Commit Graph

455 Commits

Author SHA1 Message Date
John Crispin
384eba5c0e radio: apply HE settings for EHT modes
HE settings (bss_color, multiple_bssid, ema) are also valid for
EHT (802.11be) configurations.

Signed-off-by: John Crispin <john@phrozen.org>
2025-12-05 10:50:56 +01:00
John Crispin
c836eb5cf4 ssid: fix roaming defaults for PSK and RADIUS configurations
- Disable generate_psk by default to prevent issues with PSK roaming on VLANs
- Set message_exchange to 'ds' for SAE/WPA3 RADIUS roaming

Signed-off-by: John Crispin <john@phrozen.org>
2025-10-09 11:58:58 +02:00
John Crispin
676e1550c5 dhcp_inject: fix a syntax issue in dhcp_inject
Signed-off-by: John Crispin <john@phrozen.org>
2025-09-29 16:29:28 +02:00
Kumiko18
168f6a4ab3 dhcp_inject: Support multiple upstream
Support multiple ssid <-> upstream bindings.

Fixes: WIFI-15125
Signed-off-by: Kumiko18 <alex18_huang@accton.com>
2025-09-24 13:05:27 +02:00
Aditya-Rai-25
1c6b3095cb ssid: decouple batman tunnel from meshpoint interfaces
creating a meshpoint interface with no batman-adv tunnel being present generates
an invalid configuration.

Signed-off-by: Aditya-Rai-25 <aditya21.rai@routerarchitects.com>
2025-08-04 16:32:36 +02:00
Tanya Singh
30c73745c1 Add 'access-token' to AFC server config
Fixes: WIFI-14921
Signed-off-by: Tanya Singh <tanya_singh@accton.com>
2025-07-29 13:02:26 +02:00
Ian Chen
b971b73d4c Support HaLow Mesh on EAP112
set HaLow MESH interface in ssid.uc

Fixes: WIFI-14896
Signed-off-by: Ian Chen <ian77_chen@accton.com>
2025-07-24 13:28:42 +02:00
NavneetBarwal-RA
7d283201c0 Fix in ucode script of config_raw to add multiple UCI sections via config-raw object of the schema
Fixes: WIFI-14885

Signed-off-by: NavneetBarwal-RA <navneet51.barwal@routerarchitects.com>
2025-07-24 13:27:43 +02:00
John Crispin
fa26853696 enable multiple bssid by default on 6G
Signed-off-by: John Crispin <john@phrozen.org>
2025-07-24 13:26:33 +02:00
Ian Chen
8238eb640e HaLow: add a switch to enable/disable radio
Fixes: WIFI-14736

Signed-off-by: Ian Chen <ian77_chen@accton.com>
2025-07-11 10:43:25 +02:00
Ian Chen
2819f87b6f HaLow: fix channel 8/24/40 cannot be set
Fixes: WIFI-14577
Signed-off-by: Ian Chen <ian77_chen@accton.com>
2025-07-07 07:42:25 +02:00
Ian Chen
3b04c09d96 HaLow: set default channel to avoid HaLow not working when no channel set by JSON
Fixes: WIFI-14739
Signed-off-by: Ian Chen <ian77_chen@accton.com>
2025-07-07 07:41:58 +02:00
jackcybertan
125a148764 add PoE support for client ports
Since PSE Power on/off Control needs to be done through the ucentral config file, multiple config nodes and corresponding ucodes have been added.

Poe is placed under the ethernet node.

Fixes: WIFI-14724
Signed-off-by: jackcybertan <jack.tsai@cybertan.com.tw>
2025-06-27 07:26:26 +02:00
John Crispin
ac3a1c7c25 convert rssi threshold to interface options
Signed-off-by: John Crispin <john@phrozen.org>
2025-06-11 07:50:13 +02:00
John Crispin
827ccc2c59 setting probe_request_rssi incorrectly turned the SSID into a hidden one
Signed-off-by: John Crispin <john@phrozen.org>
2025-06-10 08:29:50 +02:00
Henry Haller
9710867e1a make the MTU configurable on GRE tunnels
Signed-off-by: Henry Haller <hbh@rgnets.com>
2025-05-19 06:04:41 +02:00
alex18_huang
4dd0904e17 SSH IdleTimeout can be configured from JSON config
Added support for ucentral config to specify ssh idle-timeout on device.

Fixes: WIFI-14532
Signed-off-by: alex18_huang <alex18_huang@accton.com>
2025-05-19 06:01:30 +02:00
Ian Chen
6faaa1f655 HaLow: Extend ucentral schema & state for HaLow
1. Extend ucentral schema & state for HaLow
2. Refine "system" into "sysinfo" to avoid confliction with system trace in state.uc

Fixes: WIFI-14436
Signed-off-by: Ian Chen <ian77_chen@accton.com>
2025-05-12 07:42:01 +02:00
alex18_huang
aa9cac5172 dhcp_inject: Use same keyword "dhcp-inject" in config file
Use same keyword "dhcp-inject" in config file in both services and interfaces->ssids->services

Fixes: WIFI-14573
Signed-off-by: alex18_huang <alex18_huang@accton.com>
2025-05-12 07:40:18 +02:00
alex18_huang
3b88fc15df dhcp_inject: Multiple ssids sometime didn't display dhcp option 82 rules
Add expected interface count for program to detect if all ifaces are ready

Fixes: WIFI-14564
Signed-off-by: alex18_huang <alex18_huang@accton.com>
2025-04-28 12:30:45 +02:00
John Crispin
7624d43dc7 set generate_local_psk to false if roaming and multi_psk are enabled
Signed-off-by: John Crispin <john@phrozen.org>
2025-04-10 09:08:10 +02:00
Venkat Chimata
246873b15c add max-inactivity to ssid config
This option specifies the maximum time (in seconds) a client can remain idle before it gets disconnected.

It can be configured under ssids in the config.

Signed-off-by: Venkat Chimata <venkata@shasta.cloud>
2025-04-10 08:23:09 +02:00
alex18_huang
3b5a5c4a6e Allow option 82 DHCP fields to be transparently injected into client DHCP requests
1. Added new service udhcpinject
  2. Modified schemareader.uc to parse dhcp-inject content

Signed-off-by: alex18_huang <alex18_huang@accton.com>
2025-04-10 07:59:47 +02:00
John Crispin
505e1a1292 ssh: add IdleTimeout=60
Signed-off-by: John Crispin <john@phrozen.org>
2025-03-28 08:29:25 +01:00
John Crispin
601bdd6063 force generate_local_psk to false for all wpa3 protos
Signed-off-by: John Crispin <john@phrozen.org>
2025-03-26 15:16:55 +01:00
Tanya Singh
481fd772ff WIFI-14472: JSON config should allow to set channels above 196 to support channels in 6G band
Signed-off-by: Tanya Singh <tanya_singh@accton.com>
2025-03-14 07:37:15 +01:00
Marek Kwaczynski
a518b02075 schema, ssid: add mpsk-radius encryption
Add a new encryption type to specify MPSK AAA for 6GHz.
 mpsk-radius encryption means:
 - psk2-radius for 2.4GHz, 5GHz
 - sae for 6GHz

Signed-off-by: Marek Kwaczynski <marek@shasta.cloud>
2025-03-11 10:09:49 +01:00
John Crispin
39e380e922 enforce PMF on sae-mixed mode
Signed-off-by: John Crispin <john@phrozen.org>
2025-03-03 15:17:00 +01:00
John Crispin
13e4f540d8 disable reconf on wifi-7 devices
Signed-off-by: John Crispin <john@phrozen.org>
2025-02-03 11:37:52 +01:00
John Crispin
bc1c45d0b0 fix HE capabilities check on multi radio phys
Signed-off-by: John Crispin <john@phrozen.org>
2025-01-27 07:36:32 +01:00
John Crispin
e6f1164998 allow setting proto none interfaces
This ensures that netifd will never up/down cycle the netdev

Signed-off-by: John Crispin <john@phrozen.org>
2025-01-08 09:46:17 +01:00
Francisco Jose Alvarez
6e3e2df40d ucentral-schema: add support for configuring snmpd service using ucentral.
Signed-off-by: Francisco Jose Alvarez <francisco.alvarez@galgus.ai>
2024-11-22 09:43:31 +01:00
John Crispin
b7207ae626 allow setting cloud_discovery timeouts
Signed-off-by: John Crispin <john@phrozen.org>
2024-11-14 08:06:46 +01:00
Paul White
7ac7ed51d6 schema: configure sae on 6G when SSID is sae-mixed
When configuring an SSID for 6G + 5G and/or 2G, it's possible to use
WPA3-Transition mode which is configured in the uCentral schema using
the 'sae-mixed' value.   When this is converted into the UCI
configuration, the 6G PHY ssid entry must be configured for 'sae' while
the other band(s) stay with 'sae-mixed'

Signed-off-by: Paul White <paul@shasta.cloud>
2024-11-13 16:59:22 +01:00
Paul White
44da3d651e Add config for vendor-class and request-options
When using dynamic (dhcp) addressing for IPv4, allow the vendor-class
and list of requested options to be configured, along with specific
defaults:
    vendor-class default is "OpenLAN"
    requested options default is [ 43, 60, 224 ]

These defaults enable support for cloud discovery FQDN (224) and the
DHCP-VSI feature (43, 60)

Fixes: WIFI-14271
Signed-off-by: Paul White <paul@shasta.cloud>
2024-11-11 07:50:06 +01:00
John Crispin
a21635b230 always request option 43 and 224 when doing DHCP
Signed-off-by: John Crispin <john@phrozen.org>
2024-11-06 11:51:02 +01:00
John Crispin
a0f26ac881 disable OKC when MPSK is enabled
Signed-off-by: John Crispin <john@phrozen.org>
2024-10-01 15:49:57 +02:00
John Crispin
df95905c2d do not restart the mpsk daemon upon cfg reload
Signed-off-by: John Crispin <john@phrozen.org>
2024-10-01 10:15:30 +02:00
John Crispin
baeef766f4 Revert "ucentral-schema: add support for configuring snmpd service using ucentral."
This reverts commit 8b3701bf2e.
2024-09-23 14:51:58 +02:00
John Crispin
684a1aab59 firewall: upon up NAT'ed port 53 for ipv6
Signed-off-by: John Crispin <john@phrozen.org>
2024-09-23 14:50:24 +02:00
John Crispin
83a30b4de0 enable reconf for mpsk interfaces
Signed-off-by: John Crispin <john@phrozen.org>
2024-09-23 14:38:18 +02:00
Venkat Chimata
42e59d5524 Add system-password to the schema
With this addition, a desired password can be configured through ucentral config

Signed-off-by: Venkat Chimata <venkata@shasta.cloud>
2024-09-22 14:11:21 +02:00
Francisco Jose Alvarez
8b3701bf2e ucentral-schema: add support for configuring snmpd service using ucentral.
Signed-off-by: Francisco Jose Alvarez <francisco.alvarez@galgus.ai>
2024-09-22 14:10:38 +02:00
John Crispin
45e6c53480 command: add fixed_config
Signed-off-by: John Crispin <john@phrozen.org>
2024-09-16 16:03:45 +02:00
John Crispin
79f8158096 wrap up psk2-radius / enhanced MPSK
Signed-off-by: John Crispin <john@phrozen.org>
2024-09-09 15:02:36 +02:00
Jonas Gorski
06745bcc42 handle multi-band phys for encryption check
Do not validate encryption against bands supported by the phy, but
against the band in use by getting the cross-section of ssid bands and
phy bands.

Fixes no default wireless configuration being generated if the phy is
both 5G and 6G capable, as all 6G encryption constraints are applied
even if the radio isn't configured for the 6G band.

Signed-off-by: Jonas Gorski <jonas.gorski@bisdn.de>
2024-09-02 15:55:00 +02:00
Jonas Gorski
c113cac7ba fix 80211w value for "none" encryption
We treated ssid.encryption.proto = "none" in validate_encryption() as no
encryption, we should do the same in match_ieee80211w().

Signed-off-by: Jonas Gorski <jonas.gorski@bisdn.de>
2024-09-02 15:54:14 +02:00
tanya.singh
a626097064 add schema for RRM based on Channel Utilization
Signed-off-by: Tanya Singh <tanya_singh@accton.com>
2024-08-07 06:24:37 +02:00
John Crispin
39aed21ed9 captive: allow loading the web-root from an external http server
Signed-off-by: John Crispin <john@phrozen.org>
2024-08-05 10:29:31 +02:00
John Crispin
37e38951a5 add multi-psk2-radius
Signed-off-by: John Crispin <john@phrozen.org>
2024-08-05 10:29:31 +02:00