Commit Graph

897 Commits

Author SHA1 Message Date
Ian Chen
175b4d04fb test 2025-04-11 18:22:50 +08:00
John Crispin
5a6d23b76b fix/improve swconfig detection
Signed-off-by: John Crispin <john@phrozen.org>
2025-04-10 16:07:00 +02:00
John Crispin
43c73750cc default max-inactivity to 300
Signed-off-by: John Crispin <john@phrozen.org>
2025-04-10 09:43:45 +02:00
John Crispin
7624d43dc7 set generate_local_psk to false if roaming and multi_psk are enabled
Signed-off-by: John Crispin <john@phrozen.org>
2025-04-10 09:08:10 +02:00
Venkat Chimata
246873b15c add max-inactivity to ssid config
This option specifies the maximum time (in seconds) a client can remain idle before it gets disconnected.

It can be configured under ssids in the config.

Signed-off-by: Venkat Chimata <venkata@shasta.cloud>
2025-04-10 08:23:09 +02:00
alex18_huang
3b5a5c4a6e Allow option 82 DHCP fields to be transparently injected into client DHCP requests
1. Added new service udhcpinject
  2. Modified schemareader.uc to parse dhcp-inject content

Signed-off-by: alex18_huang <alex18_huang@accton.com>
2025-04-10 07:59:47 +02:00
John Crispin
10b5c3641a extend swconfig support for dual cpu port swconfig switches
Signed-off-by: John Crispin <john@phrozen.org>
2025-04-09 09:23:09 +02:00
Tanya Singh
0683d041e4 Add pdev_stats and channel utilization for each radio in the statistics
Signed-off-by: Tanya Singh <tanya_singh@accton.com>
2025-04-08 07:05:27 +02:00
John Crispin
a2133a8e2a always regenerate the default /e/c/wireless config
Signed-off-by: John Crispin <john@phrozen.org>
2025-03-28 09:28:21 +01:00
John Crispin
505e1a1292 ssh: add IdleTimeout=60
Signed-off-by: John Crispin <john@phrozen.org>
2025-03-28 08:29:25 +01:00
John Crispin
601bdd6063 force generate_local_psk to false for all wpa3 protos
Signed-off-by: John Crispin <john@phrozen.org>
2025-03-26 15:16:55 +01:00
Tanya Singh
d183922b77 WIFI-14477: Get switch carrier, speed & duplex info from swconfig command
Signed-off-by: Tanya Singh <tanya_singh@accton.com>
2025-03-24 08:12:26 +01:00
John Crispin
c2338adfe4 snmp: fix schema/yaml syntax
This cause the docs to not get generated correctly

Signed-off-by: John Crispin <john@phrozen.org>
2025-03-24 07:59:04 +01:00
John Crispin
50c4ead343 set schema version to 4.0.0
Signed-off-by: John Crispin <john@phrozen.org>
2025-03-24 07:51:11 +01:00
John Crispin
d8260f8ff3 add property that allows disabling MPSK
Signed-off-by: John Crispin <john@phrozen.org>
2025-03-24 07:50:14 +01:00
John Crispin
5a39d237a4 remove beacon-interval option
Signed-off-by: John Crispin <john@phrozen.org>
2025-03-20 15:38:33 +01:00
Tanya Singh
1c11c1bb67 WIFI-14284: Use swconfig to get the correct port to VLAN ID mapping for statistics
Signed-off-by: Tanya Singh <tanya_singh@accton.com>
2025-03-17 11:58:58 +01:00
Tanya Singh
481fd772ff WIFI-14472: JSON config should allow to set channels above 196 to support channels in 6G band
Signed-off-by: Tanya Singh <tanya_singh@accton.com>
2025-03-14 07:37:15 +01:00
Venkat Chimata
d2ff805af6 Change realtime events type from enum to string
Signed-off-by: Venkat Chimata <venkata@shasta.cloud>
2025-03-11 10:13:17 +01:00
Marek Kwaczynski
a518b02075 schema, ssid: add mpsk-radius encryption
Add a new encryption type to specify MPSK AAA for 6GHz.
 mpsk-radius encryption means:
 - psk2-radius for 2.4GHz, 5GHz
 - sae for 6GHz

Signed-off-by: Marek Kwaczynski <marek@shasta.cloud>
2025-03-11 10:09:49 +01:00
John Crispin
39e380e922 enforce PMF on sae-mixed mode
Signed-off-by: John Crispin <john@phrozen.org>
2025-03-03 15:17:00 +01:00
Francisco Jose Alvarez
90aa0eefc9 system: Fix the delta_counters for dynamic vlan stations
Signed-off-by: Francisco Jose Alvarez <francisco.alvarez@galgus.ai>
2025-02-27 09:44:29 +01:00
John Crispin
d09196a7a5 fix phy lookup on none wifi-7 devices
Signed-off-by: John Crispin <john@phrozen.org>
2025-02-05 06:45:03 +01:00
John Crispin
13e4f540d8 disable reconf on wifi-7 devices
Signed-off-by: John Crispin <john@phrozen.org>
2025-02-03 11:37:52 +01:00
John Crispin
bc1c45d0b0 fix HE capabilities check on multi radio phys
Signed-off-by: John Crispin <john@phrozen.org>
2025-01-27 07:36:32 +01:00
John Crispin
e6f1164998 allow setting proto none interfaces
This ensures that netifd will never up/down cycle the netdev

Signed-off-by: John Crispin <john@phrozen.org>
2025-01-08 09:46:17 +01:00
John Crispin
61e5802789 add multi radio support
Signed-off-by: John Crispin <john@phrozen.org>
2024-12-09 08:34:39 +01:00
John Crispin
1ddca91b8e set schema version to 3.2.1
Signed-off-by: John Crispin <john@phrozen.org>
2024-12-09 08:25:11 +01:00
Francisco Jose Alvarez
6e3e2df40d ucentral-schema: add support for configuring snmpd service using ucentral.
Signed-off-by: Francisco Jose Alvarez <francisco.alvarez@galgus.ai>
2024-11-22 09:43:31 +01:00
John Crispin
b7207ae626 allow setting cloud_discovery timeouts
Signed-off-by: John Crispin <john@phrozen.org>
2024-11-14 08:06:46 +01:00
Paul White
7ac7ed51d6 schema: configure sae on 6G when SSID is sae-mixed
When configuring an SSID for 6G + 5G and/or 2G, it's possible to use
WPA3-Transition mode which is configured in the uCentral schema using
the 'sae-mixed' value.   When this is converted into the UCI
configuration, the 6G PHY ssid entry must be configured for 'sae' while
the other band(s) stay with 'sae-mixed'

Signed-off-by: Paul White <paul@shasta.cloud>
2024-11-13 16:59:22 +01:00
Paul White
f0dfb400b5 Include DHCP VSI information in state message
When the Vendor-Sepcific-Information (VSI) option is returned by the
DHCP server, include this information in the state message.

Fixes: WIFI-14271
Signed-off-by: Paul White <paul@shasta.cloud>
2024-11-11 07:50:06 +01:00
Paul White
44da3d651e Add config for vendor-class and request-options
When using dynamic (dhcp) addressing for IPv4, allow the vendor-class
and list of requested options to be configured, along with specific
defaults:
    vendor-class default is "OpenLAN"
    requested options default is [ 43, 60, 224 ]

These defaults enable support for cloud discovery FQDN (224) and the
DHCP-VSI feature (43, 60)

Fixes: WIFI-14271
Signed-off-by: Paul White <paul@shasta.cloud>
2024-11-11 07:50:06 +01:00
John Crispin
a21635b230 always request option 43 and 224 when doing DHCP
Signed-off-by: John Crispin <john@phrozen.org>
2024-11-06 11:51:02 +01:00
Mike Hansen
ad1c322618 flag to denote compressed commands (configure for now) are supported
Signed-off-by: Mike Hansen <mike.hansen@netexperience.com>
2024-10-23 13:41:41 +02:00
John Crispin
a0f26ac881 disable OKC when MPSK is enabled
Signed-off-by: John Crispin <john@phrozen.org>
2024-10-01 15:49:57 +02:00
John Crispin
df95905c2d do not restart the mpsk daemon upon cfg reload
Signed-off-by: John Crispin <john@phrozen.org>
2024-10-01 10:15:30 +02:00
John Crispin
baeef766f4 Revert "ucentral-schema: add support for configuring snmpd service using ucentral."
This reverts commit 8b3701bf2e.
2024-09-23 14:51:58 +02:00
John Crispin
684a1aab59 firewall: upon up NAT'ed port 53 for ipv6
Signed-off-by: John Crispin <john@phrozen.org>
2024-09-23 14:50:24 +02:00
John Crispin
83a30b4de0 enable reconf for mpsk interfaces
Signed-off-by: John Crispin <john@phrozen.org>
2024-09-23 14:38:18 +02:00
Venkat Chimata
42e59d5524 Add system-password to the schema
With this addition, a desired password can be configured through ucentral config

Signed-off-by: Venkat Chimata <venkata@shasta.cloud>
2024-09-22 14:11:21 +02:00
Francisco Jose Alvarez
8b3701bf2e ucentral-schema: add support for configuring snmpd service using ucentral.
Signed-off-by: Francisco Jose Alvarez <francisco.alvarez@galgus.ai>
2024-09-22 14:10:38 +02:00
John Crispin
45e6c53480 command: add fixed_config
Signed-off-by: John Crispin <john@phrozen.org>
2024-09-16 16:03:45 +02:00
John Crispin
79f8158096 wrap up psk2-radius / enhanced MPSK
Signed-off-by: John Crispin <john@phrozen.org>
2024-09-09 15:02:36 +02:00
Venkat Chimata
658a29d248 state.uc: Fixing negative coutners
Index the port counters with names instead of sequential accessing.
With sequential accessing, there is no gurantee that we may get the
same counter in two consequent accesses

Signed-off-by: Venkat Chimata <venkata@shasta.cloud>
2024-09-02 16:09:11 +02:00
Jonas Gorski
06745bcc42 handle multi-band phys for encryption check
Do not validate encryption against bands supported by the phy, but
against the band in use by getting the cross-section of ssid bands and
phy bands.

Fixes no default wireless configuration being generated if the phy is
both 5G and 6G capable, as all 6G encryption constraints are applied
even if the radio isn't configured for the 6G band.

Signed-off-by: Jonas Gorski <jonas.gorski@bisdn.de>
2024-09-02 15:55:00 +02:00
Jonas Gorski
c113cac7ba fix 80211w value for "none" encryption
We treated ssid.encryption.proto = "none" in validate_encryption() as no
encryption, we should do the same in match_ieee80211w().

Signed-off-by: Jonas Gorski <jonas.gorski@bisdn.de>
2024-09-02 15:54:14 +02:00
tanya.singh
a626097064 add schema for RRM based on Channel Utilization
Signed-off-by: Tanya Singh <tanya_singh@accton.com>
2024-08-07 06:24:37 +02:00
John Crispin
39aed21ed9 captive: allow loading the web-root from an external http server
Signed-off-by: John Crispin <john@phrozen.org>
2024-08-05 10:29:31 +02:00
John Crispin
37e38951a5 add multi-psk2-radius
Signed-off-by: John Crispin <john@phrozen.org>
2024-08-05 10:29:31 +02:00