Date: Fri, 11 Apr 2008 23:06:40 GMT From: Sam Leffler <sam@FreeBSD.org> To: Perforce Change Reviews <perforce@freebsd.org> Subject: PERFORCE change 139850 for review Message-ID: <200804112306.m3BN6eYA088771@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=139850 Change 139850 by sam@sam_ebb on 2008/04/11 23:05:53 checkpoint Affected files ... .. //depot/projects/vap/sbin/ifconfig/ifconfig.8#9 edit Differences ... ==== //depot/projects/vap/sbin/ifconfig/ifconfig.8#9 (text+ko) ==== @@ -28,7 +28,7 @@ .\" From: @(#)ifconfig.8 8.3 (Berkeley) 1/5/94 .\" $FreeBSD: src/sbin/ifconfig/ifconfig.8,v 1.146 2008/02/29 20:42:17 sam Exp $ .\" -.Dd February 29, 2008 +.Dd April 11, 2008 .Dt IFCONFIG 8 .Os .Sh NAME @@ -586,6 +586,55 @@ .Pp The following parameters are specific to IEEE 802.11 wireless interfaces: .Bl -tag -width indent +.It Cm ampdu +Enable sending and receiving AMPDU frames when using 802.11n (default). +The 802.11n specification states a compliant station must be capable +of receiving AMPDU frames but transmision is optional. +Use +.Fl ampdu +to disable all use of AMPDU with 802.11n. +For testing and/or to work around interoperability problems one can use +.Cm ampdutx +and +.Cm ampdurx +to control use of AMPDU in one direction. +.It Cm ampdudensity +Set the AMPDU density parameter used when operating with 802.11n. +This parameter controls the inter-packet gap for AMPDU frames. +The sending device normally controls this setting but a receiving station +may request wider gaps. +Legal values are: 0, .25, .5, 1, 2, 4, 8, and 16. +A value of +.Cm - +is treated the same as 0. +.It Cm ampdulimit +Set the limit on packet size for receiving AMPDU frames when operating +with 802.11n. +Legal values are: 8192, 16384, 32768, and 65536 but one can also specify +just the unique prefix: 8, 16, 32, 64. +Note the sender may limit the size of AMPDU frames to be less +than the maximum specified by the receiving station. +.It Cm amsdu +Enable sending and receiving AMSDU frames when using 802.11n. +By default AMSDU is received but not transmitted. +Use +.Fl amsdu +to disable all use of AMSDU with 802.11n. +For testing and/or to work around interoperability problems one can use +.Cm amsdutx +and +.Cm amsdurx +to control use of AMSDU in one direction. +.It Cm amsdulimit +Set the limit on packet size for sending and receiving AMSDU frames +when operating with 802.11n. +Legal values are: 7935 and 3839 (bytes). +Note the sender may limit the size of AMSDU frames to be less +than the maximum specified by the receiving station. +Note also that devices are not required to support the 7935 limit, +only 3839 is required by the specification and the larger value +may require more memory to be dedicated to support functionality +that is rarely used. .It Cm apbridge When operating as an access point, pass packets between wireless clients directly (default). @@ -597,7 +646,7 @@ packet filtering. .It Cm authmode Ar mode Set the desired authentication mode in infrastructure mode. -Not all adaptors support all modes. +Not all adapters support all modes. The set of valid modes is .Cm none , open , shared @@ -725,7 +774,7 @@ .Cm - will give you the default for your adaptor. Some -adaptors ignore this setting unless you are in ad-hoc mode. +adapters ignore this setting unless you are in ad-hoc mode. Alternatively the frequency, in megahertz, may be specified instead of the channel number. .Pp @@ -770,9 +819,61 @@ of the extension channel by appending ``+'' or ``-'' for above and below, respectively; e.g. ``2437:ht/40+'' specifies 40MHz wide HT operation with the center channel at frequency 2437 and the extension channel above. +.It Cm country Ar name +Set the country code to use in calculating the regulatory constraints +for operation. +In particular the set of available channels, how the wireless device +will operation on the channels, and the maximum transmit power that +can be used on a channel are defined by this setting. +Country/Region codes are specified as a 2-character abbreviation +defined by ISO 3166 or using a longer, but possibly ambiguous, spelling; +e.g. "ES" and "Spain". +The set of country codes are taken from /etc/regdomain.xml and can also +be viewed with the ``list countries'' request. +Note that not all devices support changing the country code from a default +setting; typically stored in EEPROM. +See also +.Cm regdomain , +.Cm indoor , +.Cm outdoor , +and +.Cm anywhere . +.It Cm dfs +Enable Dynamic Frequency Selection (DFS) as specified in 802.11h. +DFS embodies several facilities including detection of overlapping +radar signals, dynamic transmit power control, and channel selection +according to a least-congested criteria. +DFS support is mandatory for some 5Ghz frequencies in certain +locales (e.g. ETSI). +By default DFS is enabled according to the regulatory definitions +specified in /etc/regdomain.xml and the curent country code, regdomain, +and channel. +Note the underlying device (and driver) must support radar detection +for full DFS support to work. +To be fully compliant with the local regulatory agency frequencies that +require DFS should not be used unless it is fully supported. +Use +.Fl dfs +to disable this functionality for testing. +.It Cm dotd +Enable support for the 802.11d specification (default). +When this support is enabled in station mode, beacon frames that advertise +a country code different than the currently configured country code will +cause an event to be dispatched to user applications. +This event can be used by the station to adopt that country code and +operate according to the associated regulatory constraints. +When operating as an access point with 802.11d enabled the beacon and +probe response frames transmitted will advertise the current regulatory +domain settings. +To disable 802.11d use +.Fl dotd . .It Cm doth -Enable inclusion of an 802.11h country information element in beacon -frames transmitted when operating as an access point. +Enable 802.11h support including spectrum management. +When 802.11h is enabled beacon and probe response frames will have +the SpectrumMgt bit set in the capabilities field and +country and power constraint information elements will be present. +802.11h support also includes handling Channel Switch Announcements (CSA) +which are a mechanism to coordinate channel changes by an access point. By default 802.11h is enabled if the device is capable. To disable 802.11h use .Fl doth . @@ -811,6 +912,48 @@ command to identify the channels where turbo mode may be used. To disable Dynamic Turbo mode use .Fl dturbo . +.It Cm dwds +Enable Dynamic WDS (DWDS) support. +DWDS is a facility by which 4-address traffic can be carried between +stations operating in infrastructure mode. +A station first associates to an access point and authenticates using +normal procedures (e.g. WPA). +Then 4-address frames are passed to carry traffic for stations +operating on either side of the wireless link. +DWDS extends the normal WDS mechanism by leveraging existing security +protocols and eliminating static binding. +.Pp +When DWDS is enabled on an access point 4-address frames received from +an authorized station will generate a ``DWDS discovery'' event to user +applications. +This event should be used to create a WDS interface that is bound +to the remote station (and usually plumbed into a bridge). +Once the WDS interface is up and running 4-address traffic then logically +flows through that interface. +.Pp +When DWDS is enabled on a station, traffic with a destination address +different from the peer station are encapsulated in a 4-address frame +and transmitted to the peer. +All 4-address traffic uses the security information of the stations +(e.g. cryptographic keys). +A station is associated using 802.11n facilities may transport +4-address traffic using these same mechanisms; this depends on available +resources and capabilities of the device. +The DWDS implementation guards against layer 2 routing loops of +multicast traffic. +.It Cm ff +Enable the use of Atheros Fast Frames when communicating with +another Fast Frames-capable station. +Fast Frames are an encapsulation technique by which two 802.3 +frames are transmitted in a single 802.11 frame. +This can noticeably improve throughput but requires that the +receiving station understand how to decapsulate the frame. +Fast frame use is negotiated using the Atheros 802.11 vendor-specific +protocol extension so enabling use is safe when communicating with +non-Atheros devices. +By default, use of fast frames is enabled if the device is capable. +To explicitly disable fast frames, use +.Fl ff . .It Cm fragthreshold Ar length Set the threshold for which transmitted frames are broken into fragments. The @@ -824,7 +967,7 @@ or .Cm - disables transmit fragmentation. -Not all adaptors honor the fragmentation threshold. +Not all adapters honor the fragmentation threshold. .It Cm hidessid When operating as an access point, do not broadcast the SSID in beacon frames or respond to probe request frames unless @@ -833,19 +976,76 @@ undirected probe request frames are answered. To re-enable the broadcast of the SSID etc., use .Fl hidessid . -.It Cm ff -Enable the use of Atheros Fast Frames when communicating with -another Fast Frames-capable station. -Fast Frames are an encapsulation technique by which two 802.3 -frames are transmitted in a single 802.11 frame. -This can noticeably improve throughput but requires that the -receiving station understand how to decapsulate the frame. -Fast frame use is negotiated using the Atheros 802.11 vendor-specific -protocol extension so enabling use is safe when communicating with -non-Atheros devices. -By default, use of fast frames is enabled if the device is capable. -To explicitly disable fast frames, use -.Fl ff . +.It Cm ht +Enable use of High Throughput (HT) when using 802.11n (default). +The 802.11n specification includes mechanisms for operation +on 20MHz and 40MHz wide channels using different signalling mechanisms +than specified in 802.11b, 802.11g, and 802.11a. +Stations negotiate use of these facilities, termed HT20 and HT40, +when they associate. +To disable all use of 802.11n use +.Fl ht . +To disable use of HT20 (e.g. to force only HT40 use) use +.Fl ht20 . +To disable use of HT40 use +.Fl ht40 . +.Pp +HT configuration is used to ``auto promote'' operation +when several choices are available. +For example, if a station associates to an 11n-capable access point +it controls whether the station uses legacy operation, HT20, or HT40. +When an 11n-capable device is setup as an access point and +Auto Channel Selection is used to locate a channel to operate on, +HT configuration controls whether legacy, HT20, or HT40 operation is setup +on the selected channel. +If a fixed channel is specified for a station then HT configuration can +be given as part of the channel specification; e.g. 6:ht/20 to setup +HT20 operation on channel 6. +.It Cm htcompat +Enable use of compatibility support for pre-802.11n devices (default). +The 802.11n protocol specification went through several incompatible iterations. +Some vendors implemented 11n support to older specifications that +will not interoperate with a purely 11n-compliant station. +In particular the information elements included in management frames +for old devices are different. +When compatibility support is enabled both standard and compatible data +will be provided. +Stations that associate using the compatiblity mechanisms are flagged +in ``list sta''. +To disable compatiblity support use +.Fl htcompat . +.It Cm htprotmode Ar technique +For interfaces operating in 802.11n, use the specified +.Ar technique +for protecting HT frames in a mixed legacy/HT network. +The set of valid techniques is +.Cm off , +and +.Cm rts +(RTS/CTS, default). +Technique names are case insensitive. +.It Cm inact +Enable inactivity processing for stations associated to an +access point (default). +When operating as an access point the 802.11 layer monitors +the activity of each associated station. +When a station is inactive for 5 minutes it will send several +``probe frames'' to see if the station is still present. +If no response is received then the station is deauthenticated. +Applications that prefer to handle this work can disable this +facility by using +.Fl inact . +.It Cm indoor +Set the location to use in calculating regulatory constraints. +The location is also advertised in beacon and probe response frames +when 802.11d is enabled with +.Cm dotd . +See also +.Cm outdoor , +.Cm anywhere , +.Cm country , +and +.Cm regdomain . .It Cm list active Display the list of channels available for use taking into account any restrictions set with the @@ -883,6 +1083,9 @@ By default a compacted list of channels is displayed; if the .Fl v option is specified then all channels are shown. +.It Cm list countries +Display the set of country codes and regulatory domains that can be +used in regulatory configuration. .It Cm list mac Display the current MAC Access Control List state. Each address is prefixed with a character that indicates the @@ -894,6 +1097,13 @@ .Ql * indicates the address is present but the current policy open (so the ACL is not consulted). +.It Cm list regdomain +Display the current regulatory settings including the available channels +and transmit power caps. +.It Cm list roam +Display the parameters that govern roaming operation. +.It Cm list txparam +Display the parameters that govern transmit operation. .It Cm list scan Display the access points and/or ad-hoc neighbors located in the vicinity. @@ -1102,7 +1312,7 @@ or .Cm - disables transmission of RTS frames. -Not all adaptors support setting the RTS threshold. +Not all adapters support setting the RTS threshold. .It Cm ssid Ar ssid Set the desired Service Set Identifier (aka network name). The SSID is a string up to 32 characters @@ -1217,10 +1427,10 @@ Out of range values are truncated. Typically only a few discreet power settings are available and the driver will use the setting closest to the specified value. -Not all adaptors support changing the transmit power. +Not all adapters support changing the transmit power. .It Cm wepmode Ar mode Set the desired WEP mode. -Not all adaptors support all modes. +Not all adapters support all modes. The set of valid modes is .Cm off , on , and @@ -1229,10 +1439,10 @@ .Cm mixed mode explicitly tells the adaptor to allow association with access points which allow both encrypted and unencrypted traffic. -On these adaptors, +On these adapters, .Cm on means that the access point must only allow encrypted connections. -On other adaptors, +On other adapters, .Cm on is generally another name for .Cm mixed . @@ -1261,7 +1471,7 @@ A key may be cleared by setting it to .Ql - . If WEP is supported then there are at least four keys. -Some adaptors support more than four keys. +Some adapters support more than four keys. If that is the case, then the first four keys (1-4) will be the standard temporary keys and any others will be adaptor specific keys such as permanent keys stored in NVRAM. @@ -1365,7 +1575,7 @@ .El .Pp The following parameters support an optional access control list -feature available with some adaptors when operating in ap mode; see +feature available with some adapters when operating in ap mode; see .Xr wlan_acl 4 . This facility allows an access point to accept/deny association requests based on the MAC address of the station. @@ -1392,6 +1602,14 @@ Set the ACL policy to allow all stations to associate. .It Cm mac:flush Delete all entries in the database. +.It Cm mac:radius +Set the ACL policy to permit association only by +stations approved by a RADIUS server. +Note that this feature requires the +.Xr hostapd 8 +program be configured to do the right thing +as it handles the RADIUS processing +(and marks stations as authorized). .El .Pp The following parameters are for compatibility with other systems:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200804112306.m3BN6eYA088771>