html/cgi-bin/wlanap.cgi

   1 #!/usr/bin/perl
   2 ###############################################################################
   3 #                                                                             #
   4 # IPFire.org - A linux based firewall                                         #
   5 # Copyright (C) 2007-2014  IPFire Team  <info@ipfire.org>                     #
   6 #                                                                             #
   7 # This program is free software: you can redistribute it and/or modify        #
   8 # it under the terms of the GNU General Public License as published by        #
   9 # the Free Software Foundation, either version 3 of the License, or           #
  10 # (at your option) any later version.                                         #
  11 #                                                                             #
  12 # This program is distributed in the hope that it will be useful,             #
  13 # but WITHOUT ANY WARRANTY; without even the implied warranty of              #
  14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
  15 # GNU General Public License for more details.                                #
  16 #                                                                             #
  17 # You should have received a copy of the GNU General Public License           #
  18 # along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
  19 #                                                                             #
  20 ###############################################################################
  21 #
  22 # WLAN AP cgi based on wlanap.cgi written by Markus Hoffmann & Olaf Westrik
  23 #
  24
  25 use strict;
  26
  27 # enable only the following on debugging purpose
  28 #use warnings;
  29 #use CGI::Carp 'fatalsToBrowser';
  30
  31 require '/var/ipfire/general-functions.pl';
  32 require '/var/ipfire/lang.pl';
  33 require '/var/ipfire/header.pl';
  34
  35 my $debug = 0;
  36 my $status = '';
  37 my $errormessage = '';
  38 my $status_started = "<td align='center' bgcolor='${Header::colourgreen}'><font color='white'><strong>$Lang::tr{'running'}</strong></font></td>";
  39 my $status_stopped = "<td align='center' bgcolor='${Header::colourred}'><font color='white'><strong>$Lang::tr{'stopped'}</strong></font></td>";
  40 my $count=0;
  41 my $col='';
  42 # get rid of used only once warnings
  43 my @onlyonce = ( $Header::colourgreen, $Header::colourred );
  44 undef @onlyonce;
  45
  46 my %selected=();
  47 my %checked=();
  48 my %color = ();
  49 my %mainsettings = ();
  50 my %netsettings=();
  51 my %wlanapsettings=();
  52 my $channel = '';
  53 my $country = '';
  54 my $txpower = '';
  55
  56 &General::readhash("${General::swroot}/main/settings", \%mainsettings);
  57 &General::readhash("/srv/web/ipfire/html/themes/ipfire/include/colors.txt", \%color);
  58 &General::readhash("/var/ipfire/ethernet/settings", \%netsettings);
  59
  60 $wlanapsettings{'APMODE'} = 'on';
  61 $wlanapsettings{'ACTION'} = '';
  62 $wlanapsettings{'MACMODE'} = '0';
  63 $wlanapsettings{'INTERFACE'} = '';
  64 $wlanapsettings{'SSID'} = 'IPFire';
  65 $wlanapsettings{'HIDESSID'} = 'off';
  66 $wlanapsettings{'ENC'} = 'wpa2';               # none / wpa1 /wpa2
  67 $wlanapsettings{'TXPOWER'} = 'auto';
  68 $wlanapsettings{'CHANNEL'} = '6';
  69 $wlanapsettings{'COUNTRY'} = '00';
  70 $wlanapsettings{'HW_MODE'} = 'g';
  71 $wlanapsettings{'PWD'} = 'IPFire-2.x';
  72 $wlanapsettings{'SYSLOGLEVEL'} = '0';
  73 $wlanapsettings{'DEBUG'} = '4';
  74 $wlanapsettings{'DRIVER'} = 'NL80211';
  75 $wlanapsettings{'HTCAPS'} = '';
  76 $wlanapsettings{'VHTCAPS'} = '';
  77 $wlanapsettings{'NOSCAN'} = 'off';
  78 $wlanapsettings{'CLIENTISOLATION'} = 'off';
  79 $wlanapsettings{'IEEE80211W'} = 'off';
  80
  81 &General::readhash("/var/ipfire/wlanap/settings", \%wlanapsettings);
  82 &Header::getcgihash(\%wlanapsettings);
  83
  84 my @macs = $wlanapsettings{'MACS'};
  85
  86 delete $wlanapsettings{'__CGI__'};
  87 delete $wlanapsettings{'x'};
  88 delete $wlanapsettings{'y'};
  89 delete $wlanapsettings{'MACS'};
  90 delete $wlanapsettings{'ACCEPT_MACS'};
  91 delete $wlanapsettings{'DENY_MACS'};
  92
  93 &Header::showhttpheaders();
  94
  95 my $string=();
  96 my $status=();
  97 my $errormessage = '';
  98 my $memory = 0;
  99 my @memory=();
 100 my @pid=();
 101 my @hostapd=();
 102 sub pid
 103 {
 104 # for pid and memory
 105         open(FILE, '/usr/local/bin/addonctrl hostapd status | ');
 106         @hostapd = <FILE>;
 107         close(FILE);
 108         $string = join("", @hostapd);
 109         $string =~ s/[a-z_]//gi;
 110         $string =~ s/\[[0-1]\;[0-9]+//gi;
 111         $string =~ s/[\(\)\.]//gi;
 112         $string =~ s/  //gi;
 113         $string =~ s/\e//gi;
 114         @pid = split(/\s/,$string);
 115         if (open(FILE, "/proc/$pid[0]/statm")){
 116                 my $temp = <FILE>;
 117                 @memory = split(/ /,$temp);
 118                 close(FILE);
 119                 }
 120         $memory+=$memory[0];
 121 }
 122 pid();
 123
 124
 125
 126 if ( $wlanapsettings{'ACTION'} eq "$Lang::tr{'wlanap del interface'}" ){
 127         delete $wlanapsettings{'INTERFACE'};
 128         &General::writehash("/var/ipfire/wlanap/settings", \%wlanapsettings);
 129 }
 130
 131 if ( $wlanapsettings{'ACTION'} eq "$Lang::tr{'save'}" ){
 132         # verify WPA Passphrase - only with enabled enc
 133         if ($wlanapsettings{'ENC'} ne "none") {
 134                 # must be 8 .. 63 characters
 135                 if ( (length($wlanapsettings{'PWD'}) < 8) || (length($wlanapsettings{'PWD'}) > 63)){
 136                         $errormessage .= "$Lang::tr{'wlanap invalid wpa'}<br />";
 137                 }
 138                 # only ASCII alowed
 139                 if ( !($wlanapsettings{'PWD'} !~ /[^\x00-\x7f]/) ){
 140                         $errormessage .= "$Lang::tr{'wlanap invalid wpa'}<br />";
 141                 }
 142         }
 143
 144         if ( $errormessage eq '' ){
 145                 &General::writehash("/var/ipfire/wlanap/settings", \%wlanapsettings);
 146                 &WriteConfig_hostapd();
 147
 148                 system("/usr/local/bin/wlanapctrl restart >/dev/null 2>&1");
 149                 pid();
 150         }
 151 }elsif ( $wlanapsettings{'ACTION'} eq "$Lang::tr{'wlanap interface'}" ){
 152         &General::writehash("/var/ipfire/wlanap/settings", \%wlanapsettings);
 153 }elsif ( ($wlanapsettings{'ACTION'} eq "$Lang::tr{'start'}") && ($memory == 0) ){
 154         system("/usr/local/bin/wlanapctrl start >/dev/null 2>&1");
 155         pid();
 156 }elsif ( $wlanapsettings{'ACTION'} eq "$Lang::tr{'stop'}" ){
 157         system("/usr/local/bin/wlanapctrl stop >/dev/null 2>&1");
 158         $memory=0;
 159 }
 160
 161 &Header::openpage($Lang::tr{'wlanap configuration'}, 1, '', '');
 162 &Header::openbigbox('100%', 'left', '', $errormessage);
 163
 164 if ( $errormessage ){
 165         &Header::openbox('100%', 'center', $Lang::tr{'error messages'});
 166         print "<class name='base'>$errormessage\n";
 167         print "&nbsp;</class>\n";
 168         &Header::closebox();
 169 }
 170
 171
 172 # Found this usefull piece of code in BlockOutTraffic AddOn  8-)
 173 #   fwrules.cgi
 174 ###############
 175 # DEBUG DEBUG
 176 if ( $debug ){
 177         &Header::openbox('100%', 'center', 'DEBUG');
 178         my $debugCount = 0;
 179         foreach my $line (sort keys %wlanapsettings) {
 180                 print "$line = '$wlanapsettings{$line}'<br />\n";
 181                 $debugCount++;
 182         }
 183         print "&nbsp;Count: $debugCount\n";
 184         &Header::closebox();
 185 }
 186 # DEBUG DEBUG
 187 ###############
 188
 189 #
 190 # Driver and status detection
 191 #
 192 my $wlan_card_status = 'dummy';
 193 my $wlan_ap_status = '';
 194 my $message = "";
 195
 196 $selected{'INTERFACE'}{'green0'} = '';
 197 $selected{'INTERFACE'}{'blue0'} = '';
 198 $selected{'ENC'}{$wlanapsettings{'INTERFACE'}} = "selected='selected'";
 199
 200 if ( ($wlanapsettings{'INTERFACE'} eq '') ){
 201         $message = $Lang::tr{'wlanap select interface'};
 202         &Header::openbox('100%', 'center', "WLAN AP");
 203 print <<END
 204 $message<br />
 205 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
 206 <select name='INTERFACE'>
 207 END
 208 ;
 209         if ( $netsettings{'BLUE_DEV'} ne ''){
 210                 print "<option value='blue0' $selected{'INTERFACE'}{'blue0'}>blue0</option>";
 211         }
 212 print <<END
 213                 <option value='green0' $selected{'INTERFACE'}{'green0'}>green0</option>
 214 </select>
 215 <br /><br />
 216 <hr size='1'>
 217         <input type='submit' name='ACTION' value='$Lang::tr{'wlanap interface'}' /></form>
 218 END
 219 ;
 220         &Header::closebox();
 221         &Header::closebigbox();
 222         &Header::closepage();
 223         exit;
 224 }else{
 225         my $cmd_out = `/usr/sbin/iwconfig $wlanapsettings{'INTERFACE'} 2>/dev/null`;
 226
 227         if ( $cmd_out eq '' ){
 228                 $message = "$Lang::tr{'wlanap no interface'}";
 229                 $wlan_card_status = '';
 230         }else{
 231                 $cmd_out = `/sbin/ifconfig | /bin/grep $wlanapsettings{'INTERFACE'}`;
 232                 if ( $cmd_out eq '' ){
 233                         $wlan_card_status = 'down';
 234                 }else{
 235                         $wlan_card_status = 'up';
 236                         $cmd_out = `/usr/sbin/iwconfig $wlanapsettings{'INTERFACE'} | /bin/grep "Mode:Master"`;
 237                         if ( $cmd_out ne '' ){
 238                                 $wlan_ap_status = 'up';
 239                         }
 240                 }
 241         }
 242 }
 243
 244 # Change old "n" to "gn"
 245 if ( $wlanapsettings{'HW_MODE'} eq 'n' ) {
 246         $wlanapsettings{'HW_MODE'}='gn';
 247 }
 248
 249 $checked{'HIDESSID'}{'off'} = '';
 250 $checked{'HIDESSID'}{'on'} = '';
 251 $checked{'HIDESSID'}{$wlanapsettings{'HIDESSID'}} = "checked='checked'";
 252
 253 $checked{'NOSCAN'}{'off'} = '';
 254 $checked{'NOSCAN'}{'on'} = '';
 255 $checked{'NOSCAN'}{$wlanapsettings{'NOSCAN'}} = "checked='checked'";
 256
 257 $checked{'CLIENTISOLATION'}{'off'} = '';
 258 $checked{'CLIENTISOLATION'}{'on'} = '';
 259 $checked{'CLIENTISOLATION'}{$wlanapsettings{'CLIENTISOLATION'}} = "checked='checked'";
 260
 261 $selected{'IEEE80211W'}{'off'} = '';
 262 $selected{'IEEE80211W'}{'optional'} = '';
 263 $selected{'IEEE80211W'}{'on'} = '';
 264 $selected{'IEEE80211W'}{$wlanapsettings{'IEEE80211W'}} = "selected";
 265
 266 $selected{'ENC'}{$wlanapsettings{'ENC'}} = "selected='selected'";
 267 $selected{'CHANNEL'}{$wlanapsettings{'CHANNEL'}} = "selected='selected'";
 268 $selected{'COUNTRY'}{$wlanapsettings{'COUNTRY'}} = "selected='selected'";
 269 $selected{'TXPOWER'}{$wlanapsettings{'TXPOWER'}} = "selected='selected'";
 270 $selected{'HW_MODE'}{$wlanapsettings{'HW_MODE'}} = "selected='selected'";
 271 $selected{'MACMODE'}{$wlanapsettings{'MACMODE'}} = "selected='selected'";
 272
 273 my $monwlaninterface = $wlanapsettings{'INTERFACE'};
 274 if ( -d '/sys/class/net/mon.'.$wlanapsettings{'INTERFACE'} ) {
 275         $monwlaninterface =  'mon.'.$wlanapsettings{'INTERFACE'};
 276 }
 277
 278 my @channellist_cmd;
 279 my @channellist = (0);
 280
 281 if ( $wlanapsettings{'DRIVER'} eq 'NL80211' ){
 282 my $wiphy = `iw dev $wlanapsettings{'INTERFACE'} info | grep wiphy | cut -d" " -f2`;
 283 chomp $wiphy;
 284
 285 @channellist_cmd = `iw phy phy$wiphy info | grep " MHz \\\[" | grep -v "(disabled)" | grep -v "no IBSS" | grep -v "no IR" | grep -v "passive scanning" 2>/dev/null`;
 286 # get available channels
 287
 288 my @temp;
 289 foreach (@channellist_cmd){
 290 $_ =~ /(.*) \[(\d+)(.*)\]/;
 291 $channel = $2;chomp $channel;
 292 if ( $channel =~ /\d+/ ){push(@temp,$channel + 0);}
 293 }
 294 push(@channellist, @temp);
 295 } else {
 296 @channellist_cmd = `iwlist $monwlaninterface channel|tail -n +2 2>/dev/null`;
 297 # get available channels
 298
 299 my @temp;
 300 foreach (@channellist_cmd){
 301 $_ =~ /(.*)Channel (\d+)(.*):/;
 302 $channel = $2;chomp $channel;
 303 if ( $channel =~ /\d+/ ){push(@temp,$channel + 0);}
 304 }
 305 push(@channellist, @temp);
 306 }
 307
 308 my @countrylist_cmd = `regdbdump /usr/lib/crda/regulatory.bin 2>/dev/null`;
 309 # get available country codes
 310
 311 my @temp = "00";
 312 foreach (@countrylist_cmd){
 313 $_ =~ /country (.*):/;
 314 $country = $1;chomp $country;
 315 if ( $country =~ /[0,A-Z][0,A-Z]/ ) {push(@temp,$country);}
 316 }
 317 my @countrylist = @temp;
 318
 319 my @txpower_cmd = `iwlist $monwlaninterface txpower 2>/dev/null`;
 320 if ( $wlanapsettings{'DRIVER'} eq 'NL80211' ){
 321         # There is a bug with NL80211 only all devices can displayed
 322         @txpower_cmd = `iwlist txpower 2>/dev/null | sed -e "s|unknown transmit-power information.||g"`;
 323 }
 324 # get available power
 325
 326 $selected{'SYSLOGLEVEL'}{$wlanapsettings{'SYSLOGLEVEL'}} = "selected='selected'";
 327 $selected{'DEBUG'}{$wlanapsettings{'DEBUG'}} = "selected='selected'";
 328
 329 #
 330 # Status box
 331 #
 332 &Header::openbox('100%', 'center', "WLAN AP");
 333 print <<END
 334 <table width='80%' cellspacing='1' class='tbl'>
 335 END
 336 ;
 337
 338 if ( $wlan_card_status ne '' ){
 339         print "<tr><th align='left' width='50%'><strong>$Lang::tr{'service'}</strong></th><th width='22%'>Status</th><th width='10%'>PID</th><th width='15%'>$Lang::tr{'memory'}</th><th colspan='2'width='5%'>$Lang::tr{'action'}</th></tr>";
 340         print "<tr><td class='base'>$Lang::tr{'wlanap wlan card'} ($wlanapsettings{'DRIVER'})</td>";
 341         print $wlan_card_status eq 'up' ? $status_started : $status_stopped;
 342         print"<td colspan='4'></td></tr>";
 343         print "<tr><td class='base' bgcolor='$color{'color22'}'>$Lang::tr{'wlanap'}</td>";
 344         print $wlan_ap_status eq 'up' ? $status_started : $status_stopped;
 345         if ( ($memory != 0) && (@pid[0] ne "///") ){
 346                 print "<td bgcolor='$color{'color22'}' align='center'>@pid[0]</td>";
 347                 print "<td bgcolor='$color{'color22'}' align='center'>$memory KB</td>";
 348                 print "<td bgcolor='$color{'color22'}'><form method='post' action='$ENV{'SCRIPT_NAME'}'><input type='hidden' name='ACTION' value='$Lang::tr{'start'}' /><input type='image' alt='$Lang::tr{'start'}' title='$Lang::tr{'start'}' src='/images/go-up.png' /></form></td>";
 349                 print "<td bgcolor='$color{'color22'}'><form method='post' action='$ENV{'SCRIPT_NAME'}'><input type='hidden' name='ACTION' value='$Lang::tr{'stop'}' /><input type='image' alt='$Lang::tr{'stop'}' title='$Lang::tr{'stop'}' src='/images/go-down.png' /></form></td>";
 350         }else{
 351                 print"<td colspan='2' bgcolor='$color{'color22'}'></td>";
 352                 print "<td bgcolor='$color{'color22'}'><form method='post' action='$ENV{'SCRIPT_NAME'}'><input type='hidden' name='ACTION' value='$Lang::tr{'start'}' /><input type='image' alt='$Lang::tr{'start'}' title='$Lang::tr{'start'}' src='/images/go-up.png' /></form></td>";
 353                 print "<td bgcolor='$color{'color22'}'><form method='post' action='$ENV{'SCRIPT_NAME'}'><input type='hidden' name='ACTION' value='$Lang::tr{'stop'}' /><input type='image' alt='$Lang::tr{'stop'}' title='$Lang::tr{'stop'}' src='/images/go-down.png' /></form></td>";
 354         }
 355
 356 }else{
 357         print "<tr><td class='base'>$message";
 358 }
 359         print "</table>";
 360
 361 if ( $wlan_card_status eq '' ){
 362         print "<br />";
 363         print "<table width='80%' cellspacing='0' border='0'>";
 364         print "<tr align='center'>";
 365         print "<td colspan='4'></td>";
 366         print "</tr>";
 367         print "<tr align='center'>";
 368         print "<td width='40%'>&nbsp;</td>";
 369         print "<td width='20%'><form method='post' action='/cgi-bin/wlanap.cgi'><input type='submit' name='ACTION' value='$Lang::tr{'wlanap del interface'}' /></form></td>";
 370         print "<td width='20%'></td>";
 371         print "<td width='20%'></td>";
 372         print "</tr>";
 373         print "</table>";
 374 }
 375
 376 if ( $wlan_card_status eq '' ){
 377         &Header::closebox();
 378         &Header::closebigbox();
 379         &Header::closepage();
 380         exit 0;
 381 }
 382 print <<END
 383 <br><br>
 384 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
 385 <table width='80%' cellspacing='0' class='tbl' border='0'>
 386 <tr><th bgcolor='$color{'color20'}' colspan='4' align='left'><strong>$Lang::tr{'wlanap wlan settings'}</strong></th></tr>
 387 <tr><td colspan='4'><br></td></tr>
 388 <tr><td width='25%' class='base'>$Lang::tr{'wlanap ssid'}:&nbsp;</td><td class='base' colspan='3'><input type='text' name='SSID' size='30' value='$wlanapsettings{'SSID'}' /></td></tr>
 389 <!--SSID Broadcast: on => HIDESSID: off -->
 390 <tr><td width='25%' class='base'>$Lang::tr{'wlanap broadcast ssid'}:&nbsp;</td><td class='base' colspan='3'>$Lang::tr{'on'} <input type='radio' name='HIDESSID' value='off' $checked{'HIDESSID'}{'off'} /> | <input type='radio' name='HIDESSID' value='on' $checked{'HIDESSID'}{'on'} /> $Lang::tr{'off'}</td></tr>
 391 <tr><td width='25%' class='base'>$Lang::tr{'wlanap client isolation'}:&nbsp;</td><td class='base' colspan='3'>$Lang::tr{'on'} <input type='radio' name='CLIENTISOLATION' value='on' $checked{'CLIENTISOLATION'}{'on'} /> | <input type='radio' name='CLIENTISOLATION' value='off' $checked{'CLIENTISOLATION'}{'off'} /> $Lang::tr{'off'}</td></tr>
 392 <tr><td width='25%' class='base'>$Lang::tr{'wlanap country'}:&nbsp;</td><td class='base' colspan='3'>
 393         <select name='COUNTRY'>
 394 END
 395 ;
 396 foreach $country (@countrylist){
 397         print "<option $selected{'COUNTRY'}{$country}>$country</option>";
 398 }
 399 print<<END
 400 </select></td></tr>
 401 <tr><td width='25%' class='base'>HW Mode:&nbsp;</td><td class='base' colspan='3'>
 402         <select name='HW_MODE'>
 403                 <option value='a' $selected{'HW_MODE'}{'a'}>802.11a</option>
 404                 <option value='b' $selected{'HW_MODE'}{'b'}>802.11b</option>
 405                 <option value='g' $selected{'HW_MODE'}{'g'}>802.11g</option>
 406                 <option value='an' $selected{'HW_MODE'}{'an'}>802.11an</option>
 407                 <option value='gn' $selected{'HW_MODE'}{'gn'}>802.11gn</option>
 408                 <option value='ac' $selected{'HW_MODE'}{'ac'}>802.11ac</option>
 409         </select>
 410 </td></tr>
 411 END
 412 ;
 413
 414 if ( scalar @channellist > 0 ){
 415         print <<END
 416 <tr><td width='25%' class='base'>$Lang::tr{'wlanap channel'}:&nbsp;</td><td class='base' colspan='3'>
 417         <select name='CHANNEL'>
 418 END
 419 ;
 420         foreach $channel (@channellist){
 421                 print "<option $selected{'CHANNEL'}{$channel}>";
 422                 if ($channel eq 0) {
 423                         print "- $Lang::tr{'wlanap auto'} -";
 424                 } else {
 425                         print $channel;
 426                 }
 427                 print "</option>";
 428         }
 429         print "</select></td></tr>"
 430 } else {
 431         print <<END
 432 <tr><td width='25%' class='base'>$Lang::tr{'wlanap channel'}:&nbsp;</td><td class='base' colspan='3'>
 433 <input type='text' name='CHANNEL' size='10' value='$wlanapsettings{'CHANNEL'}' />
 434 </td></tr>
 435 END
 436 ;
 437 }
 438 print<<END
 439 <tr><td width='25%' class='base'>$Lang::tr{'wlanap neighbor scan'}:&nbsp;</td><td class='base' >$Lang::tr{'on'} <input type='radio' name='NOSCAN' value='off' $checked{'NOSCAN'}{'off'} /> | <input type='radio' name='NOSCAN' value='on' $checked{'NOSCAN'}{'on'} /> $Lang::tr{'off'}</td><td class='base' colspan='2'>$Lang::tr{'wlanap neighbor scan warning'}</td></tr>
 440 <tr><td colspan='4'><br></td></tr>
 441 <tr><td width='25%' class='base'>$Lang::tr{'wlanap encryption'}:&nbsp;</td><td class='base' colspan='3'>
 442         <select name='ENC'>
 443                 <option value='none' $selected{'ENC'}{'none'}>$Lang::tr{'wlanap none'}</option>
 444                 <option value='wpa1' $selected{'ENC'}{'wpa1'}>WPA1</option>
 445                 <option value='wpa2' $selected{'ENC'}{'wpa2'}>WPA2</option>
 446                 <option value='wpa3' $selected{'ENC'}{'wpa3'}>WPA3</option>
 447                 <option value='wpa1+2' $selected{'ENC'}{'wpa1+2'}>WPA1+2</option>
 448                 <option value='wpa2+3' $selected{'ENC'}{'wpa2+3'}>WPA2+3</option>
 449         </select>
 450 </td></tr>
 451 <tr><td width='25%' class='base'>Passphrase:&nbsp;</td><td class='base' colspan='3'><input type='text' name='PWD' size='30' value='$wlanapsettings{'PWD'}' /></td></tr>
 452 <tr>
 453         <td width='25%' class='base'>$Lang::tr{'wlanap management frame protection'}:&nbsp;</td>
 454         <td class='base' colspan="3">
 455                 <select name="IEEE80211W">
 456                         <option value="off" $selected{'IEEE80211W'}{'off'}>$Lang::tr{'wlanap 802.11w disabled'}</option>
 457                         <option value="optional" $selected{'IEEE80211W'}{'optional'}>$Lang::tr{'wlanap 802.11w optional'}</option>
 458                         <option value="on" $selected{'IEEE80211W'}{'on'}>$Lang::tr{'wlanap 802.11w enforced'}</option>
 459                 </select>
 460         </td>
 461 </tr>
 462 <tr><td colspan='4'><br></td></tr>
 463 END
 464 ;
 465 print <<END
 466 <tr><td width='25%' class='base'>HT Caps:&nbsp;</td><td class='base' colspan='3'><input type='text' name='HTCAPS' size='30' value='$wlanapsettings{'HTCAPS'}' /></td></tr>
 467 <tr><td width='25%' class='base'>VHT Caps:&nbsp;</td><td class='base' colspan='3'><input type='text' name='VHTCAPS' size='30' value='$wlanapsettings{'VHTCAPS'}' /></td></tr>
 468 <tr><td width='25%' class='base'>Tx Power:&nbsp;</td><td class='base' colspan='3'><input type='text' name='TXPOWER' size='10' value='$wlanapsettings{'TXPOWER'}' /></td></tr>
 469 <tr><td width='25%' class='base'>Loglevel (hostapd):&nbsp;</td><td class='base' width='25%'>
 470         <select name='SYSLOGLEVEL'>
 471                 <option value='0' $selected{'SYSLOGLEVEL'}{'0'}>0 ($Lang::tr{'wlanap verbose'})</option>
 472                 <option value='1' $selected{'SYSLOGLEVEL'}{'1'}>1 ($Lang::tr{'wlanap debugging'})</option>
 473                 <option value='2' $selected{'SYSLOGLEVEL'}{'2'}>2 ($Lang::tr{'wlanap informations'})</option>
 474                 <option value='3' $selected{'SYSLOGLEVEL'}{'3'}>3 ($Lang::tr{'wlanap notifications'})</option>
 475                 <option value='4' $selected{'SYSLOGLEVEL'}{'4'}>4 ($Lang::tr{'wlanap warnings'})</option>
 476         </select>
 477 </td>
 478 <td width='25%' class='base'>Debuglevel (hostapd):&nbsp;</td><td class='base' width='25%'>
 479         <select name='DEBUG'>
 480                 <option value='0' $selected{'DEBUG'}{'0'}>0 ($Lang::tr{'wlanap verbose'})</option>
 481                 <option value='1' $selected{'DEBUG'}{'1'}>1 ($Lang::tr{'wlanap debugging'})</option>
 482                 <option value='2' $selected{'DEBUG'}{'2'}>2 ($Lang::tr{'wlanap informations'})</option>
 483                 <option value='3' $selected{'DEBUG'}{'3'}>3 ($Lang::tr{'wlanap notifications'})</option>
 484                 <option value='4' $selected{'DEBUG'}{'4'}>4 ($Lang::tr{'wlanap warnings'})</option>
 485         </select>
 486 </td></tr>
 487 <tr><td colspan='4'><br></td></tr>
 488 </table>
 489 END
 490 ;
 491 if ( $wlanapsettings{'INTERFACE'} =~ /green0/ ){
 492         print <<END
 493 <br />
 494 <table width='80%' cellspacing='0' class='tbl' border='1'>
 495 <tr>
 496         <th colspan='3' align='left'>$Lang::tr{'mac filter'}</th>
 497 </tr>
 498 <td width='25%' class='base'>Mac Filter:&nbsp;</td><td class='base' width='25%'>
 499         <select name='MACMODE'>
 500                 <option value='0' $selected{'MACMODE'}{'0'}>0 (off)</option>
 501                 <option value='1' $selected{'MACMODE'}{'1'}>1 (Accept MACs)</option>
 502                 <option value='2' $selected{'MACMODE'}{'2'}>2 (Deny MACs)</option>
 503         </select>
 504 </td><td colspan='2'>Mac Adress List (one per line)<br /><textarea name='MACS' cols='20' rows='5' wrap='off'>
 505 END
 506 ;
 507         print `cat /var/ipfire/wlanap/macfile`;
 508 print <<END
 509 </textarea></td>
 510 </table>
 511 END
 512 ;
 513 }
 514 print <<END
 515 <br />
 516 <table width='80%' cellspacing='0'>
 517 <tr><td align='center'>
 518 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
 519        <input type='submit' name='ACTION' value='$Lang::tr{'save'}' /></form></td>
 520 </tr>
 521 </table>
 522 END
 523 ;
 524 my @status;
 525 if ( $wlanapsettings{'DRIVER'} eq 'NL80211' ){
 526          @status =  `iw dev $wlanapsettings{'INTERFACE'} info && iw dev $wlanapsettings{'INTERFACE'} station dump && echo ""`;
 527 }
 528 print <<END
 529 <br />
 530 <table width='80%' cellspacing='0' class='tbl'>
 531 <tr><th colspan='3' bgcolor='$color{'color20'}' align='left'><strong>$Lang::tr{'wlanap wlan status'}</strong></th></tr>
 532 END
 533 ;
 534
 535 for (my $i=0;$i<$#status;$i++){
 536
 537 if (@status[$i]=~"^Station ") { $count++; }
 538 if ($count % 2){
 539                 $col="bgcolor='$color{'color20'}'";
 540         }else{
 541                 $col="bgcolor='$color{'color22'}'";
 542         }
 543         print"<tr><td colspan='3' $col><pre>@status[$i]</pre></td></tr>";
 544         if (! @status[$i]=~"^/t" ) { $count++; }
 545 }
 546         $count++;
 547
 548 foreach my $nr (@channellist_cmd){
 549         if ($count % 2){
 550                 $col="bgcolor='$color{'color20'}'";
 551         }else{
 552                 $col="bgcolor='$color{'color22'}'";
 553         }
 554         print"<tr><td colspan='3' $col>$nr</td></tr>";
 555         $count++;
 556 }
 557
 558 for (my $i=0;$i<$#txpower_cmd;$i=$i+2){
 559         if ($count % 2){
 560                 $col="bgcolor='$color{'color20'}'";
 561         }else{
 562                 $col="bgcolor='$color{'color22'}'";
 563         }
 564         print "<tr><td $col>@txpower_cmd[$i]</td></tr>";
 565         $count++;
 566 }
 567 print "</table><br>";
 568 print <<END
 569 <br />
 570 <table width='80%' cellspacing='0' class='tbl' border='0'>
 571 <tr><td bgcolor='$color{'color20'}' align='left'><strong>$Lang::tr{'wlan clients'}</strong></td></tr>
 572 <tr><td>&nbsp;<a href="/cgi-bin/wireless.cgi">$Lang::tr{'wlanap link wireless'}</a></td></tr>
 573 <tr><td>&nbsp;<a href="/cgi-bin/dhcp.cgi">$Lang::tr{'wlanap link dhcp'}</a></td></tr>
 574 <tr><td><br></td></tr>
 575 </table>
 576 END
 577 ;
 578 &Header::closebox();
 579 print "</form>";
 580 &Header::closebigbox();
 581 &Header::closepage();
 582
 583 sub WriteConfig_hostapd{
 584         $wlanapsettings{'DRIVER_HOSTAPD'} = lc($wlanapsettings{'DRIVER'});
 585
 586         open (CONFIGFILE, ">/var/ipfire/wlanap/hostapd.conf");
 587         print CONFIGFILE <<END
 588 driver=$wlanapsettings{'DRIVER_HOSTAPD'}
 589 ######################### basic hostapd configuration ##########################
 590 #
 591 interface=$wlanapsettings{'INTERFACE'}
 592 country_code=$wlanapsettings{'COUNTRY'}
 593 ieee80211d=1
 594 ieee80211h=1
 595 channel=$wlanapsettings{'CHANNEL'}
 596 END
 597 ;
 598  if ( $wlanapsettings{'HW_MODE'} eq 'an' ){
 599         print CONFIGFILE <<END
 600 hw_mode=a
 601 ieee80211n=1
 602 wmm_enabled=1
 603 ht_capab=$wlanapsettings{'HTCAPS'}
 604 END
 605 ;
 606
 607  }elsif ( $wlanapsettings{'HW_MODE'} eq 'gn' ){
 608         print CONFIGFILE <<END
 609 hw_mode=g
 610 ieee80211n=1
 611 wmm_enabled=1
 612 ht_capab=$wlanapsettings{'HTCAPS'}
 613 END
 614 ;
 615
 616  }elsif ( $wlanapsettings{'HW_MODE'} eq 'ac' ){
 617         print CONFIGFILE <<END
 618 hw_mode=a
 619 ieee80211ac=1
 620 ieee80211n=1
 621 wmm_enabled=1
 622 ht_capab=$wlanapsettings{'HTCAPS'}
 623 vht_capab=$wlanapsettings{'VHTCAPS'}
 624 vht_oper_chwidth=1
 625 END
 626 ;
 627
 628  }else{
 629         print CONFIGFILE <<END
 630 hw_mode=$wlanapsettings{'HW_MODE'}
 631 END
 632 ;
 633
 634  }
 635
 636 print CONFIGFILE <<END
 637 logger_syslog=-1
 638 logger_syslog_level=$wlanapsettings{'SYSLOGLEVEL'}
 639 logger_stdout=-1
 640 logger_stdout_level=$wlanapsettings{'DEBUG'}
 641 auth_algs=1
 642 ctrl_interface=/var/run/hostapd
 643 ctrl_interface_group=0
 644 disassoc_low_ack=1
 645 END
 646 ;
 647  if ( $wlanapsettings{'HIDESSID'} eq 'on' ){
 648         print CONFIGFILE <<END
 649 ssid=$wlanapsettings{'SSID'}
 650 ignore_broadcast_ssid=2
 651 END
 652 ;
 653
 654  }else{
 655         print CONFIGFILE <<END
 656 ssid=$wlanapsettings{'SSID'}
 657 ignore_broadcast_ssid=0
 658 END
 659 ;
 660
 661  }
 662
 663  # https://forum.ipfire.org/viewtopic.php?f=22&t=12274&p=79070#p79070
 664  if ( $wlanapsettings{'CLIENTISOLATION'} eq 'on' ){
 665         print CONFIGFILE <<END
 666 ap_isolate=1
 667 END
 668 ;
 669  }
 670
 671  if ( $wlanapsettings{'NOSCAN'} eq 'on' ){
 672         print CONFIGFILE <<END
 673 noscan=1
 674 END
 675 ;
 676
 677  }else{
 678         print CONFIGFILE <<END
 679 noscan=0
 680 END
 681 ;
 682
 683  }
 684
 685  # Management Frame Protection (802.11w)
 686  if ($wlanapsettings{'IEEE80211W'} eq "on") {
 687         print CONFIGFILE "ieee80211w=2\n";
 688  } elsif ($wlanapsettings{'IEEE80211W'} eq "optional") {
 689         print CONFIGFILE "ieee80211w=1\n";
 690  } else {
 691         print CONFIGFILE "ieee80211w=0\n";
 692  }
 693
 694  if ( $wlanapsettings{'ENC'} eq 'wpa1'){
 695         print CONFIGFILE <<END
 696 ######################### wpa hostapd configuration ############################
 697 #
 698 wpa=1
 699 wpa_passphrase=$wlanapsettings{'PWD'}
 700 wpa_key_mgmt=WPA-PSK
 701 wpa_pairwise=TKIP
 702 END
 703 ;
 704  }elsif ( $wlanapsettings{'ENC'} eq 'wpa2'){
 705         print CONFIGFILE <<END
 706 ######################### wpa hostapd configuration ############################
 707 #
 708 wpa=2
 709 wpa_passphrase=$wlanapsettings{'PWD'}
 710 wpa_key_mgmt=WPA-PSK
 711 rsn_pairwise=CCMP
 712 END
 713 ;
 714  }elsif ( $wlanapsettings{'ENC'} eq 'wpa3'){
 715         print CONFIGFILE <<END
 716 ######################### wpa hostapd configuration ############################
 717 #
 718 wpa=2
 719 wpa_passphrase=$wlanapsettings{'PWD'}
 720 wpa_key_mgmt=SAE
 721 rsn_pairwise=CCMP
 722 END
 723 ;
 724  } elsif ( $wlanapsettings{'ENC'} eq 'wpa1+2'){
 725         print CONFIGFILE <<END
 726 ######################### wpa hostapd configuration ############################
 727 #
 728 wpa=3
 729 wpa_passphrase=$wlanapsettings{'PWD'}
 730 wpa_key_mgmt=WPA-PSK
 731 wpa_pairwise=TKIP
 732 rsn_pairwise=CCMP
 733 END
 734 ;
 735  }elsif ( $wlanapsettings{'ENC'} eq 'wpa2+3'){
 736         print CONFIGFILE <<END
 737 ######################### wpa hostapd configuration ############################
 738 #
 739 wpa=2
 740 wpa_passphrase=$wlanapsettings{'PWD'}
 741 wpa_key_mgmt=WPA-PSK SAE
 742 rsn_pairwise=CCMP
 743 END
 744 ;
 745  }
 746         close CONFIGFILE;
 747
 748         open (MACFILE, ">/var/ipfire/wlanap/macfile");
 749         foreach(@macs){
 750                 $_ =~ s/\r//gi;
 751                 chomp($_);
 752                 if ( $_ ne "" ){print MACFILE $_;}
 753         }
 754         close MACFILE;
 755 }