ieee80211_ht.c revision 182827
1170530Ssam/*- 2178354Ssam * Copyright (c) 2007-2008 Sam Leffler, Errno Consulting 3170530Ssam * All rights reserved. 4170530Ssam * 5170530Ssam * Redistribution and use in source and binary forms, with or without 6170530Ssam * modification, are permitted provided that the following conditions 7170530Ssam * are met: 8170530Ssam * 1. Redistributions of source code must retain the above copyright 9170530Ssam * notice, this list of conditions and the following disclaimer. 10170530Ssam * 2. Redistributions in binary form must reproduce the above copyright 11170530Ssam * notice, this list of conditions and the following disclaimer in the 12170530Ssam * documentation and/or other materials provided with the distribution. 13170530Ssam * 14170530Ssam * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 15170530Ssam * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 16170530Ssam * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 17170530Ssam * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 18170530Ssam * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 19170530Ssam * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 20170530Ssam * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 21170530Ssam * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 22170530Ssam * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 23170530Ssam * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 24170530Ssam */ 25170530Ssam 26170530Ssam#include <sys/cdefs.h> 27170530Ssam#ifdef __FreeBSD__ 28170530Ssam__FBSDID("$FreeBSD: head/sys/net80211/ieee80211_ht.c 182827 2008-09-06 17:31:55Z sam $"); 29170530Ssam#endif 30170530Ssam 31170530Ssam/* 32170530Ssam * IEEE 802.11n protocol support. 33170530Ssam */ 34170530Ssam 35170530Ssam#include "opt_inet.h" 36178354Ssam#include "opt_wlan.h" 37170530Ssam 38170530Ssam#include <sys/param.h> 39170530Ssam#include <sys/kernel.h> 40170530Ssam#include <sys/systm.h> 41170530Ssam#include <sys/endian.h> 42170530Ssam 43170530Ssam#include <sys/socket.h> 44170530Ssam 45170530Ssam#include <net/if.h> 46170530Ssam#include <net/if_media.h> 47170530Ssam#include <net/ethernet.h> 48170530Ssam 49170530Ssam#include <net80211/ieee80211_var.h> 50178354Ssam#include <net80211/ieee80211_input.h> 51170530Ssam 52170530Ssam/* define here, used throughout file */ 53170530Ssam#define MS(_v, _f) (((_v) & _f) >> _f##_S) 54170530Ssam#define SM(_v, _f) (((_v) << _f##_S) & _f) 55170530Ssam 56178354Ssamconst struct ieee80211_mcs_rates ieee80211_htrates[16] = { 57178354Ssam { 13, 14, 27, 30 }, /* MCS 0 */ 58178354Ssam { 26, 29, 54, 60 }, /* MCS 1 */ 59178354Ssam { 39, 43, 81, 90 }, /* MCS 2 */ 60178354Ssam { 52, 58, 108, 120 }, /* MCS 3 */ 61178354Ssam { 78, 87, 162, 180 }, /* MCS 4 */ 62178354Ssam { 104, 116, 216, 240 }, /* MCS 5 */ 63178354Ssam { 117, 130, 243, 270 }, /* MCS 6 */ 64178354Ssam { 130, 144, 270, 300 }, /* MCS 7 */ 65178354Ssam { 26, 29, 54, 60 }, /* MCS 8 */ 66178354Ssam { 52, 58, 108, 120 }, /* MCS 9 */ 67178354Ssam { 78, 87, 162, 180 }, /* MCS 10 */ 68178354Ssam { 104, 116, 216, 240 }, /* MCS 11 */ 69178354Ssam { 156, 173, 324, 360 }, /* MCS 12 */ 70178354Ssam { 208, 231, 432, 480 }, /* MCS 13 */ 71178354Ssam { 234, 260, 486, 540 }, /* MCS 14 */ 72178354Ssam { 260, 289, 540, 600 } /* MCS 15 */ 73170530Ssam}; 74170530Ssam 75170530Ssamstatic const struct ieee80211_htrateset ieee80211_rateset_11n = 76170530Ssam { 16, { 77170530Ssam 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 78170530Ssam 10, 11, 12, 13, 14, 15 } 79170530Ssam }; 80170530Ssam 81173273Ssam#ifdef IEEE80211_AMPDU_AGE 82173273Ssam/* XXX public for sysctl hookup */ 83173273Ssamint ieee80211_ampdu_age = -1; /* threshold for ampdu reorder q (ms) */ 84173273Ssam#endif 85173273Ssamint ieee80211_recv_bar_ena = 1; 86178354Ssamint ieee80211_addba_timeout = -1; /* timeout waiting for ADDBA response */ 87178354Ssamint ieee80211_addba_backoff = -1; /* backoff after max ADDBA requests */ 88178354Ssamint ieee80211_addba_maxtries = 3; /* max ADDBA requests before backoff */ 89173273Ssam 90178354Ssam/* 91178354Ssam * Setup HT parameters that depends on the clock frequency. 92178354Ssam */ 93178354Ssamstatic void 94178354Ssamieee80211_ht_setup(void) 95178354Ssam{ 96178354Ssam#ifdef IEEE80211_AMPDU_AGE 97178354Ssam ieee80211_ampdu_age = msecs_to_ticks(500); 98178354Ssam#endif 99178354Ssam ieee80211_addba_timeout = msecs_to_ticks(250); 100178354Ssam ieee80211_addba_backoff = msecs_to_ticks(10*1000); 101178354Ssam} 102178354SsamSYSINIT(wlan_ht, SI_SUB_DRIVERS, SI_ORDER_FIRST, ieee80211_ht_setup, NULL); 103170530Ssam 104178354Ssamstatic int ieee80211_ampdu_enable(struct ieee80211_node *ni, 105178354Ssam struct ieee80211_tx_ampdu *tap); 106170530Ssamstatic int ieee80211_addba_request(struct ieee80211_node *ni, 107170530Ssam struct ieee80211_tx_ampdu *tap, 108170530Ssam int dialogtoken, int baparamset, int batimeout); 109170530Ssamstatic int ieee80211_addba_response(struct ieee80211_node *ni, 110170530Ssam struct ieee80211_tx_ampdu *tap, 111170530Ssam int code, int baparamset, int batimeout); 112170530Ssamstatic void ieee80211_addba_stop(struct ieee80211_node *ni, 113170530Ssam struct ieee80211_tx_ampdu *tap); 114170530Ssamstatic void ieee80211_aggr_recv_action(struct ieee80211_node *ni, 115170530Ssam const uint8_t *frm, const uint8_t *efrm); 116170530Ssam 117170530Ssamvoid 118170530Ssamieee80211_ht_attach(struct ieee80211com *ic) 119170530Ssam{ 120170530Ssam /* setup default aggregation policy */ 121170530Ssam ic->ic_recv_action = ieee80211_aggr_recv_action; 122170530Ssam ic->ic_send_action = ieee80211_send_action; 123178354Ssam ic->ic_ampdu_enable = ieee80211_ampdu_enable; 124170530Ssam ic->ic_addba_request = ieee80211_addba_request; 125170530Ssam ic->ic_addba_response = ieee80211_addba_response; 126170530Ssam ic->ic_addba_stop = ieee80211_addba_stop; 127170530Ssam 128173273Ssam ic->ic_htprotmode = IEEE80211_PROT_RTSCTS; 129173273Ssam ic->ic_curhtprotmode = IEEE80211_HTINFO_OPMODE_PURE; 130178354Ssam} 131173273Ssam 132178354Ssamvoid 133178354Ssamieee80211_ht_detach(struct ieee80211com *ic) 134178354Ssam{ 135178354Ssam} 136173273Ssam 137178354Ssamvoid 138178354Ssamieee80211_ht_vattach(struct ieee80211vap *vap) 139178354Ssam{ 140178354Ssam 141178354Ssam /* driver can override defaults */ 142178354Ssam vap->iv_ampdu_rxmax = IEEE80211_HTCAP_MAXRXAMPDU_8K; 143178354Ssam vap->iv_ampdu_density = IEEE80211_HTCAP_MPDUDENSITY_NA; 144178354Ssam vap->iv_ampdu_limit = vap->iv_ampdu_rxmax; 145178354Ssam vap->iv_amsdu_limit = vap->iv_htcaps & IEEE80211_HTCAP_MAXAMSDU; 146178354Ssam /* tx aggregation traffic thresholds */ 147178354Ssam vap->iv_ampdu_mintraffic[WME_AC_BK] = 128; 148178354Ssam vap->iv_ampdu_mintraffic[WME_AC_BE] = 64; 149178354Ssam vap->iv_ampdu_mintraffic[WME_AC_VO] = 32; 150178354Ssam vap->iv_ampdu_mintraffic[WME_AC_VI] = 32; 151178354Ssam 152178354Ssam if (vap->iv_htcaps & IEEE80211_HTC_HT) { 153170530Ssam /* 154173273Ssam * Device is HT capable; enable all HT-related 155173273Ssam * facilities by default. 156170530Ssam * XXX these choices may be too aggressive. 157170530Ssam */ 158178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_HT 159178354Ssam | IEEE80211_FEXT_HTCOMPAT 160178354Ssam ; 161178354Ssam if (vap->iv_htcaps & IEEE80211_HTCAP_SHORTGI20) 162178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_SHORTGI20; 163173273Ssam /* XXX infer from channel list? */ 164178354Ssam if (vap->iv_htcaps & IEEE80211_HTCAP_CHWIDTH40) { 165178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_USEHT40; 166178354Ssam if (vap->iv_htcaps & IEEE80211_HTCAP_SHORTGI40) 167178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_SHORTGI40; 168170530Ssam } 169170530Ssam /* NB: A-MPDU and A-MSDU rx are mandated, these are tx only */ 170178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_AMPDU_RX; 171178354Ssam if (vap->iv_htcaps & IEEE80211_HTC_AMPDU) 172178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_AMPDU_TX; 173178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_AMSDU_RX; 174178354Ssam if (vap->iv_htcaps & IEEE80211_HTC_AMSDU) 175178354Ssam vap->iv_flags_ext |= IEEE80211_FEXT_AMSDU_TX; 176170530Ssam } 177178354Ssam /* NB: disable default legacy WDS, too many issues right now */ 178178354Ssam if (vap->iv_flags_ext & IEEE80211_FEXT_WDSLEGACY) 179178354Ssam vap->iv_flags_ext &= ~IEEE80211_FEXT_HT; 180170530Ssam} 181170530Ssam 182170530Ssamvoid 183178354Ssamieee80211_ht_vdetach(struct ieee80211vap *vap) 184170530Ssam{ 185170530Ssam} 186170530Ssam 187170530Ssamstatic void 188170530Ssamht_announce(struct ieee80211com *ic, int mode, 189170530Ssam const struct ieee80211_htrateset *rs) 190170530Ssam{ 191170530Ssam struct ifnet *ifp = ic->ic_ifp; 192170530Ssam int i, rate, mword; 193170530Ssam 194170530Ssam if_printf(ifp, "%s MCS: ", ieee80211_phymode_name[mode]); 195170530Ssam for (i = 0; i < rs->rs_nrates; i++) { 196172226Ssam mword = ieee80211_rate2media(ic, 197172226Ssam rs->rs_rates[i] | IEEE80211_RATE_MCS, mode); 198170530Ssam if (IFM_SUBTYPE(mword) != IFM_IEEE80211_MCS) 199170530Ssam continue; 200178354Ssam rate = ieee80211_htrates[rs->rs_rates[i]].ht40_rate_400ns; 201170530Ssam printf("%s%d%sMbps", (i != 0 ? " " : ""), 202170530Ssam rate / 2, ((rate & 0x1) != 0 ? ".5" : "")); 203170530Ssam } 204170530Ssam printf("\n"); 205170530Ssam} 206170530Ssam 207170530Ssamvoid 208170530Ssamieee80211_ht_announce(struct ieee80211com *ic) 209170530Ssam{ 210170530Ssam if (isset(ic->ic_modecaps, IEEE80211_MODE_11NA)) 211170530Ssam ht_announce(ic, IEEE80211_MODE_11NA, &ieee80211_rateset_11n); 212170530Ssam if (isset(ic->ic_modecaps, IEEE80211_MODE_11NG)) 213170530Ssam ht_announce(ic, IEEE80211_MODE_11NG, &ieee80211_rateset_11n); 214170530Ssam} 215170530Ssam 216170530Ssamconst struct ieee80211_htrateset * 217170530Ssamieee80211_get_suphtrates(struct ieee80211com *ic, 218170530Ssam const struct ieee80211_channel *c) 219170530Ssam{ 220173273Ssam return &ieee80211_rateset_11n; 221170530Ssam} 222170530Ssam 223170530Ssam/* 224170530Ssam * Receive processing. 225170530Ssam */ 226170530Ssam 227170530Ssam/* 228170530Ssam * Decap the encapsulated A-MSDU frames and dispatch all but 229170530Ssam * the last for delivery. The last frame is returned for 230170530Ssam * delivery via the normal path. 231170530Ssam */ 232170530Ssamstruct mbuf * 233170530Ssamieee80211_decap_amsdu(struct ieee80211_node *ni, struct mbuf *m) 234170530Ssam{ 235178354Ssam struct ieee80211vap *vap = ni->ni_vap; 236173462Ssam int framelen; 237170530Ssam struct mbuf *n; 238170530Ssam 239170530Ssam /* discard 802.3 header inserted by ieee80211_decap */ 240170530Ssam m_adj(m, sizeof(struct ether_header)); 241170530Ssam 242178354Ssam vap->iv_stats.is_amsdu_decap++; 243170530Ssam 244170530Ssam for (;;) { 245170530Ssam /* 246170530Ssam * Decap the first frame, bust it apart from the 247170530Ssam * remainder and deliver. We leave the last frame 248170530Ssam * delivery to the caller (for consistency with other 249170530Ssam * code paths, could also do it here). 250170530Ssam */ 251170530Ssam m = ieee80211_decap1(m, &framelen); 252170530Ssam if (m == NULL) { 253178354Ssam IEEE80211_DISCARD_MAC(vap, IEEE80211_MSG_ANY, 254173462Ssam ni->ni_macaddr, "a-msdu", "%s", "decap failed"); 255178354Ssam vap->iv_stats.is_amsdu_tooshort++; 256170530Ssam return NULL; 257170530Ssam } 258173462Ssam if (m->m_pkthdr.len == framelen) 259170530Ssam break; 260170530Ssam n = m_split(m, framelen, M_NOWAIT); 261170530Ssam if (n == NULL) { 262178354Ssam IEEE80211_DISCARD_MAC(vap, IEEE80211_MSG_ANY, 263170530Ssam ni->ni_macaddr, "a-msdu", 264170530Ssam "%s", "unable to split encapsulated frames"); 265178354Ssam vap->iv_stats.is_amsdu_split++; 266170530Ssam m_freem(m); /* NB: must reclaim */ 267170530Ssam return NULL; 268170530Ssam } 269178354Ssam vap->iv_deliver_data(vap, ni, m); 270170530Ssam 271170530Ssam /* 272170530Ssam * Remove frame contents; each intermediate frame 273170530Ssam * is required to be aligned to a 4-byte boundary. 274170530Ssam */ 275170530Ssam m = n; 276170530Ssam m_adj(m, roundup2(framelen, 4) - framelen); /* padding */ 277170530Ssam } 278170530Ssam return m; /* last delivered by caller */ 279170530Ssam} 280170530Ssam 281170530Ssam/* 282170530Ssam * Purge all frames in the A-MPDU re-order queue. 283170530Ssam */ 284170530Ssamstatic void 285170530Ssamampdu_rx_purge(struct ieee80211_rx_ampdu *rap) 286170530Ssam{ 287170530Ssam struct mbuf *m; 288170530Ssam int i; 289170530Ssam 290170530Ssam for (i = 0; i < rap->rxa_wnd; i++) { 291170530Ssam m = rap->rxa_m[i]; 292170530Ssam if (m != NULL) { 293170530Ssam rap->rxa_m[i] = NULL; 294170530Ssam rap->rxa_qbytes -= m->m_pkthdr.len; 295170530Ssam m_freem(m); 296170530Ssam if (--rap->rxa_qframes == 0) 297170530Ssam break; 298170530Ssam } 299170530Ssam } 300170530Ssam KASSERT(rap->rxa_qbytes == 0 && rap->rxa_qframes == 0, 301170530Ssam ("lost %u data, %u frames on ampdu rx q", 302170530Ssam rap->rxa_qbytes, rap->rxa_qframes)); 303170530Ssam} 304170530Ssam 305170530Ssam/* 306178354Ssam * Start A-MPDU rx/re-order processing for the specified TID. 307178354Ssam */ 308178354Ssamstatic void 309178354Ssamampdu_rx_start(struct ieee80211_rx_ampdu *rap, int bufsiz, int start) 310178354Ssam{ 311178354Ssam if (rap->rxa_flags & IEEE80211_AGGR_RUNNING) { 312178354Ssam /* 313178354Ssam * AMPDU previously setup and not terminated with a DELBA, 314178354Ssam * flush the reorder q's in case anything remains. 315178354Ssam */ 316178354Ssam ampdu_rx_purge(rap); 317178354Ssam } 318178354Ssam memset(rap, 0, sizeof(*rap)); 319178354Ssam rap->rxa_wnd = (bufsiz == 0) ? 320178354Ssam IEEE80211_AGGR_BAWMAX : min(bufsiz, IEEE80211_AGGR_BAWMAX); 321178354Ssam rap->rxa_start = start; 322178354Ssam rap->rxa_flags |= IEEE80211_AGGR_RUNNING | IEEE80211_AGGR_XCHGPEND; 323178354Ssam} 324178354Ssam 325178354Ssam/* 326170530Ssam * Stop A-MPDU rx processing for the specified TID. 327170530Ssam */ 328170530Ssamstatic void 329170530Ssamampdu_rx_stop(struct ieee80211_rx_ampdu *rap) 330170530Ssam{ 331170530Ssam ampdu_rx_purge(rap); 332178354Ssam rap->rxa_flags &= ~(IEEE80211_AGGR_RUNNING | IEEE80211_AGGR_XCHGPEND); 333170530Ssam} 334170530Ssam 335170530Ssam/* 336170530Ssam * Dispatch a frame from the A-MPDU reorder queue. The 337170530Ssam * frame is fed back into ieee80211_input marked with an 338170530Ssam * M_AMPDU flag so it doesn't come back to us (it also 339170530Ssam * permits ieee80211_input to optimize re-processing). 340170530Ssam */ 341170530Ssamstatic __inline void 342170530Ssamampdu_dispatch(struct ieee80211_node *ni, struct mbuf *m) 343170530Ssam{ 344170530Ssam m->m_flags |= M_AMPDU; /* bypass normal processing */ 345170530Ssam /* NB: rssi, noise, and rstamp are ignored w/ M_AMPDU set */ 346178354Ssam (void) ieee80211_input(ni, m, 0, 0, 0); 347170530Ssam} 348170530Ssam 349170530Ssam/* 350170530Ssam * Dispatch as many frames as possible from the re-order queue. 351170530Ssam * Frames will always be "at the front"; we process all frames 352170530Ssam * up to the first empty slot in the window. On completion we 353170530Ssam * cleanup state if there are still pending frames in the current 354170530Ssam * BA window. We assume the frame at slot 0 is already handled 355170530Ssam * by the caller; we always start at slot 1. 356170530Ssam */ 357170530Ssamstatic void 358170530Ssamampdu_rx_dispatch(struct ieee80211_rx_ampdu *rap, struct ieee80211_node *ni) 359170530Ssam{ 360178354Ssam struct ieee80211vap *vap = ni->ni_vap; 361170530Ssam struct mbuf *m; 362170530Ssam int i; 363170530Ssam 364170530Ssam /* flush run of frames */ 365170530Ssam for (i = 1; i < rap->rxa_wnd; i++) { 366170530Ssam m = rap->rxa_m[i]; 367170530Ssam if (m == NULL) 368170530Ssam break; 369170530Ssam rap->rxa_m[i] = NULL; 370170530Ssam rap->rxa_qbytes -= m->m_pkthdr.len; 371170530Ssam rap->rxa_qframes--; 372170530Ssam 373170530Ssam ampdu_dispatch(ni, m); 374170530Ssam } 375170530Ssam /* 376170530Ssam * If frames remain, copy the mbuf pointers down so 377170530Ssam * they correspond to the offsets in the new window. 378170530Ssam */ 379170530Ssam if (rap->rxa_qframes != 0) { 380170530Ssam int n = rap->rxa_qframes, j; 381170530Ssam for (j = i+1; j < rap->rxa_wnd; j++) { 382170530Ssam if (rap->rxa_m[j] != NULL) { 383170530Ssam rap->rxa_m[j-i] = rap->rxa_m[j]; 384170530Ssam rap->rxa_m[j] = NULL; 385170530Ssam if (--n == 0) 386170530Ssam break; 387170530Ssam } 388170530Ssam } 389170530Ssam KASSERT(n == 0, ("lost %d frames", n)); 390178354Ssam vap->iv_stats.is_ampdu_rx_copy += rap->rxa_qframes; 391170530Ssam } 392173273Ssam /* 393173273Ssam * Adjust the start of the BA window to 394173273Ssam * reflect the frames just dispatched. 395173273Ssam */ 396173273Ssam rap->rxa_start = IEEE80211_SEQ_ADD(rap->rxa_start, i); 397178354Ssam vap->iv_stats.is_ampdu_rx_oor += i; 398170530Ssam} 399170530Ssam 400173273Ssam#ifdef IEEE80211_AMPDU_AGE 401170530Ssam/* 402173273Ssam * Dispatch all frames in the A-MPDU re-order queue. 403170530Ssam */ 404170530Ssamstatic void 405173273Ssamampdu_rx_flush(struct ieee80211_node *ni, struct ieee80211_rx_ampdu *rap) 406170530Ssam{ 407178354Ssam struct ieee80211vap *vap = ni->ni_vap; 408170530Ssam struct mbuf *m; 409170530Ssam int i; 410170530Ssam 411173273Ssam for (i = 0; i < rap->rxa_wnd; i++) { 412170530Ssam m = rap->rxa_m[i]; 413170530Ssam if (m == NULL) 414170530Ssam continue; 415170530Ssam rap->rxa_m[i] = NULL; 416170530Ssam rap->rxa_qbytes -= m->m_pkthdr.len; 417173273Ssam rap->rxa_qframes--; 418178354Ssam vap->iv_stats.is_ampdu_rx_oor++; 419173273Ssam 420170530Ssam ampdu_dispatch(ni, m); 421173273Ssam if (rap->rxa_qframes == 0) 422170530Ssam break; 423170530Ssam } 424170530Ssam} 425173273Ssam#endif /* IEEE80211_AMPDU_AGE */ 426170530Ssam 427170530Ssam/* 428173273Ssam * Dispatch all frames in the A-MPDU re-order queue 429173273Ssam * preceding the specified sequence number. This logic 430173273Ssam * handles window moves due to a received MSDU or BAR. 431173273Ssam */ 432173273Ssamstatic void 433173273Ssamampdu_rx_flush_upto(struct ieee80211_node *ni, 434173273Ssam struct ieee80211_rx_ampdu *rap, ieee80211_seq winstart) 435173273Ssam{ 436178354Ssam struct ieee80211vap *vap = ni->ni_vap; 437173273Ssam struct mbuf *m; 438173273Ssam ieee80211_seq seqno; 439173273Ssam int i; 440173273Ssam 441173273Ssam /* 442173273Ssam * Flush any complete MSDU's with a sequence number lower 443173273Ssam * than winstart. Gaps may exist. Note that we may actually 444173273Ssam * dispatch frames past winstart if a run continues; this is 445173273Ssam * an optimization that avoids having to do a separate pass 446173273Ssam * to dispatch frames after moving the BA window start. 447173273Ssam */ 448173273Ssam seqno = rap->rxa_start; 449173273Ssam for (i = 0; i < rap->rxa_wnd; i++) { 450173273Ssam m = rap->rxa_m[i]; 451173273Ssam if (m != NULL) { 452173273Ssam rap->rxa_m[i] = NULL; 453173273Ssam rap->rxa_qbytes -= m->m_pkthdr.len; 454173273Ssam rap->rxa_qframes--; 455178354Ssam vap->iv_stats.is_ampdu_rx_oor++; 456173273Ssam 457173273Ssam ampdu_dispatch(ni, m); 458173273Ssam } else { 459173273Ssam if (!IEEE80211_SEQ_BA_BEFORE(seqno, winstart)) 460173273Ssam break; 461173273Ssam } 462173273Ssam seqno = IEEE80211_SEQ_INC(seqno); 463173273Ssam } 464173273Ssam /* 465173273Ssam * If frames remain, copy the mbuf pointers down so 466173273Ssam * they correspond to the offsets in the new window. 467173273Ssam */ 468173273Ssam if (rap->rxa_qframes != 0) { 469173273Ssam int n = rap->rxa_qframes, j; 470178354Ssam 471178354Ssam /* NB: this loop assumes i > 0 and/or rxa_m[0] is NULL */ 472178354Ssam KASSERT(rap->rxa_m[0] == NULL, 473178354Ssam ("%s: BA window slot 0 occupied", __func__)); 474173273Ssam for (j = i+1; j < rap->rxa_wnd; j++) { 475173273Ssam if (rap->rxa_m[j] != NULL) { 476173273Ssam rap->rxa_m[j-i] = rap->rxa_m[j]; 477173273Ssam rap->rxa_m[j] = NULL; 478173273Ssam if (--n == 0) 479173273Ssam break; 480173273Ssam } 481173273Ssam } 482173273Ssam KASSERT(n == 0, ("%s: lost %d frames, qframes %d off %d " 483173273Ssam "BA win <%d:%d> winstart %d", 484173273Ssam __func__, n, rap->rxa_qframes, i, rap->rxa_start, 485173273Ssam IEEE80211_SEQ_ADD(rap->rxa_start, rap->rxa_wnd-1), 486173273Ssam winstart)); 487178354Ssam vap->iv_stats.is_ampdu_rx_copy += rap->rxa_qframes; 488173273Ssam } 489173273Ssam /* 490173273Ssam * Move the start of the BA window; we use the 491173273Ssam * sequence number of the last MSDU that was 492173273Ssam * passed up the stack+1 or winstart if stopped on 493173273Ssam * a gap in the reorder buffer. 494173273Ssam */ 495173273Ssam rap->rxa_start = seqno; 496173273Ssam} 497173273Ssam 498173273Ssam/* 499170530Ssam * Process a received QoS data frame for an HT station. Handle 500170530Ssam * A-MPDU reordering: if this frame is received out of order 501170530Ssam * and falls within the BA window hold onto it. Otherwise if 502173273Ssam * this frame completes a run, flush any pending frames. We 503170530Ssam * return 1 if the frame is consumed. A 0 is returned if 504170530Ssam * the frame should be processed normally by the caller. 505170530Ssam */ 506170530Ssamint 507170530Ssamieee80211_ampdu_reorder(struct ieee80211_node *ni, struct mbuf *m) 508170530Ssam{ 509170530Ssam#define IEEE80211_FC0_QOSDATA \ 510170530Ssam (IEEE80211_FC0_TYPE_DATA|IEEE80211_FC0_SUBTYPE_QOS|IEEE80211_FC0_VERSION_0) 511173273Ssam#define PROCESS 0 /* caller should process frame */ 512173273Ssam#define CONSUMED 1 /* frame consumed, caller does nothing */ 513178354Ssam struct ieee80211vap *vap = ni->ni_vap; 514170530Ssam struct ieee80211_qosframe *wh; 515170530Ssam struct ieee80211_rx_ampdu *rap; 516170530Ssam ieee80211_seq rxseq; 517170530Ssam uint8_t tid; 518170530Ssam int off; 519170530Ssam 520170530Ssam KASSERT(ni->ni_flags & IEEE80211_NODE_HT, ("not an HT sta")); 521170530Ssam 522170530Ssam /* NB: m_len known to be sufficient */ 523170530Ssam wh = mtod(m, struct ieee80211_qosframe *); 524170530Ssam KASSERT(wh->i_fc[0] == IEEE80211_FC0_QOSDATA, ("not QoS data")); 525170530Ssam 526173273Ssam if ((wh->i_fc[1] & IEEE80211_FC1_DIR_MASK) == IEEE80211_FC1_DIR_DSTODS) 527173273Ssam tid = ((struct ieee80211_qosframe_addr4 *)wh)->i_qos[0]; 528173273Ssam else 529173273Ssam tid = wh->i_qos[0]; 530173273Ssam tid &= IEEE80211_QOS_TID; 531170530Ssam rap = &ni->ni_rx_ampdu[tid]; 532170530Ssam if ((rap->rxa_flags & IEEE80211_AGGR_XCHGPEND) == 0) { 533170530Ssam /* 534170530Ssam * No ADDBA request yet, don't touch. 535170530Ssam */ 536173273Ssam return PROCESS; 537170530Ssam } 538182827Ssam rxseq = le16toh(*(uint16_t *)wh->i_seq); 539182827Ssam if ((rxseq & IEEE80211_SEQ_FRAG_MASK) != 0) { 540182827Ssam /* 541182827Ssam * Fragments are not allowed; toss. 542182827Ssam */ 543182827Ssam IEEE80211_DISCARD_MAC(vap, 544182827Ssam IEEE80211_MSG_INPUT | IEEE80211_MSG_11N, ni->ni_macaddr, 545182827Ssam "A-MPDU", "fragment, rxseq 0x%x tid %u%s", rxseq, tid, 546182827Ssam wh->i_fc[1] & IEEE80211_FC1_RETRY ? " (retransmit)" : ""); 547182827Ssam vap->iv_stats.is_ampdu_rx_drop++; 548182827Ssam IEEE80211_NODE_STAT(ni, rx_drop); 549182827Ssam m_freem(m); 550182827Ssam return CONSUMED; 551182827Ssam } 552182827Ssam rxseq >>= IEEE80211_SEQ_SEQ_SHIFT; 553173273Ssam rap->rxa_nframes++; 554173273Ssamagain: 555170530Ssam if (rxseq == rap->rxa_start) { 556170530Ssam /* 557170530Ssam * First frame in window. 558170530Ssam */ 559170530Ssam if (rap->rxa_qframes != 0) { 560170530Ssam /* 561170530Ssam * Dispatch as many packets as we can. 562170530Ssam */ 563170530Ssam KASSERT(rap->rxa_m[0] == NULL, ("unexpected dup")); 564170530Ssam ampdu_dispatch(ni, m); 565170530Ssam ampdu_rx_dispatch(rap, ni); 566173273Ssam return CONSUMED; 567170530Ssam } else { 568170530Ssam /* 569170530Ssam * In order; advance window and notify 570170530Ssam * caller to dispatch directly. 571170530Ssam */ 572170530Ssam rap->rxa_start = IEEE80211_SEQ_INC(rxseq); 573173273Ssam return PROCESS; 574170530Ssam } 575170530Ssam } 576170530Ssam /* 577173273Ssam * Frame is out of order; store if in the BA window. 578170530Ssam */ 579170530Ssam /* calculate offset in BA window */ 580170530Ssam off = IEEE80211_SEQ_SUB(rxseq, rap->rxa_start); 581173273Ssam if (off < rap->rxa_wnd) { 582170530Ssam /* 583173273Ssam * Common case (hopefully): in the BA window. 584173273Ssam * Sec 9.10.7.6 a) (D2.04 p.118 line 47) 585173273Ssam */ 586173273Ssam#ifdef IEEE80211_AMPDU_AGE 587173273Ssam /* 588173273Ssam * Check for frames sitting too long in the reorder queue. 589173273Ssam * This should only ever happen if frames are not delivered 590173273Ssam * without the sender otherwise notifying us (e.g. with a 591173273Ssam * BAR to move the window). Typically this happens because 592173273Ssam * of vendor bugs that cause the sequence number to jump. 593173273Ssam * When this happens we get a gap in the reorder queue that 594173273Ssam * leaves frame sitting on the queue until they get pushed 595173273Ssam * out due to window moves. When the vendor does not send 596173273Ssam * BAR this move only happens due to explicit packet sends 597170530Ssam * 598173273Ssam * NB: we only track the time of the oldest frame in the 599173273Ssam * reorder q; this means that if we flush we might push 600173273Ssam * frames that still "new"; if this happens then subsequent 601173273Ssam * frames will result in BA window moves which cost something 602173273Ssam * but is still better than a big throughput dip. 603170530Ssam */ 604173273Ssam if (rap->rxa_qframes != 0) { 605173273Ssam /* XXX honor batimeout? */ 606173273Ssam if (ticks - rap->rxa_age > ieee80211_ampdu_age) { 607173273Ssam /* 608173273Ssam * Too long since we received the first 609173273Ssam * frame; flush the reorder buffer. 610173273Ssam */ 611173273Ssam if (rap->rxa_qframes != 0) { 612178354Ssam vap->iv_stats.is_ampdu_rx_age += 613173273Ssam rap->rxa_qframes; 614173273Ssam ampdu_rx_flush(ni, rap); 615173273Ssam } 616173273Ssam rap->rxa_start = IEEE80211_SEQ_INC(rxseq); 617173273Ssam return PROCESS; 618173273Ssam } 619173273Ssam } else { 620173273Ssam /* 621173273Ssam * First frame, start aging timer. 622173273Ssam */ 623173273Ssam rap->rxa_age = ticks; 624173273Ssam } 625173273Ssam#endif /* IEEE80211_AMPDU_AGE */ 626173273Ssam /* save packet */ 627173273Ssam if (rap->rxa_m[off] == NULL) { 628173273Ssam rap->rxa_m[off] = m; 629173273Ssam rap->rxa_qframes++; 630173273Ssam rap->rxa_qbytes += m->m_pkthdr.len; 631178354Ssam vap->iv_stats.is_ampdu_rx_reorder++; 632173273Ssam } else { 633178354Ssam IEEE80211_DISCARD_MAC(vap, 634173273Ssam IEEE80211_MSG_INPUT | IEEE80211_MSG_11N, 635173273Ssam ni->ni_macaddr, "a-mpdu duplicate", 636173273Ssam "seqno %u tid %u BA win <%u:%u>", 637173273Ssam rxseq, tid, rap->rxa_start, 638173273Ssam IEEE80211_SEQ_ADD(rap->rxa_start, rap->rxa_wnd-1)); 639178354Ssam vap->iv_stats.is_rx_dup++; 640173273Ssam IEEE80211_NODE_STAT(ni, rx_dup); 641173273Ssam m_freem(m); 642173273Ssam } 643173273Ssam return CONSUMED; 644173273Ssam } 645173273Ssam if (off < IEEE80211_SEQ_BA_RANGE) { 646173273Ssam /* 647173273Ssam * Outside the BA window, but within range; 648173273Ssam * flush the reorder q and move the window. 649173273Ssam * Sec 9.10.7.6 b) (D2.04 p.118 line 60) 650173273Ssam */ 651178354Ssam IEEE80211_NOTE(vap, IEEE80211_MSG_11N, ni, 652173273Ssam "move BA win <%u:%u> (%u frames) rxseq %u tid %u", 653170530Ssam rap->rxa_start, 654173273Ssam IEEE80211_SEQ_ADD(rap->rxa_start, rap->rxa_wnd-1), 655170530Ssam rap->rxa_qframes, rxseq, tid); 656178354Ssam vap->iv_stats.is_ampdu_rx_move++; 657170530Ssam 658173273Ssam /* 659173273Ssam * The spec says to flush frames up to but not including: 660173273Ssam * WinStart_B = rxseq - rap->rxa_wnd + 1 661173273Ssam * Then insert the frame or notify the caller to process 662173273Ssam * it immediately. We can safely do this by just starting 663173273Ssam * over again because we know the frame will now be within 664173273Ssam * the BA window. 665173273Ssam */ 666173273Ssam /* NB: rxa_wnd known to be >0 */ 667173273Ssam ampdu_rx_flush_upto(ni, rap, 668173273Ssam IEEE80211_SEQ_SUB(rxseq, rap->rxa_wnd-1)); 669173273Ssam goto again; 670170530Ssam } else { 671170530Ssam /* 672173273Ssam * Outside the BA window and out of range; toss. 673173273Ssam * Sec 9.10.7.6 c) (D2.04 p.119 line 16) 674170530Ssam */ 675178354Ssam IEEE80211_DISCARD_MAC(vap, 676173273Ssam IEEE80211_MSG_INPUT | IEEE80211_MSG_11N, ni->ni_macaddr, 677178354Ssam "MPDU", "BA win <%u:%u> (%u frames) rxseq %u tid %u%s", 678173273Ssam rap->rxa_start, 679173273Ssam IEEE80211_SEQ_ADD(rap->rxa_start, rap->rxa_wnd-1), 680173273Ssam rap->rxa_qframes, rxseq, tid, 681173273Ssam wh->i_fc[1] & IEEE80211_FC1_RETRY ? " (retransmit)" : ""); 682178354Ssam vap->iv_stats.is_ampdu_rx_drop++; 683173273Ssam IEEE80211_NODE_STAT(ni, rx_drop); 684170530Ssam m_freem(m); 685173273Ssam return CONSUMED; 686170530Ssam } 687173273Ssam#undef CONSUMED 688173273Ssam#undef PROCESS 689170530Ssam#undef IEEE80211_FC0_QOSDATA 690170530Ssam} 691170530Ssam 692170530Ssam/* 693170530Ssam * Process a BAR ctl frame. Dispatch all frames up to 694170530Ssam * the sequence number of the frame. If this frame is 695173273Ssam * out of range it's discarded. 696170530Ssam */ 697170530Ssamvoid 698170530Ssamieee80211_recv_bar(struct ieee80211_node *ni, struct mbuf *m0) 699170530Ssam{ 700178354Ssam struct ieee80211vap *vap = ni->ni_vap; 701170530Ssam struct ieee80211_frame_bar *wh; 702170530Ssam struct ieee80211_rx_ampdu *rap; 703170530Ssam ieee80211_seq rxseq; 704170530Ssam int tid, off; 705170530Ssam 706173273Ssam if (!ieee80211_recv_bar_ena) { 707173273Ssam#if 0 708178354Ssam IEEE80211_DISCARD_MAC(vap, IEEE80211_MSG_11N, 709173273Ssam ni->ni_macaddr, "BAR", "%s", "processing disabled"); 710173273Ssam#endif 711178354Ssam vap->iv_stats.is_ampdu_bar_bad++; 712173273Ssam return; 713173273Ssam } 714170530Ssam wh = mtod(m0, struct ieee80211_frame_bar *); 715170530Ssam /* XXX check basic BAR */ 716170530Ssam tid = MS(le16toh(wh->i_ctl), IEEE80211_BAR_TID); 717170530Ssam rap = &ni->ni_rx_ampdu[tid]; 718170530Ssam if ((rap->rxa_flags & IEEE80211_AGGR_XCHGPEND) == 0) { 719170530Ssam /* 720170530Ssam * No ADDBA request yet, don't touch. 721170530Ssam */ 722178354Ssam IEEE80211_DISCARD_MAC(vap, 723170530Ssam IEEE80211_MSG_INPUT | IEEE80211_MSG_11N, 724170530Ssam ni->ni_macaddr, "BAR", "no BA stream, tid %u", tid); 725178354Ssam vap->iv_stats.is_ampdu_bar_bad++; 726170530Ssam return; 727170530Ssam } 728178354Ssam vap->iv_stats.is_ampdu_bar_rx++; 729170530Ssam rxseq = le16toh(wh->i_seq) >> IEEE80211_SEQ_SEQ_SHIFT; 730173273Ssam if (rxseq == rap->rxa_start) 731173273Ssam return; 732170530Ssam /* calculate offset in BA window */ 733170530Ssam off = IEEE80211_SEQ_SUB(rxseq, rap->rxa_start); 734173273Ssam if (off < IEEE80211_SEQ_BA_RANGE) { 735170530Ssam /* 736173273Ssam * Flush the reorder q up to rxseq and move the window. 737173273Ssam * Sec 9.10.7.6 a) (D2.04 p.119 line 22) 738170530Ssam */ 739178354Ssam IEEE80211_NOTE(vap, IEEE80211_MSG_11N, ni, 740173273Ssam "BAR moves BA win <%u:%u> (%u frames) rxseq %u tid %u", 741170530Ssam rap->rxa_start, 742173273Ssam IEEE80211_SEQ_ADD(rap->rxa_start, rap->rxa_wnd-1), 743173273Ssam rap->rxa_qframes, rxseq, tid); 744178354Ssam vap->iv_stats.is_ampdu_bar_move++; 745173273Ssam 746173273Ssam ampdu_rx_flush_upto(ni, rap, rxseq); 747173273Ssam if (off >= rap->rxa_wnd) { 748173273Ssam /* 749173273Ssam * BAR specifies a window start to the right of BA 750173273Ssam * window; we must move it explicitly since 751173273Ssam * ampdu_rx_flush_upto will not. 752173273Ssam */ 753173273Ssam rap->rxa_start = rxseq; 754170530Ssam } 755173273Ssam } else { 756170530Ssam /* 757173273Ssam * Out of range; toss. 758173273Ssam * Sec 9.10.7.6 b) (D2.04 p.119 line 41) 759170530Ssam */ 760178354Ssam IEEE80211_DISCARD_MAC(vap, 761173273Ssam IEEE80211_MSG_INPUT | IEEE80211_MSG_11N, ni->ni_macaddr, 762173273Ssam "BAR", "BA win <%u:%u> (%u frames) rxseq %u tid %u%s", 763173273Ssam rap->rxa_start, 764173273Ssam IEEE80211_SEQ_ADD(rap->rxa_start, rap->rxa_wnd-1), 765173273Ssam rap->rxa_qframes, rxseq, tid, 766173273Ssam wh->i_fc[1] & IEEE80211_FC1_RETRY ? " (retransmit)" : ""); 767178354Ssam vap->iv_stats.is_ampdu_bar_oow++; 768173273Ssam IEEE80211_NODE_STAT(ni, rx_drop); 769170530Ssam } 770170530Ssam} 771170530Ssam 772170530Ssam/* 773170530Ssam * Setup HT-specific state in a node. Called only 774170530Ssam * when HT use is negotiated so we don't do extra 775170530Ssam * work for temporary and/or legacy sta's. 776170530Ssam */ 777170530Ssamvoid 778170530Ssamieee80211_ht_node_init(struct ieee80211_node *ni, const uint8_t *htcap) 779170530Ssam{ 780170530Ssam struct ieee80211_tx_ampdu *tap; 781170530Ssam int ac; 782170530Ssam 783173273Ssam if (ni->ni_flags & IEEE80211_NODE_HT) { 784173273Ssam /* 785173273Ssam * Clean AMPDU state on re-associate. This handles the case 786173273Ssam * where a station leaves w/o notifying us and then returns 787173273Ssam * before node is reaped for inactivity. 788173273Ssam */ 789173273Ssam ieee80211_ht_node_cleanup(ni); 790173273Ssam } 791170530Ssam ieee80211_parse_htcap(ni, htcap); 792170530Ssam for (ac = 0; ac < WME_NUM_AC; ac++) { 793170530Ssam tap = &ni->ni_tx_ampdu[ac]; 794170530Ssam tap->txa_ac = ac; 795173273Ssam /* NB: further initialization deferred */ 796170530Ssam } 797173273Ssam ni->ni_flags |= IEEE80211_NODE_HT | IEEE80211_NODE_AMPDU; 798170530Ssam} 799170530Ssam 800170530Ssam/* 801170530Ssam * Cleanup HT-specific state in a node. Called only 802170530Ssam * when HT use has been marked. 803170530Ssam */ 804170530Ssamvoid 805170530Ssamieee80211_ht_node_cleanup(struct ieee80211_node *ni) 806170530Ssam{ 807170530Ssam struct ieee80211com *ic = ni->ni_ic; 808170530Ssam int i; 809170530Ssam 810170530Ssam KASSERT(ni->ni_flags & IEEE80211_NODE_HT, ("not an HT node")); 811170530Ssam 812170530Ssam /* XXX optimize this */ 813170530Ssam for (i = 0; i < WME_NUM_AC; i++) { 814170530Ssam struct ieee80211_tx_ampdu *tap = &ni->ni_tx_ampdu[i]; 815173273Ssam if (tap->txa_flags & IEEE80211_AGGR_SETUP) { 816173273Ssam /* 817173273Ssam * Stop BA stream if setup so driver has a chance 818173273Ssam * to reclaim any resources it might have allocated. 819173273Ssam */ 820170530Ssam ic->ic_addba_stop(ni, &ni->ni_tx_ampdu[i]); 821178354Ssam tap->txa_lastsample = 0; 822178354Ssam tap->txa_avgpps = 0; 823173273Ssam /* NB: clearing NAK means we may re-send ADDBA */ 824173273Ssam tap->txa_flags &= 825173273Ssam ~(IEEE80211_AGGR_SETUP | IEEE80211_AGGR_NAK); 826173273Ssam } 827170530Ssam } 828170530Ssam for (i = 0; i < WME_NUM_TID; i++) 829170530Ssam ampdu_rx_stop(&ni->ni_rx_ampdu[i]); 830170530Ssam 831170530Ssam ni->ni_htcap = 0; 832173273Ssam ni->ni_flags &= ~(IEEE80211_NODE_HT | IEEE80211_NODE_HTCOMPAT | 833173273Ssam IEEE80211_NODE_AMPDU); 834170530Ssam} 835170530Ssam 836178354Ssam/* 837178354Ssam * Age out HT resources for a station. 838178354Ssam */ 839178354Ssamvoid 840178354Ssamieee80211_ht_node_age(struct ieee80211_node *ni) 841178354Ssam{ 842178354Ssam#ifdef IEEE80211_AMPDU_AGE 843178354Ssam struct ieee80211vap *vap = ni->ni_vap; 844178354Ssam uint8_t tid; 845178354Ssam#endif 846178354Ssam 847178354Ssam KASSERT(ni->ni_flags & IEEE80211_NODE_HT, ("not an HT sta")); 848178354Ssam 849178354Ssam#ifdef IEEE80211_AMPDU_AGE 850178354Ssam for (tid = 0; tid < WME_NUM_TID; tid++) { 851178354Ssam struct ieee80211_rx_ampdu *rap; 852178354Ssam 853178354Ssam rap = &ni->ni_rx_ampdu[tid]; 854178354Ssam if ((rap->rxa_flags & IEEE80211_AGGR_XCHGPEND) == 0) 855178354Ssam continue; 856178354Ssam if (rap->rxa_qframes == 0) 857178354Ssam continue; 858178354Ssam /* 859178354Ssam * Check for frames sitting too long in the reorder queue. 860178354Ssam * See above for more details on what's happening here. 861178354Ssam */ 862178354Ssam /* XXX honor batimeout? */ 863178354Ssam if (ticks - rap->rxa_age > ieee80211_ampdu_age) { 864178354Ssam /* 865178354Ssam * Too long since we received the first 866178354Ssam * frame; flush the reorder buffer. 867178354Ssam */ 868178354Ssam vap->iv_stats.is_ampdu_rx_age += rap->rxa_qframes; 869178354Ssam ampdu_rx_flush(ni, rap); 870178354Ssam } 871178354Ssam } 872178354Ssam#endif /* IEEE80211_AMPDU_AGE */ 873178354Ssam} 874178354Ssam 875173273Ssamstatic struct ieee80211_channel * 876173273Ssamfindhtchan(struct ieee80211com *ic, struct ieee80211_channel *c, int htflags) 877173273Ssam{ 878173273Ssam return ieee80211_find_channel(ic, c->ic_freq, 879173273Ssam (c->ic_flags &~ IEEE80211_CHAN_HT) | htflags); 880173273Ssam} 881173273Ssam 882173273Ssam/* 883173273Ssam * Adjust a channel to be HT/non-HT according to the vap's configuration. 884173273Ssam */ 885173273Ssamstruct ieee80211_channel * 886173273Ssamieee80211_ht_adjust_channel(struct ieee80211com *ic, 887173273Ssam struct ieee80211_channel *chan, int flags) 888173273Ssam{ 889173273Ssam struct ieee80211_channel *c; 890173273Ssam 891173273Ssam if (flags & IEEE80211_FEXT_HT) { 892173273Ssam /* promote to HT if possible */ 893173273Ssam if (flags & IEEE80211_FEXT_USEHT40) { 894173273Ssam if (!IEEE80211_IS_CHAN_HT40(chan)) { 895173273Ssam /* NB: arbitrarily pick ht40+ over ht40- */ 896173273Ssam c = findhtchan(ic, chan, IEEE80211_CHAN_HT40U); 897173273Ssam if (c == NULL) 898173273Ssam c = findhtchan(ic, chan, 899173273Ssam IEEE80211_CHAN_HT40D); 900173273Ssam if (c == NULL) 901173273Ssam c = findhtchan(ic, chan, 902173273Ssam IEEE80211_CHAN_HT20); 903173273Ssam if (c != NULL) 904173273Ssam chan = c; 905173273Ssam } 906173273Ssam } else if (!IEEE80211_IS_CHAN_HT20(chan)) { 907173273Ssam c = findhtchan(ic, chan, IEEE80211_CHAN_HT20); 908173273Ssam if (c != NULL) 909173273Ssam chan = c; 910173273Ssam } 911173273Ssam } else if (IEEE80211_IS_CHAN_HT(chan)) { 912173273Ssam /* demote to legacy, HT use is disabled */ 913173273Ssam c = ieee80211_find_channel(ic, chan->ic_freq, 914173273Ssam chan->ic_flags &~ IEEE80211_CHAN_HT); 915173273Ssam if (c != NULL) 916173273Ssam chan = c; 917173273Ssam } 918173273Ssam return chan; 919173273Ssam} 920173273Ssam 921173273Ssam/* 922173273Ssam * Setup HT-specific state for a legacy WDS peer. 923173273Ssam */ 924173273Ssamvoid 925173273Ssamieee80211_ht_wds_init(struct ieee80211_node *ni) 926173273Ssam{ 927178354Ssam struct ieee80211vap *vap = ni->ni_vap; 928173273Ssam struct ieee80211_tx_ampdu *tap; 929173273Ssam int ac; 930173273Ssam 931178354Ssam KASSERT(vap->iv_flags_ext & IEEE80211_FEXT_HT, ("no HT requested")); 932173273Ssam 933173273Ssam /* XXX check scan cache in case peer has an ap and we have info */ 934173273Ssam /* 935173273Ssam * If setup with a legacy channel; locate an HT channel. 936173273Ssam * Otherwise if the inherited channel (from a companion 937173273Ssam * AP) is suitable use it so we use the same location 938173273Ssam * for the extension channel). 939173273Ssam */ 940178354Ssam ni->ni_chan = ieee80211_ht_adjust_channel(ni->ni_ic, 941178354Ssam ni->ni_chan, ieee80211_htchanflags(ni->ni_chan)); 942173273Ssam 943173273Ssam ni->ni_htcap = 0; 944178354Ssam if (vap->iv_flags_ext & IEEE80211_FEXT_SHORTGI20) 945173273Ssam ni->ni_htcap |= IEEE80211_HTCAP_SHORTGI20; 946173273Ssam if (IEEE80211_IS_CHAN_HT40(ni->ni_chan)) { 947173273Ssam ni->ni_htcap |= IEEE80211_HTCAP_CHWIDTH40; 948173273Ssam ni->ni_chw = 40; 949173273Ssam if (IEEE80211_IS_CHAN_HT40U(ni->ni_chan)) 950173273Ssam ni->ni_ht2ndchan = IEEE80211_HTINFO_2NDCHAN_ABOVE; 951173273Ssam else if (IEEE80211_IS_CHAN_HT40D(ni->ni_chan)) 952173273Ssam ni->ni_ht2ndchan = IEEE80211_HTINFO_2NDCHAN_BELOW; 953178354Ssam if (vap->iv_flags_ext & IEEE80211_FEXT_SHORTGI40) 954173273Ssam ni->ni_htcap |= IEEE80211_HTCAP_SHORTGI40; 955173273Ssam } else { 956173273Ssam ni->ni_chw = 20; 957173273Ssam ni->ni_ht2ndchan = IEEE80211_HTINFO_2NDCHAN_NONE; 958173273Ssam } 959173273Ssam ni->ni_htctlchan = ni->ni_chan->ic_ieee; 960173273Ssam 961173273Ssam ni->ni_htopmode = 0; /* XXX need protection state */ 962173273Ssam ni->ni_htstbc = 0; /* XXX need info */ 963173273Ssam 964173273Ssam for (ac = 0; ac < WME_NUM_AC; ac++) { 965173273Ssam tap = &ni->ni_tx_ampdu[ac]; 966173273Ssam tap->txa_ac = ac; 967173273Ssam } 968173273Ssam /* NB: AMPDU tx/rx governed by IEEE80211_FEXT_AMPDU_{TX,RX} */ 969173273Ssam ni->ni_flags |= IEEE80211_NODE_HT | IEEE80211_NODE_AMPDU; 970173273Ssam} 971173273Ssam 972173273Ssam/* 973173273Ssam * Notify hostap vaps of a change in the HTINFO ie. 974173273Ssam */ 975173273Ssamstatic void 976173273Ssamhtinfo_notify(struct ieee80211com *ic) 977173273Ssam{ 978178354Ssam struct ieee80211vap *vap; 979178354Ssam int first = 1; 980178354Ssam 981178354Ssam IEEE80211_LOCK_ASSERT(ic); 982178354Ssam 983178354Ssam TAILQ_FOREACH(vap, &ic->ic_vaps, iv_next) { 984178354Ssam if (vap->iv_opmode != IEEE80211_M_HOSTAP) 985178354Ssam continue; 986178354Ssam if (first) { 987178354Ssam IEEE80211_NOTE(vap, 988178354Ssam IEEE80211_MSG_ASSOC | IEEE80211_MSG_11N, 989178354Ssam vap->iv_bss, 990178354Ssam "HT bss occupancy change: %d sta, %d ht, " 991178354Ssam "%d ht40%s, HT protmode now 0x%x" 992178354Ssam , ic->ic_sta_assoc 993178354Ssam , ic->ic_ht_sta_assoc 994178354Ssam , ic->ic_ht40_sta_assoc 995178354Ssam , (ic->ic_flags_ext & IEEE80211_FEXT_NONHT_PR) ? 996178354Ssam ", non-HT sta present" : "" 997178354Ssam , ic->ic_curhtprotmode); 998178354Ssam first = 0; 999178354Ssam } 1000178354Ssam ieee80211_beacon_notify(vap, IEEE80211_BEACON_HTINFO); 1001178354Ssam } 1002173273Ssam} 1003173273Ssam 1004173273Ssam/* 1005173273Ssam * Calculate HT protection mode from current 1006173273Ssam * state and handle updates. 1007173273Ssam */ 1008173273Ssamstatic void 1009173273Ssamhtinfo_update(struct ieee80211com *ic) 1010173273Ssam{ 1011173273Ssam uint8_t protmode; 1012173273Ssam 1013178354Ssam if (ic->ic_sta_assoc != ic->ic_ht_sta_assoc) { 1014178354Ssam protmode = IEEE80211_HTINFO_OPMODE_MIXED 1015178354Ssam | IEEE80211_HTINFO_NONHT_PRESENT; 1016178354Ssam } else if (ic->ic_flags_ext & IEEE80211_FEXT_NONHT_PR) { 1017173273Ssam protmode = IEEE80211_HTINFO_OPMODE_PROTOPT 1018178354Ssam | IEEE80211_HTINFO_NONHT_PRESENT; 1019178354Ssam } else if (ic->ic_bsschan != IEEE80211_CHAN_ANYC && 1020178354Ssam IEEE80211_IS_CHAN_HT40(ic->ic_bsschan) && 1021173273Ssam ic->ic_sta_assoc != ic->ic_ht40_sta_assoc) { 1022173273Ssam protmode = IEEE80211_HTINFO_OPMODE_HT20PR; 1023173273Ssam } else { 1024173273Ssam protmode = IEEE80211_HTINFO_OPMODE_PURE; 1025173273Ssam } 1026173273Ssam if (protmode != ic->ic_curhtprotmode) { 1027173273Ssam ic->ic_curhtprotmode = protmode; 1028173273Ssam htinfo_notify(ic); 1029173273Ssam } 1030173273Ssam} 1031173273Ssam 1032173273Ssam/* 1033173273Ssam * Handle an HT station joining a BSS. 1034173273Ssam */ 1035173273Ssamvoid 1036173273Ssamieee80211_ht_node_join(struct ieee80211_node *ni) 1037173273Ssam{ 1038173273Ssam struct ieee80211com *ic = ni->ni_ic; 1039173273Ssam 1040173273Ssam IEEE80211_LOCK_ASSERT(ic); 1041173273Ssam 1042173273Ssam if (ni->ni_flags & IEEE80211_NODE_HT) { 1043173273Ssam ic->ic_ht_sta_assoc++; 1044173273Ssam if (ni->ni_chw == 40) 1045173273Ssam ic->ic_ht40_sta_assoc++; 1046173273Ssam } 1047173273Ssam htinfo_update(ic); 1048173273Ssam} 1049173273Ssam 1050173273Ssam/* 1051173273Ssam * Handle an HT station leaving a BSS. 1052173273Ssam */ 1053173273Ssamvoid 1054173273Ssamieee80211_ht_node_leave(struct ieee80211_node *ni) 1055173273Ssam{ 1056173273Ssam struct ieee80211com *ic = ni->ni_ic; 1057173273Ssam 1058173273Ssam IEEE80211_LOCK_ASSERT(ic); 1059173273Ssam 1060173273Ssam if (ni->ni_flags & IEEE80211_NODE_HT) { 1061173273Ssam ic->ic_ht_sta_assoc--; 1062173273Ssam if (ni->ni_chw == 40) 1063173273Ssam ic->ic_ht40_sta_assoc--; 1064173273Ssam } 1065173273Ssam htinfo_update(ic); 1066173273Ssam} 1067173273Ssam 1068173273Ssam/* 1069173273Ssam * Public version of htinfo_update; used for processing 1070178354Ssam * beacon frames from overlapping bss. 1071178354Ssam * 1072178354Ssam * Caller can specify either IEEE80211_HTINFO_OPMODE_MIXED 1073178354Ssam * (on receipt of a beacon that advertises MIXED) or 1074178354Ssam * IEEE80211_HTINFO_OPMODE_PROTOPT (on receipt of a beacon 1075178354Ssam * from an overlapping legacy bss). We treat MIXED with 1076178354Ssam * a higher precedence than PROTOPT (i.e. we will not change 1077178354Ssam * change PROTOPT -> MIXED; only MIXED -> PROTOPT). This 1078178354Ssam * corresponds to how we handle things in htinfo_update. 1079173273Ssam */ 1080173273Ssamvoid 1081178354Ssamieee80211_htprot_update(struct ieee80211com *ic, int protmode) 1082173273Ssam{ 1083178354Ssam#define OPMODE(x) SM(x, IEEE80211_HTINFO_OPMODE) 1084178354Ssam if (protmode == ic->ic_curhtprotmode) 1085178354Ssam return; 1086178354Ssam if (OPMODE(ic->ic_curhtprotmode) == IEEE80211_HTINFO_OPMODE_MIXED && 1087178354Ssam OPMODE(protmode) == IEEE80211_HTINFO_OPMODE_PROTOPT) 1088178354Ssam return; 1089178354Ssam 1090181197Ssam IEEE80211_LOCK(ic); 1091178354Ssam /* track non-HT station presence */ 1092178354Ssam KASSERT(protmode & IEEE80211_HTINFO_NONHT_PRESENT, 1093178354Ssam ("missing NONHT_PRESENT")); 1094178354Ssam ic->ic_flags_ext |= IEEE80211_FEXT_NONHT_PR; 1095178354Ssam ic->ic_lastnonht = ticks; 1096178354Ssam 1097178354Ssam /* push beacon update */ 1098178354Ssam ic->ic_curhtprotmode = protmode; 1099178354Ssam htinfo_notify(ic); 1100181197Ssam IEEE80211_UNLOCK(ic); 1101178354Ssam#undef OPMODE 1102173273Ssam} 1103173273Ssam 1104173273Ssam/* 1105173273Ssam * Time out presence of an overlapping bss with non-HT 1106173273Ssam * stations. When operating in hostap mode we listen for 1107173273Ssam * beacons from other stations and if we identify a non-HT 1108173273Ssam * station is present we update the opmode field of the 1109173273Ssam * HTINFO ie. To identify when all non-HT stations are 1110173273Ssam * gone we time out this condition. 1111173273Ssam */ 1112173273Ssamvoid 1113173273Ssamieee80211_ht_timeout(struct ieee80211com *ic) 1114173273Ssam{ 1115173273Ssam IEEE80211_LOCK_ASSERT(ic); 1116173273Ssam 1117173273Ssam if ((ic->ic_flags_ext & IEEE80211_FEXT_NONHT_PR) && 1118173273Ssam time_after(ticks, ic->ic_lastnonht + IEEE80211_NONHT_PRESENT_AGE)) { 1119173273Ssam#if 0 1120178354Ssam IEEE80211_NOTE(vap, IEEE80211_MSG_11N, ni, 1121173273Ssam "%s", "time out non-HT STA present on channel"); 1122173273Ssam#endif 1123173273Ssam ic->ic_flags_ext &= ~IEEE80211_FEXT_NONHT_PR; 1124173273Ssam htinfo_update(ic); 1125173273Ssam } 1126173273Ssam} 1127173273Ssam 1128170530Ssam/* unalligned little endian access */ 1129170530Ssam#define LE_READ_2(p) \ 1130170530Ssam ((uint16_t) \ 1131170530Ssam ((((const uint8_t *)(p))[0] ) | \ 1132170530Ssam (((const uint8_t *)(p))[1] << 8))) 1133170530Ssam 1134170530Ssam/* 1135170530Ssam * Process an 802.11n HT capabilities ie. 1136170530Ssam */ 1137170530Ssamvoid 1138170530Ssamieee80211_parse_htcap(struct ieee80211_node *ni, const uint8_t *ie) 1139170530Ssam{ 1140178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1141170530Ssam 1142170530Ssam if (ie[0] == IEEE80211_ELEMID_VENDOR) { 1143170530Ssam /* 1144170530Ssam * Station used Vendor OUI ie to associate; 1145170530Ssam * mark the node so when we respond we'll use 1146170530Ssam * the Vendor OUI's and not the standard ie's. 1147170530Ssam */ 1148170530Ssam ni->ni_flags |= IEEE80211_NODE_HTCOMPAT; 1149170530Ssam ie += 4; 1150170530Ssam } else 1151170530Ssam ni->ni_flags &= ~IEEE80211_NODE_HTCOMPAT; 1152170530Ssam 1153170530Ssam ni->ni_htcap = LE_READ_2(ie + 1154170530Ssam __offsetof(struct ieee80211_ie_htcap, hc_cap)); 1155170530Ssam ni->ni_htparam = ie[__offsetof(struct ieee80211_ie_htcap, hc_param)]; 1156173273Ssam /* XXX needed or will ieee80211_parse_htinfo always be called? */ 1157173273Ssam ni->ni_chw = (ni->ni_htcap & IEEE80211_HTCAP_CHWIDTH40) && 1158178354Ssam (vap->iv_flags_ext & IEEE80211_FEXT_USEHT40) ? 40 : 20; 1159170530Ssam} 1160170530Ssam 1161170530Ssam/* 1162173273Ssam * Process an 802.11n HT info ie and update the node state. 1163173273Ssam * Note that we handle use this information to identify the 1164173273Ssam * correct channel (HT20, HT40+, HT40-, legacy). The caller 1165173273Ssam * is responsible for insuring any required channel change is 1166173273Ssam * done (e.g. in sta mode when parsing the contents of a 1167173273Ssam * beacon frame). 1168170530Ssam */ 1169170530Ssamvoid 1170170530Ssamieee80211_parse_htinfo(struct ieee80211_node *ni, const uint8_t *ie) 1171170530Ssam{ 1172173273Ssam struct ieee80211com *ic = ni->ni_ic; 1173178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1174170530Ssam const struct ieee80211_ie_htinfo *htinfo; 1175173273Ssam struct ieee80211_channel *c; 1176170530Ssam uint16_t w; 1177173273Ssam int htflags, chanflags; 1178170530Ssam 1179170530Ssam if (ie[0] == IEEE80211_ELEMID_VENDOR) 1180170530Ssam ie += 4; 1181170530Ssam htinfo = (const struct ieee80211_ie_htinfo *) ie; 1182170530Ssam ni->ni_htctlchan = htinfo->hi_ctrlchannel; 1183170530Ssam ni->ni_ht2ndchan = SM(htinfo->hi_byte1, IEEE80211_HTINFO_2NDCHAN); 1184172055Ssam w = LE_READ_2(&htinfo->hi_byte2); 1185170530Ssam ni->ni_htopmode = SM(w, IEEE80211_HTINFO_OPMODE); 1186170530Ssam w = LE_READ_2(&htinfo->hi_byte45); 1187170530Ssam ni->ni_htstbc = SM(w, IEEE80211_HTINFO_BASIC_STBCMCS); 1188173273Ssam /* 1189173273Ssam * Handle 11n channel switch. Use the received HT ie's to 1190173273Ssam * identify the right channel to use. If we cannot locate it 1191173273Ssam * in the channel table then fallback to legacy operation. 1192173273Ssam */ 1193178354Ssam /* NB: honor operating mode constraint */ 1194178354Ssam htflags = (vap->iv_flags_ext & IEEE80211_FEXT_HT) ? 1195173273Ssam IEEE80211_CHAN_HT20 : 0; 1196173273Ssam if ((htinfo->hi_byte1 & IEEE80211_HTINFO_TXWIDTH_2040) && 1197178354Ssam (vap->iv_flags_ext & IEEE80211_FEXT_USEHT40)) { 1198173273Ssam if (ni->ni_ht2ndchan == IEEE80211_HTINFO_2NDCHAN_ABOVE) 1199173273Ssam htflags = IEEE80211_CHAN_HT40U; 1200173273Ssam else if (ni->ni_ht2ndchan == IEEE80211_HTINFO_2NDCHAN_BELOW) 1201173273Ssam htflags = IEEE80211_CHAN_HT40D; 1202170530Ssam } 1203173273Ssam chanflags = (ni->ni_chan->ic_flags &~ IEEE80211_CHAN_HT) | htflags; 1204173273Ssam if (chanflags != ni->ni_chan->ic_flags) { 1205173273Ssam c = ieee80211_find_channel(ic, ni->ni_chan->ic_freq, chanflags); 1206178354Ssam if (c == NULL && (htflags & IEEE80211_CHAN_HT40)) { 1207173273Ssam /* 1208173273Ssam * No HT40 channel entry in our table; fall back 1209173273Ssam * to HT20 operation. This should not happen. 1210173273Ssam */ 1211173273Ssam c = findhtchan(ic, ni->ni_chan, IEEE80211_CHAN_HT20); 1212178354Ssam IEEE80211_NOTE(vap, 1213173273Ssam IEEE80211_MSG_ASSOC | IEEE80211_MSG_11N, ni, 1214173273Ssam "no HT40 channel (freq %u), falling back to HT20", 1215173273Ssam ni->ni_chan->ic_freq); 1216173273Ssam /* XXX stat */ 1217173273Ssam } 1218173273Ssam if (c != NULL && c != ni->ni_chan) { 1219178354Ssam IEEE80211_NOTE(vap, 1220173273Ssam IEEE80211_MSG_ASSOC | IEEE80211_MSG_11N, ni, 1221173273Ssam "switch station to HT%d channel %u/0x%x", 1222173273Ssam IEEE80211_IS_CHAN_HT40(c) ? 40 : 20, 1223173273Ssam c->ic_freq, c->ic_flags); 1224173273Ssam ni->ni_chan = c; 1225173273Ssam } 1226173273Ssam /* NB: caller responsible for forcing any channel change */ 1227173273Ssam } 1228173273Ssam /* update node's tx channel width */ 1229173273Ssam ni->ni_chw = IEEE80211_IS_CHAN_HT40(ni->ni_chan)? 40 : 20; 1230170530Ssam} 1231170530Ssam 1232170530Ssam/* 1233170530Ssam * Install received HT rate set by parsing the HT cap ie. 1234170530Ssam */ 1235170530Ssamint 1236170530Ssamieee80211_setup_htrates(struct ieee80211_node *ni, const uint8_t *ie, int flags) 1237170530Ssam{ 1238178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1239170530Ssam const struct ieee80211_ie_htcap *htcap; 1240170530Ssam struct ieee80211_htrateset *rs; 1241170530Ssam int i; 1242170530Ssam 1243170530Ssam rs = &ni->ni_htrates; 1244170530Ssam memset(rs, 0, sizeof(*rs)); 1245170530Ssam if (ie != NULL) { 1246170530Ssam if (ie[0] == IEEE80211_ELEMID_VENDOR) 1247170530Ssam ie += 4; 1248170530Ssam htcap = (const struct ieee80211_ie_htcap *) ie; 1249170530Ssam for (i = 0; i < IEEE80211_HTRATE_MAXSIZE; i++) { 1250170530Ssam if (isclr(htcap->hc_mcsset, i)) 1251170530Ssam continue; 1252170530Ssam if (rs->rs_nrates == IEEE80211_HTRATE_MAXSIZE) { 1253178354Ssam IEEE80211_NOTE(vap, 1254170530Ssam IEEE80211_MSG_XRATE | IEEE80211_MSG_11N, ni, 1255170530Ssam "WARNING, HT rate set too large; only " 1256170530Ssam "using %u rates", IEEE80211_HTRATE_MAXSIZE); 1257178354Ssam vap->iv_stats.is_rx_rstoobig++; 1258170530Ssam break; 1259170530Ssam } 1260170530Ssam rs->rs_rates[rs->rs_nrates++] = i; 1261170530Ssam } 1262170530Ssam } 1263170530Ssam return ieee80211_fix_rate(ni, (struct ieee80211_rateset *) rs, flags); 1264170530Ssam} 1265170530Ssam 1266170530Ssam/* 1267170530Ssam * Mark rates in a node's HT rate set as basic according 1268170530Ssam * to the information in the supplied HT info ie. 1269170530Ssam */ 1270170530Ssamvoid 1271170530Ssamieee80211_setup_basic_htrates(struct ieee80211_node *ni, const uint8_t *ie) 1272170530Ssam{ 1273170530Ssam const struct ieee80211_ie_htinfo *htinfo; 1274170530Ssam struct ieee80211_htrateset *rs; 1275170530Ssam int i, j; 1276170530Ssam 1277170530Ssam if (ie[0] == IEEE80211_ELEMID_VENDOR) 1278170530Ssam ie += 4; 1279170530Ssam htinfo = (const struct ieee80211_ie_htinfo *) ie; 1280170530Ssam rs = &ni->ni_htrates; 1281170530Ssam if (rs->rs_nrates == 0) { 1282178354Ssam IEEE80211_NOTE(ni->ni_vap, 1283170530Ssam IEEE80211_MSG_XRATE | IEEE80211_MSG_11N, ni, 1284170530Ssam "%s", "WARNING, empty HT rate set"); 1285170530Ssam return; 1286170530Ssam } 1287170530Ssam for (i = 0; i < IEEE80211_HTRATE_MAXSIZE; i++) { 1288170530Ssam if (isclr(htinfo->hi_basicmcsset, i)) 1289170530Ssam continue; 1290170530Ssam for (j = 0; j < rs->rs_nrates; j++) 1291170530Ssam if ((rs->rs_rates[j] & IEEE80211_RATE_VAL) == i) 1292170530Ssam rs->rs_rates[j] |= IEEE80211_RATE_BASIC; 1293170530Ssam } 1294170530Ssam} 1295170530Ssam 1296170530Ssamstatic void 1297170530Ssamaddba_timeout(void *arg) 1298170530Ssam{ 1299170530Ssam struct ieee80211_tx_ampdu *tap = arg; 1300170530Ssam 1301170530Ssam /* XXX ? */ 1302170530Ssam tap->txa_flags &= ~IEEE80211_AGGR_XCHGPEND; 1303170530Ssam tap->txa_attempts++; 1304170530Ssam} 1305170530Ssam 1306170530Ssamstatic void 1307170530Ssamaddba_start_timeout(struct ieee80211_tx_ampdu *tap) 1308170530Ssam{ 1309170530Ssam /* XXX use CALLOUT_PENDING instead? */ 1310178354Ssam callout_reset(&tap->txa_timer, ieee80211_addba_timeout, 1311170530Ssam addba_timeout, tap); 1312170530Ssam tap->txa_flags |= IEEE80211_AGGR_XCHGPEND; 1313178354Ssam tap->txa_nextrequest = ticks + ieee80211_addba_timeout; 1314170530Ssam} 1315170530Ssam 1316170530Ssamstatic void 1317170530Ssamaddba_stop_timeout(struct ieee80211_tx_ampdu *tap) 1318170530Ssam{ 1319170530Ssam /* XXX use CALLOUT_PENDING instead? */ 1320170530Ssam if (tap->txa_flags & IEEE80211_AGGR_XCHGPEND) { 1321170530Ssam callout_stop(&tap->txa_timer); 1322170530Ssam tap->txa_flags &= ~IEEE80211_AGGR_XCHGPEND; 1323170530Ssam } 1324170530Ssam} 1325170530Ssam 1326170530Ssam/* 1327170530Ssam * Default method for requesting A-MPDU tx aggregation. 1328170530Ssam * We setup the specified state block and start a timer 1329170530Ssam * to wait for an ADDBA response frame. 1330170530Ssam */ 1331170530Ssamstatic int 1332170530Ssamieee80211_addba_request(struct ieee80211_node *ni, 1333170530Ssam struct ieee80211_tx_ampdu *tap, 1334170530Ssam int dialogtoken, int baparamset, int batimeout) 1335170530Ssam{ 1336170530Ssam int bufsiz; 1337170530Ssam 1338170530Ssam /* XXX locking */ 1339170530Ssam tap->txa_token = dialogtoken; 1340170530Ssam tap->txa_flags |= IEEE80211_AGGR_IMMEDIATE; 1341170530Ssam tap->txa_start = tap->txa_seqstart = 0; 1342170530Ssam bufsiz = MS(baparamset, IEEE80211_BAPS_BUFSIZ); 1343170530Ssam tap->txa_wnd = (bufsiz == 0) ? 1344170530Ssam IEEE80211_AGGR_BAWMAX : min(bufsiz, IEEE80211_AGGR_BAWMAX); 1345170530Ssam addba_start_timeout(tap); 1346170530Ssam return 1; 1347170530Ssam} 1348170530Ssam 1349170530Ssam/* 1350170530Ssam * Default method for processing an A-MPDU tx aggregation 1351170530Ssam * response. We shutdown any pending timer and update the 1352170530Ssam * state block according to the reply. 1353170530Ssam */ 1354170530Ssamstatic int 1355170530Ssamieee80211_addba_response(struct ieee80211_node *ni, 1356170530Ssam struct ieee80211_tx_ampdu *tap, 1357170530Ssam int status, int baparamset, int batimeout) 1358170530Ssam{ 1359170530Ssam int bufsiz; 1360170530Ssam 1361170530Ssam /* XXX locking */ 1362170530Ssam addba_stop_timeout(tap); 1363170530Ssam if (status == IEEE80211_STATUS_SUCCESS) { 1364170530Ssam bufsiz = MS(baparamset, IEEE80211_BAPS_BUFSIZ); 1365170530Ssam /* XXX override our request? */ 1366170530Ssam tap->txa_wnd = (bufsiz == 0) ? 1367170530Ssam IEEE80211_AGGR_BAWMAX : min(bufsiz, IEEE80211_AGGR_BAWMAX); 1368170530Ssam tap->txa_flags |= IEEE80211_AGGR_RUNNING; 1369173273Ssam } else { 1370173273Ssam /* mark tid so we don't try again */ 1371173273Ssam tap->txa_flags |= IEEE80211_AGGR_NAK; 1372170530Ssam } 1373170530Ssam return 1; 1374170530Ssam} 1375170530Ssam 1376170530Ssam/* 1377170530Ssam * Default method for stopping A-MPDU tx aggregation. 1378170530Ssam * Any timer is cleared and we drain any pending frames. 1379170530Ssam */ 1380170530Ssamstatic void 1381170530Ssamieee80211_addba_stop(struct ieee80211_node *ni, struct ieee80211_tx_ampdu *tap) 1382170530Ssam{ 1383170530Ssam /* XXX locking */ 1384170530Ssam addba_stop_timeout(tap); 1385170530Ssam if (tap->txa_flags & IEEE80211_AGGR_RUNNING) { 1386170530Ssam tap->txa_flags &= ~IEEE80211_AGGR_RUNNING; 1387170530Ssam } 1388170530Ssam tap->txa_attempts = 0; 1389170530Ssam} 1390170530Ssam 1391170530Ssam/* 1392170530Ssam * Process a received action frame using the default aggregation 1393170530Ssam * policy. We intercept ADDBA-related frames and use them to 1394170530Ssam * update our aggregation state. All other frames are passed up 1395170530Ssam * for processing by ieee80211_recv_action. 1396170530Ssam */ 1397170530Ssamstatic void 1398170530Ssamieee80211_aggr_recv_action(struct ieee80211_node *ni, 1399170530Ssam const uint8_t *frm, const uint8_t *efrm) 1400170530Ssam{ 1401170530Ssam struct ieee80211com *ic = ni->ni_ic; 1402178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1403170530Ssam const struct ieee80211_action *ia; 1404170530Ssam struct ieee80211_rx_ampdu *rap; 1405170530Ssam struct ieee80211_tx_ampdu *tap; 1406170530Ssam uint8_t dialogtoken; 1407170530Ssam uint16_t baparamset, batimeout, baseqctl, code; 1408170530Ssam uint16_t args[4]; 1409170530Ssam int tid, ac, bufsiz; 1410170530Ssam 1411170530Ssam ia = (const struct ieee80211_action *) frm; 1412170530Ssam switch (ia->ia_category) { 1413170530Ssam case IEEE80211_ACTION_CAT_BA: 1414170530Ssam switch (ia->ia_action) { 1415170530Ssam case IEEE80211_ACTION_BA_ADDBA_REQUEST: 1416170530Ssam dialogtoken = frm[2]; 1417170530Ssam baparamset = LE_READ_2(frm+3); 1418170530Ssam batimeout = LE_READ_2(frm+5); 1419170530Ssam baseqctl = LE_READ_2(frm+7); 1420170530Ssam 1421170530Ssam tid = MS(baparamset, IEEE80211_BAPS_TID); 1422170530Ssam bufsiz = MS(baparamset, IEEE80211_BAPS_BUFSIZ); 1423170530Ssam 1424178354Ssam IEEE80211_NOTE(vap, 1425170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1426170530Ssam "recv ADDBA request: dialogtoken %u " 1427170530Ssam "baparamset 0x%x (tid %d bufsiz %d) batimeout %d " 1428173273Ssam "baseqctl %d:%d", 1429173273Ssam dialogtoken, baparamset, tid, bufsiz, batimeout, 1430173273Ssam MS(baseqctl, IEEE80211_BASEQ_START), 1431173273Ssam MS(baseqctl, IEEE80211_BASEQ_FRAG)); 1432170530Ssam 1433170530Ssam rap = &ni->ni_rx_ampdu[tid]; 1434170530Ssam 1435170530Ssam /* Send ADDBA response */ 1436170530Ssam args[0] = dialogtoken; 1437173273Ssam /* 1438173273Ssam * NB: We ack only if the sta associated with HT and 1439173273Ssam * the ap is configured to do AMPDU rx (the latter 1440173273Ssam * violates the 11n spec and is mostly for testing). 1441173273Ssam */ 1442173273Ssam if ((ni->ni_flags & IEEE80211_NODE_AMPDU_RX) && 1443178354Ssam (vap->iv_flags_ext & IEEE80211_FEXT_AMPDU_RX)) { 1444170530Ssam ampdu_rx_start(rap, bufsiz, 1445170530Ssam MS(baseqctl, IEEE80211_BASEQ_START)); 1446170530Ssam 1447170530Ssam args[1] = IEEE80211_STATUS_SUCCESS; 1448173273Ssam } else { 1449178354Ssam IEEE80211_NOTE(vap, 1450173273Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, 1451173273Ssam ni, "reject ADDBA request: %s", 1452173273Ssam ni->ni_flags & IEEE80211_NODE_AMPDU_RX ? 1453173273Ssam "administratively disabled" : 1454173273Ssam "not negotiated for station"); 1455178354Ssam vap->iv_stats.is_addba_reject++; 1456170530Ssam args[1] = IEEE80211_STATUS_UNSPECIFIED; 1457173273Ssam } 1458170530Ssam /* XXX honor rap flags? */ 1459170530Ssam args[2] = IEEE80211_BAPS_POLICY_IMMEDIATE 1460170530Ssam | SM(tid, IEEE80211_BAPS_TID) 1461170530Ssam | SM(rap->rxa_wnd, IEEE80211_BAPS_BUFSIZ) 1462170530Ssam ; 1463170530Ssam args[3] = 0; 1464170530Ssam ic->ic_send_action(ni, IEEE80211_ACTION_CAT_BA, 1465170530Ssam IEEE80211_ACTION_BA_ADDBA_RESPONSE, args); 1466170530Ssam return; 1467170530Ssam 1468170530Ssam case IEEE80211_ACTION_BA_ADDBA_RESPONSE: 1469170530Ssam dialogtoken = frm[2]; 1470170530Ssam code = LE_READ_2(frm+3); 1471170530Ssam baparamset = LE_READ_2(frm+5); 1472170530Ssam tid = MS(baparamset, IEEE80211_BAPS_TID); 1473170530Ssam bufsiz = MS(baparamset, IEEE80211_BAPS_BUFSIZ); 1474170530Ssam batimeout = LE_READ_2(frm+7); 1475170530Ssam 1476173273Ssam ac = TID_TO_WME_AC(tid); 1477173273Ssam tap = &ni->ni_tx_ampdu[ac]; 1478175877Ssam if ((tap->txa_flags & IEEE80211_AGGR_XCHGPEND) == 0) { 1479178354Ssam IEEE80211_DISCARD_MAC(vap, 1480173273Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, 1481173273Ssam ni->ni_macaddr, "ADDBA response", 1482173273Ssam "no pending ADDBA, tid %d dialogtoken %u " 1483173273Ssam "code %d", tid, dialogtoken, code); 1484178354Ssam vap->iv_stats.is_addba_norequest++; 1485173273Ssam return; 1486173273Ssam } 1487173273Ssam if (dialogtoken != tap->txa_token) { 1488178354Ssam IEEE80211_DISCARD_MAC(vap, 1489173273Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, 1490173273Ssam ni->ni_macaddr, "ADDBA response", 1491173273Ssam "dialogtoken mismatch: waiting for %d, " 1492173273Ssam "received %d, tid %d code %d", 1493173273Ssam tap->txa_token, dialogtoken, tid, code); 1494178354Ssam vap->iv_stats.is_addba_badtoken++; 1495173273Ssam return; 1496173273Ssam } 1497173273Ssam 1498178354Ssam IEEE80211_NOTE(vap, 1499170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1500170530Ssam "recv ADDBA response: dialogtoken %u code %d " 1501170530Ssam "baparamset 0x%x (tid %d bufsiz %d) batimeout %d", 1502170530Ssam dialogtoken, code, baparamset, tid, bufsiz, 1503170530Ssam batimeout); 1504170530Ssam ic->ic_addba_response(ni, tap, 1505170530Ssam code, baparamset, batimeout); 1506170530Ssam return; 1507170530Ssam 1508170530Ssam case IEEE80211_ACTION_BA_DELBA: 1509170530Ssam baparamset = LE_READ_2(frm+2); 1510170530Ssam code = LE_READ_2(frm+4); 1511170530Ssam 1512170530Ssam tid = MS(baparamset, IEEE80211_DELBAPS_TID); 1513170530Ssam 1514178354Ssam IEEE80211_NOTE(vap, 1515170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1516170530Ssam "recv DELBA: baparamset 0x%x (tid %d initiator %d) " 1517170530Ssam "code %d", baparamset, tid, 1518170530Ssam MS(baparamset, IEEE80211_DELBAPS_INIT), code); 1519170530Ssam 1520170530Ssam if ((baparamset & IEEE80211_DELBAPS_INIT) == 0) { 1521170530Ssam ac = TID_TO_WME_AC(tid); 1522170530Ssam tap = &ni->ni_tx_ampdu[ac]; 1523170530Ssam ic->ic_addba_stop(ni, tap); 1524170530Ssam } else { 1525170530Ssam rap = &ni->ni_rx_ampdu[tid]; 1526170530Ssam ampdu_rx_stop(rap); 1527170530Ssam } 1528170530Ssam return; 1529170530Ssam } 1530170530Ssam break; 1531170530Ssam } 1532173273Ssam ieee80211_recv_action(ni, frm, efrm); 1533170530Ssam} 1534170530Ssam 1535170530Ssam/* 1536170530Ssam * Process a received 802.11n action frame. 1537170530Ssam * Aggregation-related frames are assumed to be handled 1538170530Ssam * already; we handle any other frames we can, otherwise 1539170530Ssam * complain about being unsupported (with debugging). 1540170530Ssam */ 1541170530Ssamvoid 1542170530Ssamieee80211_recv_action(struct ieee80211_node *ni, 1543170530Ssam const uint8_t *frm, const uint8_t *efrm) 1544170530Ssam{ 1545178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1546170530Ssam const struct ieee80211_action *ia; 1547170530Ssam int chw; 1548170530Ssam 1549170530Ssam ia = (const struct ieee80211_action *) frm; 1550170530Ssam switch (ia->ia_category) { 1551170530Ssam case IEEE80211_ACTION_CAT_BA: 1552178354Ssam IEEE80211_NOTE(vap, 1553170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1554170530Ssam "%s: BA action %d not implemented", __func__, 1555170530Ssam ia->ia_action); 1556178354Ssam vap->iv_stats.is_rx_mgtdiscard++; 1557170530Ssam break; 1558170530Ssam case IEEE80211_ACTION_CAT_HT: 1559170530Ssam switch (ia->ia_action) { 1560170530Ssam case IEEE80211_ACTION_HT_TXCHWIDTH: 1561170530Ssam chw = frm[2] == IEEE80211_A_HT_TXCHWIDTH_2040 ? 40 : 20; 1562170530Ssam if (chw != ni->ni_chw) { 1563170530Ssam ni->ni_chw = chw; 1564170530Ssam ni->ni_flags |= IEEE80211_NODE_CHWUPDATE; 1565170530Ssam } 1566178354Ssam IEEE80211_NOTE(vap, 1567170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1568173273Ssam "%s: HT txchwidth, width %d (%s)", 1569170530Ssam __func__, chw, 1570170530Ssam ni->ni_flags & IEEE80211_NODE_CHWUPDATE ? 1571170530Ssam "new" : "no change"); 1572170530Ssam break; 1573173273Ssam case IEEE80211_ACTION_HT_MIMOPWRSAVE: 1574178354Ssam IEEE80211_NOTE(vap, 1575173273Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1576173273Ssam "%s: HT MIMO PS", __func__); 1577173273Ssam break; 1578170530Ssam default: 1579178354Ssam IEEE80211_NOTE(vap, 1580170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1581170530Ssam "%s: HT action %d not implemented", __func__, 1582170530Ssam ia->ia_action); 1583178354Ssam vap->iv_stats.is_rx_mgtdiscard++; 1584170530Ssam break; 1585170530Ssam } 1586170530Ssam break; 1587170530Ssam default: 1588178354Ssam IEEE80211_NOTE(vap, 1589170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1590170530Ssam "%s: category %d not implemented", __func__, 1591170530Ssam ia->ia_category); 1592178354Ssam vap->iv_stats.is_rx_mgtdiscard++; 1593170530Ssam break; 1594170530Ssam } 1595170530Ssam} 1596170530Ssam 1597170530Ssam/* 1598170530Ssam * Transmit processing. 1599170530Ssam */ 1600170530Ssam 1601170530Ssam/* 1602178354Ssam * Check if A-MPDU should be requested/enabled for a stream. 1603178354Ssam * We require a traffic rate above a per-AC threshold and we 1604178354Ssam * also handle backoff from previous failed attempts. 1605178354Ssam * 1606178354Ssam * Drivers may override this method to bring in information 1607178354Ssam * such as link state conditions in making the decision. 1608178354Ssam */ 1609178354Ssamstatic int 1610178354Ssamieee80211_ampdu_enable(struct ieee80211_node *ni, 1611178354Ssam struct ieee80211_tx_ampdu *tap) 1612178354Ssam{ 1613178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1614178354Ssam 1615178354Ssam if (tap->txa_avgpps < vap->iv_ampdu_mintraffic[tap->txa_ac]) 1616178354Ssam return 0; 1617178354Ssam /* XXX check rssi? */ 1618178354Ssam if (tap->txa_attempts >= ieee80211_addba_maxtries && 1619178354Ssam ticks < tap->txa_nextrequest) { 1620178354Ssam /* 1621178354Ssam * Don't retry too often; txa_nextrequest is set 1622178354Ssam * to the minimum interval we'll retry after 1623178354Ssam * ieee80211_addba_maxtries failed attempts are made. 1624178354Ssam */ 1625178354Ssam return 0; 1626178354Ssam } 1627178354Ssam IEEE80211_NOTE(vap, IEEE80211_MSG_11N, ni, 1628178354Ssam "%s: enable AMPDU on %s, avgpps %d pkts %d", 1629178354Ssam __func__, ieee80211_wme_acnames[tap->txa_ac], 1630178354Ssam tap->txa_avgpps, tap->txa_pkts); 1631178354Ssam return 1; 1632178354Ssam} 1633178354Ssam 1634178354Ssam/* 1635170530Ssam * Request A-MPDU tx aggregation. Setup local state and 1636170530Ssam * issue an ADDBA request. BA use will only happen after 1637170530Ssam * the other end replies with ADDBA response. 1638170530Ssam */ 1639170530Ssamint 1640170530Ssamieee80211_ampdu_request(struct ieee80211_node *ni, 1641170530Ssam struct ieee80211_tx_ampdu *tap) 1642170530Ssam{ 1643170530Ssam struct ieee80211com *ic = ni->ni_ic; 1644170530Ssam uint16_t args[4]; 1645170530Ssam int tid, dialogtoken; 1646170530Ssam static int tokens = 0; /* XXX */ 1647170530Ssam 1648170530Ssam /* XXX locking */ 1649170530Ssam if ((tap->txa_flags & IEEE80211_AGGR_SETUP) == 0) { 1650170530Ssam /* do deferred setup of state */ 1651170530Ssam callout_init(&tap->txa_timer, CALLOUT_MPSAFE); 1652170530Ssam tap->txa_flags |= IEEE80211_AGGR_SETUP; 1653170530Ssam } 1654173273Ssam /* XXX hack for not doing proper locking */ 1655173273Ssam tap->txa_flags &= ~IEEE80211_AGGR_NAK; 1656173273Ssam 1657170530Ssam dialogtoken = (tokens+1) % 63; /* XXX */ 1658170530Ssam 1659170530Ssam tid = WME_AC_TO_TID(tap->txa_ac); 1660170530Ssam args[0] = dialogtoken; 1661170530Ssam args[1] = IEEE80211_BAPS_POLICY_IMMEDIATE 1662170530Ssam | SM(tid, IEEE80211_BAPS_TID) 1663170530Ssam | SM(IEEE80211_AGGR_BAWMAX, IEEE80211_BAPS_BUFSIZ) 1664170530Ssam ; 1665170530Ssam args[2] = 0; /* batimeout */ 1666170530Ssam /* NB: do first so there's no race against reply */ 1667170530Ssam if (!ic->ic_addba_request(ni, tap, dialogtoken, args[1], args[2])) { 1668170530Ssam /* unable to setup state, don't make request */ 1669178354Ssam IEEE80211_NOTE(ni->ni_vap, IEEE80211_MSG_11N, 1670173273Ssam ni, "%s: could not setup BA stream for AC %d", 1671173273Ssam __func__, tap->txa_ac); 1672173273Ssam /* defer next try so we don't slam the driver with requests */ 1673178354Ssam tap->txa_attempts = ieee80211_addba_maxtries; 1674178354Ssam /* NB: check in case driver wants to override */ 1675178354Ssam if (tap->txa_nextrequest <= ticks) 1676178354Ssam tap->txa_nextrequest = ticks + ieee80211_addba_backoff; 1677170530Ssam return 0; 1678170530Ssam } 1679170530Ssam tokens = dialogtoken; /* allocate token */ 1680178953Ssam /* NB: after calling ic_addba_request so driver can set seqstart */ 1681178953Ssam args[3] = SM(tap->txa_seqstart, IEEE80211_BASEQ_START) 1682178953Ssam | SM(0, IEEE80211_BASEQ_FRAG) 1683178953Ssam ; 1684170530Ssam return ic->ic_send_action(ni, IEEE80211_ACTION_CAT_BA, 1685170530Ssam IEEE80211_ACTION_BA_ADDBA_REQUEST, args); 1686170530Ssam} 1687170530Ssam 1688170530Ssam/* 1689173273Ssam * Terminate an AMPDU tx stream. State is reclaimed 1690173273Ssam * and the peer notified with a DelBA Action frame. 1691173273Ssam */ 1692173273Ssamvoid 1693173273Ssamieee80211_ampdu_stop(struct ieee80211_node *ni, struct ieee80211_tx_ampdu *tap) 1694173273Ssam{ 1695173273Ssam struct ieee80211com *ic = ni->ni_ic; 1696178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1697173273Ssam uint16_t args[4]; 1698173273Ssam 1699173273Ssam /* XXX locking */ 1700173273Ssam if (IEEE80211_AMPDU_RUNNING(tap)) { 1701178354Ssam IEEE80211_NOTE(vap, IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, 1702173273Ssam ni, "%s: stop BA stream for AC %d", __func__, tap->txa_ac); 1703178354Ssam vap->iv_stats.is_ampdu_stop++; 1704173273Ssam 1705173273Ssam ic->ic_addba_stop(ni, tap); 1706173273Ssam args[0] = WME_AC_TO_TID(tap->txa_ac); 1707173273Ssam args[1] = IEEE80211_DELBAPS_INIT; 1708173273Ssam args[2] = 1; /* XXX reason code */ 1709173273Ssam ieee80211_send_action(ni, IEEE80211_ACTION_CAT_BA, 1710173273Ssam IEEE80211_ACTION_BA_DELBA, args); 1711173273Ssam } else { 1712178354Ssam IEEE80211_NOTE(vap, IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, 1713173273Ssam ni, "%s: BA stream for AC %d not running", 1714173273Ssam __func__, tap->txa_ac); 1715178354Ssam vap->iv_stats.is_ampdu_stop_failed++; 1716173273Ssam } 1717173273Ssam} 1718173273Ssam 1719173273Ssam/* 1720170530Ssam * Transmit a BAR frame to the specified node. The 1721170530Ssam * BAR contents are drawn from the supplied aggregation 1722170530Ssam * state associated with the node. 1723170530Ssam */ 1724170530Ssamint 1725170530Ssamieee80211_send_bar(struct ieee80211_node *ni, 1726170530Ssam const struct ieee80211_tx_ampdu *tap) 1727170530Ssam{ 1728178354Ssam#define senderr(_x, _v) do { vap->iv_stats._v++; ret = _x; goto bad; } while (0) 1729170530Ssam#define ADDSHORT(frm, v) do { \ 1730170530Ssam frm[0] = (v) & 0xff; \ 1731170530Ssam frm[1] = (v) >> 8; \ 1732170530Ssam frm += 2; \ 1733170530Ssam} while (0) 1734178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1735170530Ssam struct ieee80211com *ic = ni->ni_ic; 1736170530Ssam struct ieee80211_frame_min *wh; 1737170530Ssam struct mbuf *m; 1738170530Ssam uint8_t *frm; 1739170530Ssam uint16_t barctl, barseqctl; 1740170530Ssam int tid, ret; 1741170530Ssam 1742170530Ssam ieee80211_ref_node(ni); 1743170530Ssam 1744170530Ssam m = ieee80211_getmgtframe(&frm, 1745170530Ssam ic->ic_headroom + sizeof(struct ieee80211_frame_min), 1746170530Ssam sizeof(struct ieee80211_ba_request) 1747170530Ssam ); 1748170530Ssam if (m == NULL) 1749170530Ssam senderr(ENOMEM, is_tx_nobuf); 1750170530Ssam 1751170530Ssam wh = mtod(m, struct ieee80211_frame_min *); 1752170530Ssam wh->i_fc[0] = IEEE80211_FC0_VERSION_0 | 1753170530Ssam IEEE80211_FC0_TYPE_CTL | IEEE80211_FC0_SUBTYPE_BAR; 1754170530Ssam wh->i_fc[1] = 0; 1755170530Ssam IEEE80211_ADDR_COPY(wh->i_addr1, ni->ni_macaddr); 1756178354Ssam IEEE80211_ADDR_COPY(wh->i_addr2, vap->iv_myaddr); 1757170530Ssam 1758170530Ssam tid = WME_AC_TO_TID(tap->txa_ac); 1759170530Ssam barctl = (tap->txa_flags & IEEE80211_AGGR_IMMEDIATE ? 1760170530Ssam IEEE80211_BAPS_POLICY_IMMEDIATE : 1761170530Ssam IEEE80211_BAPS_POLICY_DELAYED) 1762170530Ssam | SM(tid, IEEE80211_BAPS_TID) 1763170530Ssam | SM(tap->txa_wnd, IEEE80211_BAPS_BUFSIZ) 1764170530Ssam ; 1765170530Ssam barseqctl = SM(tap->txa_start, IEEE80211_BASEQ_START) 1766170530Ssam | SM(0, IEEE80211_BASEQ_FRAG) 1767170530Ssam ; 1768170530Ssam ADDSHORT(frm, barctl); 1769170530Ssam ADDSHORT(frm, barseqctl); 1770170530Ssam m->m_pkthdr.len = m->m_len = frm - mtod(m, uint8_t *); 1771170530Ssam 1772178354Ssam M_WME_SETAC(m, WME_AC_VO); 1773178354Ssam 1774170530Ssam IEEE80211_NODE_STAT(ni, tx_mgmt); /* XXX tx_ctl? */ 1775170530Ssam 1776178354Ssam IEEE80211_NOTE(vap, IEEE80211_MSG_DEBUG | IEEE80211_MSG_DUMPPKTS, 1777173273Ssam ni, "send bar frame (tid %u start %u) on channel %u", 1778173273Ssam tid, tap->txa_start, ieee80211_chan2ieee(ic, ic->ic_curchan)); 1779170530Ssam 1780178354Ssam return ic->ic_raw_xmit(ni, m, NULL); 1781170530Ssambad: 1782170530Ssam ieee80211_free_node(ni); 1783170530Ssam return ret; 1784170530Ssam#undef ADDSHORT 1785170530Ssam#undef senderr 1786170530Ssam} 1787170530Ssam 1788170530Ssam/* 1789170530Ssam * Send an action management frame. The arguments are stuff 1790170530Ssam * into a frame without inspection; the caller is assumed to 1791170530Ssam * prepare them carefully (e.g. based on the aggregation state). 1792170530Ssam */ 1793170530Ssamint 1794170530Ssamieee80211_send_action(struct ieee80211_node *ni, 1795170530Ssam int category, int action, uint16_t args[4]) 1796170530Ssam{ 1797178354Ssam#define senderr(_x, _v) do { vap->iv_stats._v++; ret = _x; goto bad; } while (0) 1798170530Ssam#define ADDSHORT(frm, v) do { \ 1799170530Ssam frm[0] = (v) & 0xff; \ 1800170530Ssam frm[1] = (v) >> 8; \ 1801170530Ssam frm += 2; \ 1802170530Ssam} while (0) 1803178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1804170530Ssam struct ieee80211com *ic = ni->ni_ic; 1805170530Ssam struct mbuf *m; 1806170530Ssam uint8_t *frm; 1807170530Ssam uint16_t baparamset; 1808170530Ssam int ret; 1809170530Ssam 1810170530Ssam KASSERT(ni != NULL, ("null node")); 1811170530Ssam 1812170530Ssam /* 1813170530Ssam * Hold a reference on the node so it doesn't go away until after 1814170530Ssam * the xmit is complete all the way in the driver. On error we 1815170530Ssam * will remove our reference. 1816170530Ssam */ 1817178354Ssam IEEE80211_DPRINTF(vap, IEEE80211_MSG_NODE, 1818170530Ssam "ieee80211_ref_node (%s:%u) %p<%s> refcnt %d\n", 1819170530Ssam __func__, __LINE__, 1820170530Ssam ni, ether_sprintf(ni->ni_macaddr), 1821170530Ssam ieee80211_node_refcnt(ni)+1); 1822170530Ssam ieee80211_ref_node(ni); 1823170530Ssam 1824170530Ssam m = ieee80211_getmgtframe(&frm, 1825170530Ssam ic->ic_headroom + sizeof(struct ieee80211_frame), 1826170530Ssam sizeof(uint16_t) /* action+category */ 1827170530Ssam /* XXX may action payload */ 1828170530Ssam + sizeof(struct ieee80211_action_ba_addbaresponse) 1829170530Ssam ); 1830170530Ssam if (m == NULL) 1831170530Ssam senderr(ENOMEM, is_tx_nobuf); 1832170530Ssam 1833170530Ssam *frm++ = category; 1834170530Ssam *frm++ = action; 1835170530Ssam switch (category) { 1836170530Ssam case IEEE80211_ACTION_CAT_BA: 1837170530Ssam switch (action) { 1838170530Ssam case IEEE80211_ACTION_BA_ADDBA_REQUEST: 1839178354Ssam IEEE80211_NOTE(vap, 1840170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1841173273Ssam "send ADDBA request: dialogtoken %d " 1842173273Ssam "baparamset 0x%x (tid %d) batimeout 0x%x baseqctl 0x%x", 1843173273Ssam args[0], args[1], MS(args[1], IEEE80211_BAPS_TID), 1844173273Ssam args[2], args[3]); 1845170530Ssam 1846170530Ssam *frm++ = args[0]; /* dialog token */ 1847170530Ssam ADDSHORT(frm, args[1]); /* baparamset */ 1848170530Ssam ADDSHORT(frm, args[2]); /* batimeout */ 1849170530Ssam ADDSHORT(frm, args[3]); /* baseqctl */ 1850170530Ssam break; 1851170530Ssam case IEEE80211_ACTION_BA_ADDBA_RESPONSE: 1852178354Ssam IEEE80211_NOTE(vap, 1853170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1854170530Ssam "send ADDBA response: dialogtoken %d status %d " 1855170530Ssam "baparamset 0x%x (tid %d) batimeout %d", 1856170530Ssam args[0], args[1], args[2], 1857170530Ssam MS(args[2], IEEE80211_BAPS_TID), args[3]); 1858170530Ssam 1859170530Ssam *frm++ = args[0]; /* dialog token */ 1860170530Ssam ADDSHORT(frm, args[1]); /* statuscode */ 1861170530Ssam ADDSHORT(frm, args[2]); /* baparamset */ 1862170530Ssam ADDSHORT(frm, args[3]); /* batimeout */ 1863170530Ssam break; 1864170530Ssam case IEEE80211_ACTION_BA_DELBA: 1865170530Ssam /* XXX */ 1866170530Ssam baparamset = SM(args[0], IEEE80211_DELBAPS_TID) 1867180309Ssam | args[1] 1868170530Ssam ; 1869170530Ssam ADDSHORT(frm, baparamset); 1870170530Ssam ADDSHORT(frm, args[2]); /* reason code */ 1871170530Ssam 1872178354Ssam IEEE80211_NOTE(vap, 1873170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1874170530Ssam "send DELBA action: tid %d, initiator %d reason %d", 1875170530Ssam args[0], args[1], args[2]); 1876170530Ssam break; 1877170530Ssam default: 1878170530Ssam goto badaction; 1879170530Ssam } 1880170530Ssam break; 1881170530Ssam case IEEE80211_ACTION_CAT_HT: 1882170530Ssam switch (action) { 1883170530Ssam case IEEE80211_ACTION_HT_TXCHWIDTH: 1884178354Ssam IEEE80211_NOTE(vap, 1885170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, 1886170530Ssam ni, "send HT txchwidth: width %d", 1887178354Ssam IEEE80211_IS_CHAN_HT40(ni->ni_chan) ? 40 : 20 1888170530Ssam ); 1889178354Ssam *frm++ = IEEE80211_IS_CHAN_HT40(ni->ni_chan) ? 1890170530Ssam IEEE80211_A_HT_TXCHWIDTH_2040 : 1891170530Ssam IEEE80211_A_HT_TXCHWIDTH_20; 1892170530Ssam break; 1893170530Ssam default: 1894170530Ssam goto badaction; 1895170530Ssam } 1896170530Ssam break; 1897170530Ssam default: 1898170530Ssam badaction: 1899178354Ssam IEEE80211_NOTE(vap, 1900170530Ssam IEEE80211_MSG_ACTION | IEEE80211_MSG_11N, ni, 1901170530Ssam "%s: unsupported category %d action %d", __func__, 1902170530Ssam category, action); 1903170530Ssam senderr(EINVAL, is_tx_unknownmgt); 1904170530Ssam /* NOTREACHED */ 1905170530Ssam } 1906170530Ssam m->m_pkthdr.len = m->m_len = frm - mtod(m, uint8_t *); 1907170530Ssam 1908178354Ssam return ieee80211_mgmt_output(ni, m, IEEE80211_FC0_SUBTYPE_ACTION); 1909170530Ssambad: 1910170530Ssam ieee80211_free_node(ni); 1911178354Ssam if (m != NULL) 1912178354Ssam m_freem(m); 1913170530Ssam return ret; 1914170530Ssam#undef ADDSHORT 1915170530Ssam#undef senderr 1916170530Ssam} 1917170530Ssam 1918170530Ssam/* 1919170530Ssam * Construct the MCS bit mask for inclusion 1920170530Ssam * in an HT information element. 1921170530Ssam */ 1922170530Ssamstatic void 1923170530Ssamieee80211_set_htrates(uint8_t *frm, const struct ieee80211_htrateset *rs) 1924170530Ssam{ 1925170530Ssam int i; 1926170530Ssam 1927170530Ssam for (i = 0; i < rs->rs_nrates; i++) { 1928170530Ssam int r = rs->rs_rates[i] & IEEE80211_RATE_VAL; 1929170530Ssam if (r < IEEE80211_HTRATE_MAXSIZE) { /* XXX? */ 1930170530Ssam /* NB: this assumes a particular implementation */ 1931170530Ssam setbit(frm, r); 1932170530Ssam } 1933170530Ssam } 1934170530Ssam} 1935170530Ssam 1936170530Ssam/* 1937170530Ssam * Add body of an HTCAP information element. 1938170530Ssam */ 1939170530Ssamstatic uint8_t * 1940170530Ssamieee80211_add_htcap_body(uint8_t *frm, struct ieee80211_node *ni) 1941170530Ssam{ 1942170530Ssam#define ADDSHORT(frm, v) do { \ 1943170530Ssam frm[0] = (v) & 0xff; \ 1944170530Ssam frm[1] = (v) >> 8; \ 1945170530Ssam frm += 2; \ 1946170530Ssam} while (0) 1947178354Ssam struct ieee80211vap *vap = ni->ni_vap; 1948170530Ssam uint16_t caps; 1949173865Ssam int rxmax, density; 1950170530Ssam 1951170530Ssam /* HT capabilities */ 1952178354Ssam caps = vap->iv_htcaps & 0xffff; 1953173273Ssam /* 1954173273Ssam * Note channel width depends on whether we are operating as 1955173273Ssam * a sta or not. When operating as a sta we are generating 1956173273Ssam * a request based on our desired configuration. Otherwise 1957173273Ssam * we are operational and the channel attributes identify 1958173273Ssam * how we've been setup (which might be different if a fixed 1959173273Ssam * channel is specified). 1960173273Ssam */ 1961178354Ssam if (vap->iv_opmode == IEEE80211_M_STA) { 1962173273Ssam /* override 20/40 use based on config */ 1963178354Ssam if (vap->iv_flags_ext & IEEE80211_FEXT_USEHT40) 1964173273Ssam caps |= IEEE80211_HTCAP_CHWIDTH40; 1965173273Ssam else 1966173273Ssam caps &= ~IEEE80211_HTCAP_CHWIDTH40; 1967173865Ssam /* use advertised setting (XXX locally constraint) */ 1968173865Ssam rxmax = MS(ni->ni_htparam, IEEE80211_HTCAP_MAXRXAMPDU); 1969173865Ssam density = MS(ni->ni_htparam, IEEE80211_HTCAP_MPDUDENSITY); 1970173273Ssam } else { 1971173273Ssam /* override 20/40 use based on current channel */ 1972178354Ssam if (IEEE80211_IS_CHAN_HT40(ni->ni_chan)) 1973173273Ssam caps |= IEEE80211_HTCAP_CHWIDTH40; 1974173273Ssam else 1975173273Ssam caps &= ~IEEE80211_HTCAP_CHWIDTH40; 1976178354Ssam rxmax = vap->iv_ampdu_rxmax; 1977178354Ssam density = vap->iv_ampdu_density; 1978173273Ssam } 1979170530Ssam /* adjust short GI based on channel and config */ 1980178354Ssam if ((vap->iv_flags_ext & IEEE80211_FEXT_SHORTGI20) == 0) 1981170530Ssam caps &= ~IEEE80211_HTCAP_SHORTGI20; 1982178354Ssam if ((vap->iv_flags_ext & IEEE80211_FEXT_SHORTGI40) == 0 || 1983170530Ssam (caps & IEEE80211_HTCAP_CHWIDTH40) == 0) 1984170530Ssam caps &= ~IEEE80211_HTCAP_SHORTGI40; 1985170530Ssam ADDSHORT(frm, caps); 1986170530Ssam 1987170530Ssam /* HT parameters */ 1988173865Ssam *frm = SM(rxmax, IEEE80211_HTCAP_MAXRXAMPDU) 1989173865Ssam | SM(density, IEEE80211_HTCAP_MPDUDENSITY) 1990173273Ssam ; 1991170530Ssam frm++; 1992170530Ssam 1993170530Ssam /* pre-zero remainder of ie */ 1994170530Ssam memset(frm, 0, sizeof(struct ieee80211_ie_htcap) - 1995170530Ssam __offsetof(struct ieee80211_ie_htcap, hc_mcsset)); 1996170530Ssam 1997170530Ssam /* supported MCS set */ 1998173273Ssam /* 1999173273Ssam * XXX it would better to get the rate set from ni_htrates 2000173273Ssam * so we can restrict it but for sta mode ni_htrates isn't 2001173273Ssam * setup when we're called to form an AssocReq frame so for 2002173273Ssam * now we're restricted to the default HT rate set. 2003173273Ssam */ 2004173273Ssam ieee80211_set_htrates(frm, &ieee80211_rateset_11n); 2005170530Ssam 2006170530Ssam frm += sizeof(struct ieee80211_ie_htcap) - 2007170530Ssam __offsetof(struct ieee80211_ie_htcap, hc_mcsset); 2008170530Ssam return frm; 2009170530Ssam#undef ADDSHORT 2010170530Ssam} 2011170530Ssam 2012170530Ssam/* 2013170530Ssam * Add 802.11n HT capabilities information element 2014170530Ssam */ 2015170530Ssamuint8_t * 2016170530Ssamieee80211_add_htcap(uint8_t *frm, struct ieee80211_node *ni) 2017170530Ssam{ 2018170530Ssam frm[0] = IEEE80211_ELEMID_HTCAP; 2019170530Ssam frm[1] = sizeof(struct ieee80211_ie_htcap) - 2; 2020170530Ssam return ieee80211_add_htcap_body(frm + 2, ni); 2021170530Ssam} 2022170530Ssam 2023170530Ssam/* 2024170530Ssam * Add Broadcom OUI wrapped standard HTCAP ie; this is 2025170530Ssam * used for compatibility w/ pre-draft implementations. 2026170530Ssam */ 2027170530Ssamuint8_t * 2028170530Ssamieee80211_add_htcap_vendor(uint8_t *frm, struct ieee80211_node *ni) 2029170530Ssam{ 2030170530Ssam frm[0] = IEEE80211_ELEMID_VENDOR; 2031170530Ssam frm[1] = 4 + sizeof(struct ieee80211_ie_htcap) - 2; 2032170530Ssam frm[2] = (BCM_OUI >> 0) & 0xff; 2033170530Ssam frm[3] = (BCM_OUI >> 8) & 0xff; 2034170530Ssam frm[4] = (BCM_OUI >> 16) & 0xff; 2035170530Ssam frm[5] = BCM_OUI_HTCAP; 2036170530Ssam return ieee80211_add_htcap_body(frm + 6, ni); 2037170530Ssam} 2038170530Ssam 2039170530Ssam/* 2040170530Ssam * Construct the MCS bit mask of basic rates 2041170530Ssam * for inclusion in an HT information element. 2042170530Ssam */ 2043170530Ssamstatic void 2044170530Ssamieee80211_set_basic_htrates(uint8_t *frm, const struct ieee80211_htrateset *rs) 2045170530Ssam{ 2046170530Ssam int i; 2047170530Ssam 2048170530Ssam for (i = 0; i < rs->rs_nrates; i++) { 2049170530Ssam int r = rs->rs_rates[i] & IEEE80211_RATE_VAL; 2050170530Ssam if ((rs->rs_rates[i] & IEEE80211_RATE_BASIC) && 2051170530Ssam r < IEEE80211_HTRATE_MAXSIZE) { 2052170530Ssam /* NB: this assumes a particular implementation */ 2053170530Ssam setbit(frm, r); 2054170530Ssam } 2055170530Ssam } 2056170530Ssam} 2057170530Ssam 2058170530Ssam/* 2059172211Ssam * Update the HTINFO ie for a beacon frame. 2060172211Ssam */ 2061172211Ssamvoid 2062178354Ssamieee80211_ht_update_beacon(struct ieee80211vap *vap, 2063172211Ssam struct ieee80211_beacon_offsets *bo) 2064172211Ssam{ 2065172211Ssam#define PROTMODE (IEEE80211_HTINFO_OPMODE|IEEE80211_HTINFO_NONHT_PRESENT) 2066178354Ssam const struct ieee80211_channel *bsschan = vap->iv_bss->ni_chan; 2067178354Ssam struct ieee80211com *ic = vap->iv_ic; 2068172211Ssam struct ieee80211_ie_htinfo *ht = 2069172211Ssam (struct ieee80211_ie_htinfo *) bo->bo_htinfo; 2070172211Ssam 2071172211Ssam /* XXX only update on channel change */ 2072178354Ssam ht->hi_ctrlchannel = ieee80211_chan2ieee(ic, bsschan); 2073172211Ssam ht->hi_byte1 = IEEE80211_HTINFO_RIFSMODE_PROH; 2074178354Ssam if (IEEE80211_IS_CHAN_HT40U(bsschan)) 2075172211Ssam ht->hi_byte1 |= IEEE80211_HTINFO_2NDCHAN_ABOVE; 2076178354Ssam else if (IEEE80211_IS_CHAN_HT40D(bsschan)) 2077172211Ssam ht->hi_byte1 |= IEEE80211_HTINFO_2NDCHAN_BELOW; 2078172211Ssam else 2079172211Ssam ht->hi_byte1 |= IEEE80211_HTINFO_2NDCHAN_NONE; 2080178354Ssam if (IEEE80211_IS_CHAN_HT40(bsschan)) 2081172211Ssam ht->hi_byte1 |= IEEE80211_HTINFO_TXWIDTH_2040; 2082172211Ssam 2083172211Ssam /* protection mode */ 2084172211Ssam ht->hi_byte2 = (ht->hi_byte2 &~ PROTMODE) | ic->ic_curhtprotmode; 2085172211Ssam 2086172211Ssam /* XXX propagate to vendor ie's */ 2087172211Ssam#undef PROTMODE 2088172211Ssam} 2089172211Ssam 2090172211Ssam/* 2091170530Ssam * Add body of an HTINFO information element. 2092173273Ssam * 2093173273Ssam * NB: We don't use struct ieee80211_ie_htinfo because we can 2094173273Ssam * be called to fillin both a standard ie and a compat ie that 2095173273Ssam * has a vendor OUI at the front. 2096170530Ssam */ 2097170530Ssamstatic uint8_t * 2098170530Ssamieee80211_add_htinfo_body(uint8_t *frm, struct ieee80211_node *ni) 2099170530Ssam{ 2100170530Ssam struct ieee80211com *ic = ni->ni_ic; 2101170530Ssam 2102170530Ssam /* pre-zero remainder of ie */ 2103170530Ssam memset(frm, 0, sizeof(struct ieee80211_ie_htinfo) - 2); 2104170530Ssam 2105170530Ssam /* primary/control channel center */ 2106178354Ssam *frm++ = ieee80211_chan2ieee(ic, ni->ni_chan); 2107170530Ssam 2108170530Ssam frm[0] = IEEE80211_HTINFO_RIFSMODE_PROH; 2109178354Ssam if (IEEE80211_IS_CHAN_HT40U(ni->ni_chan)) 2110170530Ssam frm[0] |= IEEE80211_HTINFO_2NDCHAN_ABOVE; 2111178354Ssam else if (IEEE80211_IS_CHAN_HT40D(ni->ni_chan)) 2112170530Ssam frm[0] |= IEEE80211_HTINFO_2NDCHAN_BELOW; 2113170530Ssam else 2114170530Ssam frm[0] |= IEEE80211_HTINFO_2NDCHAN_NONE; 2115178354Ssam if (IEEE80211_IS_CHAN_HT40(ni->ni_chan)) 2116170530Ssam frm[0] |= IEEE80211_HTINFO_TXWIDTH_2040; 2117170530Ssam 2118172211Ssam frm[1] = ic->ic_curhtprotmode; 2119170530Ssam 2120170530Ssam frm += 5; 2121170530Ssam 2122170530Ssam /* basic MCS set */ 2123170530Ssam ieee80211_set_basic_htrates(frm, &ni->ni_htrates); 2124170530Ssam frm += sizeof(struct ieee80211_ie_htinfo) - 2125170530Ssam __offsetof(struct ieee80211_ie_htinfo, hi_basicmcsset); 2126170530Ssam return frm; 2127170530Ssam} 2128170530Ssam 2129170530Ssam/* 2130170530Ssam * Add 802.11n HT information information element. 2131170530Ssam */ 2132170530Ssamuint8_t * 2133170530Ssamieee80211_add_htinfo(uint8_t *frm, struct ieee80211_node *ni) 2134170530Ssam{ 2135170530Ssam frm[0] = IEEE80211_ELEMID_HTINFO; 2136170530Ssam frm[1] = sizeof(struct ieee80211_ie_htinfo) - 2; 2137170530Ssam return ieee80211_add_htinfo_body(frm + 2, ni); 2138170530Ssam} 2139170530Ssam 2140170530Ssam/* 2141170530Ssam * Add Broadcom OUI wrapped standard HTINFO ie; this is 2142170530Ssam * used for compatibility w/ pre-draft implementations. 2143170530Ssam */ 2144170530Ssamuint8_t * 2145170530Ssamieee80211_add_htinfo_vendor(uint8_t *frm, struct ieee80211_node *ni) 2146170530Ssam{ 2147170530Ssam frm[0] = IEEE80211_ELEMID_VENDOR; 2148170530Ssam frm[1] = 4 + sizeof(struct ieee80211_ie_htinfo) - 2; 2149170530Ssam frm[2] = (BCM_OUI >> 0) & 0xff; 2150170530Ssam frm[3] = (BCM_OUI >> 8) & 0xff; 2151170530Ssam frm[4] = (BCM_OUI >> 16) & 0xff; 2152170530Ssam frm[5] = BCM_OUI_HTINFO; 2153170530Ssam return ieee80211_add_htinfo_body(frm + 6, ni); 2154170530Ssam} 2155