1 /* $NetBSD: if_atureg.h,v 1.4 2005/12/11 12:24:00 christos Exp $ */ 2 /* $OpenBSD: if_atureg.h,v 1.21 2004/12/23 13:19:38 dlg Exp $ */ 3 /* 4 * Copyright (c) 2003 5 * Daan Vreeken <Danovitsch@Vitsch.net>. All rights reserved. 6 * 7 * Redistribution and use in source and binary forms, with or without 8 * modification, are permitted provided that the following conditions 9 * are met: 10 * 1. Redistributions of source code must retain the above copyright 11 * notice, this list of conditions and the following disclaimer. 12 * 2. Redistributions in binary form must reproduce the above copyright 13 * notice, this list of conditions and the following disclaimer in the 14 * documentation and/or other materials provided with the distribution. 15 * 3. All advertising materials mentioning features or use of this software 16 * must display the following acknowledgement: 17 * This product includes software developed by Daan Vreeken. 18 * 4. Neither the name of the author nor the names of any co-contributors 19 * may be used to endorse or promote products derived from this software 20 * without specific prior written permission. 21 * 22 * THIS SOFTWARE IS PROVIDED BY DAAN VREEKEN AND CONTRIBUTORS ``AS IS'' AND 23 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 24 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 25 * ARE DISCLAIMED. IN NO EVENT SHALL Daan Vreeken OR THE VOICES IN HIS HEAD 26 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 27 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 28 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 29 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 30 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 31 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF 32 * THE POSSIBILITY OF SUCH DAMAGE. 33 * 34 */ 35 36 #define ATU_CONFIG_NO 1 37 #define ATU_IFACE_IDX 0 38 39 /* the number of simultaniuously requested RX transfers */ 40 #define ATU_RX_LIST_CNT 1 41 42 /* 43 * the number of simultaniously started TX transfers 44 * my measurements : 45 * 1 430.82 KB/sec 46 * 2 534.66 KB/sec 47 * 3 536.23 KB/sec 48 * 4 537.80 KB/sec 49 * 6 537.30 KB/sec 50 * 8 535.31 KB/sec 51 * 16 535.68 KB/sec 52 * 128 535.67 KB/sec (before you ask : yes, 128 is silly :) 53 * (+/- 24% increase) 54 */ 55 #define ATU_TX_LIST_CNT 8 56 57 /* 58 * According to the 802.11 spec (7.1.2) the frame body can be up to 2312 bytes 59 */ 60 #define ATU_RX_BUFSZ (ATU_RX_HDRLEN + \ 61 sizeof(struct ieee80211_frame_addr4) + 2312 + 4) 62 /* BE CAREFULL! should add ATU_TX_PADDING */ 63 #define ATU_TX_BUFSZ (ATU_TX_HDRLEN + \ 64 sizeof(struct ieee80211_frame_addr4) + 2312) 65 66 #define ATU_MIN_FRAMELEN 60 67 68 /* 69 * Sending packets of more than 1500 bytes confuses some access points, so the 70 * default MTU is set to 1500 but can be increased up to 2310 bytes using 71 * ifconfig 72 */ 73 #define ATU_DEFAULT_MTU 1500 74 #define ATU_MAX_MTU (2312 - 2) 75 76 #define ATU_ENDPT_RX 0x0 77 #define ATU_ENDPT_TX 0x1 78 #define ATU_ENDPT_MAX 0x2 79 80 #define ATU_TX_TIMEOUT 10000 81 #define ATU_JOIN_TIMEOUT 2000 82 83 #define ATU_NO_QUIRK 0x0000 84 #define ATU_QUIRK_NO_REMAP 0x0001 85 #define ATU_QUIRK_FW_DELAY 0x0002 86 87 #define ATU_DEFAULT_SSID "" 88 #define ATU_DEFAULT_CHANNEL 10 89 90 enum atu_radio_type { 91 RadioRFMD = 0, 92 RadioRFMD2958, 93 RadioRFMD2958_SMC, 94 RadioIntersil 95 }; 96 97 struct atu_type { 98 u_int16_t atu_vid; 99 u_int16_t atu_pid; 100 enum atu_radio_type atu_radio; 101 u_int16_t atu_quirk; 102 }; 103 104 struct atu_softc; 105 106 struct atu_chain { 107 struct atu_softc *atu_sc; 108 usbd_xfer_handle atu_xfer; 109 char *atu_buf; 110 struct mbuf *atu_mbuf; 111 u_int8_t atu_idx; 112 u_int16_t atu_length; 113 int atu_in_xfer; 114 SLIST_ENTRY(atu_chain) atu_list; 115 }; 116 117 struct atu_cdata { 118 struct atu_chain atu_tx_chain[ATU_TX_LIST_CNT]; 119 struct atu_chain atu_rx_chain[ATU_RX_LIST_CNT]; 120 121 SLIST_HEAD(atu_list_head, atu_chain) atu_rx_free; 122 struct atu_list_head atu_tx_free; 123 124 u_int8_t atu_tx_inuse; 125 u_int8_t atu_tx_last_idx; 126 }; 127 128 #define MAX_SSID_LEN 32 129 #define ATU_AVG_TIME 20 130 131 struct atu_softc { 132 USBBASEDEVICE atu_dev; 133 struct ethercom sc_ec; 134 struct ieee80211com sc_ic; 135 int (*sc_newstate)(struct ieee80211com *, 136 enum ieee80211_state, int); 137 138 char sc_state; 139 #define ATU_S_DEAD 0 140 #define ATU_S_OK 1 141 #define ATU_S_UNCONFIG 2 142 char sc_cmd; 143 #define ATU_C_NONE 0 144 #define ATU_C_SCAN 1 145 #define ATU_C_JOIN 2 146 struct usb_task sc_task; 147 148 usbd_device_handle atu_udev; 149 usbd_interface_handle atu_iface; 150 struct ethercom atu_ec; 151 struct ifmedia atu_media; 152 int atu_ed[ATU_ENDPT_MAX]; 153 usbd_pipe_handle atu_ep[ATU_ENDPT_MAX]; 154 int atu_unit; 155 int atu_if_flags; 156 157 struct atu_cdata atu_cdata; 158 159 struct timeval atu_rx_notice; 160 161 u_int8_t atu_bssid[ETHER_ADDR_LEN]; 162 enum atu_radio_type atu_radio; 163 u_int16_t atu_quirk; 164 165 u_int8_t atu_ssid[MAX_SSID_LEN]; 166 u_int8_t atu_ssidlen; 167 u_int8_t atu_channel; 168 u_int16_t atu_desired_channel; 169 u_int8_t atu_mode; 170 #define NO_MODE_YET 0 171 #define AD_HOC_MODE 1 172 #define INFRASTRUCTURE_MODE 2 173 174 u_int8_t atu_radio_on; 175 u_int8_t atu_encrypt; 176 #define ATU_WEP_RX 0x01 177 #define ATU_WEP_TX 0x02 178 #define ATU_WEP_TXRX (ATU_WEP_RX | ATU_WEP_TX) 179 int atu_wepkey; 180 int atu_wepkeylen; 181 u_int8_t atu_wepkeys[4][13]; 182 }; 183 184 #define sc_if sc_ec.ec_if 185 186 /* Commands for uploading the firmware (standard DFU interface) */ 187 #define DFU_DNLOAD UT_WRITE_CLASS_INTERFACE, 0x01 188 #define DFU_GETSTATUS UT_READ_CLASS_INTERFACE, 0x03 189 #define DFU_GETSTATE UT_READ_CLASS_INTERFACE, 0x05 190 #define DFU_REMAP UT_WRITE_VENDOR_INTERFACE, 0x0a 191 192 /* DFU states */ 193 #define DFUState_AppIdle 0 194 #define DFUState_AppDetach 1 195 #define DFUState_DFUIdle 2 196 #define DFUState_DnLoadSync 3 197 #define DFUState_DnLoadBusy 4 198 #define DFUState_DnLoadIdle 5 199 #define DFUState_ManifestSync 6 200 #define DFUState_Manifest 7 201 #define DFUState_ManifestWait 8 202 #define DFUState_UploadIdle 9 203 #define DFUState_DFUError 10 204 205 #define DFU_MaxBlockSize 1024 206 207 /* AT76c503 operating modes */ 208 #define MODE_NONE 0x00 209 #define MODE_NETCARD 0x01 210 #define MODE_CONFIG 0x02 211 #define MODE_DFU 0x03 212 #define MODE_NOFLASHNETCARD 0x04 213 214 /* AT76c503 commands */ 215 #define CMD_SET_MIB 0x01 216 #define CMD_START_SCAN 0x03 217 #define CMD_JOIN 0x04 218 #define CMD_START_IBSS 0x05 219 #define CMD_RADIO 0x06 220 #define CMD_RADIO_ON 0x06 221 #define CMD_RADIO_OFF 0x07 222 #define CMD_STARTUP 0x0b 223 224 /* AT76c503 status messages - used in atu_wait_completion */ 225 #define STATUS_IDLE 0x00 226 #define STATUS_COMPLETE 0x01 227 #define STATUS_UNKNOWN 0x02 228 #define STATUS_INVALID_PARAMETER 0x03 229 #define STATUS_FUNCTION_NOT_SUPPORTED 0x04 230 #define STATUS_TIME_OUT 0x07 231 #define STATUS_IN_PROGRESS 0x08 232 #define STATUS_HOST_FAILURE 0xff 233 #define STATUS_SCAN_FAILED 0xf0 234 235 /* AT76c503 command header */ 236 struct atu_cmd { 237 uByte Cmd; 238 uByte Reserved; 239 uWord Size; 240 } UPACKED; 241 242 /* CMD_SET_MIB command (0x01) */ 243 struct atu_cmd_set_mib { 244 /* AT76c503 command header */ 245 uByte AtCmd; 246 uByte AtReserved; 247 uWord AtSize; 248 249 /* MIB header */ 250 uByte MIBType; 251 uByte MIBSize; 252 uByte MIBIndex; 253 uByte MIBReserved; 254 255 /* MIB data */ 256 uByte data[72]; 257 } UPACKED; 258 259 /* CMD_STARTUP command (0x0b) */ 260 struct atu_cmd_card_config { 261 uByte Cmd; 262 uByte Reserved; 263 uWord Size; 264 265 uByte ExcludeUnencrypted; 266 uByte PromiscuousMode; 267 uByte ShortRetryLimit; 268 uByte EncryptionType; 269 uWord RTS_Threshold; 270 uWord FragThreshold; /* 256 .. 2346 */ 271 uByte BasicRateSet[4]; 272 uByte AutoRateFallback; 273 uByte Channel; 274 uByte PrivacyInvoked; /* wep */ 275 uByte WEP_DefaultKeyID; /* 0 .. 3 */ 276 uByte SSID[MAX_SSID_LEN]; 277 uByte WEP_DefaultKey[4][13]; 278 uByte SSID_Len; 279 uByte ShortPreamble; 280 uWord BeaconPeriod; 281 } UPACKED; 282 283 /* CMD_SCAN command (0x03) */ 284 struct atu_cmd_do_scan { 285 uByte Cmd; 286 uByte Reserved; 287 uWord Size; 288 289 uByte BSSID[ETHER_ADDR_LEN]; 290 uByte SSID[MAX_SSID_LEN]; 291 uByte ScanType; 292 uByte Channel; 293 uWord ProbeDelay; 294 uWord MinChannelTime; 295 uWord MaxChannelTime; 296 uByte SSID_Len; 297 uByte InternationalScan; 298 } UPACKED; 299 300 #define ATU_SCAN_ACTIVE 0x00 301 #define ATU_SCAN_PASSIVE 0x01 302 303 /* CMD_JOIN command (0x04) */ 304 struct atu_cmd_join { 305 uByte Cmd; 306 uByte Reserved; 307 uWord Size; 308 309 uByte bssid[ETHER_ADDR_LEN]; 310 uByte essid[32]; 311 uByte bss_type; 312 uByte channel; 313 uWord timeout; 314 uByte essid_size; 315 uByte reserved; 316 } UPACKED; 317 318 /* CMD_START_IBSS (0x05) */ 319 struct atu_cmd_start_ibss { 320 uByte Cmd; 321 uByte Reserved; 322 uWord Size; 323 324 uByte BSSID[ETHER_ADDR_LEN]; 325 uByte SSID[32]; 326 uByte BSSType; 327 uByte Channel; 328 uByte SSIDSize; 329 uByte Res[3]; 330 } UPACKED; 331 332 /* 333 * The At76c503 adapters come with different types of radios on them. 334 * At this moment the driver supports adapters with RFMD and Intersil radios. 335 */ 336 337 /* The config structure of an RFMD radio */ 338 struct atu_rfmd_conf { 339 u_int8_t CR20[14]; 340 u_int8_t CR21[14]; 341 u_int8_t BB_CR[14]; 342 u_int8_t PidVid[4]; 343 u_int8_t MACAddr[ETHER_ADDR_LEN]; 344 u_int8_t RegulatoryDomain; 345 u_int8_t LowPowerValues[14]; 346 u_int8_t NormalPowerValues[14]; 347 u_int8_t Reserved[3]; 348 /* then we have 84 bytes, somehow Windows reads 95?? */ 349 u_int8_t Rest[11]; 350 } UPACKED; 351 352 /* The config structure of an Intersil radio */ 353 struct atu_intersil_conf { 354 u_int8_t MACAddr[ETHER_ADDR_LEN]; 355 /* From the HFA3861B manual : */ 356 /* Manual TX power control (7bit : -64 to 63) */ 357 u_int8_t CR31[14]; 358 /* TX power measurement */ 359 u_int8_t CR58[14]; 360 u_int8_t PidVid[4]; 361 u_int8_t RegulatoryDomain; 362 u_int8_t Reserved[1]; 363 } UPACKED; 364 365 366 /* Firmware information request */ 367 struct atu_fw { 368 u_int8_t major; 369 u_int8_t minor; 370 u_int8_t patch; 371 u_int8_t build; 372 } UPACKED; 373 374 /* 375 * The header the AT76c503 puts in front of RX packets (for both managment & 376 * data) 377 */ 378 struct atu_rx_hdr { 379 uWord length; 380 uByte rx_rate; 381 uByte newbss; 382 uByte fragmentation; 383 uByte rssi; 384 uByte link_quality; 385 uByte noise_level; 386 uDWord rx_time; 387 } UPACKED; 388 #define ATU_RX_HDRLEN sizeof(struct atu_rx_hdr) 389 390 /* 391 * The header we have to put in front of a TX packet before sending it to the 392 * AT76c503 393 */ 394 struct atu_tx_hdr { 395 uWord length; 396 uByte tx_rate; 397 uByte padding; 398 uByte reserved[4]; 399 } UPACKED; 400 #define ATU_TX_HDRLEN sizeof(struct atu_tx_hdr) 401 402 #define NR(x) (void *)((long)x) 403 404 /* 405 * The linux driver uses seperate routines for every mib request they do 406 * (eg. set_radio / set_preamble / set_frag / etc etc ) 407 * We just define a list of types, sizes and offsets and use those 408 */ 409 410 /* Name Type Size Index */ 411 #define MIB_LOCAL 0x01 412 #define MIB_LOCAL__BEACON_ENABLE MIB_LOCAL, 1, 2 413 #define MIB_LOCAL__AUTO_RATE_FALLBACK MIB_LOCAL, 1, 3 414 #define MIB_LOCAL__SSID_SIZE MIB_LOCAL, 1, 5 415 #define MIB_LOCAL__PREAMBLE MIB_LOCAL, 1, 9 416 #define MIB_MAC_ADDR 0x02 417 #define MIB_MAC_ADDR__ADDR MIB_MAC_ADDR, 6, 0 418 #define MIB_MAC 0x03 419 #define MIB_MAC__FRAG MIB_MAC, 2, 8 420 #define MIB_MAC__RTS MIB_MAC, 2, 10 421 #define MIB_MAC__DESIRED_SSID MIB_MAC, 32, 28 422 #define MIB_MAC_MGMT 0x05 423 #define MIB_MAC_MGMT__BEACON_PERIOD MIB_MAC_MGMT, 2, 0 424 #define MIB_MAC_MGMT__CURRENT_BSSID MIB_MAC_MGMT, 6, 14 425 #define MIB_MAC_MGMT__CURRENT_ESSID MIB_MAC_MGMT, 32, 20 426 #define MIB_MAC_MGMT__POWER_MODE MIB_MAC_MGMT, 1, 53 427 #define MIB_MAC_MGMT__IBSS_CHANGE MIB_MAC_MGMT, 1, 54 428 #define MIB_MAC_WEP 0x06 429 #define MIB_MAC_WEP__PRIVACY_INVOKED MIB_MAC_WEP, 1, 0 430 #define MIB_MAC_WEP__KEY_ID MIB_MAC_WEP, 1, 1 431 #define MIB_MAC_WEP__ICV_ERROR_COUNT MIB_MAC_WEP, 4, 4 432 #define MIB_MAC_WEP__EXCLUDED_COUNT MIB_MAC_WEP, 4, 8 433 #define MIB_MAC_WEP__KEYS(nr) MIB_MAC_WEP, 13, 12+(nr)*13 434 #define MIB_MAC_WEP__ENCR_LEVEL MIB_MAC_WEP, 1, 64 435 #define MIB_PHY 0x07 436 #define MIB_PHY__CHANNEL MIB_PHY, 1, 20 437 #define MIB_PHY__REG_DOMAIN MIB_PHY, 1, 23 438 #define MIB_FW_VERSION 0x08 439 #define MIB_DOMAIN 0x09 440 #define MIB_DOMAIN__POWER_LEVELS MIB_DOMAIN, 14, 0 441 #define MIB_DOMAIN__CHANNELS MIB_DOMAIN, 14, 14 442 443 #define ATU_WEP_OFF 0 444 #define ATU_WEP_40BITS 1 445 #define ATU_WEP_104BITS 2 446 447 #define POWER_MODE_ACTIVE 1 448 #define POWER_MODE_SAVE 2 449 #define POWER_MODE_SMART 3 450 451 #define PREAMBLE_SHORT 1 452 #define PREAMBLE_LONG 0 453