ieee80211_hwmp.c revision 234892
1/*- 2 * Copyright (c) 2009 The FreeBSD Foundation 3 * All rights reserved. 4 * 5 * This software was developed by Rui Paulo under sponsorship from the 6 * FreeBSD Foundation. 7 * 8 * Redistribution and use in source and binary forms, with or without 9 * modification, are permitted provided that the following conditions 10 * are met: 11 * 1. Redistributions of source code must retain the above copyright 12 * notice, this list of conditions and the following disclaimer. 13 * 2. Redistributions in binary form must reproduce the above copyright 14 * notice, this list of conditions and the following disclaimer in the 15 * documentation and/or other materials provided with the distribution. 16 * 17 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 20 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 27 * SUCH DAMAGE. 28 */ 29#include <sys/cdefs.h> 30#ifdef __FreeBSD__ 31__FBSDID("$FreeBSD: head/sys/net80211/ieee80211_hwmp.c 234892 2012-05-01 16:14:18Z monthadar $"); 32#endif 33 34/* 35 * IEEE 802.11s Hybrid Wireless Mesh Protocol, HWMP. 36 * 37 * Based on March 2009, D3.0 802.11s draft spec. 38 */ 39#include "opt_inet.h" 40#include "opt_wlan.h" 41 42#include <sys/param.h> 43#include <sys/systm.h> 44#include <sys/mbuf.h> 45#include <sys/malloc.h> 46#include <sys/kernel.h> 47 48#include <sys/socket.h> 49#include <sys/sockio.h> 50#include <sys/endian.h> 51#include <sys/errno.h> 52#include <sys/proc.h> 53#include <sys/sysctl.h> 54 55#include <net/if.h> 56#include <net/if_media.h> 57#include <net/if_llc.h> 58#include <net/ethernet.h> 59 60#include <net/bpf.h> 61 62#include <net80211/ieee80211_var.h> 63#include <net80211/ieee80211_action.h> 64#include <net80211/ieee80211_input.h> 65#include <net80211/ieee80211_mesh.h> 66 67static void hwmp_vattach(struct ieee80211vap *); 68static void hwmp_vdetach(struct ieee80211vap *); 69static int hwmp_newstate(struct ieee80211vap *, 70 enum ieee80211_state, int); 71static int hwmp_send_action(struct ieee80211_node *, 72 const uint8_t [IEEE80211_ADDR_LEN], 73 const uint8_t [IEEE80211_ADDR_LEN], 74 uint8_t *, size_t); 75static uint8_t * hwmp_add_meshpreq(uint8_t *, 76 const struct ieee80211_meshpreq_ie *); 77static uint8_t * hwmp_add_meshprep(uint8_t *, 78 const struct ieee80211_meshprep_ie *); 79static uint8_t * hwmp_add_meshperr(uint8_t *, 80 const struct ieee80211_meshperr_ie *); 81static uint8_t * hwmp_add_meshrann(uint8_t *, 82 const struct ieee80211_meshrann_ie *); 83static void hwmp_rootmode_setup(struct ieee80211vap *); 84static void hwmp_rootmode_cb(void *); 85static void hwmp_rootmode_rann_cb(void *); 86static void hwmp_recv_preq(struct ieee80211vap *, struct ieee80211_node *, 87 const struct ieee80211_frame *, 88 const struct ieee80211_meshpreq_ie *); 89static int hwmp_send_preq(struct ieee80211_node *, 90 const uint8_t [IEEE80211_ADDR_LEN], 91 const uint8_t [IEEE80211_ADDR_LEN], 92 struct ieee80211_meshpreq_ie *, 93 struct timeval *, struct timeval *); 94static void hwmp_recv_prep(struct ieee80211vap *, struct ieee80211_node *, 95 const struct ieee80211_frame *, 96 const struct ieee80211_meshprep_ie *); 97static int hwmp_send_prep(struct ieee80211_node *, 98 const uint8_t [IEEE80211_ADDR_LEN], 99 const uint8_t [IEEE80211_ADDR_LEN], 100 struct ieee80211_meshprep_ie *); 101static void hwmp_recv_perr(struct ieee80211vap *, struct ieee80211_node *, 102 const struct ieee80211_frame *, 103 const struct ieee80211_meshperr_ie *); 104static int hwmp_send_perr(struct ieee80211_node *, 105 const uint8_t [IEEE80211_ADDR_LEN], 106 const uint8_t [IEEE80211_ADDR_LEN], 107 struct ieee80211_meshperr_ie *); 108static void hwmp_senderror(struct ieee80211vap *, 109 const uint8_t [IEEE80211_ADDR_LEN], 110 struct ieee80211_mesh_route *, int); 111static void hwmp_recv_rann(struct ieee80211vap *, struct ieee80211_node *, 112 const struct ieee80211_frame *, 113 const struct ieee80211_meshrann_ie *); 114static int hwmp_send_rann(struct ieee80211_node *, 115 const uint8_t [IEEE80211_ADDR_LEN], 116 const uint8_t [IEEE80211_ADDR_LEN], 117 struct ieee80211_meshrann_ie *); 118static struct ieee80211_node * 119 hwmp_discover(struct ieee80211vap *, 120 const uint8_t [IEEE80211_ADDR_LEN], struct mbuf *); 121static void hwmp_peerdown(struct ieee80211_node *); 122 123static struct timeval ieee80211_hwmp_preqminint = { 0, 100000 }; 124static struct timeval ieee80211_hwmp_perrminint = { 0, 100000 }; 125 126/* unalligned little endian access */ 127#define LE_WRITE_2(p, v) do { \ 128 ((uint8_t *)(p))[0] = (v) & 0xff; \ 129 ((uint8_t *)(p))[1] = ((v) >> 8) & 0xff; \ 130} while (0) 131#define LE_WRITE_4(p, v) do { \ 132 ((uint8_t *)(p))[0] = (v) & 0xff; \ 133 ((uint8_t *)(p))[1] = ((v) >> 8) & 0xff; \ 134 ((uint8_t *)(p))[2] = ((v) >> 16) & 0xff; \ 135 ((uint8_t *)(p))[3] = ((v) >> 24) & 0xff; \ 136} while (0) 137 138 139/* NB: the Target Address set in a Proactive PREQ is the broadcast address. */ 140static const uint8_t broadcastaddr[IEEE80211_ADDR_LEN] = 141 { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff }; 142 143typedef uint32_t ieee80211_hwmp_seq; 144#define HWMP_SEQ_LT(a, b) ((int32_t)((a)-(b)) < 0) 145#define HWMP_SEQ_LEQ(a, b) ((int32_t)((a)-(b)) <= 0) 146#define HWMP_SEQ_EQ(a, b) ((int32_t)((a)-(b)) == 0) 147#define HWMP_SEQ_GT(a, b) ((int32_t)((a)-(b)) > 0) 148#define HWMP_SEQ_GEQ(a, b) ((int32_t)((a)-(b)) >= 0) 149 150#define HWMP_SEQ_MAX(a, b) (a > b ? a : b) 151 152/* 153 * Private extension of ieee80211_mesh_route. 154 */ 155struct ieee80211_hwmp_route { 156 ieee80211_hwmp_seq hr_seq; /* last HWMP seq seen from dst*/ 157 ieee80211_hwmp_seq hr_preqid; /* last PREQ ID seen from dst */ 158 ieee80211_hwmp_seq hr_origseq; /* seq. no. on our latest PREQ*/ 159 struct timeval hr_lastpreq; /* last time we sent a PREQ */ 160 struct timeval hr_lastrootconf; /* last sent PREQ root conf */ 161 int hr_preqretries; /* number of discoveries */ 162 int hr_lastdiscovery; /* last discovery in ticks */ 163}; 164struct ieee80211_hwmp_state { 165 ieee80211_hwmp_seq hs_seq; /* next seq to be used */ 166 ieee80211_hwmp_seq hs_preqid; /* next PREQ ID to be used */ 167 int hs_rootmode; /* proactive HWMP */ 168 struct timeval hs_lastperr; /* last time we sent a PERR */ 169 struct callout hs_roottimer; 170 uint8_t hs_maxhops; /* max hop count */ 171}; 172 173static SYSCTL_NODE(_net_wlan, OID_AUTO, hwmp, CTLFLAG_RD, 0, 174 "IEEE 802.11s HWMP parameters"); 175static int ieee80211_hwmp_targetonly = 0; 176SYSCTL_INT(_net_wlan_hwmp, OID_AUTO, targetonly, CTLTYPE_INT | CTLFLAG_RW, 177 &ieee80211_hwmp_targetonly, 0, "Set TO bit on generated PREQs"); 178static int ieee80211_hwmp_pathtimeout = -1; 179SYSCTL_PROC(_net_wlan_hwmp, OID_AUTO, pathlifetime, CTLTYPE_INT | CTLFLAG_RW, 180 &ieee80211_hwmp_pathtimeout, 0, ieee80211_sysctl_msecs_ticks, "I", 181 "path entry lifetime (ms)"); 182static int ieee80211_hwmp_maxpreq_retries = -1; 183SYSCTL_PROC(_net_wlan_hwmp, OID_AUTO, maxpreq_retries, CTLTYPE_INT | CTLFLAG_RW, 184 &ieee80211_hwmp_maxpreq_retries, 0, ieee80211_sysctl_msecs_ticks, "I", 185 "maximum number of preq retries"); 186static int ieee80211_hwmp_net_diameter_traversaltime = -1; 187SYSCTL_PROC(_net_wlan_hwmp, OID_AUTO, net_diameter_traversal_time, 188 CTLTYPE_INT | CTLFLAG_RW, &ieee80211_hwmp_net_diameter_traversaltime, 0, 189 ieee80211_sysctl_msecs_ticks, "I", 190 "estimate travelse time across the MBSS (ms)"); 191static int ieee80211_hwmp_roottimeout = -1; 192SYSCTL_PROC(_net_wlan_hwmp, OID_AUTO, roottimeout, CTLTYPE_INT | CTLFLAG_RW, 193 &ieee80211_hwmp_roottimeout, 0, ieee80211_sysctl_msecs_ticks, "I", 194 "root PREQ timeout (ms)"); 195static int ieee80211_hwmp_rootint = -1; 196SYSCTL_PROC(_net_wlan_hwmp, OID_AUTO, rootint, CTLTYPE_INT | CTLFLAG_RW, 197 &ieee80211_hwmp_rootint, 0, ieee80211_sysctl_msecs_ticks, "I", 198 "root interval (ms)"); 199static int ieee80211_hwmp_rannint = -1; 200SYSCTL_PROC(_net_wlan_hwmp, OID_AUTO, rannint, CTLTYPE_INT | CTLFLAG_RW, 201 &ieee80211_hwmp_rannint, 0, ieee80211_sysctl_msecs_ticks, "I", 202 "root announcement interval (ms)"); 203static struct timeval ieee80211_hwmp_rootconfint = { 0, 0 }; 204static int ieee80211_hwmp_rootconfint_internal = -1; 205SYSCTL_PROC(_net_wlan_hwmp, OID_AUTO, rootconfint, CTLTYPE_INT | CTLFLAG_RD, 206 &ieee80211_hwmp_rootconfint_internal, 0, ieee80211_sysctl_msecs_ticks, "I", 207 "root confirmation interval (ms) (read-only)"); 208 209#define IEEE80211_HWMP_DEFAULT_MAXHOPS 31 210 211static ieee80211_recv_action_func hwmp_recv_action_meshpath; 212 213static struct ieee80211_mesh_proto_path mesh_proto_hwmp = { 214 .mpp_descr = "HWMP", 215 .mpp_ie = IEEE80211_MESHCONF_PATH_HWMP, 216 .mpp_discover = hwmp_discover, 217 .mpp_peerdown = hwmp_peerdown, 218 .mpp_senderror = hwmp_senderror, 219 .mpp_vattach = hwmp_vattach, 220 .mpp_vdetach = hwmp_vdetach, 221 .mpp_newstate = hwmp_newstate, 222 .mpp_privlen = sizeof(struct ieee80211_hwmp_route), 223}; 224SYSCTL_PROC(_net_wlan_hwmp, OID_AUTO, inact, CTLTYPE_INT | CTLFLAG_RW, 225 &mesh_proto_hwmp.mpp_inact, 0, ieee80211_sysctl_msecs_ticks, "I", 226 "mesh route inactivity timeout (ms)"); 227 228 229static void 230ieee80211_hwmp_init(void) 231{ 232 /* Default values as per amendment */ 233 ieee80211_hwmp_pathtimeout = msecs_to_ticks(5*1000); 234 ieee80211_hwmp_roottimeout = msecs_to_ticks(5*1000); 235 ieee80211_hwmp_rootint = msecs_to_ticks(2*1000); 236 ieee80211_hwmp_rannint = msecs_to_ticks(1*1000); 237 ieee80211_hwmp_rootconfint_internal = msecs_to_ticks(2*1000); 238 ieee80211_hwmp_maxpreq_retries = 3; 239 /* 240 * (TU): A measurement of time equal to 1024 ��s, 241 * 500 TU is 512 ms. 242 */ 243 ieee80211_hwmp_net_diameter_traversaltime = msecs_to_ticks(512); 244 245 /* 246 * NB: I dont know how to make SYSCTL_PROC that calls ms to ticks 247 * and return a struct timeval... 248 */ 249 ieee80211_hwmp_rootconfint.tv_usec = 250 ieee80211_hwmp_rootconfint_internal * 1000; 251 252 /* 253 * Register action frame handler. 254 */ 255 ieee80211_recv_action_register(IEEE80211_ACTION_CAT_MESH, 256 IEEE80211_ACTION_MESH_HWMP, hwmp_recv_action_meshpath); 257 258 /* NB: default is 5 secs per spec */ 259 mesh_proto_hwmp.mpp_inact = msecs_to_ticks(5*1000); 260 261 /* 262 * Register HWMP. 263 */ 264 ieee80211_mesh_register_proto_path(&mesh_proto_hwmp); 265} 266SYSINIT(wlan_hwmp, SI_SUB_DRIVERS, SI_ORDER_SECOND, ieee80211_hwmp_init, NULL); 267 268void 269hwmp_vattach(struct ieee80211vap *vap) 270{ 271 struct ieee80211_hwmp_state *hs; 272 273 KASSERT(vap->iv_opmode == IEEE80211_M_MBSS, 274 ("not a mesh vap, opmode %d", vap->iv_opmode)); 275 276 hs = malloc(sizeof(struct ieee80211_hwmp_state), M_80211_VAP, 277 M_NOWAIT | M_ZERO); 278 if (hs == NULL) { 279 printf("%s: couldn't alloc HWMP state\n", __func__); 280 return; 281 } 282 hs->hs_maxhops = IEEE80211_HWMP_DEFAULT_MAXHOPS; 283 callout_init(&hs->hs_roottimer, CALLOUT_MPSAFE); 284 vap->iv_hwmp = hs; 285} 286 287void 288hwmp_vdetach(struct ieee80211vap *vap) 289{ 290 struct ieee80211_hwmp_state *hs = vap->iv_hwmp; 291 292 callout_drain(&hs->hs_roottimer); 293 free(vap->iv_hwmp, M_80211_VAP); 294 vap->iv_hwmp = NULL; 295} 296 297int 298hwmp_newstate(struct ieee80211vap *vap, enum ieee80211_state ostate, int arg) 299{ 300 enum ieee80211_state nstate = vap->iv_state; 301 struct ieee80211_hwmp_state *hs = vap->iv_hwmp; 302 303 IEEE80211_DPRINTF(vap, IEEE80211_MSG_STATE, "%s: %s -> %s (%d)\n", 304 __func__, ieee80211_state_name[ostate], 305 ieee80211_state_name[nstate], arg); 306 307 if (nstate != IEEE80211_S_RUN && ostate == IEEE80211_S_RUN) 308 callout_drain(&hs->hs_roottimer); 309 if (nstate == IEEE80211_S_RUN) 310 hwmp_rootmode_setup(vap); 311 return 0; 312} 313 314/* 315 * Verify the length of an HWMP PREQ and return the number 316 * of destinations >= 1, if verification fails -1 is returned. 317 */ 318static int 319verify_mesh_preq_len(struct ieee80211vap *vap, 320 const struct ieee80211_frame *wh, const uint8_t *iefrm) 321{ 322 int alloc_sz = -1; 323 int ndest = -1; 324 if (iefrm[2] & IEEE80211_MESHPREQ_FLAGS_AE) { 325 /* Originator External Address present */ 326 alloc_sz = IEEE80211_MESHPREQ_BASE_SZ_AE; 327 ndest = iefrm[IEEE80211_MESHPREQ_TCNT_OFFSET_AE]; 328 } else { 329 /* w/o Originator External Address */ 330 alloc_sz = IEEE80211_MESHPREQ_BASE_SZ; 331 ndest = iefrm[IEEE80211_MESHPREQ_TCNT_OFFSET]; 332 } 333 alloc_sz += ndest * IEEE80211_MESHPREQ_TRGT_SZ; 334 335 if(iefrm[1] != (alloc_sz)) { 336 IEEE80211_DISCARD(vap, 337 IEEE80211_MSG_ACTION | IEEE80211_MSG_HWMP, 338 wh, NULL, "PREQ (AE=%s) with wrong len", 339 iefrm[2] & IEEE80211_MESHPREQ_FLAGS_AE ? "1" : "0"); 340 return (-1); 341 } 342 return ndest; 343} 344 345/* 346 * Verify the length of an HWMP PREP and returns 1 on success, 347 * otherwise -1. 348 */ 349static int 350verify_mesh_prep_len(struct ieee80211vap *vap, 351 const struct ieee80211_frame *wh, const uint8_t *iefrm) 352{ 353 int alloc_sz = -1; 354 if (iefrm[2] & IEEE80211_MESHPREP_FLAGS_AE) { 355 if (iefrm[1] == IEEE80211_MESHPREP_BASE_SZ_AE) 356 alloc_sz = IEEE80211_MESHPREP_BASE_SZ_AE; 357 } else if (iefrm[1] == IEEE80211_MESHPREP_BASE_SZ) 358 alloc_sz = IEEE80211_MESHPREP_BASE_SZ; 359 if(alloc_sz < 0) { 360 IEEE80211_DISCARD(vap, 361 IEEE80211_MSG_ACTION | IEEE80211_MSG_HWMP, 362 wh, NULL, "PREP (AE=%s) with wrong len", 363 iefrm[2] & IEEE80211_MESHPREP_FLAGS_AE ? "1" : "0"); 364 return (-1); 365 } 366 return (1); 367} 368 369/* 370 * Verify the length of an HWMP PERR and return the number 371 * of destinations >= 1, if verification fails -1 is returned. 372 */ 373static int 374verify_mesh_perr_len(struct ieee80211vap *vap, 375 const struct ieee80211_frame *wh, const uint8_t *iefrm) 376{ 377 int alloc_sz = -1; 378 const uint8_t *iefrm_t = iefrm; 379 uint8_t ndest = iefrm_t[IEEE80211_MESHPERR_NDEST_OFFSET]; 380 int i; 381 382 if(ndest > IEEE80211_MESHPERR_MAXDEST) { 383 IEEE80211_DISCARD(vap, 384 IEEE80211_MSG_ACTION | IEEE80211_MSG_HWMP, 385 wh, NULL, "PERR with wrong number of destionat (>19), %u", 386 ndest); 387 return (-1); 388 } 389 390 iefrm_t += IEEE80211_MESHPERR_NDEST_OFFSET + 1; /* flag is next field */ 391 /* We need to check each destionation flag to know size */ 392 for(i = 0; i<ndest; i++) { 393 if ((*iefrm_t) & IEEE80211_MESHPERR_FLAGS_AE) 394 iefrm_t += IEEE80211_MESHPERR_DEST_SZ_AE; 395 else 396 iefrm_t += IEEE80211_MESHPERR_DEST_SZ; 397 } 398 399 alloc_sz = (iefrm_t - iefrm) - 2; /* action + code */ 400 if(alloc_sz != iefrm[1]) { 401 IEEE80211_DISCARD(vap, 402 IEEE80211_MSG_ACTION | IEEE80211_MSG_HWMP, 403 wh, NULL, "%s", "PERR with wrong len"); 404 return (-1); 405 } 406 return ndest; 407} 408 409static int 410hwmp_recv_action_meshpath(struct ieee80211_node *ni, 411 const struct ieee80211_frame *wh, 412 const uint8_t *frm, const uint8_t *efrm) 413{ 414 struct ieee80211vap *vap = ni->ni_vap; 415 struct ieee80211_meshpreq_ie *preq; 416 struct ieee80211_meshprep_ie *prep; 417 struct ieee80211_meshperr_ie *perr; 418 struct ieee80211_meshrann_ie rann; 419 const uint8_t *iefrm = frm + 2; /* action + code */ 420 const uint8_t *iefrm_t = iefrm; /* temporary pointer */ 421 int ndest = -1; 422 int found = 0; 423 424 while (efrm - iefrm > 1) { 425 IEEE80211_VERIFY_LENGTH(efrm - iefrm, iefrm[1] + 2, return 0); 426 switch (*iefrm) { 427 case IEEE80211_ELEMID_MESHPREQ: 428 { 429 int i = 0; 430 431 iefrm_t = iefrm; 432 ndest = verify_mesh_preq_len(vap, wh, iefrm_t); 433 if (ndest < 0) { 434 vap->iv_stats.is_rx_mgtdiscard++; 435 break; 436 } 437 preq = malloc(sizeof(*preq) + 438 (ndest - 1) * sizeof(*preq->preq_targets), 439 M_80211_MESH_PREQ, M_NOWAIT | M_ZERO); 440 KASSERT(preq != NULL, ("preq == NULL")); 441 442 preq->preq_ie = *iefrm_t++; 443 preq->preq_len = *iefrm_t++; 444 preq->preq_flags = *iefrm_t++; 445 preq->preq_hopcount = *iefrm_t++; 446 preq->preq_ttl = *iefrm_t++; 447 preq->preq_id = LE_READ_4(iefrm_t); iefrm_t += 4; 448 IEEE80211_ADDR_COPY(preq->preq_origaddr, iefrm_t); 449 iefrm_t += 6; 450 preq->preq_origseq = LE_READ_4(iefrm_t); iefrm_t += 4; 451 /* NB: may have Originator Proxied Address */ 452 if (preq->preq_flags & IEEE80211_MESHPREQ_FLAGS_AE) { 453 IEEE80211_ADDR_COPY( 454 preq->preq_orig_ext_addr, iefrm_t); 455 iefrm_t += 6; 456 } 457 preq->preq_lifetime = LE_READ_4(iefrm_t); iefrm_t += 4; 458 preq->preq_metric = LE_READ_4(iefrm_t); iefrm_t += 4; 459 preq->preq_tcount = *iefrm_t++; 460 461 for (i = 0; i < preq->preq_tcount; i++) { 462 preq->preq_targets[i].target_flags = *iefrm_t++; 463 IEEE80211_ADDR_COPY( 464 preq->preq_targets[i].target_addr, iefrm_t); 465 iefrm_t += 6; 466 preq->preq_targets[i].target_seq = 467 LE_READ_4(iefrm_t); 468 iefrm_t += 4; 469 } 470 471 hwmp_recv_preq(vap, ni, wh, preq); 472 free(preq, M_80211_MESH_PREQ); 473 found++; 474 break; 475 } 476 case IEEE80211_ELEMID_MESHPREP: 477 { 478 iefrm_t = iefrm; 479 ndest = verify_mesh_prep_len(vap, wh, iefrm_t); 480 if (ndest < 0) { 481 vap->iv_stats.is_rx_mgtdiscard++; 482 break; 483 } 484 prep = malloc(sizeof(*prep), 485 M_80211_MESH_PREP, M_NOWAIT | M_ZERO); 486 KASSERT(prep != NULL, ("prep == NULL")); 487 488 prep->prep_ie = *iefrm_t++; 489 prep->prep_len = *iefrm_t++; 490 prep->prep_flags = *iefrm_t++; 491 prep->prep_hopcount = *iefrm_t++; 492 prep->prep_ttl = *iefrm_t++; 493 IEEE80211_ADDR_COPY(prep->prep_targetaddr, iefrm_t); 494 iefrm_t += 6; 495 prep->prep_targetseq = LE_READ_4(iefrm_t); iefrm_t += 4; 496 /* NB: May have Target Proxied Address */ 497 if (prep->prep_flags & IEEE80211_MESHPREP_FLAGS_AE) { 498 IEEE80211_ADDR_COPY( 499 prep->prep_target_ext_addr, iefrm_t); 500 iefrm_t += 6; 501 } 502 prep->prep_lifetime = LE_READ_4(iefrm_t); iefrm_t += 4; 503 prep->prep_metric = LE_READ_4(iefrm_t); iefrm_t += 4; 504 IEEE80211_ADDR_COPY(prep->prep_origaddr, iefrm_t); 505 iefrm_t += 6; 506 prep->prep_origseq = LE_READ_4(iefrm_t); iefrm_t += 4; 507 508 hwmp_recv_prep(vap, ni, wh, prep); 509 free(prep, M_80211_MESH_PREP); 510 found++; 511 break; 512 } 513 case IEEE80211_ELEMID_MESHPERR: 514 { 515 int i = 0; 516 517 iefrm_t = iefrm; 518 ndest = verify_mesh_perr_len(vap, wh, iefrm_t); 519 if (ndest < 0) { 520 vap->iv_stats.is_rx_mgtdiscard++; 521 break; 522 } 523 perr = malloc(sizeof(*perr) + 524 (ndest - 1) * sizeof(*perr->perr_dests), 525 M_80211_MESH_PERR, M_NOWAIT | M_ZERO); 526 KASSERT(perr != NULL, ("perr == NULL")); 527 528 perr->perr_ie = *iefrm_t++; 529 perr->perr_len = *iefrm_t++; 530 perr->perr_ttl = *iefrm_t++; 531 perr->perr_ndests = *iefrm_t++; 532 533 for (i = 0; i<perr->perr_ndests; i++) { 534 perr->perr_dests[i].dest_flags = *iefrm_t++; 535 IEEE80211_ADDR_COPY( 536 perr->perr_dests[i].dest_addr, iefrm_t); 537 iefrm_t += 6; 538 perr->perr_dests[i].dest_seq = LE_READ_4(iefrm_t); 539 iefrm_t += 4; 540 /* NB: May have Target Proxied Address */ 541 if (perr->perr_dests[i].dest_flags & 542 IEEE80211_MESHPERR_FLAGS_AE) { 543 IEEE80211_ADDR_COPY( 544 perr->perr_dests[i].dest_ext_addr, 545 iefrm_t); 546 iefrm_t += 6; 547 } 548 perr->perr_dests[i].dest_rcode = 549 LE_READ_2(iefrm_t); 550 iefrm_t += 2; 551 } 552 553 hwmp_recv_perr(vap, ni, wh, perr); 554 free(perr, M_80211_MESH_PERR); 555 found++; 556 break; 557 } 558 case IEEE80211_ELEMID_MESHRANN: 559 { 560 const struct ieee80211_meshrann_ie *mrann = 561 (const struct ieee80211_meshrann_ie *) iefrm; 562 if (mrann->rann_len != 563 sizeof(struct ieee80211_meshrann_ie) - 2) { 564 IEEE80211_DISCARD(vap, 565 IEEE80211_MSG_ACTION | IEEE80211_MSG_HWMP, 566 wh, NULL, "%s", "RAN with wrong len"); 567 vap->iv_stats.is_rx_mgtdiscard++; 568 return 1; 569 } 570 memcpy(&rann, mrann, sizeof(rann)); 571 rann.rann_seq = LE_READ_4(&mrann->rann_seq); 572 rann.rann_interval = LE_READ_4(&mrann->rann_interval); 573 rann.rann_metric = LE_READ_4(&mrann->rann_metric); 574 hwmp_recv_rann(vap, ni, wh, &rann); 575 found++; 576 break; 577 } 578 } 579 iefrm += iefrm[1] + 2; 580 } 581 if (!found) { 582 IEEE80211_DISCARD(vap, 583 IEEE80211_MSG_ACTION | IEEE80211_MSG_HWMP, 584 wh, NULL, "%s", "PATH SEL action without IE"); 585 vap->iv_stats.is_rx_mgtdiscard++; 586 } 587 return 0; 588} 589 590static int 591hwmp_send_action(struct ieee80211_node *ni, 592 const uint8_t sa[IEEE80211_ADDR_LEN], 593 const uint8_t da[IEEE80211_ADDR_LEN], 594 uint8_t *ie, size_t len) 595{ 596 struct ieee80211vap *vap = ni->ni_vap; 597 struct ieee80211com *ic = ni->ni_ic; 598 struct ieee80211_bpf_params params; 599 struct mbuf *m; 600 uint8_t *frm; 601 602 if (vap->iv_state == IEEE80211_S_CAC) { 603 IEEE80211_NOTE(vap, IEEE80211_MSG_OUTPUT, ni, 604 "block %s frame in CAC state", "HWMP action"); 605 vap->iv_stats.is_tx_badstate++; 606 return EIO; /* XXX */ 607 } 608 609 KASSERT(ni != NULL, ("null node")); 610 /* 611 * Hold a reference on the node so it doesn't go away until after 612 * the xmit is complete all the way in the driver. On error we 613 * will remove our reference. 614 */ 615#ifdef IEEE80211_DEBUG_REFCNT 616 IEEE80211_DPRINTF(vap, IEEE80211_MSG_NODE, 617 "ieee80211_ref_node (%s:%u) %p<%s> refcnt %d\n", 618 __func__, __LINE__, 619 ni, ether_sprintf(ni->ni_macaddr), 620 ieee80211_node_refcnt(ni)+1); 621#endif 622 ieee80211_ref_node(ni); 623 624 m = ieee80211_getmgtframe(&frm, 625 ic->ic_headroom + sizeof(struct ieee80211_frame), 626 sizeof(struct ieee80211_action) + len 627 ); 628 if (m == NULL) { 629 ieee80211_free_node(ni); 630 vap->iv_stats.is_tx_nobuf++; 631 return ENOMEM; 632 } 633 *frm++ = IEEE80211_ACTION_CAT_MESH; 634 *frm++ = IEEE80211_ACTION_MESH_HWMP; 635 switch (*ie) { 636 case IEEE80211_ELEMID_MESHPREQ: 637 frm = hwmp_add_meshpreq(frm, 638 (struct ieee80211_meshpreq_ie *)ie); 639 break; 640 case IEEE80211_ELEMID_MESHPREP: 641 frm = hwmp_add_meshprep(frm, 642 (struct ieee80211_meshprep_ie *)ie); 643 break; 644 case IEEE80211_ELEMID_MESHPERR: 645 frm = hwmp_add_meshperr(frm, 646 (struct ieee80211_meshperr_ie *)ie); 647 break; 648 case IEEE80211_ELEMID_MESHRANN: 649 frm = hwmp_add_meshrann(frm, 650 (struct ieee80211_meshrann_ie *)ie); 651 break; 652 } 653 654 m->m_pkthdr.len = m->m_len = frm - mtod(m, uint8_t *); 655 M_PREPEND(m, sizeof(struct ieee80211_frame), M_DONTWAIT); 656 if (m == NULL) { 657 ieee80211_free_node(ni); 658 vap->iv_stats.is_tx_nobuf++; 659 return ENOMEM; 660 } 661 ieee80211_send_setup(ni, m, 662 IEEE80211_FC0_TYPE_MGT | IEEE80211_FC0_SUBTYPE_ACTION, 663 IEEE80211_NONQOS_TID, sa, da, sa); 664 665 m->m_flags |= M_ENCAP; /* mark encapsulated */ 666 IEEE80211_NODE_STAT(ni, tx_mgmt); 667 668 memset(¶ms, 0, sizeof(params)); 669 params.ibp_pri = WME_AC_VO; 670 params.ibp_rate0 = ni->ni_txparms->mgmtrate; 671 if (IEEE80211_IS_MULTICAST(da)) 672 params.ibp_try0 = 1; 673 else 674 params.ibp_try0 = ni->ni_txparms->maxretry; 675 params.ibp_power = ni->ni_txpower; 676 return ic->ic_raw_xmit(ni, m, ¶ms); 677} 678 679#define ADDSHORT(frm, v) do { \ 680 frm[0] = (v) & 0xff; \ 681 frm[1] = (v) >> 8; \ 682 frm += 2; \ 683} while (0) 684#define ADDWORD(frm, v) do { \ 685 LE_WRITE_4(frm, v); \ 686 frm += 4; \ 687} while (0) 688/* 689 * Add a Mesh Path Request IE to a frame. 690 */ 691#define PREQ_TFLAGS(n) preq->preq_targets[n].target_flags 692#define PREQ_TADDR(n) preq->preq_targets[n].target_addr 693#define PREQ_TSEQ(n) preq->preq_targets[n].target_seq 694static uint8_t * 695hwmp_add_meshpreq(uint8_t *frm, const struct ieee80211_meshpreq_ie *preq) 696{ 697 int i; 698 699 *frm++ = IEEE80211_ELEMID_MESHPREQ; 700 *frm++ = preq->preq_len; /* len already calculated */ 701 *frm++ = preq->preq_flags; 702 *frm++ = preq->preq_hopcount; 703 *frm++ = preq->preq_ttl; 704 ADDWORD(frm, preq->preq_id); 705 IEEE80211_ADDR_COPY(frm, preq->preq_origaddr); frm += 6; 706 ADDWORD(frm, preq->preq_origseq); 707 if (preq->preq_flags & IEEE80211_MESHPREQ_FLAGS_AE) { 708 IEEE80211_ADDR_COPY(frm, preq->preq_orig_ext_addr); 709 frm += 6; 710 } 711 ADDWORD(frm, preq->preq_lifetime); 712 ADDWORD(frm, preq->preq_metric); 713 *frm++ = preq->preq_tcount; 714 for (i = 0; i < preq->preq_tcount; i++) { 715 *frm++ = PREQ_TFLAGS(i); 716 IEEE80211_ADDR_COPY(frm, PREQ_TADDR(i)); 717 frm += 6; 718 ADDWORD(frm, PREQ_TSEQ(i)); 719 } 720 return frm; 721} 722#undef PREQ_TFLAGS 723#undef PREQ_TADDR 724#undef PREQ_TSEQ 725 726/* 727 * Add a Mesh Path Reply IE to a frame. 728 */ 729static uint8_t * 730hwmp_add_meshprep(uint8_t *frm, const struct ieee80211_meshprep_ie *prep) 731{ 732 *frm++ = IEEE80211_ELEMID_MESHPREP; 733 *frm++ = prep->prep_len; /* len already calculated */ 734 *frm++ = prep->prep_flags; 735 *frm++ = prep->prep_hopcount; 736 *frm++ = prep->prep_ttl; 737 IEEE80211_ADDR_COPY(frm, prep->prep_targetaddr); frm += 6; 738 ADDWORD(frm, prep->prep_targetseq); 739 if (prep->prep_flags & IEEE80211_MESHPREP_FLAGS_AE) { 740 IEEE80211_ADDR_COPY(frm, prep->prep_target_ext_addr); 741 frm += 6; 742 } 743 ADDWORD(frm, prep->prep_lifetime); 744 ADDWORD(frm, prep->prep_metric); 745 IEEE80211_ADDR_COPY(frm, prep->prep_origaddr); frm += 6; 746 ADDWORD(frm, prep->prep_origseq); 747 return frm; 748} 749 750/* 751 * Add a Mesh Path Error IE to a frame. 752 */ 753#define PERR_DFLAGS(n) perr->perr_dests[n].dest_flags 754#define PERR_DADDR(n) perr->perr_dests[n].dest_addr 755#define PERR_DSEQ(n) perr->perr_dests[n].dest_seq 756#define PERR_EXTADDR(n) perr->perr_dests[n].dest_ext_addr 757#define PERR_DRCODE(n) perr->perr_dests[n].dest_rcode 758static uint8_t * 759hwmp_add_meshperr(uint8_t *frm, const struct ieee80211_meshperr_ie *perr) 760{ 761 int i; 762 763 *frm++ = IEEE80211_ELEMID_MESHPERR; 764 *frm++ = perr->perr_len; /* len already calculated */ 765 *frm++ = perr->perr_ttl; 766 *frm++ = perr->perr_ndests; 767 for (i = 0; i < perr->perr_ndests; i++) { 768 *frm++ = PERR_DFLAGS(i); 769 IEEE80211_ADDR_COPY(frm, PERR_DADDR(i)); 770 frm += 6; 771 ADDWORD(frm, PERR_DSEQ(i)); 772 if (PERR_DFLAGS(i) & IEEE80211_MESHPERR_FLAGS_AE) { 773 IEEE80211_ADDR_COPY(frm, PERR_EXTADDR(i)); 774 frm += 6; 775 } 776 ADDSHORT(frm, PERR_DRCODE(i)); 777 } 778 return frm; 779} 780#undef PERR_DFLAGS 781#undef PERR_DADDR 782#undef PERR_DSEQ 783#undef PERR_EXTADDR 784#undef PERR_DRCODE 785 786/* 787 * Add a Root Annoucement IE to a frame. 788 */ 789static uint8_t * 790hwmp_add_meshrann(uint8_t *frm, const struct ieee80211_meshrann_ie *rann) 791{ 792 *frm++ = IEEE80211_ELEMID_MESHRANN; 793 *frm++ = rann->rann_len; 794 *frm++ = rann->rann_flags; 795 *frm++ = rann->rann_hopcount; 796 *frm++ = rann->rann_ttl; 797 IEEE80211_ADDR_COPY(frm, rann->rann_addr); frm += 6; 798 ADDWORD(frm, rann->rann_seq); 799 ADDWORD(frm, rann->rann_interval); 800 ADDWORD(frm, rann->rann_metric); 801 return frm; 802} 803 804static void 805hwmp_rootmode_setup(struct ieee80211vap *vap) 806{ 807 struct ieee80211_hwmp_state *hs = vap->iv_hwmp; 808 809 switch (hs->hs_rootmode) { 810 case IEEE80211_HWMP_ROOTMODE_DISABLED: 811 callout_drain(&hs->hs_roottimer); 812 break; 813 case IEEE80211_HWMP_ROOTMODE_NORMAL: 814 case IEEE80211_HWMP_ROOTMODE_PROACTIVE: 815 callout_reset(&hs->hs_roottimer, ieee80211_hwmp_rootint, 816 hwmp_rootmode_cb, vap); 817 break; 818 case IEEE80211_HWMP_ROOTMODE_RANN: 819 callout_reset(&hs->hs_roottimer, ieee80211_hwmp_rannint, 820 hwmp_rootmode_rann_cb, vap); 821 break; 822 } 823} 824 825/* 826 * Send a broadcast Path Request to find all nodes on the mesh. We are 827 * called when the vap is configured as a HWMP root node. 828 */ 829#define PREQ_TFLAGS(n) preq.preq_targets[n].target_flags 830#define PREQ_TADDR(n) preq.preq_targets[n].target_addr 831#define PREQ_TSEQ(n) preq.preq_targets[n].target_seq 832static void 833hwmp_rootmode_cb(void *arg) 834{ 835 struct ieee80211vap *vap = (struct ieee80211vap *)arg; 836 struct ieee80211_hwmp_state *hs = vap->iv_hwmp; 837 struct ieee80211_mesh_state *ms = vap->iv_mesh; 838 struct ieee80211_meshpreq_ie preq; 839 840 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, vap->iv_bss, 841 "%s", "send broadcast PREQ"); 842 843 preq.preq_flags = IEEE80211_MESHPREQ_FLAGS_AM; 844 if (ms->ms_flags & IEEE80211_MESHFLAGS_GATE) 845 preq.preq_flags |= IEEE80211_MESHPREQ_FLAGS_GATE; 846 if (hs->hs_rootmode == IEEE80211_HWMP_ROOTMODE_PROACTIVE) 847 preq.preq_flags |= IEEE80211_MESHPREQ_FLAGS_PP; 848 preq.preq_hopcount = 0; 849 preq.preq_ttl = ms->ms_ttl; 850 preq.preq_id = ++hs->hs_preqid; 851 IEEE80211_ADDR_COPY(preq.preq_origaddr, vap->iv_myaddr); 852 preq.preq_origseq = ++hs->hs_seq; 853 preq.preq_lifetime = ticks_to_msecs(ieee80211_hwmp_roottimeout); 854 preq.preq_metric = IEEE80211_MESHLMETRIC_INITIALVAL; 855 preq.preq_tcount = 1; 856 IEEE80211_ADDR_COPY(PREQ_TADDR(0), broadcastaddr); 857 PREQ_TFLAGS(0) = IEEE80211_MESHPREQ_TFLAGS_TO | 858 IEEE80211_MESHPREQ_TFLAGS_USN; 859 PREQ_TSEQ(0) = 0; 860 vap->iv_stats.is_hwmp_rootreqs++; 861 hwmp_send_preq(vap->iv_bss, vap->iv_myaddr, broadcastaddr, &preq, 862 NULL, NULL); /* NB: we enforce rate check ourself */ 863 hwmp_rootmode_setup(vap); 864} 865#undef PREQ_TFLAGS 866#undef PREQ_TADDR 867#undef PREQ_TSEQ 868 869/* 870 * Send a Root Annoucement (RANN) to find all the nodes on the mesh. We are 871 * called when the vap is configured as a HWMP RANN root node. 872 */ 873static void 874hwmp_rootmode_rann_cb(void *arg) 875{ 876 struct ieee80211vap *vap = (struct ieee80211vap *)arg; 877 struct ieee80211_hwmp_state *hs = vap->iv_hwmp; 878 struct ieee80211_mesh_state *ms = vap->iv_mesh; 879 struct ieee80211_meshrann_ie rann; 880 881 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, vap->iv_bss, 882 "%s", "send broadcast RANN"); 883 884 rann.rann_flags = 0; 885 if (ms->ms_flags & IEEE80211_MESHFLAGS_GATE) 886 rann.rann_flags |= IEEE80211_MESHFLAGS_GATE; 887 rann.rann_hopcount = 0; 888 rann.rann_ttl = ms->ms_ttl; 889 IEEE80211_ADDR_COPY(rann.rann_addr, vap->iv_myaddr); 890 rann.rann_seq = ++hs->hs_seq; 891 rann.rann_interval = ieee80211_hwmp_rannint; 892 rann.rann_metric = IEEE80211_MESHLMETRIC_INITIALVAL; 893 894 vap->iv_stats.is_hwmp_rootrann++; 895 hwmp_send_rann(vap->iv_bss, vap->iv_myaddr, broadcastaddr, &rann); 896 hwmp_rootmode_setup(vap); 897} 898 899#define PREQ_TFLAGS(n) preq->preq_targets[n].target_flags 900#define PREQ_TADDR(n) preq->preq_targets[n].target_addr 901#define PREQ_TSEQ(n) preq->preq_targets[n].target_seq 902static void 903hwmp_recv_preq(struct ieee80211vap *vap, struct ieee80211_node *ni, 904 const struct ieee80211_frame *wh, const struct ieee80211_meshpreq_ie *preq) 905{ 906 struct ieee80211_mesh_state *ms = vap->iv_mesh; 907 struct ieee80211_mesh_route *rt = NULL; /* pro-active code */ 908 struct ieee80211_mesh_route *rtorig = NULL; 909 struct ieee80211_mesh_route *rtorig_ext = NULL; 910 struct ieee80211_mesh_route *rttarg = NULL; 911 struct ieee80211_hwmp_route *hrorig = NULL; 912 struct ieee80211_hwmp_route *hrtarg = NULL; 913 struct ieee80211_hwmp_state *hs = vap->iv_hwmp; 914 struct ieee80211_meshprep_ie prep; 915 ieee80211_hwmp_seq preqid; /* last seen preqid for orig */ 916 917 if (ni == vap->iv_bss || 918 ni->ni_mlstate != IEEE80211_NODE_MESH_ESTABLISHED) 919 return; 920 /* 921 * Ignore PREQs from us. Could happen because someone forward it 922 * back to us. 923 */ 924 if (IEEE80211_ADDR_EQ(vap->iv_myaddr, preq->preq_origaddr)) 925 return; 926 927 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 928 "received PREQ, orig %6D, targ(0) %6D", preq->preq_origaddr, ":", 929 PREQ_TADDR(0), ":"); 930 931 /* 932 * Acceptance criteria: (if the PREQ is not for us or not broadcast, 933 * or an external mac address not proxied by us), 934 * AND forwarding is disabled, discard this PREQ. 935 */ 936 rttarg = ieee80211_mesh_rt_find(vap, PREQ_TADDR(0)); 937 if (!(ms->ms_flags & IEEE80211_MESHFLAGS_FWD) && 938 (!IEEE80211_ADDR_EQ(vap->iv_myaddr, PREQ_TADDR(0)) || 939 !IEEE80211_IS_MULTICAST(PREQ_TADDR(0)) || 940 (rttarg != NULL && 941 rttarg->rt_flags & IEEE80211_MESHRT_FLAGS_PROXY && 942 IEEE80211_ADDR_EQ(vap->iv_myaddr, rttarg->rt_mesh_gate)))) { 943 IEEE80211_DISCARD_MAC(vap, IEEE80211_MSG_HWMP, 944 preq->preq_origaddr, NULL, "%s", "not accepting PREQ"); 945 return; 946 } 947 /* 948 * Acceptance criteria: if unicast addressed 949 * AND no valid forwarding for Target of PREQ, discard this PREQ. 950 */ 951 if(rttarg != NULL) 952 hrtarg = IEEE80211_MESH_ROUTE_PRIV(rttarg, 953 struct ieee80211_hwmp_route); 954 /* Address mode: ucast */ 955 if((preq->preq_flags & IEEE80211_MESHPREQ_FLAGS_AM) == 0 && 956 rttarg == NULL && 957 !IEEE80211_ADDR_EQ(vap->iv_myaddr, PREQ_TADDR(0))) { 958 IEEE80211_DISCARD_MAC(vap, IEEE80211_MSG_HWMP, 959 preq->preq_origaddr, NULL, 960 "unicast addressed PREQ of unknown target %6D", 961 PREQ_TADDR(0), ":"); 962 return; 963 } 964 965 /* PREQ ACCEPTED */ 966 967 rtorig = ieee80211_mesh_rt_find(vap, preq->preq_origaddr); 968 if (rtorig == NULL) { 969 rtorig = ieee80211_mesh_rt_add(vap, preq->preq_origaddr); 970 if (rtorig == NULL) { 971 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 972 "unable to add orig path to %6D", 973 preq->preq_origaddr, ":"); 974 vap->iv_stats.is_mesh_rtaddfailed++; 975 return; 976 } 977 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 978 "adding originator %6D", preq->preq_origaddr, ":"); 979 } 980 hrorig = IEEE80211_MESH_ROUTE_PRIV(rtorig, struct ieee80211_hwmp_route); 981 982 /* record last seen preqid */ 983 preqid = hrorig->hr_preqid; 984 hrorig->hr_preqid = HWMP_SEQ_MAX(hrorig->hr_preqid, preq->preq_id); 985 986 /* Data creation and update of forwarding information 987 * according to Table 11C-8 for originator mesh STA. 988 */ 989 if (HWMP_SEQ_GT(preq->preq_origseq, hrorig->hr_seq) || 990 (HWMP_SEQ_EQ(preq->preq_origseq, hrorig->hr_seq) && 991 preq->preq_metric < rtorig->rt_metric)) { 992 hrorig->hr_seq = preq->preq_origseq; 993 IEEE80211_ADDR_COPY(rtorig->rt_nexthop, wh->i_addr2); 994 rtorig->rt_metric = preq->preq_metric + 995 ms->ms_pmetric->mpm_metric(ni); 996 rtorig->rt_nhops = preq->preq_hopcount + 1; 997 ieee80211_mesh_rt_update(rtorig, preq->preq_lifetime); 998 /* path to orig is valid now */ 999 rtorig->rt_flags |= IEEE80211_MESHRT_FLAGS_VALID; 1000 }else if ((hrtarg != NULL && 1001 HWMP_SEQ_EQ(hrtarg->hr_seq, PREQ_TSEQ(0)) && 1002 ((rtorig->rt_flags & IEEE80211_MESHRT_FLAGS_VALID) == 0)) || 1003 preqid >= preq->preq_id) { 1004 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 1005 "discard PREQ from %6D, old seqno %u <= %u," 1006 " or old preqid %u < %u", 1007 preq->preq_origaddr, ":", 1008 preq->preq_origseq, hrorig->hr_seq, 1009 preq->preq_id, preqid); 1010 return; 1011 } 1012 1013 /* 1014 * Forwarding information for transmitter mesh STA 1015 * [OPTIONAL: if metric improved] 1016 */ 1017 1018 /* 1019 * Check if the PREQ is addressed to us. 1020 * or a Proxy currently supplied by us. 1021 */ 1022 if (IEEE80211_ADDR_EQ(vap->iv_myaddr, PREQ_TADDR(0)) || 1023 (rttarg != NULL && 1024 rttarg->rt_flags & IEEE80211_MESHRT_FLAGS_PROXY && 1025 rttarg->rt_flags & IEEE80211_MESHRT_FLAGS_VALID)) { 1026 /* 1027 * When we are the target we shall update our own HWMP seq 1028 * number with max of (current and preq->seq) + 1 1029 */ 1030 hs->hs_seq = HWMP_SEQ_MAX(hs->hs_seq, PREQ_TSEQ(0)) + 1; 1031 1032 prep.prep_flags = 0; 1033 if (rttarg != NULL && /* if NULL it means we are the target */ 1034 rttarg->rt_flags & IEEE80211_MESHRT_FLAGS_PROXY) { 1035 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 1036 "reply for proxy %6D", rttarg->rt_dest, ":"); 1037 prep.prep_flags |= IEEE80211_MESHPREP_FLAGS_AE; 1038 IEEE80211_ADDR_COPY(prep.prep_target_ext_addr, 1039 rttarg->rt_dest); 1040 /* update proxy seqno to HWMP seqno */ 1041 rttarg->rt_ext_seq = hs->hs_seq; 1042 } 1043 /* 1044 * Build and send a PREP frame. 1045 */ 1046 prep.prep_hopcount = 0; 1047 prep.prep_ttl = ms->ms_ttl; 1048 IEEE80211_ADDR_COPY(prep.prep_targetaddr, vap->iv_myaddr); 1049 prep.prep_targetseq = hs->hs_seq; 1050 prep.prep_lifetime = preq->preq_lifetime; 1051 prep.prep_metric = IEEE80211_MESHLMETRIC_INITIALVAL; 1052 IEEE80211_ADDR_COPY(prep.prep_origaddr, preq->preq_origaddr); 1053 prep.prep_origseq = preq->preq_origseq; 1054 1055 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 1056 "reply to %6D", preq->preq_origaddr, ":"); 1057 hwmp_send_prep(ni, vap->iv_myaddr, wh->i_addr2, &prep); 1058 return; 1059 } 1060 /* we may update our proxy information for the orig external */ 1061 else if (preq->preq_flags & IEEE80211_MESHPREQ_FLAGS_AE) { 1062 rtorig_ext = 1063 ieee80211_mesh_rt_find(vap, preq->preq_orig_ext_addr); 1064 if (rtorig_ext == NULL) { 1065 rtorig_ext = ieee80211_mesh_rt_add(vap, 1066 preq->preq_orig_ext_addr); 1067 if (rtorig_ext == NULL) { 1068 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 1069 "unable to add orig ext proxy to %6D", 1070 preq->preq_orig_ext_addr, ":"); 1071 vap->iv_stats.is_mesh_rtaddfailed++; 1072 return; 1073 } 1074 IEEE80211_ADDR_COPY(rtorig_ext->rt_mesh_gate, 1075 preq->preq_origaddr); 1076 } 1077 rtorig_ext->rt_ext_seq = preq->preq_origseq; 1078 ieee80211_mesh_rt_update(rtorig_ext, preq->preq_lifetime); 1079 } 1080 /* 1081 * Proactive PREQ: reply with a proactive PREP to the 1082 * root STA if requested. 1083 */ 1084 if (IEEE80211_ADDR_EQ(PREQ_TADDR(0), broadcastaddr) && 1085 (PREQ_TFLAGS(0) & IEEE80211_MESHPREQ_TFLAGS_TO)) { 1086 uint8_t rootmac[IEEE80211_ADDR_LEN]; 1087 1088 IEEE80211_ADDR_COPY(rootmac, preq->preq_origaddr); 1089 rt = ieee80211_mesh_rt_find(vap, rootmac); 1090 if (rt == NULL) { 1091 rt = ieee80211_mesh_rt_add(vap, rootmac); 1092 if (rt == NULL) { 1093 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 1094 "unable to add root mesh path to %6D", 1095 rootmac, ":"); 1096 vap->iv_stats.is_mesh_rtaddfailed++; 1097 return; 1098 } 1099 } 1100 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 1101 "root mesh station @ %6D", rootmac, ":"); 1102 1103 /* 1104 * Reply with a PREP if we don't have a path to the root 1105 * or if the root sent us a proactive PREQ. 1106 */ 1107 if ((rt->rt_flags & IEEE80211_MESHRT_FLAGS_VALID) == 0 || 1108 (preq->preq_flags & IEEE80211_MESHPREQ_FLAGS_PP)) { 1109 prep.prep_flags = 0; 1110 prep.prep_hopcount = 0; 1111 prep.prep_ttl = ms->ms_ttl; 1112 IEEE80211_ADDR_COPY(prep.prep_origaddr, rootmac); 1113 prep.prep_origseq = preq->preq_origseq; 1114 prep.prep_lifetime = preq->preq_lifetime; 1115 prep.prep_metric = IEEE80211_MESHLMETRIC_INITIALVAL; 1116 IEEE80211_ADDR_COPY(prep.prep_targetaddr, 1117 vap->iv_myaddr); 1118 prep.prep_targetseq = ++hs->hs_seq; 1119 hwmp_send_prep(vap->iv_bss, vap->iv_myaddr, 1120 broadcastaddr, &prep); 1121 } 1122 } 1123 1124 /* 1125 * Forwarding and Intermediate reply for PREQs with 1 target. 1126 */ 1127 if ((preq->preq_tcount == 1) && (preq->preq_ttl > 1) && 1128 (ms->ms_flags & IEEE80211_MESHFLAGS_FWD)) { 1129 struct ieee80211_meshpreq_ie ppreq; /* propagated PREQ */ 1130 1131 memcpy(&ppreq, preq, sizeof(ppreq)); 1132 1133 /* 1134 * We have a valid route to this node. 1135 */ 1136 if (rttarg != NULL && 1137 (rttarg->rt_flags & IEEE80211_MESHRT_FLAGS_VALID)) { 1138 /* 1139 * Check if we can send an intermediate Path Reply, 1140 * i.e., Target Only bit is not set and target is not 1141 * the MAC broadcast address. 1142 */ 1143 if (!(PREQ_TFLAGS(0) & IEEE80211_MESHPREQ_TFLAGS_TO) && 1144 !IEEE80211_ADDR_EQ(PREQ_TADDR(0), broadcastaddr)) { 1145 struct ieee80211_meshprep_ie prep; 1146 1147 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 1148 "intermediate reply for PREQ from %6D", 1149 preq->preq_origaddr, ":"); 1150 prep.prep_flags = 0; 1151 prep.prep_hopcount = rttarg->rt_nhops; 1152 prep.prep_ttl = ms->ms_ttl; 1153 IEEE80211_ADDR_COPY(&prep.prep_targetaddr, 1154 PREQ_TADDR(0)); 1155 prep.prep_targetseq = hrtarg->hr_seq; 1156 prep.prep_lifetime = preq->preq_lifetime; 1157 prep.prep_metric =rttarg->rt_metric; 1158 IEEE80211_ADDR_COPY(&prep.prep_origaddr, 1159 preq->preq_origaddr); 1160 prep.prep_origseq = hrorig->hr_seq; 1161 hwmp_send_prep(ni, vap->iv_myaddr, 1162 rtorig->rt_nexthop, &prep); 1163 1164 /* 1165 * Set TO and unset RF bits because we have 1166 * sent a PREP. 1167 */ 1168 ppreq.preq_targets[0].target_flags |= 1169 IEEE80211_MESHPREQ_TFLAGS_TO; 1170 } 1171 } 1172 1173 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 1174 "forward PREQ from %6D", 1175 preq->preq_origaddr, ":"); 1176 ppreq.preq_hopcount += 1; 1177 ppreq.preq_ttl -= 1; 1178 ppreq.preq_metric += ms->ms_pmetric->mpm_metric(ni); 1179 1180 /* don't do PREQ ratecheck when we propagate */ 1181 hwmp_send_preq(ni, vap->iv_myaddr, broadcastaddr, 1182 &ppreq, NULL, NULL); 1183 } 1184} 1185#undef PREQ_TFLAGS 1186#undef PREQ_TADDR 1187#undef PREQ_TSEQ 1188 1189static int 1190hwmp_send_preq(struct ieee80211_node *ni, 1191 const uint8_t sa[IEEE80211_ADDR_LEN], 1192 const uint8_t da[IEEE80211_ADDR_LEN], 1193 struct ieee80211_meshpreq_ie *preq, 1194 struct timeval *last, struct timeval *minint) 1195{ 1196 1197 /* 1198 * Enforce PREQ interval. 1199 * NB: Proactive ROOT PREQs rate is handled by cb task. 1200 */ 1201 if (last != NULL && minint != NULL) { 1202 if (ratecheck(last, minint) == 0) 1203 return EALREADY; /* XXX: we should postpone */ 1204 getmicrouptime(last); 1205 } 1206 1207 /* 1208 * mesh preq action frame format 1209 * [6] da 1210 * [6] sa 1211 * [6] addr3 = sa 1212 * [1] action 1213 * [1] category 1214 * [tlv] mesh path request 1215 */ 1216 preq->preq_ie = IEEE80211_ELEMID_MESHPREQ; 1217 preq->preq_len = (preq->preq_flags & IEEE80211_MESHPREQ_FLAGS_AE ? 1218 IEEE80211_MESHPREQ_BASE_SZ_AE : IEEE80211_MESHPREQ_BASE_SZ) + 1219 preq->preq_tcount * IEEE80211_MESHPREQ_TRGT_SZ; 1220 return hwmp_send_action(ni, sa, da, (uint8_t *)preq, preq->preq_len+2); 1221} 1222 1223static void 1224hwmp_recv_prep(struct ieee80211vap *vap, struct ieee80211_node *ni, 1225 const struct ieee80211_frame *wh, const struct ieee80211_meshprep_ie *prep) 1226{ 1227#define IS_PROXY(rt) (rt->rt_flags & IEEE80211_MESHRT_FLAGS_PROXY) 1228#define PROXIED_BY_US(rt) \ 1229 (IEEE80211_ADDR_EQ(vap->iv_myaddr, rt->rt_mesh_gate)) 1230 struct ieee80211_mesh_state *ms = vap->iv_mesh; 1231 struct ieee80211_hwmp_state *hs = vap->iv_hwmp; 1232 struct ieee80211_mesh_route *rt = NULL; 1233 struct ieee80211_mesh_route *rtorig = NULL; 1234 struct ieee80211_mesh_route *rtext = NULL; 1235 struct ieee80211_hwmp_route *hr; 1236 struct ieee80211com *ic = vap->iv_ic; 1237 struct ifnet *ifp = vap->iv_ifp; 1238 struct mbuf *m, *next; 1239 uint32_t metric = 0; 1240 const uint8_t *addr; 1241 1242 if (ni == vap->iv_bss || 1243 ni->ni_mlstate != IEEE80211_NODE_MESH_ESTABLISHED) 1244 return; 1245 1246 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 1247 "received PREP, orig %6D, targ %6D", prep->prep_origaddr, ":", 1248 prep->prep_targetaddr, ":"); 1249 1250 /* 1251 * Acceptance criteria: (If the corresponding PREP was not generated 1252 * by us OR not generated by an external mac that is not proxied by us) 1253 * AND forwarding is disabled, discard this PREP. 1254 */ 1255 rtorig = ieee80211_mesh_rt_find(vap, prep->prep_origaddr); 1256 if ((!IEEE80211_ADDR_EQ(vap->iv_myaddr, prep->prep_origaddr) || 1257 (rtorig != NULL && IS_PROXY(rtorig) && !PROXIED_BY_US(rtorig))) && 1258 !(ms->ms_flags & IEEE80211_MESHFLAGS_FWD)){ 1259 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 1260 "discard PREP, orig(%6D) not proxied or generated by us", 1261 prep->prep_origaddr, ":"); 1262 return; 1263 } 1264 1265 /* PREP ACCEPTED */ 1266 1267 /* 1268 * If accepted shall create or update the active forwarding information 1269 * it maintains for the target mesh STA of the PREP (according to the 1270 * rules defined in 13.10.8.4). If the conditions for creating or 1271 * updating the forwarding information have not been met in those 1272 * rules, no further steps are applied to the PREP. 1273 * [OPTIONAL]: update forwarding information to TA if metric improves. 1274 */ 1275 rt = ieee80211_mesh_rt_find(vap, prep->prep_targetaddr); 1276 if (rt == NULL) { 1277 rt = ieee80211_mesh_rt_add(vap, prep->prep_targetaddr); 1278 if (rt == NULL) { 1279 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 1280 "unable to add PREP path to %6D", 1281 prep->prep_targetaddr, ":"); 1282 vap->iv_stats.is_mesh_rtaddfailed++; 1283 return; 1284 } 1285 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 1286 "adding target %6D", prep->prep_targetaddr, ":"); 1287 } 1288 hr = IEEE80211_MESH_ROUTE_PRIV(rt, struct ieee80211_hwmp_route); 1289 /* update path metric */ 1290 metric = prep->prep_metric + ms->ms_pmetric->mpm_metric(ni); 1291 if ((rt->rt_flags & IEEE80211_MESHRT_FLAGS_VALID)) { 1292 if (HWMP_SEQ_LT(prep->prep_targetseq, hr->hr_seq)) { 1293 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 1294 "discard PREP from %6D, old seq no %u < %u", 1295 prep->prep_targetaddr, ":", 1296 prep->prep_targetseq, hr->hr_seq); 1297 return; 1298 } else if (HWMP_SEQ_LEQ(prep->prep_targetseq, hr->hr_seq) && 1299 metric > rt->rt_metric) { 1300 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 1301 "discard PREP from %6D, new metric %u > %u", 1302 prep->prep_targetaddr, ":", 1303 prep->prep_metric, rt->rt_metric); 1304 return; 1305 } 1306 } 1307 1308 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 1309 "%s path to %6D, hopcount %d:%d metric %d:%d", 1310 rt->rt_flags & IEEE80211_MESHRT_FLAGS_VALID ? 1311 "prefer" : "update", 1312 prep->prep_targetaddr, ":", 1313 rt->rt_nhops, prep->prep_hopcount, 1314 rt->rt_metric, metric); 1315 1316 hr->hr_seq = prep->prep_targetseq; 1317 hr->hr_preqretries = 0; 1318 IEEE80211_ADDR_COPY(rt->rt_nexthop, ni->ni_macaddr); 1319 rt->rt_metric = metric; 1320 rt->rt_nhops = prep->prep_hopcount + 1; 1321 ieee80211_mesh_rt_update(rt, prep->prep_lifetime); 1322 rt->rt_flags |= IEEE80211_MESHRT_FLAGS_VALID; /* mark valid */ 1323 1324 /* 1325 * If it's NOT for us, propagate the PREP 1326 */ 1327 if (!IEEE80211_ADDR_EQ(vap->iv_myaddr, prep->prep_origaddr) && 1328 prep->prep_ttl > 1 && 1329 prep->prep_hopcount < hs->hs_maxhops) { 1330 struct ieee80211_meshprep_ie pprep; /* propagated PREP */ 1331 /* 1332 * NB: We should already have setup the path to orig 1333 * mesh STA when we propagated PREQ to target mesh STA, 1334 * no PREP is generated without a corresponding PREQ. 1335 * XXX: for now just ignore. 1336 */ 1337 if (rtorig == NULL) { 1338 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 1339 "received PREP for an unknown orig(%6D)", 1340 prep->prep_origaddr, ":"); 1341 return; 1342 } 1343 1344 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 1345 "propagate PREP from %6D", 1346 prep->prep_targetaddr, ":"); 1347 1348 memcpy(&pprep, prep, sizeof(pprep)); 1349 pprep.prep_hopcount += 1; 1350 pprep.prep_ttl -= 1; 1351 pprep.prep_metric += ms->ms_pmetric->mpm_metric(ni); 1352 hwmp_send_prep(ni, vap->iv_myaddr, rtorig->rt_nexthop, &pprep); 1353 1354 /* precursor list for the Target Mesh STA Address is updated */ 1355 } 1356 1357 /* 1358 * Check if we received a PREP w/ AE and store target external address. 1359 * We may store target external address if recevied PREP w/ AE 1360 * and we are not final destination 1361 */ 1362 if (prep->prep_flags & IEEE80211_MESHPREP_FLAGS_AE) { 1363 rtext = ieee80211_mesh_rt_find(vap, 1364 prep->prep_target_ext_addr); 1365 if (rtext == NULL) { 1366 rtext = ieee80211_mesh_rt_add(vap, 1367 prep->prep_target_ext_addr); 1368 if (rtext == NULL) { 1369 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 1370 "unable to add PREP path to proxy %6D", 1371 prep->prep_targetaddr, ":"); 1372 vap->iv_stats.is_mesh_rtaddfailed++; 1373 return; 1374 } 1375 } 1376 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 1377 "%s path to %6D, hopcount %d:%d metric %d:%d", 1378 rtext->rt_flags & IEEE80211_MESHRT_FLAGS_VALID ? 1379 "prefer" : "update", 1380 prep->prep_target_ext_addr, ":", 1381 rtext->rt_nhops, prep->prep_hopcount, 1382 rtext->rt_metric, metric); 1383 1384 rtext->rt_flags = IEEE80211_MESHRT_FLAGS_PROXY | 1385 IEEE80211_MESHRT_FLAGS_VALID; 1386 IEEE80211_ADDR_COPY(rtext->rt_dest, 1387 prep->prep_target_ext_addr); 1388 IEEE80211_ADDR_COPY(rtext->rt_mesh_gate, 1389 prep->prep_targetaddr); 1390 IEEE80211_ADDR_COPY(rtext->rt_nexthop, wh->i_addr2); 1391 rtext->rt_metric = metric; 1392 rtext->rt_lifetime = prep->prep_lifetime; 1393 rtext->rt_nhops = prep->prep_hopcount + 1; 1394 rtext->rt_ext_seq = prep->prep_origseq; /* new proxy seq */ 1395 /* 1396 * XXX: proxy entries have no HWMP priv data, 1397 * nullify them to be sure? 1398 */ 1399 } 1400 /* 1401 * Check for frames queued awaiting path discovery. 1402 * XXX probably can tell exactly and avoid remove call 1403 * NB: hash may have false matches, if so they will get 1404 * stuck back on the stageq because there won't be 1405 * a path. 1406 */ 1407 addr = prep->prep_flags & IEEE80211_MESHPREP_FLAGS_AE ? 1408 prep->prep_target_ext_addr : prep->prep_targetaddr; 1409 m = ieee80211_ageq_remove(&ic->ic_stageq, 1410 (struct ieee80211_node *)(uintptr_t) 1411 ieee80211_mac_hash(ic, addr)); /* either dest or ext_dest */ 1412 for (; m != NULL; m = next) { 1413 next = m->m_nextpkt; 1414 m->m_nextpkt = NULL; 1415 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 1416 "flush queued frame %p len %d", m, m->m_pkthdr.len); 1417 ifp->if_transmit(ifp, m); 1418 } 1419#undef IS_PROXY 1420#undef PROXIED_BY_US 1421} 1422 1423static int 1424hwmp_send_prep(struct ieee80211_node *ni, 1425 const uint8_t sa[IEEE80211_ADDR_LEN], 1426 const uint8_t da[IEEE80211_ADDR_LEN], 1427 struct ieee80211_meshprep_ie *prep) 1428{ 1429 /* NB: there's no PREP minimum interval. */ 1430 1431 /* 1432 * mesh prep action frame format 1433 * [6] da 1434 * [6] sa 1435 * [6] addr3 = sa 1436 * [1] action 1437 * [1] category 1438 * [tlv] mesh path reply 1439 */ 1440 prep->prep_ie = IEEE80211_ELEMID_MESHPREP; 1441 prep->prep_len = prep->prep_flags & IEEE80211_MESHPREP_FLAGS_AE ? 1442 IEEE80211_MESHPREP_BASE_SZ_AE : IEEE80211_MESHPREP_BASE_SZ; 1443 return hwmp_send_action(ni, sa, da, (uint8_t *)prep, 1444 prep->prep_len + 2); 1445} 1446 1447#define PERR_DFLAGS(n) perr.perr_dests[n].dest_flags 1448#define PERR_DADDR(n) perr.perr_dests[n].dest_addr 1449#define PERR_DSEQ(n) perr.perr_dests[n].dest_seq 1450#define PERR_DRCODE(n) perr.perr_dests[n].dest_rcode 1451static void 1452hwmp_peerdown(struct ieee80211_node *ni) 1453{ 1454 struct ieee80211vap *vap = ni->ni_vap; 1455 struct ieee80211_mesh_state *ms = vap->iv_mesh; 1456 struct ieee80211_meshperr_ie perr; 1457 struct ieee80211_mesh_route *rt; 1458 struct ieee80211_hwmp_route *hr; 1459 1460 rt = ieee80211_mesh_rt_find(vap, ni->ni_macaddr); 1461 if (rt == NULL) 1462 return; 1463 hr = IEEE80211_MESH_ROUTE_PRIV(rt, struct ieee80211_hwmp_route); 1464 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 1465 "%s", "delete route entry"); 1466 perr.perr_ttl = ms->ms_ttl; 1467 perr.perr_ndests = 1; 1468 PERR_DFLAGS(0) = 0; 1469 if (hr->hr_seq == 0) 1470 PERR_DFLAGS(0) |= IEEE80211_MESHPERR_DFLAGS_USN; 1471 PERR_DFLAGS(0) |= IEEE80211_MESHPERR_DFLAGS_RC; 1472 IEEE80211_ADDR_COPY(PERR_DADDR(0), rt->rt_dest); 1473 PERR_DSEQ(0) = ++hr->hr_seq; 1474 PERR_DRCODE(0) = IEEE80211_REASON_MESH_PERR_DEST_UNREACH; 1475 /* NB: flush everything passing through peer */ 1476 ieee80211_mesh_rt_flush_peer(vap, ni->ni_macaddr); 1477 hwmp_send_perr(vap->iv_bss, vap->iv_myaddr, broadcastaddr, &perr); 1478} 1479#undef PERR_DFLAGS 1480#undef PERR_DADDR 1481#undef PERR_DSEQ 1482#undef PERR_DRCODE 1483 1484#define PERR_DFLAGS(n) perr->perr_dests[n].dest_flags 1485#define PERR_DADDR(n) perr->perr_dests[n].dest_addr 1486#define PERR_DSEQ(n) perr->perr_dests[n].dest_seq 1487#define PERR_DEXTADDR(n) perr->perr_dests[n].dest_ext_addr 1488#define PERR_DRCODE(n) perr->perr_dests[n].dest_rcode 1489static void 1490hwmp_recv_perr(struct ieee80211vap *vap, struct ieee80211_node *ni, 1491 const struct ieee80211_frame *wh, const struct ieee80211_meshperr_ie *perr) 1492{ 1493 struct ieee80211_mesh_state *ms = vap->iv_mesh; 1494 struct ieee80211_mesh_route *rt = NULL; 1495 struct ieee80211_mesh_route *rt_ext = NULL; 1496 struct ieee80211_hwmp_route *hr; 1497 struct ieee80211_meshperr_ie *pperr = NULL; 1498 int i, j = 0, forward = 0; 1499 1500 if (ni == vap->iv_bss || 1501 ni->ni_mlstate != IEEE80211_NODE_MESH_ESTABLISHED) 1502 return; 1503 1504 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 1505 "received PERR from %6D", wh->i_addr2, ":"); 1506 1507 /* 1508 * if forwarding is true, prepare pperr 1509 */ 1510 if (ms->ms_flags & IEEE80211_MESHFLAGS_FWD) { 1511 forward = 1; 1512 pperr = malloc(sizeof(*perr) + 31*sizeof(*perr->perr_dests), 1513 M_80211_MESH_PERR, M_NOWAIT); /* XXX: magic number, 32 err dests */ 1514 } 1515 1516 /* 1517 * Acceptance criteria: check if we have forwarding information 1518 * stored about destination, and that nexthop == TA of this PERR. 1519 * NB: we also build a new PERR to propagate in case we should forward. 1520 */ 1521 for (i = 0; i < perr->perr_ndests; i++) { 1522 rt = ieee80211_mesh_rt_find(vap, PERR_DADDR(i)); 1523 if (rt == NULL || rt->rt_flags & IEEE80211_MESHRT_FLAGS_VALID) 1524 continue; 1525 if (!IEEE80211_ADDR_EQ(rt->rt_nexthop, wh->i_addr2)) 1526 continue; 1527 1528 /* found and accepted a PERR ndest element, process it... */ 1529 if (forward) 1530 memcpy(&pperr->perr_dests[j], &perr->perr_dests[i], 1531 sizeof(*perr->perr_dests)); 1532 hr = IEEE80211_MESH_ROUTE_PRIV(rt, struct ieee80211_hwmp_route); 1533 switch(PERR_DFLAGS(i)) { 1534 case (IEEE80211_REASON_MESH_PERR_NO_FI): 1535 if (PERR_DSEQ(i) == 0) { 1536 hr->hr_seq++; 1537 if (forward) { 1538 pperr->perr_dests[j].dest_seq = 1539 hr->hr_seq; 1540 } 1541 } else { 1542 hr->hr_seq = PERR_DSEQ(i); 1543 } 1544 rt->rt_flags &= ~IEEE80211_MESHRT_FLAGS_VALID; 1545 j++; 1546 break; 1547 case (IEEE80211_REASON_MESH_PERR_DEST_UNREACH): 1548 if(HWMP_SEQ_GT(PERR_DSEQ(i), hr->hr_seq)) { 1549 hr->hr_seq = PERR_DSEQ(i); 1550 rt->rt_flags &= ~IEEE80211_MESHRT_FLAGS_VALID; 1551 j++; 1552 } 1553 break; 1554 case (IEEE80211_REASON_MESH_PERR_NO_PROXY): 1555 rt_ext = ieee80211_mesh_rt_find(vap, PERR_DEXTADDR(i)); 1556 if (rt_ext != NULL) { 1557 rt_ext->rt_flags &= 1558 ~IEEE80211_MESHRT_FLAGS_VALID; 1559 j++; 1560 } 1561 break; 1562 default: 1563 IEEE80211_DISCARD(vap, IEEE80211_MSG_HWMP, wh, NULL, 1564 "PERR, unknown reason code %u\n", PERR_DFLAGS(i)); 1565 goto done; /* XXX: stats?? */ 1566 } 1567 ieee80211_mesh_rt_flush_peer(vap, rt->rt_dest); 1568 KASSERT(j < 32, ("PERR, error ndest >= 32 (%u)", j)); 1569 } 1570 if (j == 0) { 1571 IEEE80211_DISCARD(vap, IEEE80211_MSG_HWMP, wh, NULL, "%s", 1572 "PERR not accepted"); 1573 goto done; /* XXX: stats?? */ 1574 } 1575 1576 /* 1577 * Propagate the PERR if we previously found it on our routing table. 1578 */ 1579 if (forward && perr->perr_ttl > 1) { 1580 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, ni, 1581 "propagate PERR from %6D", wh->i_addr2, ":"); 1582 pperr->perr_ndests = j; 1583 pperr->perr_ttl--; 1584 hwmp_send_perr(vap->iv_bss, vap->iv_myaddr, broadcastaddr, 1585 pperr); 1586 } 1587done: 1588 if (pperr != NULL) 1589 free(pperr, M_80211_MESH_PERR); 1590} 1591#undef PERR_DFLAGS 1592#undef PERR_DADDR 1593#undef PERR_DSEQ 1594#undef PERR_DEXTADDR 1595#undef PERR_DRCODE 1596 1597static int 1598hwmp_send_perr(struct ieee80211_node *ni, 1599 const uint8_t sa[IEEE80211_ADDR_LEN], 1600 const uint8_t da[IEEE80211_ADDR_LEN], 1601 struct ieee80211_meshperr_ie *perr) 1602{ 1603 struct ieee80211_hwmp_state *hs = ni->ni_vap->iv_hwmp; 1604 int i; 1605 uint8_t length = 0; 1606 1607 /* 1608 * Enforce PERR interval. 1609 */ 1610 if (ratecheck(&hs->hs_lastperr, &ieee80211_hwmp_perrminint) == 0) 1611 return EALREADY; 1612 getmicrouptime(&hs->hs_lastperr); 1613 1614 /* 1615 * mesh perr action frame format 1616 * [6] da 1617 * [6] sa 1618 * [6] addr3 = sa 1619 * [1] action 1620 * [1] category 1621 * [tlv] mesh path error 1622 */ 1623 perr->perr_ie = IEEE80211_ELEMID_MESHPERR; 1624 length = IEEE80211_MESHPERR_BASE_SZ; 1625 for (i = 0; i<perr->perr_ndests; i++) { 1626 if (perr->perr_dests[i].dest_flags & 1627 IEEE80211_MESHPERR_FLAGS_AE) { 1628 length += IEEE80211_MESHPERR_DEST_SZ_AE; 1629 continue ; 1630 } 1631 length += IEEE80211_MESHPERR_DEST_SZ; 1632 } 1633 perr->perr_len =length; 1634 return hwmp_send_action(ni, sa, da, (uint8_t *)perr, perr->perr_len+2); 1635} 1636 1637/* 1638 * Called from the rest of the net80211 code (mesh code for example). 1639 * NB: IEEE80211_REASON_MESH_PERR_DEST_UNREACH can be trigger by the fact that 1640 * a mesh STA is unable to forward an MSDU/MMPDU to a next-hop mesh STA. 1641 */ 1642#define PERR_DFLAGS(n) perr.perr_dests[n].dest_flags 1643#define PERR_DADDR(n) perr.perr_dests[n].dest_addr 1644#define PERR_DSEQ(n) perr.perr_dests[n].dest_seq 1645#define PERR_DEXTADDR(n) perr.perr_dests[n].dest_ext_addr 1646#define PERR_DRCODE(n) perr.perr_dests[n].dest_rcode 1647static void 1648hwmp_senderror(struct ieee80211vap *vap, 1649 const uint8_t addr[IEEE80211_ADDR_LEN], 1650 struct ieee80211_mesh_route *rt, int rcode) 1651{ 1652 struct ieee80211_mesh_state *ms = vap->iv_mesh; 1653 struct ieee80211_hwmp_route *hr = NULL; 1654 struct ieee80211_meshperr_ie perr; 1655 1656 if (rt != NULL) 1657 hr = IEEE80211_MESH_ROUTE_PRIV(rt, 1658 struct ieee80211_hwmp_route); 1659 1660 perr.perr_ndests = 1; 1661 perr.perr_ttl = ms->ms_ttl; 1662 PERR_DFLAGS(0) = 0; 1663 PERR_DRCODE(0) = rcode; 1664 1665 switch (rcode) { 1666 case IEEE80211_REASON_MESH_PERR_NO_FI: 1667 IEEE80211_ADDR_COPY(PERR_DADDR(0), addr); 1668 PERR_DSEQ(0) = 0; /* reserved */ 1669 break; 1670 case IEEE80211_REASON_MESH_PERR_NO_PROXY: 1671 KASSERT(rt != NULL, ("no proxy info for sending PERR")); 1672 KASSERT(rt->rt_flags & IEEE80211_MESHRT_FLAGS_PROXY, 1673 ("route is not marked proxy")); 1674 PERR_DFLAGS(0) |= IEEE80211_MESHPERR_FLAGS_AE; 1675 IEEE80211_ADDR_COPY(PERR_DADDR(0), vap->iv_myaddr); 1676 PERR_DSEQ(0) = rt->rt_ext_seq; 1677 IEEE80211_ADDR_COPY(PERR_DEXTADDR(0), addr); 1678 break; 1679 case IEEE80211_REASON_MESH_PERR_DEST_UNREACH: 1680 KASSERT(rt != NULL, ("no route info for sending PERR")); 1681 IEEE80211_ADDR_COPY(PERR_DADDR(0), addr); 1682 PERR_DSEQ(0) = hr->hr_seq; 1683 break; 1684 default: 1685 KASSERT(0, ("unknown reason code for HWMP PERR (%u)", rcode)); 1686 } 1687 hwmp_send_perr(vap->iv_bss, vap->iv_myaddr, broadcastaddr, &perr); 1688} 1689#undef PERR_DFLAGS 1690#undef PEER_DADDR 1691#undef PERR_DSEQ 1692#undef PERR_DEXTADDR 1693#undef PERR_DRCODE 1694 1695static void 1696hwmp_recv_rann(struct ieee80211vap *vap, struct ieee80211_node *ni, 1697 const struct ieee80211_frame *wh, const struct ieee80211_meshrann_ie *rann) 1698{ 1699 struct ieee80211_mesh_state *ms = vap->iv_mesh; 1700 struct ieee80211_hwmp_state *hs = vap->iv_hwmp; 1701 struct ieee80211_mesh_route *rt = NULL; 1702 struct ieee80211_hwmp_route *hr; 1703 struct ieee80211_meshpreq_ie preq; 1704 struct ieee80211_meshrann_ie prann; 1705 uint32_t metric = 0; 1706 1707 if (ni == vap->iv_bss || 1708 ni->ni_mlstate != IEEE80211_NODE_MESH_ESTABLISHED || 1709 IEEE80211_ADDR_EQ(rann->rann_addr, vap->iv_myaddr)) 1710 return; 1711 1712 rt = ieee80211_mesh_rt_find(vap, rann->rann_addr); 1713 if (rt != NULL && rt->rt_flags & IEEE80211_MESHRT_FLAGS_VALID) { 1714 hr = IEEE80211_MESH_ROUTE_PRIV(rt, struct ieee80211_hwmp_route); 1715 1716 /* Acceptance criteria: if RANN.seq < stored seq, discard RANN */ 1717 if (HWMP_SEQ_LT(rann->rann_seq, hr->hr_seq)) { 1718 IEEE80211_DISCARD(vap, IEEE80211_MSG_HWMP, wh, NULL, 1719 "RANN seq %u < %u", rann->rann_seq, hr->hr_seq); 1720 return; 1721 } 1722 1723 /* Acceptance criteria: if RANN.seq == stored seq AND 1724 * RANN.metric > stored metric, discard RANN */ 1725 if (HWMP_SEQ_EQ(rann->rann_seq, hr->hr_seq) && 1726 rann->rann_metric > rt->rt_metric) { 1727 IEEE80211_DISCARD(vap, IEEE80211_MSG_HWMP, wh, NULL, 1728 "RANN metric %u > %u", rann->rann_metric, rt->rt_metric); 1729 return; 1730 } 1731 } 1732 1733 /* RANN ACCEPTED */ 1734 1735 ieee80211_hwmp_rannint = rann->rann_interval; /* XXX: mtx lock? */ 1736 metric = rann->rann_metric + ms->ms_pmetric->mpm_metric(ni); 1737 1738 if (rt == NULL) { 1739 rt = ieee80211_mesh_rt_add(vap, rann->rann_addr); 1740 if (rt == NULL) { 1741 IEEE80211_DISCARD(vap, IEEE80211_MSG_HWMP, wh, NULL, 1742 "unable to add mac for RANN root %6D", 1743 rann->rann_addr, ":"); 1744 vap->iv_stats.is_mesh_rtaddfailed++; 1745 return; 1746 } 1747 } 1748 hr = IEEE80211_MESH_ROUTE_PRIV(rt, struct ieee80211_hwmp_route); 1749 /* discovery timeout */ 1750 ieee80211_mesh_rt_update(rt, 1751 ticks_to_msecs(ieee80211_hwmp_roottimeout)); 1752 1753 preq.preq_flags = IEEE80211_MESHPREQ_FLAGS_AM; 1754 preq.preq_hopcount = 0; 1755 preq.preq_ttl = ms->ms_ttl; 1756 preq.preq_id = 0; /* reserved */ 1757 IEEE80211_ADDR_COPY(preq.preq_origaddr, vap->iv_myaddr); 1758 preq.preq_origseq = ++hs->hs_seq; 1759 preq.preq_lifetime = ieee80211_hwmp_roottimeout; 1760 preq.preq_metric = IEEE80211_MESHLMETRIC_INITIALVAL; 1761 preq.preq_tcount = 1; 1762 preq.preq_targets[0].target_flags = IEEE80211_MESHPREQ_TFLAGS_TO; 1763 /* NB: IEEE80211_MESHPREQ_TFLAGS_USN = 0 implicitly implied */ 1764 IEEE80211_ADDR_COPY(preq.preq_targets[0].target_addr, rann->rann_addr); 1765 preq.preq_targets[0].target_seq = rann->rann_seq; 1766 /* XXX: if rootconfint have not passed, we built this preq in vain */ 1767 hwmp_send_preq(vap->iv_bss, vap->iv_myaddr, wh->i_addr2, &preq, 1768 &hr->hr_lastrootconf, &ieee80211_hwmp_rootconfint); 1769 1770 /* propagate a RANN */ 1771 if (rt->rt_flags & IEEE80211_MESHRT_FLAGS_VALID && 1772 rann->rann_ttl > 1 && 1773 ms->ms_flags & IEEE80211_MESHFLAGS_FWD) { 1774 hr->hr_seq = rann->rann_seq; 1775 memcpy(&prann, rann, sizeof(prann)); 1776 prann.rann_hopcount += 1; 1777 prann.rann_ttl -= 1; 1778 prann.rann_metric += ms->ms_pmetric->mpm_metric(ni); 1779 hwmp_send_rann(vap->iv_bss, vap->iv_myaddr, 1780 broadcastaddr, &prann); 1781 } 1782} 1783 1784static int 1785hwmp_send_rann(struct ieee80211_node *ni, 1786 const uint8_t sa[IEEE80211_ADDR_LEN], 1787 const uint8_t da[IEEE80211_ADDR_LEN], 1788 struct ieee80211_meshrann_ie *rann) 1789{ 1790 /* 1791 * mesh rann action frame format 1792 * [6] da 1793 * [6] sa 1794 * [6] addr3 = sa 1795 * [1] action 1796 * [1] category 1797 * [tlv] root annoucement 1798 */ 1799 rann->rann_ie = IEEE80211_ELEMID_MESHRANN; 1800 rann->rann_len = IEEE80211_MESHRANN_BASE_SZ; 1801 return hwmp_send_action(ni, sa, da, (uint8_t *)rann, 1802 rann->rann_len + 2); 1803} 1804 1805#define PREQ_TFLAGS(n) preq.preq_targets[n].target_flags 1806#define PREQ_TADDR(n) preq.preq_targets[n].target_addr 1807#define PREQ_TSEQ(n) preq.preq_targets[n].target_seq 1808static struct ieee80211_node * 1809hwmp_discover(struct ieee80211vap *vap, 1810 const uint8_t dest[IEEE80211_ADDR_LEN], struct mbuf *m) 1811{ 1812 struct ieee80211_hwmp_state *hs = vap->iv_hwmp; 1813 struct ieee80211_mesh_state *ms = vap->iv_mesh; 1814 struct ieee80211_mesh_route *rt = NULL; 1815 struct ieee80211_hwmp_route *hr; 1816 struct ieee80211_meshpreq_ie preq; 1817 struct ieee80211_node *ni; 1818 int sendpreq = 0; 1819 1820 KASSERT(vap->iv_opmode == IEEE80211_M_MBSS, 1821 ("not a mesh vap, opmode %d", vap->iv_opmode)); 1822 1823 KASSERT(!IEEE80211_ADDR_EQ(vap->iv_myaddr, dest), 1824 ("%s: discovering self!", __func__)); 1825 1826 ni = NULL; 1827 if (!IEEE80211_IS_MULTICAST(dest)) { 1828 rt = ieee80211_mesh_rt_find(vap, dest); 1829 if (rt == NULL) { 1830 rt = ieee80211_mesh_rt_add(vap, dest); 1831 if (rt == NULL) { 1832 IEEE80211_NOTE(vap, IEEE80211_MSG_HWMP, 1833 ni, "unable to add discovery path to %6D", 1834 dest, ":"); 1835 vap->iv_stats.is_mesh_rtaddfailed++; 1836 goto done; 1837 } 1838 } 1839 hr = IEEE80211_MESH_ROUTE_PRIV(rt, 1840 struct ieee80211_hwmp_route); 1841 if ((rt->rt_flags & IEEE80211_MESHRT_FLAGS_VALID) == 0) { 1842 if (hr->hr_lastdiscovery != 0 && 1843 (ticks - hr->hr_lastdiscovery < 1844 (ieee80211_hwmp_net_diameter_traversaltime * 2))) { 1845 IEEE80211_DISCARD_MAC(vap, IEEE80211_MSG_ANY, 1846 dest, NULL, "%s", 1847 "too frequent discovery requeust"); 1848 /* XXX: stats? */ 1849 goto done; 1850 } 1851 hr->hr_lastdiscovery = ticks; 1852 if (hr->hr_preqretries >= 1853 ieee80211_hwmp_maxpreq_retries) { 1854 IEEE80211_DISCARD_MAC(vap, IEEE80211_MSG_ANY, 1855 dest, NULL, "%s", 1856 "no valid path , max number of discovery"); 1857 vap->iv_stats.is_mesh_fwd_nopath++; 1858 goto done; 1859 } 1860 hr->hr_preqretries++; 1861 if (hr->hr_origseq == 0) 1862 hr->hr_origseq = ++hs->hs_seq; 1863 rt->rt_metric = IEEE80211_MESHLMETRIC_INITIALVAL; 1864 /* XXX: special discovery timeout, larger lifetime? */ 1865 ieee80211_mesh_rt_update(rt, 1866 ticks_to_msecs(ieee80211_hwmp_pathtimeout)); 1867 sendpreq = 1; 1868 IEEE80211_NOTE_MAC(vap, IEEE80211_MSG_HWMP, dest, 1869 "start path discovery (src %s), target seq %u", 1870 m == NULL ? "<none>" : ether_sprintf( 1871 mtod(m, struct ether_header *)->ether_shost), 1872 hr->hr_seq); 1873 /* 1874 * Try to discover the path for this node. 1875 * Group addressed PREQ Case A 1876 */ 1877 preq.preq_flags = 0; 1878 preq.preq_hopcount = 0; 1879 preq.preq_ttl = ms->ms_ttl; 1880 preq.preq_id = ++hs->hs_preqid; 1881 IEEE80211_ADDR_COPY(preq.preq_origaddr, vap->iv_myaddr); 1882 preq.preq_origseq = hr->hr_origseq; 1883 preq.preq_lifetime = 1884 ticks_to_msecs(ieee80211_hwmp_pathtimeout); 1885 preq.preq_metric = IEEE80211_MESHLMETRIC_INITIALVAL; 1886 preq.preq_tcount = 1; 1887 IEEE80211_ADDR_COPY(PREQ_TADDR(0), dest); 1888 PREQ_TFLAGS(0) = 0; 1889 if (ieee80211_hwmp_targetonly) 1890 PREQ_TFLAGS(0) |= IEEE80211_MESHPREQ_TFLAGS_TO; 1891 PREQ_TFLAGS(0) |= IEEE80211_MESHPREQ_TFLAGS_USN; 1892 PREQ_TSEQ(0) = 0; /* RESERVED when USN flag is set */ 1893 /* XXX check return value */ 1894 hwmp_send_preq(vap->iv_bss, vap->iv_myaddr, 1895 broadcastaddr, &preq, &hr->hr_lastpreq, 1896 &ieee80211_hwmp_preqminint); 1897 } 1898 if (rt->rt_flags & IEEE80211_MESHRT_FLAGS_VALID) 1899 ni = ieee80211_find_txnode(vap, rt->rt_nexthop); 1900 } else { 1901 ni = ieee80211_find_txnode(vap, dest); 1902 /* NB: if null then we leak mbuf */ 1903 KASSERT(ni != NULL, ("leak mcast frame")); 1904 return ni; 1905 } 1906done: 1907 if (ni == NULL && m != NULL) { 1908 if (sendpreq) { 1909 struct ieee80211com *ic = vap->iv_ic; 1910 /* 1911 * Queue packet for transmit when path discovery 1912 * completes. If discovery never completes the 1913 * frame will be flushed by way of the aging timer. 1914 */ 1915 IEEE80211_NOTE_MAC(vap, IEEE80211_MSG_HWMP, dest, 1916 "%s", "queue frame until path found"); 1917 m->m_pkthdr.rcvif = (void *)(uintptr_t) 1918 ieee80211_mac_hash(ic, dest); 1919 /* XXX age chosen randomly */ 1920 ieee80211_ageq_append(&ic->ic_stageq, m, 1921 IEEE80211_INACT_WAIT); 1922 } else { 1923 IEEE80211_DISCARD_MAC(vap, IEEE80211_MSG_HWMP, 1924 dest, NULL, "%s", "no valid path to this node"); 1925 m_freem(m); 1926 } 1927 } 1928 return ni; 1929} 1930#undef PREQ_TFLAGS 1931#undef PREQ_TADDR 1932#undef PREQ_TSEQ 1933 1934static int 1935hwmp_ioctl_get80211(struct ieee80211vap *vap, struct ieee80211req *ireq) 1936{ 1937 struct ieee80211_hwmp_state *hs = vap->iv_hwmp; 1938 int error; 1939 1940 if (vap->iv_opmode != IEEE80211_M_MBSS) 1941 return ENOSYS; 1942 error = 0; 1943 switch (ireq->i_type) { 1944 case IEEE80211_IOC_HWMP_ROOTMODE: 1945 ireq->i_val = hs->hs_rootmode; 1946 break; 1947 case IEEE80211_IOC_HWMP_MAXHOPS: 1948 ireq->i_val = hs->hs_maxhops; 1949 break; 1950 default: 1951 return ENOSYS; 1952 } 1953 return error; 1954} 1955IEEE80211_IOCTL_GET(hwmp, hwmp_ioctl_get80211); 1956 1957static int 1958hwmp_ioctl_set80211(struct ieee80211vap *vap, struct ieee80211req *ireq) 1959{ 1960 struct ieee80211_hwmp_state *hs = vap->iv_hwmp; 1961 int error; 1962 1963 if (vap->iv_opmode != IEEE80211_M_MBSS) 1964 return ENOSYS; 1965 error = 0; 1966 switch (ireq->i_type) { 1967 case IEEE80211_IOC_HWMP_ROOTMODE: 1968 if (ireq->i_val < 0 || ireq->i_val > 3) 1969 return EINVAL; 1970 hs->hs_rootmode = ireq->i_val; 1971 hwmp_rootmode_setup(vap); 1972 break; 1973 case IEEE80211_IOC_HWMP_MAXHOPS: 1974 if (ireq->i_val <= 0 || ireq->i_val > 255) 1975 return EINVAL; 1976 hs->hs_maxhops = ireq->i_val; 1977 break; 1978 default: 1979 return ENOSYS; 1980 } 1981 return error; 1982} 1983IEEE80211_IOCTL_SET(hwmp, hwmp_ioctl_set80211); 1984