send EAPOL frames to PAE group
260 * address instead of individual address
261 * (for driver_wired.c).
264 int ap_max_inactivity
;
265 int ignore_broadcast_ssid
;
269 struct hostapd_vlan
*vlan
, *vlan_tail
;
274 * Maximum listen interval that STAs can use when associating with this
275 * BSS. If a STA tries to use larger value, the association will be
276 * denied with status code 51.
278 u16 max_listen_interval
;
280 int okc
; /* Opportunistic Key Caching */
285 HOSTAPD_MODE_IEEE80211B
,
286 HOSTAPD_MODE_IEEE80211G
,
287 HOSTAPD_MODE_IEEE80211A
,
293 * struct hostapd_config - Per-radio interface configuration
295 struct hostapd_config
{
296 struct hostapd_bss_config
*bss
, *last_bss
;
297 struct hostapd_radius_servers
*radius
;
303 u8 send_probe_response
;
305 hostapd_hw_mode hw_mode
; /* HOSTAPD_MODE_IEEE80211A, .. */
311 CTS_PROTECTION_AUTOMATIC
= 0,
312 CTS_PROTECTION_FORCE_ENABLED
= 1,
313 CTS_PROTECTION_FORCE_DISABLED
= 2,
314 CTS_PROTECTION_AUTOMATIC_NO_OLBC
= 3,
315 } cts_protection_type
;
317 int *supported_rates
;
320 const struct wpa_driver_ops
*driver
;
322 int passive_scan_interval
; /* seconds, 0 = disabled */
323 int passive_scan_listen
; /* usec */
324 int passive_scan_mode
;
325 int ap_table_max_size
;
326 int ap_table_expiration_time
;
328 char country
[3]; /* first two octets: country code as described in
329 * ISO/IEC 3166-1. Third octet:
330 * ' ' (ascii 32): all environments
331 * 'O': Outdoor environemnt only
332 * 'I': Indoor environment only
336 unsigned int ieee80211h
; /* Enable/Disable 80211h */
338 struct hostapd_tx_queue_params tx_queue
[NUM_TX_QUEUES
];
341 * WME AC parameters, in same order as 802.1D, i.e.
342 * 0 = BE (best effort)
343 * 1 = BK (background)
347 struct hostapd_wme_ac_params wme_ac_params
[4];
350 INTERNAL_BRIDGE_DO_NOT_CONTROL
= -1,
351 INTERNAL_BRIDGE_DISABLED
= 0,
352 INTERNAL_BRIDGE_ENABLED
= 1
355 #ifdef CONFIG_IEEE80211N
357 int ht_op_mode_fixed
;
359 #endif /* CONFIG_IEEE80211N */
363 int hostapd_mac_comp(const void *a
, const void *b
);
364 int hostapd_mac_comp_empty(const void *a
);
365 struct hostapd_config
* hostapd_config_read(const char *fname
);
366 void hostapd_config_free(struct hostapd_config
*conf
);
367 int hostapd_maclist_found(struct mac_acl_entry
*list
, int num_entries
,
368 const u8
*addr
, int *vlan_id
);
369 int hostapd_rate_found(int *list
, int rate
);
370 int hostapd_wep_key_cmp(struct hostapd_wep_keys
*a
,
371 struct hostapd_wep_keys
*b
);
372 const u8
* hostapd_get_psk(const struct hostapd_bss_config
*conf
,
373 const u8
*addr
, const u8
*prev_psk
);
374 int hostapd_setup_wpa_psk(struct hostapd_bss_config
*conf
);
375 const char * hostapd_get_vlan_id_ifname(struct hostapd_vlan
*vlan
,
377 const struct hostapd_eap_user
*
378 hostapd_get_eap_user(const struct hostapd_bss_config
*conf
, const u8
*identity
,
379 size_t identity_len
, int phase2
);
381 #endif /* CONFIG_H */