xref: /openbsd-src/sys/dev/usb/if_axen.c (revision 5e3c7963eb248119b7dfd4b0defad58a7d9cd306)
1 /*	$OpenBSD: if_axen.c,v 1.26 2018/12/05 15:54:58 mpi Exp $	*/
2 
3 /*
4  * Copyright (c) 2013 Yojiro UO <yuo@openbsd.org>
5  *
6  * Permission to use, copy, modify, and distribute this software for any
7  * purpose with or without fee is hereby granted, provided that the above
8  * copyright notice and this permission notice appear in all copies.
9  *
10  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
11  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
12  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
13  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
14  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
15  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
16  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17  */
18 
19 /*
20  * ASIX Electronics AX88178a USB 2.0 ethernet and AX88179 USB 3.0 Ethernet
21  * driver.
22  */
23 
24 #include "bpfilter.h"
25 
26 #include <sys/param.h>
27 #include <sys/systm.h>
28 #include <sys/sockio.h>
29 #include <sys/rwlock.h>
30 #include <sys/mbuf.h>
31 #include <sys/kernel.h>
32 #include <sys/socket.h>
33 
34 #include <sys/device.h>
35 
36 #include <machine/bus.h>
37 
38 #include <net/if.h>
39 #include <net/if_media.h>
40 
41 #if NBPFILTER > 0
42 #include <net/bpf.h>
43 #endif
44 
45 #include <netinet/in.h>
46 #include <netinet/if_ether.h>
47 
48 #include <dev/mii/mii.h>
49 #include <dev/mii/miivar.h>
50 
51 #include <dev/usb/usb.h>
52 #include <dev/usb/usbdi.h>
53 #include <dev/usb/usbdi_util.h>
54 #include <dev/usb/usbdivar.h>
55 #include <dev/usb/usbdevs.h>
56 
57 #include <dev/usb/if_axenreg.h>
58 
59 #ifdef AXEN_DEBUG
60 #define DPRINTF(x)	do { if (axendebug) printf x; } while (0)
61 #define DPRINTFN(n,x)	do { if (axendebug >= (n)) printf x; } while (0)
62 int	axendebug = 0;
63 #else
64 #define DPRINTF(x)
65 #define DPRINTFN(n,x)
66 #endif
67 
68 #define AXEN_TOE	/* enable checksum offload function */
69 
70 /*
71  * Various supported device vendors/products.
72  */
73 const struct axen_type axen_devs[] = {
74 #if 0 /* not tested */
75 	{ { USB_VENDOR_ASIX, USB_PRODUCT_ASIX_AX88178A}, AX178A },
76 #endif
77 	{ { USB_VENDOR_ASIX, USB_PRODUCT_ASIX_AX88179}, AX179 },
78 	{ { USB_VENDOR_DLINK, USB_PRODUCT_DLINK_DUB1312}, AX179 },
79 	{ { USB_VENDOR_LENOVO, USB_PRODUCT_LENOVO_AX88179}, AX179 },
80 	{ { USB_VENDOR_SAMSUNG2, USB_PRODUCT_SAMSUNG2_AX88179}, AX179 },
81 	{ { USB_VENDOR_SITECOMEU, USB_PRODUCT_SITECOMEU_LN032}, AX179 }
82 };
83 
84 #define axen_lookup(v, p) ((struct axen_type *)usb_lookup(axen_devs, v, p))
85 
86 int	axen_match(struct device *, void *, void *);
87 void	axen_attach(struct device *, struct device *, void *);
88 int	axen_detach(struct device *, int);
89 
90 struct cfdriver axen_cd = {
91 	NULL, "axen", DV_IFNET
92 };
93 
94 const struct cfattach axen_ca = {
95 	sizeof(struct axen_softc), axen_match, axen_attach, axen_detach
96 };
97 
98 int	axen_tx_list_init(struct axen_softc *);
99 int	axen_rx_list_init(struct axen_softc *);
100 struct mbuf *axen_newbuf(void);
101 int	axen_encap(struct axen_softc *, struct mbuf *, int);
102 void	axen_rxeof(struct usbd_xfer *, void *, usbd_status);
103 void	axen_txeof(struct usbd_xfer *, void *, usbd_status);
104 void	axen_tick(void *);
105 void	axen_tick_task(void *);
106 void	axen_start(struct ifnet *);
107 int	axen_ioctl(struct ifnet *, u_long, caddr_t);
108 void	axen_init(void *);
109 void	axen_stop(struct axen_softc *);
110 void	axen_watchdog(struct ifnet *);
111 int	axen_miibus_readreg(struct device *, int, int);
112 void	axen_miibus_writereg(struct device *, int, int, int);
113 void	axen_miibus_statchg(struct device *);
114 int	axen_cmd(struct axen_softc *, int, int, int, void *);
115 int	axen_ifmedia_upd(struct ifnet *);
116 void	axen_ifmedia_sts(struct ifnet *, struct ifmediareq *);
117 void	axen_reset(struct axen_softc *sc);
118 void	axen_iff(struct axen_softc *);
119 void	axen_lock_mii(struct axen_softc *sc);
120 void	axen_unlock_mii(struct axen_softc *sc);
121 
122 void	axen_ax88179_init(struct axen_softc *);
123 
124 /* Get exclusive access to the MII registers */
125 void
126 axen_lock_mii(struct axen_softc *sc)
127 {
128 	sc->axen_refcnt++;
129 	rw_enter_write(&sc->axen_mii_lock);
130 }
131 
132 void
133 axen_unlock_mii(struct axen_softc *sc)
134 {
135 	rw_exit_write(&sc->axen_mii_lock);
136 	if (--sc->axen_refcnt < 0)
137 		usb_detach_wakeup(&sc->axen_dev);
138 }
139 
140 int
141 axen_cmd(struct axen_softc *sc, int cmd, int index, int val, void *buf)
142 {
143 	usb_device_request_t	req;
144 	usbd_status		err;
145 
146 	if (usbd_is_dying(sc->axen_udev))
147 		return 0;
148 
149 	if (AXEN_CMD_DIR(cmd))
150 		req.bmRequestType = UT_WRITE_VENDOR_DEVICE;
151 	else
152 		req.bmRequestType = UT_READ_VENDOR_DEVICE;
153 	req.bRequest = AXEN_CMD_CMD(cmd);
154 	USETW(req.wValue, val);
155 	USETW(req.wIndex, index);
156 	USETW(req.wLength, AXEN_CMD_LEN(cmd));
157 
158 	err = usbd_do_request(sc->axen_udev, &req, buf);
159 	DPRINTFN(5, ("axen_cmd: cmd 0x%04x val 0x%04x len %d\n",
160 	    cmd, val, AXEN_CMD_LEN(cmd)));
161 
162 	if (err) {
163 		DPRINTF(("axen_cmd err: cmd: %d, error: %d\n", cmd, err));
164 		return -1;
165 	}
166 
167 	return 0;
168 }
169 
170 int
171 axen_miibus_readreg(struct device *dev, int phy, int reg)
172 {
173 	struct axen_softc	*sc = (void *)dev;
174 	int			err;
175 	uWord			val;
176 	int			ival;
177 
178 	if (usbd_is_dying(sc->axen_udev)) {
179 		DPRINTF(("axen: dying\n"));
180 		return 0;
181 	}
182 
183 	if (sc->axen_phyno != phy)
184 		return 0;
185 
186 	axen_lock_mii(sc);
187 	err = axen_cmd(sc, AXEN_CMD_MII_READ_REG, reg, phy, &val);
188 	axen_unlock_mii(sc);
189 
190 	if (err) {
191 		printf("axen%d: read PHY failed\n", sc->axen_unit);
192 		return -1;
193 	}
194 
195 	ival = UGETW(val);
196 	DPRINTFN(2,("axen_miibus_readreg: phy 0x%x reg 0x%x val 0x%x\n",
197 	    phy, reg, ival));
198 
199 	if (reg == MII_BMSR) {
200 		ival &= ~BMSR_EXTCAP;
201 	}
202 
203 	return ival;
204 }
205 
206 void
207 axen_miibus_writereg(struct device *dev, int phy, int reg, int val)
208 {
209 	struct axen_softc	*sc = (void *)dev;
210 	int			err;
211 	uWord			uval;
212 
213 	if (usbd_is_dying(sc->axen_udev))
214 		return;
215 
216 	if (sc->axen_phyno != phy)
217 		return;
218 
219 	USETW(uval, val);
220 	axen_lock_mii(sc);
221 	err = axen_cmd(sc, AXEN_CMD_MII_WRITE_REG, reg, phy, &uval);
222 	axen_unlock_mii(sc);
223 	DPRINTFN(2, ("axen_miibus_writereg: phy 0x%x reg 0x%x val 0x%0x\n",
224 	    phy, reg, val));
225 
226 	if (err) {
227 		printf("axen%d: write PHY failed\n", sc->axen_unit);
228 		return;
229 	}
230 }
231 
232 void
233 axen_miibus_statchg(struct device *dev)
234 {
235 	struct axen_softc	*sc = (void *)dev;
236 	struct mii_data		*mii = GET_MII(sc);
237 	struct ifnet		*ifp;
238 	int			err;
239 	uint16_t		val;
240 	uWord			wval;
241 
242 	ifp = GET_IFP(sc);
243 	if (mii == NULL || ifp == NULL ||
244 	    (ifp->if_flags & IFF_RUNNING) == 0)
245 		return;
246 
247 	sc->axen_link = 0;
248 	if ((mii->mii_media_status & (IFM_ACTIVE | IFM_AVALID)) ==
249 	    (IFM_ACTIVE | IFM_AVALID)) {
250 		switch (IFM_SUBTYPE(mii->mii_media_active)) {
251 		    case IFM_10_T:
252 		    case IFM_100_TX:
253 			sc->axen_link++;
254 			break;
255 		    case IFM_1000_T:
256 			sc->axen_link++;
257 			break;
258 		    default:
259 			break;
260 		}
261 	}
262 
263 	/* Lost link, do nothing. */
264 	if (sc->axen_link == 0)
265 		return;
266 
267 	val = 0;
268 	if ((IFM_OPTIONS(mii->mii_media_active) & IFM_FDX) != 0)
269 		val |= AXEN_MEDIUM_FDX;
270 
271 	val |= (AXEN_MEDIUM_RECV_EN | AXEN_MEDIUM_ALWAYS_ONE);
272 	val |= (AXEN_MEDIUM_RXFLOW_CTRL_EN | AXEN_MEDIUM_TXFLOW_CTRL_EN);
273 
274 	switch (IFM_SUBTYPE(mii->mii_media_active)) {
275 	case IFM_1000_T:
276 		val |= AXEN_MEDIUM_GIGA | AXEN_MEDIUM_EN_125MHZ;
277 		break;
278 	case IFM_100_TX:
279 		val |= AXEN_MEDIUM_PS;
280 		break;
281 	case IFM_10_T:
282 		/* doesn't need to be handled */
283 		break;
284 	}
285 
286 	DPRINTF(("axen_miibus_statchg: val=0x%x\n", val));
287 	USETW(wval, val);
288 	axen_lock_mii(sc);
289 	err = axen_cmd(sc, AXEN_CMD_MAC_WRITE2, 2, AXEN_MEDIUM_STATUS, &wval);
290 	axen_unlock_mii(sc);
291 	if (err) {
292 		printf("%s: media change failed\n", sc->axen_dev.dv_xname);
293 		return;
294 	}
295 }
296 
297 /*
298  * Set media options.
299  */
300 int
301 axen_ifmedia_upd(struct ifnet *ifp)
302 {
303 	struct axen_softc	*sc = ifp->if_softc;
304 	struct mii_data		*mii = GET_MII(sc);
305 	int err;
306 
307 	sc->axen_link = 0;
308 
309 	if (mii->mii_instance) {
310 		struct mii_softc	*miisc;
311 		LIST_FOREACH(miisc, &mii->mii_phys, mii_list)
312 			mii_phy_reset(miisc);
313 	}
314 
315 	err = mii_mediachg(mii);
316 	if (err == ENXIO)
317 		return 0;
318 	else
319 		return err;
320 }
321 
322 /*
323  * Report current media status.
324  */
325 void
326 axen_ifmedia_sts(struct ifnet *ifp, struct ifmediareq *ifmr)
327 {
328 	struct axen_softc	*sc = ifp->if_softc;
329 	struct mii_data		*mii = GET_MII(sc);
330 
331 	mii_pollstat(mii);
332 	ifmr->ifm_active = mii->mii_media_active;
333 	ifmr->ifm_status = mii->mii_media_status;
334 }
335 
336 void
337 axen_iff(struct axen_softc *sc)
338 {
339 	struct ifnet		*ifp = GET_IFP(sc);
340 	struct arpcom		*ac = &sc->arpcom;
341 	struct ether_multi	*enm;
342 	struct ether_multistep	step;
343 	u_int32_t		h = 0;
344 	u_int16_t		rxmode;
345 	u_int8_t		hashtbl[8] = { 0, 0, 0, 0, 0, 0, 0, 0 };
346 	uWord			wval;
347 
348 	if (usbd_is_dying(sc->axen_udev))
349 		return;
350 
351 	rxmode = 0;
352 
353 	/* Enable receiver, set RX mode */
354 	axen_lock_mii(sc);
355 	axen_cmd(sc, AXEN_CMD_MAC_READ2, 2, AXEN_MAC_RXCTL, &wval);
356 	rxmode = UGETW(wval);
357 	rxmode &= ~(AXEN_RXCTL_ACPT_ALL_MCAST | AXEN_RXCTL_ACPT_PHY_MCAST |
358 		  AXEN_RXCTL_PROMISC);
359 	ifp->if_flags &= ~IFF_ALLMULTI;
360 
361 	/*
362 	 * Always accept broadcast frames.
363 	 * Always accept frames destined to our station address.
364 	 */
365 	rxmode |= AXEN_RXCTL_ACPT_BCAST;
366 
367 	if (ifp->if_flags & IFF_PROMISC || ac->ac_multirangecnt > 0) {
368 		ifp->if_flags |= IFF_ALLMULTI;
369 		rxmode |= AXEN_RXCTL_ACPT_ALL_MCAST | AXEN_RXCTL_ACPT_PHY_MCAST;
370 		if (ifp->if_flags & IFF_PROMISC)
371 			rxmode |= AXEN_RXCTL_PROMISC;
372 	} else {
373 		rxmode |= AXEN_RXCTL_ACPT_ALL_MCAST | AXEN_RXCTL_ACPT_PHY_MCAST;
374 
375 		/* now program new ones */
376 		ETHER_FIRST_MULTI(step, ac, enm);
377 		while (enm != NULL) {
378 			h = ether_crc32_be(enm->enm_addrlo,
379 			    ETHER_ADDR_LEN) >> 26;
380 			hashtbl[h / 8] |= 1 << (h % 8);
381 			ETHER_NEXT_MULTI(step, enm);
382 		}
383 	}
384 
385 	axen_cmd(sc, AXEN_CMD_MAC_WRITE_FILTER, 8, AXEN_FILTER_MULTI,
386 	    (void *)&hashtbl);
387 	USETW(wval, rxmode);
388 	axen_cmd(sc, AXEN_CMD_MAC_WRITE2, 2, AXEN_MAC_RXCTL, &wval);
389 	axen_unlock_mii(sc);
390 }
391 
392 void
393 axen_reset(struct axen_softc *sc)
394 {
395 	if (usbd_is_dying(sc->axen_udev))
396 		return;
397 
398 	axen_ax88179_init(sc);
399 
400 	/* Wait a little while for the chip to get its brains in order. */
401 	DELAY(1000);
402 	return;
403 }
404 
405 void
406 axen_ax88179_init(struct axen_softc *sc)
407 {
408 	uWord		wval;
409 	uByte		val;
410 	u_int16_t 	ctl, temp;
411 	struct axen_qctrl qctrl;
412 
413 	axen_lock_mii(sc);
414 
415 	/* XXX: ? */
416 	axen_cmd(sc, AXEN_CMD_MAC_READ, 1, AXEN_UNK_05, &val);
417 	DPRINTFN(5, ("AXEN_CMD_MAC_READ(0x05): 0x%02x\n", val));
418 
419 	/* check AX88179 version, UA1 / UA2 */
420 	axen_cmd(sc, AXEN_CMD_MAC_READ, 1, AXEN_GENERAL_STATUS, &val);
421 	/* UA1 */
422 	if (!(val & AXEN_GENERAL_STATUS_MASK)) {
423 		sc->axen_rev = AXEN_REV_UA1;
424 		DPRINTF(("AX88179 ver. UA1\n"));
425 	} else {
426 		sc->axen_rev = AXEN_REV_UA2;
427 		DPRINTF(("AX88179 ver. UA2\n"));
428 	}
429 
430 	/* power up ethernet PHY */
431 	USETW(wval, 0);
432 	axen_cmd(sc, AXEN_CMD_MAC_WRITE2, 2, AXEN_PHYPWR_RSTCTL, &wval);
433 
434 	USETW(wval, AXEN_PHYPWR_RSTCTL_IPRL);
435 	axen_cmd(sc, AXEN_CMD_MAC_WRITE2, 2, AXEN_PHYPWR_RSTCTL, &wval);
436 	usbd_delay_ms(sc->axen_udev, 200);
437 
438 	/* set clock mode */
439 	val = AXEN_PHYCLK_ACS | AXEN_PHYCLK_BCS;
440 	axen_cmd(sc, AXEN_CMD_MAC_WRITE, 1, AXEN_PHYCLK, &val);
441 	usbd_delay_ms(sc->axen_udev, 100);
442 
443 	/* set monitor mode (disable) */
444 	val = AXEN_MONITOR_NONE;
445 	axen_cmd(sc, AXEN_CMD_MAC_WRITE, 1, AXEN_MONITOR_MODE, &val);
446 
447 	/* enable auto detach */
448 	axen_cmd(sc, AXEN_CMD_EEPROM_READ, 2, AXEN_EEPROM_STAT, &wval);
449 	temp = UGETW(wval);
450 	DPRINTFN(2,("EEPROM0x43 = 0x%04x\n", temp));
451 	if (!(temp == 0xffff) && !(temp & 0x0100)) {
452 		/* Enable auto detach bit */
453 		val = 0;
454 		axen_cmd(sc, AXEN_CMD_MAC_WRITE, 1, AXEN_PHYCLK, &val);
455 		val = AXEN_PHYCLK_ULR;
456 		axen_cmd(sc, AXEN_CMD_MAC_WRITE, 1, AXEN_PHYCLK, &val);
457 		usbd_delay_ms(sc->axen_udev, 100);
458 
459 		axen_cmd(sc, AXEN_CMD_MAC_READ2, 2, AXEN_PHYPWR_RSTCTL, &wval);
460 		ctl = UGETW(wval);
461 		ctl |= AXEN_PHYPWR_RSTCTL_AUTODETACH;
462 		USETW(wval, ctl);
463 		axen_cmd(sc, AXEN_CMD_MAC_WRITE2, 2, AXEN_PHYPWR_RSTCTL, &wval);
464 		usbd_delay_ms(sc->axen_udev, 200);
465 		printf("%s: enable auto detach (0x%04x)\n",
466 		    sc->axen_dev.dv_xname, ctl);
467 	}
468 
469 	/* bulkin queue setting */
470 	axen_cmd(sc, AXEN_CMD_MAC_READ, 1, AXEN_USB_UPLINK, &val);
471 	switch (val) {
472 	case AXEN_USB_FS:
473 		DPRINTF(("uplink: USB1.1\n"));
474 		qctrl.ctrl	= 0x07;
475 		qctrl.timer_low	= 0xcc;
476 		qctrl.timer_high= 0x4c;
477 		qctrl.bufsize	= AXEN_BUFSZ_LS - 1;
478 		qctrl.ifg	= 0x08;
479 		break;
480 	case AXEN_USB_HS:
481 		DPRINTF(("uplink: USB2.0\n"));
482 		qctrl.ctrl	= 0x07;
483 		qctrl.timer_low	= 0x02;
484 		qctrl.timer_high= 0xa0;
485 		qctrl.bufsize	= AXEN_BUFSZ_HS - 1;
486 		qctrl.ifg	= 0xff;
487 		break;
488 	case AXEN_USB_SS:
489 		DPRINTF(("uplink: USB3.0\n"));
490 		qctrl.ctrl	= 0x07;
491 		qctrl.timer_low	= 0x4f;
492 		qctrl.timer_high= 0x00;
493 		qctrl.bufsize	= AXEN_BUFSZ_SS - 1;
494 		qctrl.ifg	= 0xff;
495 		break;
496 	default:
497 		printf("%s: unknown uplink bus:0x%02x\n",
498 		    sc->axen_dev.dv_xname, val);
499 		axen_unlock_mii(sc);
500 		return;
501 	}
502 	axen_cmd(sc, AXEN_CMD_MAC_SET_RXSR, 5, AXEN_RX_BULKIN_QCTRL, &qctrl);
503 
504 	/* Set MAC address. */
505 	axen_cmd(sc, AXEN_CMD_MAC_WRITE_ETHER, ETHER_ADDR_LEN,
506 	    AXEN_CMD_MAC_NODE_ID, &sc->arpcom.ac_enaddr);
507 
508 	/*
509 	 * set buffer high/low watermark to pause/resume.
510 	 * write 2byte will set high/log simultaneous with AXEN_PAUSE_HIGH.
511 	 * XXX: what is the best value? OSX driver uses 0x3c-0x4c as LOW-HIGH
512 	 * watermark parameters.
513 	 */
514 	val = 0x34;
515 	axen_cmd(sc, AXEN_CMD_MAC_WRITE, 1, AXEN_PAUSE_LOW_WATERMARK, &val);
516 	val = 0x52;
517 	axen_cmd(sc, AXEN_CMD_MAC_WRITE, 1, AXEN_PAUSE_HIGH_WATERMARK, &val);
518 
519 	/* Set RX/TX configuration. */
520 	/* Offloadng enable */
521 #ifdef AXEN_TOE
522 	val = AXEN_RXCOE_IPv4 | AXEN_RXCOE_TCPv4 | AXEN_RXCOE_UDPv4 |
523 	      AXEN_RXCOE_TCPv6 | AXEN_RXCOE_UDPv6;
524 #else
525 	val = AXEN_RXCOE_OFF;
526 #endif
527 	axen_cmd(sc, AXEN_CMD_MAC_WRITE, 1, AXEN_RX_COE, &val);
528 
529 #ifdef AXEN_TOE
530 	val = AXEN_TXCOE_IPv4 | AXEN_TXCOE_TCPv4 | AXEN_TXCOE_UDPv4 |
531 	      AXEN_TXCOE_TCPv6 | AXEN_TXCOE_UDPv6;
532 #else
533 	val = AXEN_TXCOE_OFF;
534 #endif
535 	axen_cmd(sc, AXEN_CMD_MAC_WRITE, 1, AXEN_TX_COE, &val);
536 
537 	/* Set RX control register */
538 	ctl = AXEN_RXCTL_IPE | AXEN_RXCTL_DROPCRCERR | AXEN_RXCTL_AUTOB;
539 	ctl |= AXEN_RXCTL_ACPT_PHY_MCAST | AXEN_RXCTL_ACPT_ALL_MCAST;
540 	ctl |= AXEN_RXCTL_START;
541 	USETW(wval, ctl);
542 	axen_cmd(sc, AXEN_CMD_MAC_WRITE2, 2, AXEN_MAC_RXCTL, &wval);
543 
544 	/* set monitor mode (enable) */
545 	val = AXEN_MONITOR_PMETYPE | AXEN_MONITOR_PMEPOL | AXEN_MONITOR_RWMP;
546 	axen_cmd(sc, AXEN_CMD_MAC_WRITE, 1, AXEN_MONITOR_MODE, &val);
547 	axen_cmd(sc, AXEN_CMD_MAC_READ, 1, AXEN_MONITOR_MODE, &val);
548 	DPRINTF(("axen: Monitor mode = 0x%02x\n", val));
549 
550 	/* set medium type */
551 	ctl = AXEN_MEDIUM_GIGA | AXEN_MEDIUM_FDX | AXEN_MEDIUM_ALWAYS_ONE |
552 	      AXEN_MEDIUM_RXFLOW_CTRL_EN | AXEN_MEDIUM_TXFLOW_CTRL_EN;
553 	ctl |= AXEN_MEDIUM_RECV_EN;
554 	USETW(wval, ctl);
555 	DPRINTF(("axen: set to medium mode: 0x%04x\n", UGETW(wval)));
556 	axen_cmd(sc, AXEN_CMD_MAC_WRITE2, 2, AXEN_MEDIUM_STATUS, &wval);
557 	usbd_delay_ms(sc->axen_udev, 100);
558 
559 	axen_cmd(sc, AXEN_CMD_MAC_READ2, 2, AXEN_MEDIUM_STATUS, &wval);
560 	DPRINTF(("axen: current medium mode: 0x%04x\n", UGETW(wval)));
561 	axen_unlock_mii(sc);
562 
563 #if 0 /* XXX: TBD.... */
564 #define GMII_LED_ACTIVE		0x1a
565 #define GMII_PHY_PAGE_SEL	0x1e
566 #define GMII_PHY_PAGE_SEL	0x1f
567 #define GMII_PAGE_EXT		0x0007
568 	axen_miibus_writereg(&sc->axen_dev, sc->axen_phyno, GMII_PHY_PAGE_SEL,
569 	    GMII_PAGE_EXT);
570 	axen_miibus_writereg(&sc->axen_dev, sc->axen_phyno, GMII_PHY_PAGE,
571 	    0x002c);
572 #endif
573 
574 #if 1 /* XXX: phy hack ? */
575 	axen_miibus_writereg(&sc->axen_dev, sc->axen_phyno, 0x1F, 0x0005);
576 	axen_miibus_writereg(&sc->axen_dev, sc->axen_phyno, 0x0C, 0x0000);
577 	val = axen_miibus_readreg(&sc->axen_dev, sc->axen_phyno, 0x0001);
578 	axen_miibus_writereg(&sc->axen_dev, sc->axen_phyno, 0x01,
579 	    val | 0x0080);
580 	axen_miibus_writereg(&sc->axen_dev, sc->axen_phyno, 0x1F, 0x0000);
581 #endif
582 }
583 
584 int
585 axen_match(struct device *parent, void *match, void *aux)
586 {
587 	struct usb_attach_arg *uaa = aux;
588 
589 	if (uaa->iface == NULL || uaa->configno != 1)
590 		return (UMATCH_NONE);
591 
592 	return (axen_lookup(uaa->vendor, uaa->product) != NULL ?
593 		UMATCH_VENDOR_PRODUCT_CONF_IFACE : UMATCH_NONE);
594 }
595 
596 void
597 axen_attach(struct device *parent, struct device *self, void *aux)
598 {
599 	struct axen_softc	*sc = (struct axen_softc *)self;
600 	struct usb_attach_arg	*uaa = aux;
601 	usb_interface_descriptor_t *id;
602 	usb_endpoint_descriptor_t *ed;
603 	struct mii_data		*mii;
604 	u_char			 eaddr[ETHER_ADDR_LEN];
605 	char			*devname = sc->axen_dev.dv_xname;
606 	struct ifnet		*ifp;
607 	int			 i, s;
608 
609 	sc->axen_unit = self->dv_unit; /*device_get_unit(self);*/
610 	sc->axen_udev = uaa->device;
611 	sc->axen_iface = uaa->iface;
612 	sc->axen_flags = axen_lookup(uaa->vendor, uaa->product)->axen_flags;
613 
614 	usb_init_task(&sc->axen_tick_task, axen_tick_task, sc,
615 	    USB_TASK_TYPE_GENERIC);
616 	rw_init(&sc->axen_mii_lock, "axenmii");
617 	usb_init_task(&sc->axen_stop_task, (void (*)(void *))axen_stop, sc,
618 	    USB_TASK_TYPE_GENERIC);
619 
620 	sc->axen_product = uaa->product;
621 	sc->axen_vendor = uaa->vendor;
622 
623 	id = usbd_get_interface_descriptor(sc->axen_iface);
624 
625 	/* decide on what our bufsize will be */
626 	switch (sc->axen_udev->speed) {
627 	case USB_SPEED_FULL:
628 	    	sc->axen_bufsz = AXEN_BUFSZ_LS * 1024;
629 		break;
630 	case USB_SPEED_HIGH:
631 	    	sc->axen_bufsz = AXEN_BUFSZ_HS * 1024;
632 		break;
633 	case USB_SPEED_SUPER:
634 	    	sc->axen_bufsz = AXEN_BUFSZ_SS * 1024;
635 		break;
636 	default:
637 		printf("%s: not supported usb bus type", sc->axen_dev.dv_xname);
638 		return;
639 	}
640 
641 	/* Find endpoints. */
642 	for (i = 0; i < id->bNumEndpoints; i++) {
643 		ed = usbd_interface2endpoint_descriptor(sc->axen_iface, i);
644 		if (!ed) {
645 			printf("%s: couldn't get ep %d\n",
646 			    sc->axen_dev.dv_xname, i);
647 			return;
648 		}
649 		if (UE_GET_DIR(ed->bEndpointAddress) == UE_DIR_IN &&
650 		    UE_GET_XFERTYPE(ed->bmAttributes) == UE_BULK) {
651 			sc->axen_ed[AXEN_ENDPT_RX] = ed->bEndpointAddress;
652 		} else if (UE_GET_DIR(ed->bEndpointAddress) == UE_DIR_OUT &&
653 			   UE_GET_XFERTYPE(ed->bmAttributes) == UE_BULK) {
654 			sc->axen_ed[AXEN_ENDPT_TX] = ed->bEndpointAddress;
655 		} else if (UE_GET_DIR(ed->bEndpointAddress) == UE_DIR_IN &&
656 			   UE_GET_XFERTYPE(ed->bmAttributes) == UE_INTERRUPT) {
657 			sc->axen_ed[AXEN_ENDPT_INTR] = ed->bEndpointAddress;
658 		}
659 	}
660 
661 	s = splnet();
662 
663 	sc->axen_phyno = AXEN_PHY_ID;
664 	DPRINTF((" get_phyno %d\n", sc->axen_phyno));
665 
666 	/*
667 	 * Get station address.
668 	 */
669 	/* use MAC command */
670 	axen_lock_mii(sc);
671 	axen_cmd(sc, AXEN_CMD_MAC_READ_ETHER, ETHER_ADDR_LEN,
672 	    AXEN_CMD_MAC_NODE_ID, &eaddr);
673 	axen_unlock_mii(sc);
674 
675 	/*
676 	 * An ASIX chip was detected. Inform the world.
677 	 */
678 	printf("%s:", sc->axen_dev.dv_xname);
679 	if (sc->axen_flags & AX178A)
680 		printf(" AX88178a");
681 	else if (sc->axen_flags & AX179)
682 		printf(" AX88179");
683 	printf(", address %s\n", ether_sprintf(eaddr));
684 
685 	bcopy(eaddr, (char *)&sc->arpcom.ac_enaddr, ETHER_ADDR_LEN);
686 
687 	axen_ax88179_init(sc);
688 
689 	/* Initialize interface info. */
690 	ifp = &sc->arpcom.ac_if;
691 	ifp->if_softc = sc;
692 	strlcpy(ifp->if_xname, devname, IFNAMSIZ);
693 	ifp->if_flags = IFF_BROADCAST | IFF_SIMPLEX | IFF_MULTICAST;
694 	ifp->if_ioctl = axen_ioctl;
695 	ifp->if_start = axen_start;
696 	ifp->if_watchdog = axen_watchdog;
697 
698 	ifp->if_capabilities = IFCAP_VLAN_MTU;
699 #ifdef AXEN_TOE
700 	ifp->if_capabilities |= IFCAP_CSUM_IPv4 | IFCAP_CSUM_TCPv4 |
701 	    IFCAP_CSUM_UDPv4 | IFCAP_CSUM_TCPv6 | IFCAP_CSUM_UDPv6;
702 #endif
703 
704 	/* Initialize MII/media info. */
705 	mii = &sc->axen_mii;
706 	mii->mii_ifp = ifp;
707 	mii->mii_readreg = axen_miibus_readreg;
708 	mii->mii_writereg = axen_miibus_writereg;
709 	mii->mii_statchg = axen_miibus_statchg;
710 	mii->mii_flags = MIIF_AUTOTSLEEP;
711 
712 	ifmedia_init(&mii->mii_media, 0, axen_ifmedia_upd, axen_ifmedia_sts);
713 	mii_attach(self, mii, 0xffffffff, MII_PHY_ANY, MII_OFFSET_ANY, 0);
714 
715 	if (LIST_FIRST(&mii->mii_phys) == NULL) {
716 		ifmedia_add(&mii->mii_media, IFM_ETHER | IFM_NONE, 0, NULL);
717 		ifmedia_set(&mii->mii_media, IFM_ETHER | IFM_NONE);
718 	} else
719 		ifmedia_set(&mii->mii_media, IFM_ETHER | IFM_AUTO);
720 
721 	/* Attach the interface. */
722 	if_attach(ifp);
723 	ether_ifattach(ifp);
724 
725 	timeout_set(&sc->axen_stat_ch, axen_tick, sc);
726 
727 	splx(s);
728 }
729 
730 int
731 axen_detach(struct device *self, int flags)
732 {
733 	struct axen_softc	*sc = (struct axen_softc *)self;
734 	int			s;
735 	struct ifnet		*ifp = GET_IFP(sc);
736 
737 	DPRINTFN(2,("%s: %s: enter\n", sc->axen_dev.dv_xname, __func__));
738 
739 	if (timeout_initialized(&sc->axen_stat_ch))
740 		timeout_del(&sc->axen_stat_ch);
741 
742 	if (sc->axen_ep[AXEN_ENDPT_TX] != NULL)
743 		usbd_abort_pipe(sc->axen_ep[AXEN_ENDPT_TX]);
744 	if (sc->axen_ep[AXEN_ENDPT_RX] != NULL)
745 		usbd_abort_pipe(sc->axen_ep[AXEN_ENDPT_RX]);
746 	if (sc->axen_ep[AXEN_ENDPT_INTR] != NULL)
747 		usbd_abort_pipe(sc->axen_ep[AXEN_ENDPT_INTR]);
748 
749 	/*
750 	 * Remove any pending tasks.  They cannot be executing because they run
751 	 * in the same thread as detach.
752 	 */
753 	usb_rem_task(sc->axen_udev, &sc->axen_tick_task);
754 	usb_rem_task(sc->axen_udev, &sc->axen_stop_task);
755 
756 	s = splusb();
757 
758 	if (--sc->axen_refcnt >= 0) {
759 		/* Wait for processes to go away */
760 		usb_detach_wait(&sc->axen_dev);
761 	}
762 
763 	if (ifp->if_flags & IFF_RUNNING)
764 		axen_stop(sc);
765 
766 	mii_detach(&sc->axen_mii, MII_PHY_ANY, MII_OFFSET_ANY);
767 	ifmedia_delete_instance(&sc->axen_mii.mii_media, IFM_INST_ANY);
768 	if (ifp->if_softc != NULL) {
769 		ether_ifdetach(ifp);
770 		if_detach(ifp);
771 	}
772 
773 #ifdef DIAGNOSTIC
774 	if (sc->axen_ep[AXEN_ENDPT_TX] != NULL ||
775 	    sc->axen_ep[AXEN_ENDPT_RX] != NULL ||
776 	    sc->axen_ep[AXEN_ENDPT_INTR] != NULL)
777 		printf("%s: detach has active endpoints\n",
778 		    sc->axen_dev.dv_xname);
779 #endif
780 
781 	if (--sc->axen_refcnt >= 0) {
782 		/* Wait for processes to go away. */
783 		usb_detach_wait(&sc->axen_dev);
784 	}
785 	splx(s);
786 
787 	return 0;
788 }
789 
790 struct mbuf *
791 axen_newbuf(void)
792 {
793 	struct mbuf *m;
794 
795 	MGETHDR(m, M_DONTWAIT, MT_DATA);
796 	if (m == NULL)
797 		return NULL;
798 
799 	MCLGET(m, M_DONTWAIT);
800 	if (!(m->m_flags & M_EXT)) {
801 		m_freem(m);
802 		return NULL;
803 	}
804 
805 	m->m_len = m->m_pkthdr.len = MCLBYTES;
806 	m_adj(m, ETHER_ALIGN);
807 
808 	return m;
809 }
810 
811 int
812 axen_rx_list_init(struct axen_softc *sc)
813 {
814 	struct axen_cdata *cd;
815 	struct axen_chain *c;
816 	int i;
817 
818 	DPRINTF(("%s: %s: enter\n", sc->axen_dev.dv_xname, __func__));
819 
820 	cd = &sc->axen_cdata;
821 	for (i = 0; i < AXEN_RX_LIST_CNT; i++) {
822 		c = &cd->axen_rx_chain[i];
823 		c->axen_sc = sc;
824 		c->axen_idx = i;
825 		c->axen_mbuf = NULL;
826 		if (c->axen_xfer == NULL) {
827 			c->axen_xfer = usbd_alloc_xfer(sc->axen_udev);
828 			if (c->axen_xfer == NULL)
829 				return ENOBUFS;
830 			c->axen_buf = usbd_alloc_buffer(c->axen_xfer,
831 			    sc->axen_bufsz);
832 			if (c->axen_buf == NULL) {
833 				usbd_free_xfer(c->axen_xfer);
834 				return ENOBUFS;
835 			}
836 		}
837 	}
838 
839 	return 0;
840 }
841 
842 int
843 axen_tx_list_init(struct axen_softc *sc)
844 {
845 	struct axen_cdata *cd;
846 	struct axen_chain *c;
847 	int i;
848 
849 	DPRINTF(("%s: %s: enter\n", sc->axen_dev.dv_xname, __func__));
850 
851 	cd = &sc->axen_cdata;
852 	for (i = 0; i < AXEN_TX_LIST_CNT; i++) {
853 		c = &cd->axen_tx_chain[i];
854 		c->axen_sc = sc;
855 		c->axen_idx = i;
856 		c->axen_mbuf = NULL;
857 		if (c->axen_xfer == NULL) {
858 			c->axen_xfer = usbd_alloc_xfer(sc->axen_udev);
859 			if (c->axen_xfer == NULL)
860 				return ENOBUFS;
861 			c->axen_buf = usbd_alloc_buffer(c->axen_xfer,
862 			    sc->axen_bufsz);
863 			if (c->axen_buf == NULL) {
864 				usbd_free_xfer(c->axen_xfer);
865 				return ENOBUFS;
866 			}
867 		}
868 	}
869 
870 	return 0;
871 }
872 
873 /*
874  * A frame has been uploaded: pass the resulting mbuf chain up to
875  * the higher level protocols.
876  */
877 void
878 axen_rxeof(struct usbd_xfer *xfer, void *priv, usbd_status status)
879 {
880 	struct axen_chain	*c = (struct axen_chain *)priv;
881 	struct axen_softc	*sc = c->axen_sc;
882 	struct ifnet		*ifp = GET_IFP(sc);
883 	u_char			*buf = c->axen_buf;
884 	struct mbuf_list	ml = MBUF_LIST_INITIALIZER();
885 	struct mbuf		*m;
886 	u_int32_t		total_len;
887 	u_int32_t		rx_hdr, pkt_hdr;
888 	u_int32_t		*hdr_p;
889 	u_int16_t		hdr_offset, pkt_count;
890 	size_t			pkt_len;
891 	size_t			temp;
892 	int			s;
893 
894 	DPRINTFN(10,("%s: %s: enter\n", sc->axen_dev.dv_xname,__func__));
895 
896 	if (usbd_is_dying(sc->axen_udev))
897 		return;
898 
899 	if (!(ifp->if_flags & IFF_RUNNING))
900 		return;
901 
902 	if (status != USBD_NORMAL_COMPLETION) {
903 		if (status == USBD_NOT_STARTED || status == USBD_CANCELLED)
904 			return;
905 		if (usbd_ratecheck(&sc->axen_rx_notice)) {
906 			printf("%s: usb errors on rx: %s\n",
907 			    sc->axen_dev.dv_xname, usbd_errstr(status));
908 		}
909 		if (status == USBD_STALLED)
910 			usbd_clear_endpoint_stall_async(sc->axen_ep[AXEN_ENDPT_RX]);
911 		goto done;
912 	}
913 
914 	usbd_get_xfer_status(xfer, NULL, NULL, &total_len, NULL);
915 
916 	if (total_len < sizeof(pkt_hdr)) {
917 		ifp->if_ierrors++;
918 		goto done;
919 	}
920 
921 	/*
922 	 * buffer map
923 	 * [packet #0]...[packet #n][pkt hdr#0]..[pkt hdr#n][recv_hdr]
924 	 * each packet has 0xeeee as psuedo header..
925 	 */
926 	hdr_p = (u_int32_t *)(buf + total_len - sizeof(u_int32_t));
927 	rx_hdr = letoh32(*hdr_p);
928 	hdr_offset = (u_int16_t)(rx_hdr >> 16);
929 	pkt_count  = (u_int16_t)(rx_hdr & 0xffff);
930 
931 	if (total_len > sc->axen_bufsz) {
932 		printf("%s: rxeof: too large transfer\n",
933 		    sc->axen_dev.dv_xname);
934 		goto done;
935 	}
936 
937 	/* sanity check */
938 	if (hdr_offset > total_len) {
939 		ifp->if_ierrors++;
940 		goto done;
941 	}
942 
943 	/* point first packet header */
944 	hdr_p = (u_int32_t*)(buf + hdr_offset);
945 
946 	/*
947 	 * ax88179 will pack multiple ip packet to a USB transaction.
948 	 * process all of packets in the buffer
949 	 */
950 
951 #if 1 /* XXX: paranoiac check. need to remove later */
952 #define AXEN_MAX_PACKED_PACKET 200
953 	if (pkt_count > AXEN_MAX_PACKED_PACKET) {
954 		DPRINTF(("Too many packets (%d) in a transaction, discard.\n",
955 		    pkt_count));
956 		goto done;
957 	}
958 #endif
959 
960 	do {
961 		if ((buf[0] != 0xee) || (buf[1] != 0xee)){
962 			printf("%s: invalid buffer(pkt#%d), continue\n",
963 			    sc->axen_dev.dv_xname, pkt_count);
964 	    		ifp->if_ierrors += pkt_count;
965 			goto done;
966 		}
967 
968 		pkt_hdr = letoh32(*hdr_p);
969 		pkt_len = (pkt_hdr >> 16) & 0x1fff;
970 
971 		DPRINTFN(10,("rxeof: packet#%d, pkt_hdr 0x%08x, pkt_len %zu\n",
972 		   pkt_count, pkt_hdr, pkt_len));
973 
974 		if ((pkt_hdr & AXEN_RXHDR_CRC_ERR) ||
975 	    	    (pkt_hdr & AXEN_RXHDR_DROP_ERR)) {
976 	    		ifp->if_ierrors++;
977 			/* move to next pkt header */
978 			DPRINTF(("crc err(pkt#%d)\n", pkt_count));
979 			goto nextpkt;
980 		}
981 
982 		/* process each packet */
983 		/* allocate mbuf */
984 		m = axen_newbuf();
985 		if (m == NULL) {
986 			ifp->if_ierrors++;
987 			goto nextpkt;
988 		}
989 
990 		/* skip pseudo header (2byte) and trailer padding (4Byte) */
991 		m->m_pkthdr.len = m->m_len = pkt_len - 6;
992 
993 #ifdef AXEN_TOE
994 		/* cheksum err */
995 		if ((pkt_hdr & AXEN_RXHDR_L3CSUM_ERR) ||
996 		    (pkt_hdr & AXEN_RXHDR_L4CSUM_ERR)) {
997 			printf("%s: checksum err (pkt#%d)\n",
998 			    sc->axen_dev.dv_xname, pkt_count);
999 			goto nextpkt;
1000 		} else {
1001 			m->m_pkthdr.csum_flags |= M_IPV4_CSUM_IN_OK;
1002 		}
1003 
1004 		int l4_type;
1005 		l4_type = (pkt_hdr & AXEN_RXHDR_L4_TYPE_MASK) >>
1006 		    AXEN_RXHDR_L4_TYPE_OFFSET;
1007 
1008 		if ((l4_type == AXEN_RXHDR_L4_TYPE_TCP) ||
1009 		    (l4_type == AXEN_RXHDR_L4_TYPE_UDP))
1010 			m->m_pkthdr.csum_flags |= M_TCP_CSUM_IN_OK |
1011 			    M_UDP_CSUM_IN_OK;
1012 #endif
1013 
1014 		memcpy(mtod(m, char *), buf + 2, pkt_len - 6);
1015 
1016 		ml_enqueue(&ml, m);
1017 
1018 nextpkt:
1019 		/*
1020 		 * prepare next packet
1021 		 * as each packet will be aligned 8byte boundary,
1022 		 * need to fix up the start point of the buffer.
1023 		 */
1024 		temp = ((pkt_len + 7) & 0xfff8);
1025 		buf = buf + temp;
1026 		hdr_p++;
1027 		pkt_count--;
1028 	} while( pkt_count > 0);
1029 
1030 done:
1031 	/* push the packet up */
1032 	s = splnet();
1033 	if_input(ifp, &ml);
1034 	splx(s);
1035 
1036 	/* clear buffer for next transaction */
1037 	memset(c->axen_buf, 0, sc->axen_bufsz);
1038 
1039 	/* Setup new transfer. */
1040 	usbd_setup_xfer(xfer, sc->axen_ep[AXEN_ENDPT_RX],
1041 	    c, c->axen_buf, sc->axen_bufsz,
1042 	    USBD_SHORT_XFER_OK | USBD_NO_COPY,
1043 	    USBD_NO_TIMEOUT, axen_rxeof);
1044 	usbd_transfer(xfer);
1045 
1046 	DPRINTFN(10,("%s: %s: start rx\n", sc->axen_dev.dv_xname, __func__));
1047 }
1048 
1049 /*
1050  * A frame was downloaded to the chip. It's safe for us to clean up
1051  * the list buffers.
1052  */
1053 void
1054 axen_txeof(struct usbd_xfer *xfer, void *priv, usbd_status status)
1055 {
1056 	struct axen_softc	*sc;
1057 	struct axen_chain	*c;
1058 	struct ifnet		*ifp;
1059 	int			s;
1060 
1061 	c = priv;
1062 	sc = c->axen_sc;
1063 	ifp = &sc->arpcom.ac_if;
1064 
1065 	if (usbd_is_dying(sc->axen_udev))
1066 		return;
1067 
1068 	s = splnet();
1069 
1070 	if (status != USBD_NORMAL_COMPLETION) {
1071 		if (status == USBD_NOT_STARTED || status == USBD_CANCELLED) {
1072 			splx(s);
1073 			return;
1074 		}
1075 		ifp->if_oerrors++;
1076 		printf("axen%d: usb error on tx: %s\n", sc->axen_unit,
1077 		    usbd_errstr(status));
1078 		if (status == USBD_STALLED)
1079 			usbd_clear_endpoint_stall_async(sc->axen_ep[AXEN_ENDPT_TX]);
1080 		splx(s);
1081 		return;
1082 	}
1083 
1084 	ifp->if_timer = 0;
1085 	ifq_clr_oactive(&ifp->if_snd);
1086 
1087 	m_freem(c->axen_mbuf);
1088 	c->axen_mbuf = NULL;
1089 
1090 	if (IFQ_IS_EMPTY(&ifp->if_snd) == 0)
1091 		axen_start(ifp);
1092 
1093 	splx(s);
1094 }
1095 
1096 void
1097 axen_tick(void *xsc)
1098 {
1099 	struct axen_softc *sc = xsc;
1100 
1101 	if (sc == NULL)
1102 		return;
1103 
1104 	DPRINTFN(0xff, ("%s: %s: enter\n", sc->axen_dev.dv_xname,
1105 			__func__));
1106 
1107 	if (usbd_is_dying(sc->axen_udev))
1108 		return;
1109 
1110 	/* Perform periodic stuff in process context */
1111 	usb_add_task(sc->axen_udev, &sc->axen_tick_task);
1112 }
1113 
1114 void
1115 axen_tick_task(void *xsc)
1116 {
1117 	int			s;
1118 	struct axen_softc	*sc;
1119 	struct mii_data		*mii;
1120 
1121 	sc = xsc;
1122 
1123 	if (sc == NULL)
1124 		return;
1125 
1126 	if (usbd_is_dying(sc->axen_udev))
1127 		return;
1128 
1129 	mii = GET_MII(sc);
1130 	if (mii == NULL)
1131 		return;
1132 
1133 	s = splnet();
1134 
1135 	mii_tick(mii);
1136 	if (sc->axen_link == 0)
1137 		axen_miibus_statchg(&sc->axen_dev);
1138 	timeout_add_sec(&sc->axen_stat_ch, 1);
1139 
1140 	splx(s);
1141 }
1142 
1143 int
1144 axen_encap(struct axen_softc *sc, struct mbuf *m, int idx)
1145 {
1146 	struct axen_chain	*c;
1147 	usbd_status		err;
1148 	struct axen_sframe_hdr	hdr;
1149 	int			length, boundary;
1150 
1151 	c = &sc->axen_cdata.axen_tx_chain[idx];
1152 
1153 	switch (sc->axen_udev->speed) {
1154 	case USB_SPEED_FULL:
1155 	    	boundary = 64;
1156 		break;
1157 	case USB_SPEED_HIGH:
1158 	    	boundary = 512;
1159 		break;
1160 	case USB_SPEED_SUPER:
1161 	    	boundary = 4096; /* XXX */
1162 		break;
1163 	default:
1164 		printf("%s: not supported usb bus type", sc->axen_dev.dv_xname);
1165 		return EIO;
1166 	}
1167 
1168 	hdr.plen = htole32(m->m_pkthdr.len);
1169 	hdr.gso = 0; /* disable segmentation offloading */
1170 
1171 	memcpy(c->axen_buf, &hdr, sizeof(hdr));
1172 	length = sizeof(hdr);
1173 
1174 	m_copydata(m, 0, m->m_pkthdr.len, c->axen_buf + length);
1175 	length += m->m_pkthdr.len;
1176 
1177 	if ((length % boundary) == 0) {
1178 		hdr.plen = 0x0;
1179 		hdr.gso |= 0x80008000;  /* enable padding */
1180 		memcpy(c->axen_buf + length, &hdr, sizeof(hdr));
1181 		length += sizeof(hdr);
1182 	}
1183 
1184 	c->axen_mbuf = m;
1185 
1186 	usbd_setup_xfer(c->axen_xfer, sc->axen_ep[AXEN_ENDPT_TX],
1187 	    c, c->axen_buf, length, USBD_FORCE_SHORT_XFER | USBD_NO_COPY,
1188 	    10000, axen_txeof);
1189 
1190 	/* Transmit */
1191 	err = usbd_transfer(c->axen_xfer);
1192 	if (err != USBD_IN_PROGRESS) {
1193 		axen_stop(sc);
1194 		return EIO;
1195 	}
1196 
1197 	sc->axen_cdata.axen_tx_cnt++;
1198 
1199 	return 0;
1200 }
1201 
1202 void
1203 axen_start(struct ifnet *ifp)
1204 {
1205 	struct axen_softc	*sc;
1206 	struct mbuf		*m_head = NULL;
1207 
1208 	sc = ifp->if_softc;
1209 
1210 	if (!sc->axen_link)
1211 		return;
1212 
1213 	if (ifq_is_oactive(&ifp->if_snd))
1214 		return;
1215 
1216 	m_head = ifq_deq_begin(&ifp->if_snd);
1217 	if (m_head == NULL)
1218 		return;
1219 
1220 	if (axen_encap(sc, m_head, 0)) {
1221 		ifq_deq_rollback(&ifp->if_snd, m_head);
1222 		ifq_set_oactive(&ifp->if_snd);
1223 		return;
1224 	}
1225 	ifq_deq_commit(&ifp->if_snd, m_head);
1226 
1227 	/*
1228 	 * If there's a BPF listener, bounce a copy of this frame
1229 	 * to him.
1230 	 */
1231 #if NBPFILTER > 0
1232 	if (ifp->if_bpf)
1233 		bpf_mtap(ifp->if_bpf, m_head, BPF_DIRECTION_OUT);
1234 #endif
1235 
1236 	ifq_set_oactive(&ifp->if_snd);
1237 
1238 	/*
1239 	 * Set a timeout in case the chip goes out to lunch.
1240 	 */
1241 	ifp->if_timer = 5;
1242 }
1243 
1244 void
1245 axen_init(void *xsc)
1246 {
1247 	struct axen_softc	*sc = xsc;
1248 	struct ifnet		*ifp = &sc->arpcom.ac_if;
1249 	struct axen_chain	*c;
1250 	usbd_status		err;
1251 	int			i, s;
1252 	uByte			bval;
1253 	uWord			wval;
1254 	uint16_t		rxmode;
1255 
1256 	s = splnet();
1257 
1258 	/*
1259 	 * Cancel pending I/O and free all RX/TX buffers.
1260 	 */
1261 	axen_reset(sc);
1262 
1263 	/* XXX: ? */
1264 	bval = 0x01;
1265 	axen_lock_mii(sc);
1266 	axen_cmd(sc, AXEN_CMD_MAC_WRITE, 1, AXEN_UNK_28, &bval);
1267 	axen_unlock_mii(sc);
1268 
1269 	/* Init RX ring. */
1270 	if (axen_rx_list_init(sc) == ENOBUFS) {
1271 		printf("axen%d: rx list init failed\n", sc->axen_unit);
1272 		splx(s);
1273 		return;
1274 	}
1275 
1276 	/* Init TX ring. */
1277 	if (axen_tx_list_init(sc) == ENOBUFS) {
1278 		printf("axen%d: tx list init failed\n", sc->axen_unit);
1279 		splx(s);
1280 		return;
1281 	}
1282 
1283 	/* Program promiscuous mode and multicast filters. */
1284 	axen_iff(sc);
1285 
1286 	/* Enable receiver, set RX mode */
1287 	axen_lock_mii(sc);
1288 	axen_cmd(sc, AXEN_CMD_MAC_READ2, 2, AXEN_MAC_RXCTL, &wval);
1289 	rxmode = UGETW(wval);
1290 	rxmode |= AXEN_RXCTL_START;
1291 	USETW(wval, rxmode);
1292 	axen_cmd(sc, AXEN_CMD_MAC_WRITE2, 2, AXEN_MAC_RXCTL, &wval);
1293 	axen_unlock_mii(sc);
1294 
1295 	/* Open RX and TX pipes. */
1296 	err = usbd_open_pipe(sc->axen_iface, sc->axen_ed[AXEN_ENDPT_RX],
1297 	    USBD_EXCLUSIVE_USE, &sc->axen_ep[AXEN_ENDPT_RX]);
1298 	if (err) {
1299 		printf("axen%d: open rx pipe failed: %s\n",
1300 		    sc->axen_unit, usbd_errstr(err));
1301 		splx(s);
1302 		return;
1303 	}
1304 
1305 	err = usbd_open_pipe(sc->axen_iface, sc->axen_ed[AXEN_ENDPT_TX],
1306 	    USBD_EXCLUSIVE_USE, &sc->axen_ep[AXEN_ENDPT_TX]);
1307 	if (err) {
1308 		printf("axen%d: open tx pipe failed: %s\n",
1309 		    sc->axen_unit, usbd_errstr(err));
1310 		splx(s);
1311 		return;
1312 	}
1313 
1314 	/* Start up the receive pipe. */
1315 	for (i = 0; i < AXEN_RX_LIST_CNT; i++) {
1316 		c = &sc->axen_cdata.axen_rx_chain[i];
1317 		usbd_setup_xfer(c->axen_xfer, sc->axen_ep[AXEN_ENDPT_RX],
1318 		    c, c->axen_buf, sc->axen_bufsz,
1319 		    USBD_SHORT_XFER_OK | USBD_NO_COPY,
1320 		    USBD_NO_TIMEOUT, axen_rxeof);
1321 		usbd_transfer(c->axen_xfer);
1322 	}
1323 
1324 	sc->axen_link = 0;
1325 	ifp->if_flags |= IFF_RUNNING;
1326 	ifq_clr_oactive(&ifp->if_snd);
1327 
1328 	splx(s);
1329 
1330 	timeout_add_sec(&sc->axen_stat_ch, 1);
1331 	return;
1332 }
1333 
1334 int
1335 axen_ioctl(struct ifnet *ifp, u_long cmd, caddr_t data)
1336 {
1337 	struct axen_softc	*sc = ifp->if_softc;
1338 	struct ifreq		*ifr = (struct ifreq *)data;
1339 	int			s;
1340 	int			error = 0;
1341 
1342 	s = splnet();
1343 
1344 	switch(cmd) {
1345 	case SIOCSIFADDR:
1346 		ifp->if_flags |= IFF_UP;
1347 		if (!(ifp->if_flags & IFF_RUNNING))
1348 			axen_init(sc);
1349 		break;
1350 
1351 	case SIOCSIFFLAGS:
1352 		if (ifp->if_flags & IFF_UP) {
1353 			if (ifp->if_flags & IFF_RUNNING)
1354 				error = ENETRESET;
1355 			else
1356 				axen_init(sc);
1357 		} else {
1358 			if (ifp->if_flags & IFF_RUNNING)
1359 				axen_stop(sc);
1360 		}
1361 		break;
1362 
1363 	case SIOCGIFMEDIA:
1364 	case SIOCSIFMEDIA:
1365 		error = ifmedia_ioctl(ifp, ifr, &sc->axen_mii.mii_media, cmd);
1366 		break;
1367 
1368 #if 0
1369 	case SCIOCSIFMTU:
1370 		/* XXX need to set AX_MEDIUM_JUMBO_EN here? */
1371 		/* fall through */
1372 #endif
1373 	default:
1374 		error = ether_ioctl(ifp, &sc->arpcom, cmd, data);
1375 	}
1376 
1377 	if (error == ENETRESET) {
1378 		if (ifp->if_flags & IFF_RUNNING)
1379 			axen_iff(sc);
1380 		error = 0;
1381 	}
1382 
1383 	splx(s);
1384 
1385 	return error;
1386 }
1387 
1388 void
1389 axen_watchdog(struct ifnet *ifp)
1390 {
1391 	struct axen_softc	*sc;
1392 	struct axen_chain	*c;
1393 	usbd_status		stat;
1394 	int			s;
1395 
1396 	sc = ifp->if_softc;
1397 
1398 	ifp->if_oerrors++;
1399 	printf("axen%d: watchdog timeout\n", sc->axen_unit);
1400 
1401 	s = splusb();
1402 	c = &sc->axen_cdata.axen_tx_chain[0];
1403 	usbd_get_xfer_status(c->axen_xfer, NULL, NULL, NULL, &stat);
1404 	axen_txeof(c->axen_xfer, c, stat);
1405 
1406 	if (!IFQ_IS_EMPTY(&ifp->if_snd))
1407 		axen_start(ifp);
1408 	splx(s);
1409 }
1410 
1411 /*
1412  * Stop the adapter and free any mbufs allocated to the
1413  * RX and TX lists.
1414  */
1415 void
1416 axen_stop(struct axen_softc *sc)
1417 {
1418 	usbd_status		err;
1419 	struct ifnet		*ifp;
1420 	int			i;
1421 
1422 	axen_reset(sc);
1423 
1424 	ifp = &sc->arpcom.ac_if;
1425 	ifp->if_timer = 0;
1426 	ifp->if_flags &= ~IFF_RUNNING;
1427 	ifq_clr_oactive(&ifp->if_snd);
1428 
1429 	timeout_del(&sc->axen_stat_ch);
1430 
1431 	/* Stop transfers. */
1432 	if (sc->axen_ep[AXEN_ENDPT_RX] != NULL) {
1433 		usbd_abort_pipe(sc->axen_ep[AXEN_ENDPT_RX]);
1434 		err = usbd_close_pipe(sc->axen_ep[AXEN_ENDPT_RX]);
1435 		if (err) {
1436 			printf("axen%d: close rx pipe failed: %s\n",
1437 			    sc->axen_unit, usbd_errstr(err));
1438 		}
1439 		sc->axen_ep[AXEN_ENDPT_RX] = NULL;
1440 	}
1441 
1442 	if (sc->axen_ep[AXEN_ENDPT_TX] != NULL) {
1443 		usbd_abort_pipe(sc->axen_ep[AXEN_ENDPT_TX]);
1444 		err = usbd_close_pipe(sc->axen_ep[AXEN_ENDPT_TX]);
1445 		if (err) {
1446 			printf("axen%d: close tx pipe failed: %s\n",
1447 			    sc->axen_unit, usbd_errstr(err));
1448 		}
1449 		sc->axen_ep[AXEN_ENDPT_TX] = NULL;
1450 	}
1451 
1452 	if (sc->axen_ep[AXEN_ENDPT_INTR] != NULL) {
1453 		usbd_abort_pipe(sc->axen_ep[AXEN_ENDPT_INTR]);
1454 		err = usbd_close_pipe(sc->axen_ep[AXEN_ENDPT_INTR]);
1455 		if (err) {
1456 			printf("axen%d: close intr pipe failed: %s\n",
1457 			    sc->axen_unit, usbd_errstr(err));
1458 		}
1459 		sc->axen_ep[AXEN_ENDPT_INTR] = NULL;
1460 	}
1461 
1462 	/* Free RX resources. */
1463 	for (i = 0; i < AXEN_RX_LIST_CNT; i++) {
1464 		if (sc->axen_cdata.axen_rx_chain[i].axen_mbuf != NULL) {
1465 			m_freem(sc->axen_cdata.axen_rx_chain[i].axen_mbuf);
1466 			sc->axen_cdata.axen_rx_chain[i].axen_mbuf = NULL;
1467 		}
1468 		if (sc->axen_cdata.axen_rx_chain[i].axen_xfer != NULL) {
1469 			usbd_free_xfer(sc->axen_cdata.axen_rx_chain[i].axen_xfer);
1470 			sc->axen_cdata.axen_rx_chain[i].axen_xfer = NULL;
1471 		}
1472 	}
1473 
1474 	/* Free TX resources. */
1475 	for (i = 0; i < AXEN_TX_LIST_CNT; i++) {
1476 
1477 		if (sc->axen_cdata.axen_tx_chain[i].axen_mbuf != NULL) {
1478 			m_freem(sc->axen_cdata.axen_tx_chain[i].axen_mbuf);
1479 			sc->axen_cdata.axen_tx_chain[i].axen_mbuf = NULL;
1480 		}
1481 		if (sc->axen_cdata.axen_tx_chain[i].axen_xfer != NULL) {
1482 			usbd_free_xfer(sc->axen_cdata.axen_tx_chain[i].axen_xfer);
1483 			sc->axen_cdata.axen_tx_chain[i].axen_xfer = NULL;
1484 		}
1485 	}
1486 
1487 	sc->axen_link = 0;
1488 }
1489