if_atureg.h revision 1.3 1 /* $NetBSD: if_atureg.h,v 1.3 2005/06/22 06:16:02 dyoung Exp $ */
2 /* $OpenBSD: if_atureg.h,v 1.21 2004/12/23 13:19:38 dlg Exp $ */
3 /*
4 * Copyright (c) 2003
5 * Daan Vreeken <Danovitsch (at) Vitsch.net>. All rights reserved.
6 *
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted provided that the following conditions
9 * are met:
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in the
14 * documentation and/or other materials provided with the distribution.
15 * 3. All advertising materials mentioning features or use of this software
16 * must display the following acknowledgement:
17 * This product includes software developed by Daan Vreeken.
18 * 4. Neither the name of the author nor the names of any co-contributors
19 * may be used to endorse or promote products derived from this software
20 * without specific prior written permission.
21 *
22 * THIS SOFTWARE IS PROVIDED BY DAAN VREEKEN AND CONTRIBUTORS ``AS IS'' AND
23 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
24 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
25 * ARE DISCLAIMED. IN NO EVENT SHALL Daan Vreeken OR THE VOICES IN HIS HEAD
26 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
27 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
28 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
29 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
30 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
31 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
32 * THE POSSIBILITY OF SUCH DAMAGE.
33 *
34 */
35
36 #define ATU_CONFIG_NO 1
37 #define ATU_IFACE_IDX 0
38
39 /* the number of simultaniuously requested RX transfers */
40 #define ATU_RX_LIST_CNT 1
41
42 /*
43 * the number of simultaniously started TX transfers
44 * my measurements :
45 * 1 430.82 KB/sec
46 * 2 534.66 KB/sec
47 * 3 536.23 KB/sec
48 * 4 537.80 KB/sec
49 * 6 537.30 KB/sec
50 * 8 535.31 KB/sec
51 * 16 535.68 KB/sec
52 * 128 535.67 KB/sec (before you ask : yes, 128 is silly :)
53 * (+/- 24% increase)
54 */
55 #define ATU_TX_LIST_CNT 8
56
57 /*
58 * According to the 802.11 spec (7.1.2) the frame body can be up to 2312 bytes
59 */
60 #define ATU_RX_BUFSZ (ATU_RX_HDRLEN + \
61 sizeof(struct ieee80211_frame_addr4) + 2312 + 4)
62 /* BE CAREFULL! should add ATU_TX_PADDING */
63 #define ATU_TX_BUFSZ (ATU_TX_HDRLEN + \
64 sizeof(struct ieee80211_frame_addr4) + 2312)
65
66 #define ATU_MIN_FRAMELEN 60
67
68 /*
69 * Sending packets of more than 1500 bytes confuses some access points, so the
70 * default MTU is set to 1500 but can be increased up to 2310 bytes using
71 * ifconfig
72 */
73 #define ATU_DEFAULT_MTU 1500
74 #define ATU_MAX_MTU (2312 - 2)
75
76 #define ATU_ENDPT_RX 0x0
77 #define ATU_ENDPT_TX 0x1
78 #define ATU_ENDPT_MAX 0x2
79
80 #define ATU_TX_TIMEOUT 10000
81 #define ATU_JOIN_TIMEOUT 2000
82
83 #define ATU_NO_QUIRK 0x0000
84 #define ATU_QUIRK_NO_REMAP 0x0001
85 #define ATU_QUIRK_FW_DELAY 0x0002
86
87 #define ATU_DEFAULT_SSID ""
88 #define ATU_DEFAULT_CHANNEL 10
89
90 enum atu_radio_type {
91 RadioRFMD = 0,
92 RadioRFMD2958,
93 RadioRFMD2958_SMC,
94 RadioIntersil
95 };
96
97 struct atu_type {
98 u_int16_t atu_vid;
99 u_int16_t atu_pid;
100 enum atu_radio_type atu_radio;
101 u_int16_t atu_quirk;
102 };
103
104 struct atu_softc;
105
106 struct atu_chain {
107 struct atu_softc *atu_sc;
108 usbd_xfer_handle atu_xfer;
109 char *atu_buf;
110 struct mbuf *atu_mbuf;
111 u_int8_t atu_idx;
112 u_int16_t atu_length;
113 int atu_in_xfer;
114 SLIST_ENTRY(atu_chain) atu_list;
115 };
116
117 struct atu_cdata {
118 struct atu_chain atu_tx_chain[ATU_TX_LIST_CNT];
119 struct atu_chain atu_rx_chain[ATU_RX_LIST_CNT];
120
121 SLIST_HEAD(atu_list_head, atu_chain) atu_rx_free;
122 struct atu_list_head atu_tx_free;
123
124 u_int8_t atu_tx_inuse;
125 u_int8_t atu_tx_last_idx;
126 };
127
128 #define MAX_SSID_LEN 32
129 #define ATU_AVG_TIME 20
130
131 struct atu_softc {
132 USBBASEDEVICE atu_dev;
133 struct ethercom sc_ec;
134 struct ieee80211com sc_ic;
135 int (*sc_newstate)(struct ieee80211com *,
136 enum ieee80211_state, int);
137
138 char sc_state;
139 #define ATU_S_DEAD 0
140 #define ATU_S_OK 1
141 #define ATU_S_UNCONFIG 2
142 char sc_cmd;
143 #define ATU_C_NONE 0
144 #define ATU_C_SCAN 1
145 #define ATU_C_JOIN 2
146 struct usb_task sc_task;
147
148 usbd_device_handle atu_udev;
149 usbd_interface_handle atu_iface;
150 struct ethercom atu_ec;
151 struct ifmedia atu_media;
152 int atu_ed[ATU_ENDPT_MAX];
153 usbd_pipe_handle atu_ep[ATU_ENDPT_MAX];
154 int atu_unit;
155 int atu_if_flags;
156
157 struct atu_cdata atu_cdata;
158
159 struct timeval atu_rx_notice;
160
161 u_int8_t atu_bssid[ETHER_ADDR_LEN];
162 enum atu_radio_type atu_radio;
163 u_int16_t atu_quirk;
164
165 u_int8_t atu_ssid[MAX_SSID_LEN];
166 u_int8_t atu_ssidlen;
167 u_int8_t atu_channel;
168 u_int16_t atu_desired_channel;
169 u_int8_t atu_mode;
170 #define NO_MODE_YET 0
171 #define AD_HOC_MODE 1
172 #define INFRASTRUCTURE_MODE 2
173
174 u_int8_t atu_radio_on;
175 u_int8_t atu_encrypt;
176 #define ATU_WEP_RX 0x01
177 #define ATU_WEP_TX 0x02
178 #define ATU_WEP_TXRX (ATU_WEP_RX | ATU_WEP_TX)
179 int atu_wepkey;
180 int atu_wepkeylen;
181 u_int8_t atu_wepkeys[4][13];
182 };
183
184 #define sc_if sc_ec.ec_if
185
186 /* Commands for uploading the firmware (standard DFU interface) */
187 #define DFU_DNLOAD UT_WRITE_CLASS_INTERFACE, 0x01
188 #define DFU_GETSTATUS UT_READ_CLASS_INTERFACE, 0x03
189 #define DFU_GETSTATE UT_READ_CLASS_INTERFACE, 0x05
190 #define DFU_REMAP UT_WRITE_VENDOR_INTERFACE, 0x0a
191
192 /* DFU states */
193 #define DFUState_AppIdle 0
194 #define DFUState_AppDetach 1
195 #define DFUState_DFUIdle 2
196 #define DFUState_DnLoadSync 3
197 #define DFUState_DnLoadBusy 4
198 #define DFUState_DnLoadIdle 5
199 #define DFUState_ManifestSync 6
200 #define DFUState_Manifest 7
201 #define DFUState_ManifestWait 8
202 #define DFUState_UploadIdle 9
203 #define DFUState_DFUError 10
204
205 #define DFU_MaxBlockSize 1024
206
207 /* AT76c503 operating modes */
208 #define MODE_NONE 0x00
209 #define MODE_NETCARD 0x01
210 #define MODE_CONFIG 0x02
211 #define MODE_DFU 0x03
212 #define MODE_NOFLASHNETCARD 0x04
213
214 /* AT76c503 commands */
215 #define CMD_SET_MIB 0x01
216 #define CMD_START_SCAN 0x03
217 #define CMD_JOIN 0x04
218 #define CMD_START_IBSS 0x05
219 #define CMD_RADIO 0x06
220 #define CMD_RADIO_ON 0x06
221 #define CMD_RADIO_OFF 0x07
222 #define CMD_STARTUP 0x0b
223
224 /* AT76c503 status messages - used in atu_wait_completion */
225 #define STATUS_IDLE 0x00
226 #define STATUS_COMPLETE 0x01
227 #define STATUS_UNKNOWN 0x02
228 #define STATUS_INVALID_PARAMETER 0x03
229 #define STATUS_FUNCTION_NOT_SUPPORTED 0x04
230 #define STATUS_TIME_OUT 0x07
231 #define STATUS_IN_PROGRESS 0x08
232 #define STATUS_HOST_FAILURE 0xff
233 #define STATUS_SCAN_FAILED 0xf0
234
235 /* AT76c503 command header */
236 struct atu_cmd {
237 uByte Cmd;
238 uByte Reserved;
239 uWord Size;
240 } UPACKED;
241
242 /* CMD_SET_MIB command (0x01) */
243 struct atu_cmd_set_mib {
244 /* AT76c503 command header */
245 uByte AtCmd;
246 uByte AtReserved;
247 uWord AtSize;
248
249 /* MIB header */
250 uByte MIBType;
251 uByte MIBSize;
252 uByte MIBIndex;
253 uByte MIBReserved;
254
255 /* MIB data */
256 uByte data[72];
257 } UPACKED;
258
259 /* CMD_STARTUP command (0x0b) */
260 struct atu_cmd_card_config {
261 uByte Cmd;
262 uByte Reserved;
263 uWord Size;
264
265 uByte ExcludeUnencrypted;
266 uByte PromiscuousMode;
267 uByte ShortRetryLimit;
268 uByte EncryptionType;
269 uWord RTS_Threshold;
270 uWord FragThreshold; /* 256 .. 2346 */
271 uByte BasicRateSet[4];
272 uByte AutoRateFallback;
273 uByte Channel;
274 uByte PrivacyInvoked; /* wep */
275 uByte WEP_DefaultKeyID; /* 0 .. 3 */
276 uByte SSID[MAX_SSID_LEN];
277 uByte WEP_DefaultKey[4][13];
278 uByte SSID_Len;
279 uByte ShortPreamble;
280 uWord BeaconPeriod;
281 } UPACKED;
282
283 /* CMD_SCAN command (0x03) */
284 struct atu_cmd_do_scan {
285 uByte Cmd;
286 uByte Reserved;
287 uWord Size;
288
289 uByte BSSID[ETHER_ADDR_LEN];
290 uByte SSID[MAX_SSID_LEN];
291 uByte ScanType;
292 uByte Channel;
293 uWord ProbeDelay;
294 uWord MinChannelTime;
295 uWord MaxChannelTime;
296 uByte SSID_Len;
297 uByte InternationalScan;
298 } UPACKED;
299
300 #define ATU_SCAN_ACTIVE 0x00
301 #define ATU_SCAN_PASSIVE 0x01
302
303 /* CMD_JOIN command (0x04) */
304 struct atu_cmd_join {
305 uByte Cmd;
306 uByte Reserved;
307 uWord Size;
308
309 uByte bssid[ETHER_ADDR_LEN];
310 uByte essid[32];
311 uByte bss_type;
312 uByte channel;
313 uWord timeout;
314 uByte essid_size;
315 uByte reserved;
316 } UPACKED;
317
318 /* CMD_START_IBSS (0x05) */
319 struct atu_cmd_start_ibss {
320 uByte Cmd;
321 uByte Reserved;
322 uWord Size;
323
324 uByte BSSID[ETHER_ADDR_LEN];
325 uByte SSID[32];
326 uByte BSSType;
327 uByte Channel;
328 uByte SSIDSize;
329 uByte Res[3];
330 } UPACKED;
331
332 /*
333 * The At76c503 adapters come with different types of radios on them.
334 * At this moment the driver supports adapters with RFMD and Intersil radios.
335 */
336
337 /* The config structure of an RFMD radio */
338 struct atu_rfmd_conf {
339 u_int8_t CR20[14];
340 u_int8_t CR21[14];
341 u_int8_t BB_CR[14];
342 u_int8_t PidVid[4];
343 u_int8_t MACAddr[ETHER_ADDR_LEN];
344 u_int8_t RegulatoryDomain;
345 u_int8_t LowPowerValues[14];
346 u_int8_t NormalPowerValues[14];
347 u_int8_t Reserved[3];
348 /* then we have 84 bytes, somehow Windows reads 95?? */
349 u_int8_t Rest[11];
350 } UPACKED;
351
352 /* The config structure of an Intersil radio */
353 struct atu_intersil_conf {
354 u_int8_t MACAddr[ETHER_ADDR_LEN];
355 /* From the HFA3861B manual : */
356 /* Manual TX power control (7bit : -64 to 63) */
357 u_int8_t CR31[14];
358 /* TX power measurement */
359 u_int8_t CR58[14];
360 u_int8_t PidVid[4];
361 u_int8_t RegulatoryDomain;
362 u_int8_t Reserved[1];
363 } UPACKED;
364
365
366 /* Firmware information request */
367 struct atu_fw {
368 u_int8_t major;
369 u_int8_t minor;
370 u_int8_t patch;
371 u_int8_t build;
372 } UPACKED;
373
374 /*
375 * The header the AT76c503 puts in front of RX packets (for both managment &
376 * data)
377 */
378 struct atu_rx_hdr {
379 uWord length;
380 uByte rx_rate;
381 uByte newbss;
382 uByte fragmentation;
383 uByte rssi;
384 uByte link_quality;
385 uByte noise_level;
386 uDWord rx_time;
387 } UPACKED;
388 #define ATU_RX_HDRLEN sizeof(struct atu_rx_hdr)
389
390 /*
391 * The header we have to put in front of a TX packet before sending it to the
392 * AT76c503
393 */
394 struct atu_tx_hdr {
395 uWord length;
396 uByte tx_rate;
397 uByte padding;
398 uByte reserved[4];
399 } UPACKED;
400 #define ATU_TX_HDRLEN sizeof(struct atu_tx_hdr)
401
402 #define NR(x) (void *)((long)x)
403
404 /*
405 * The linux driver uses seperate routines for every mib request they do
406 * (eg. set_radio / set_preamble / set_frag / etc etc )
407 * We just define a list of types, sizes and offsets and use those
408 */
409
410 /* Name Type Size Index */
411 #define MIB_LOCAL 0x01
412 #define MIB_LOCAL__BEACON_ENABLE MIB_LOCAL, 1, 2
413 #define MIB_LOCAL__AUTO_RATE_FALLBACK MIB_LOCAL, 1, 3
414 #define MIB_LOCAL__SSID_SIZE MIB_LOCAL, 1, 5
415 #define MIB_LOCAL__PREAMBLE MIB_LOCAL, 1, 9
416 #define MIB_MAC_ADDR 0x02
417 #define MIB_MAC_ADDR__ADDR MIB_MAC_ADDR, 6, 0
418 #define MIB_MAC 0x03
419 #define MIB_MAC__FRAG MIB_MAC, 2, 8
420 #define MIB_MAC__RTS MIB_MAC, 2, 10
421 #define MIB_MAC__DESIRED_SSID MIB_MAC, 32, 28
422 #define MIB_MAC_MGMT 0x05
423 #define MIB_MAC_MGMT__BEACON_PERIOD MIB_MAC_MGMT, 2, 0
424 #define MIB_MAC_MGMT__CURRENT_BSSID MIB_MAC_MGMT, 6, 14
425 #define MIB_MAC_MGMT__CURRENT_ESSID MIB_MAC_MGMT, 32, 20
426 #define MIB_MAC_MGMT__POWER_MODE MIB_MAC_MGMT, 1, 53
427 #define MIB_MAC_MGMT__IBSS_CHANGE MIB_MAC_MGMT, 1, 54
428 #define MIB_MAC_WEP 0x06
429 #define MIB_MAC_WEP__PRIVACY_INVOKED MIB_MAC_WEP, 1, 0
430 #define MIB_MAC_WEP__KEY_ID MIB_MAC_WEP, 1, 1
431 #define MIB_MAC_WEP__ICV_ERROR_COUNT MIB_MAC_WEP, 4, 4
432 #define MIB_MAC_WEP__EXCLUDED_COUNT MIB_MAC_WEP, 4, 8
433 #define MIB_MAC_WEP__KEYS(nr) MIB_MAC_WEP, 13, 12+(nr)*13
434 #define MIB_MAC_WEP__ENCR_LEVEL MIB_MAC_WEP, 1, 64
435 #define MIB_PHY 0x07
436 #define MIB_PHY__CHANNEL MIB_PHY, 1, 20
437 #define MIB_PHY__REG_DOMAIN MIB_PHY, 1, 23
438 #define MIB_FW_VERSION 0x08
439 #define MIB_DOMAIN 0x09
440 #define MIB_DOMAIN__POWER_LEVELS MIB_DOMAIN, 14, 0
441 #define MIB_DOMAIN__CHANNELS MIB_DOMAIN, 14, 14
442
443 #define ATU_WEP_OFF 0
444 #define ATU_WEP_40BITS 1
445 #define ATU_WEP_104BITS 2
446
447 #define POWER_MODE_ACTIVE 1
448 #define POWER_MODE_SAVE 2
449 #define POWER_MODE_SMART 3
450
451 #define PREAMBLE_SHORT 1
452 #define PREAMBLE_LONG 0
453