1/*-
2 * SPDX-License-Identifier: BSD-2-Clause-FreeBSD
3 *
4 * Copyright (c) 2001 Atsushi Onoe
5 * Copyright (c) 2002-2009 Sam Leffler, Errno Consulting
6 * All rights reserved.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
10 * are met:
11 * 1. Redistributions of source code must retain the above copyright
12 *    notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 *    notice, this list of conditions and the following disclaimer in the
15 *    documentation and/or other materials provided with the distribution.
16 *
17 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
18 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
19 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
20 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
21 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
22 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
23 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
24 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
25 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
26 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27 *
28 * $FreeBSD: releng/12.0/sys/net80211/ieee80211.h 326272 2017-11-27 15:23:17Z pfg $
29 */
30#ifndef _NET80211_IEEE80211_H_
31#define _NET80211_IEEE80211_H_
32
33/*
34 * 802.11 protocol definitions.
35 */
36
37#define	IEEE80211_ADDR_LEN	6		/* size of 802.11 address */
38/* is 802.11 address multicast/broadcast? */
39#define	IEEE80211_IS_MULTICAST(_a)	(*(_a) & 0x01)
40
41#ifdef _KERNEL
42extern const uint8_t ieee80211broadcastaddr[];
43#endif
44
45typedef uint16_t ieee80211_seq;
46
47/* IEEE 802.11 PLCP header */
48struct ieee80211_plcp_hdr {
49	uint16_t	i_sfd;
50	uint8_t		i_signal;
51	uint8_t		i_service;
52	uint16_t	i_length;
53	uint16_t	i_crc;
54} __packed;
55
56#define IEEE80211_PLCP_SFD      0xF3A0
57#define IEEE80211_PLCP_SERVICE  0x00
58#define IEEE80211_PLCP_SERVICE_LOCKED	0x04
59#define IEEE80211_PLCL_SERVICE_PBCC	0x08
60#define IEEE80211_PLCP_SERVICE_LENEXT5	0x20
61#define IEEE80211_PLCP_SERVICE_LENEXT6	0x40
62#define IEEE80211_PLCP_SERVICE_LENEXT7	0x80
63
64/*
65 * generic definitions for IEEE 802.11 frames
66 */
67struct ieee80211_frame {
68	uint8_t		i_fc[2];
69	uint8_t		i_dur[2];
70	uint8_t		i_addr1[IEEE80211_ADDR_LEN];
71	uint8_t		i_addr2[IEEE80211_ADDR_LEN];
72	uint8_t		i_addr3[IEEE80211_ADDR_LEN];
73	uint8_t		i_seq[2];
74	/* possibly followed by addr4[IEEE80211_ADDR_LEN]; */
75	/* see below */
76} __packed;
77
78struct ieee80211_qosframe {
79	uint8_t		i_fc[2];
80	uint8_t		i_dur[2];
81	uint8_t		i_addr1[IEEE80211_ADDR_LEN];
82	uint8_t		i_addr2[IEEE80211_ADDR_LEN];
83	uint8_t		i_addr3[IEEE80211_ADDR_LEN];
84	uint8_t		i_seq[2];
85	uint8_t		i_qos[2];
86	/* possibly followed by addr4[IEEE80211_ADDR_LEN]; */
87	/* see below */
88} __packed;
89
90struct ieee80211_qoscntl {
91	uint8_t		i_qos[2];
92};
93
94struct ieee80211_frame_addr4 {
95	uint8_t		i_fc[2];
96	uint8_t		i_dur[2];
97	uint8_t		i_addr1[IEEE80211_ADDR_LEN];
98	uint8_t		i_addr2[IEEE80211_ADDR_LEN];
99	uint8_t		i_addr3[IEEE80211_ADDR_LEN];
100	uint8_t		i_seq[2];
101	uint8_t		i_addr4[IEEE80211_ADDR_LEN];
102} __packed;
103
104struct ieee80211_qosframe_addr4 {
105	uint8_t		i_fc[2];
106	uint8_t		i_dur[2];
107	uint8_t		i_addr1[IEEE80211_ADDR_LEN];
108	uint8_t		i_addr2[IEEE80211_ADDR_LEN];
109	uint8_t		i_addr3[IEEE80211_ADDR_LEN];
110	uint8_t		i_seq[2];
111	uint8_t		i_addr4[IEEE80211_ADDR_LEN];
112	uint8_t		i_qos[2];
113} __packed;
114
115#define	IEEE80211_FC0_VERSION_MASK		0x03
116#define	IEEE80211_FC0_VERSION_SHIFT		0
117#define	IEEE80211_FC0_VERSION_0			0x00
118#define	IEEE80211_FC0_TYPE_MASK			0x0c
119#define	IEEE80211_FC0_TYPE_SHIFT		2
120#define	IEEE80211_FC0_TYPE_MGT			0x00
121#define	IEEE80211_FC0_TYPE_CTL			0x04
122#define	IEEE80211_FC0_TYPE_DATA			0x08
123
124#define	IEEE80211_FC0_SUBTYPE_MASK		0xf0
125#define	IEEE80211_FC0_SUBTYPE_SHIFT		4
126/* for TYPE_MGT */
127#define	IEEE80211_FC0_SUBTYPE_ASSOC_REQ		0x00
128#define	IEEE80211_FC0_SUBTYPE_ASSOC_RESP	0x10
129#define	IEEE80211_FC0_SUBTYPE_REASSOC_REQ	0x20
130#define	IEEE80211_FC0_SUBTYPE_REASSOC_RESP	0x30
131#define	IEEE80211_FC0_SUBTYPE_PROBE_REQ		0x40
132#define	IEEE80211_FC0_SUBTYPE_PROBE_RESP	0x50
133#define	IEEE80211_FC0_SUBTYPE_TIMING_ADV	0x60
134#define	IEEE80211_FC0_SUBTYPE_BEACON		0x80
135#define	IEEE80211_FC0_SUBTYPE_ATIM		0x90
136#define	IEEE80211_FC0_SUBTYPE_DISASSOC		0xa0
137#define	IEEE80211_FC0_SUBTYPE_AUTH		0xb0
138#define	IEEE80211_FC0_SUBTYPE_DEAUTH		0xc0
139#define	IEEE80211_FC0_SUBTYPE_ACTION		0xd0
140#define	IEEE80211_FC0_SUBTYPE_ACTION_NOACK	0xe0
141/* for TYPE_CTL */
142#define	IEEE80211_FC0_SUBTYPE_CONTROL_WRAP	0x70
143#define	IEEE80211_FC0_SUBTYPE_BAR		0x80
144#define	IEEE80211_FC0_SUBTYPE_BA		0x90
145#define	IEEE80211_FC0_SUBTYPE_PS_POLL		0xa0
146#define	IEEE80211_FC0_SUBTYPE_RTS		0xb0
147#define	IEEE80211_FC0_SUBTYPE_CTS		0xc0
148#define	IEEE80211_FC0_SUBTYPE_ACK		0xd0
149#define	IEEE80211_FC0_SUBTYPE_CF_END		0xe0
150#define	IEEE80211_FC0_SUBTYPE_CF_END_ACK	0xf0
151/* for TYPE_DATA (bit combination) */
152#define	IEEE80211_FC0_SUBTYPE_DATA		0x00
153#define	IEEE80211_FC0_SUBTYPE_CF_ACK		0x10
154#define	IEEE80211_FC0_SUBTYPE_CF_POLL		0x20
155#define	IEEE80211_FC0_SUBTYPE_CF_ACPL		0x30
156#define	IEEE80211_FC0_SUBTYPE_NODATA		0x40
157#define	IEEE80211_FC0_SUBTYPE_CFACK		0x50
158#define	IEEE80211_FC0_SUBTYPE_CFPOLL		0x60
159#define	IEEE80211_FC0_SUBTYPE_CF_ACK_CF_ACK	0x70
160#define	IEEE80211_FC0_SUBTYPE_QOS		0x80
161#define	IEEE80211_FC0_SUBTYPE_QOS_CFACK		0x90
162#define	IEEE80211_FC0_SUBTYPE_QOS_CFPOLL	0xa0
163#define	IEEE80211_FC0_SUBTYPE_QOS_CFACKPOLL	0xb0
164#define	IEEE80211_FC0_SUBTYPE_QOS_NULL		0xc0
165
166#define	IEEE80211_IS_MGMT(wh)					\
167	(!! (((wh)->i_fc[0] & IEEE80211_FC0_TYPE_MASK)		\
168	    == IEEE80211_FC0_TYPE_MGT))
169#define	IEEE80211_IS_CTL(wh)					\
170	(!! (((wh)->i_fc[0] & IEEE80211_FC0_TYPE_MASK)		\
171	    == IEEE80211_FC0_TYPE_CTL))
172#define	IEEE80211_IS_DATA(wh)					\
173	(!! (((wh)->i_fc[0] & IEEE80211_FC0_TYPE_MASK)		\
174	    == IEEE80211_FC0_TYPE_DATA))
175
176#define	IEEE80211_FC0_QOSDATA \
177	(IEEE80211_FC0_TYPE_DATA|IEEE80211_FC0_SUBTYPE_QOS|IEEE80211_FC0_VERSION_0)
178
179#define	IEEE80211_IS_QOSDATA(wh) \
180	((wh)->i_fc[0] == IEEE80211_FC0_QOSDATA)
181
182#define	IEEE80211_FC1_DIR_MASK			0x03
183#define	IEEE80211_FC1_DIR_NODS			0x00	/* STA->STA */
184#define	IEEE80211_FC1_DIR_TODS			0x01	/* STA->AP  */
185#define	IEEE80211_FC1_DIR_FROMDS		0x02	/* AP ->STA */
186#define	IEEE80211_FC1_DIR_DSTODS		0x03	/* AP ->AP  */
187
188#define	IEEE80211_IS_DSTODS(wh) \
189	(((wh)->i_fc[1] & IEEE80211_FC1_DIR_MASK) == IEEE80211_FC1_DIR_DSTODS)
190
191#define	IEEE80211_FC1_MORE_FRAG			0x04
192#define	IEEE80211_FC1_RETRY			0x08
193#define	IEEE80211_FC1_PWR_MGT			0x10
194#define	IEEE80211_FC1_MORE_DATA			0x20
195#define	IEEE80211_FC1_PROTECTED			0x40
196#define	IEEE80211_FC1_ORDER			0x80
197
198#define IEEE80211_HAS_SEQ(type, subtype) \
199	((type) != IEEE80211_FC0_TYPE_CTL && \
200	!((type) == IEEE80211_FC0_TYPE_DATA && \
201	 ((subtype) & IEEE80211_FC0_SUBTYPE_QOS_NULL) == \
202		      IEEE80211_FC0_SUBTYPE_QOS_NULL))
203#define	IEEE80211_SEQ_FRAG_MASK			0x000f
204#define	IEEE80211_SEQ_FRAG_SHIFT		0
205#define	IEEE80211_SEQ_SEQ_MASK			0xfff0
206#define	IEEE80211_SEQ_SEQ_SHIFT			4
207#define	IEEE80211_SEQ_RANGE			4096
208
209#define	IEEE80211_SEQ_ADD(seq, incr) \
210	(((seq) + (incr)) & (IEEE80211_SEQ_RANGE-1))
211#define	IEEE80211_SEQ_INC(seq)	IEEE80211_SEQ_ADD(seq,1)
212#define	IEEE80211_SEQ_SUB(a, b) \
213	(((a) + IEEE80211_SEQ_RANGE - (b)) & (IEEE80211_SEQ_RANGE-1))
214
215#define	IEEE80211_SEQ_BA_RANGE			2048	/* 2^11 */
216#define	IEEE80211_SEQ_BA_BEFORE(a, b) \
217	(IEEE80211_SEQ_SUB(b, a+1) < IEEE80211_SEQ_BA_RANGE-1)
218
219#define	IEEE80211_NWID_LEN			32
220#define	IEEE80211_MESHID_LEN			32
221
222#define	IEEE80211_QOS_CTL_LEN			2
223
224#define	IEEE80211_QOS_TXOP			0x00ff
225/* bit 8 is reserved */
226#define	IEEE80211_QOS_AMSDU			0x80
227#define	IEEE80211_QOS_AMSDU_S			7
228#define	IEEE80211_QOS_ACKPOLICY			0x60
229#define	IEEE80211_QOS_ACKPOLICY_S		5
230#define	IEEE80211_QOS_ACKPOLICY_NOACK		0x20	/* No ACK required */
231#define	IEEE80211_QOS_ACKPOLICY_BA		0x60	/* Block ACK */
232#define	IEEE80211_QOS_EOSP			0x10	/* EndOfService Period*/
233#define	IEEE80211_QOS_EOSP_S			4
234#define	IEEE80211_QOS_TID			0x0f
235/* qos[1] byte used for all frames sent by mesh STAs in a mesh BSS */
236#define IEEE80211_QOS_MC			0x01	/* Mesh control */
237/* Mesh power save level*/
238#define IEEE80211_QOS_MESH_PSL			0x02
239/* Mesh Receiver Service Period Initiated */
240#define IEEE80211_QOS_RSPI			0x04
241/* bits 11 to 15 reserved */
242
243/* does frame have QoS sequence control data */
244#define	IEEE80211_QOS_HAS_SEQ(wh) \
245	(((wh)->i_fc[0] & \
246	  (IEEE80211_FC0_TYPE_MASK | IEEE80211_FC0_SUBTYPE_QOS)) == \
247	  (IEEE80211_FC0_TYPE_DATA | IEEE80211_FC0_SUBTYPE_QOS))
248
249/*
250 * WME/802.11e information element.
251 */
252struct ieee80211_wme_info {
253	uint8_t		wme_id;		/* IEEE80211_ELEMID_VENDOR */
254	uint8_t		wme_len;	/* length in bytes */
255	uint8_t		wme_oui[3];	/* 0x00, 0x50, 0xf2 */
256	uint8_t		wme_type;	/* OUI type */
257	uint8_t		wme_subtype;	/* OUI subtype */
258	uint8_t		wme_version;	/* spec revision */
259	uint8_t		wme_info;	/* QoS info */
260} __packed;
261
262/*
263 * WME/802.11e Tspec Element
264 */
265struct ieee80211_wme_tspec {
266	uint8_t		ts_id;
267	uint8_t		ts_len;
268	uint8_t		ts_oui[3];
269	uint8_t		ts_oui_type;
270	uint8_t		ts_oui_subtype;
271	uint8_t		ts_version;
272	uint8_t		ts_tsinfo[3];
273	uint8_t		ts_nom_msdu[2];
274	uint8_t		ts_max_msdu[2];
275	uint8_t		ts_min_svc[4];
276	uint8_t		ts_max_svc[4];
277	uint8_t		ts_inactv_intv[4];
278	uint8_t		ts_susp_intv[4];
279	uint8_t		ts_start_svc[4];
280	uint8_t		ts_min_rate[4];
281	uint8_t		ts_mean_rate[4];
282	uint8_t		ts_max_burst[4];
283	uint8_t		ts_min_phy[4];
284	uint8_t		ts_peak_rate[4];
285	uint8_t		ts_delay[4];
286	uint8_t		ts_surplus[2];
287	uint8_t		ts_medium_time[2];
288} __packed;
289
290/*
291 * WME AC parameter field
292 */
293struct ieee80211_wme_acparams {
294	uint8_t		acp_aci_aifsn;
295	uint8_t		acp_logcwminmax;
296	uint16_t	acp_txop;
297} __packed;
298
299#define WME_NUM_AC		4	/* 4 AC categories */
300#define	WME_NUM_TID		16	/* 16 tids */
301
302#define WME_PARAM_ACI		0x60	/* Mask for ACI field */
303#define WME_PARAM_ACI_S		5	/* Shift for ACI field */
304#define WME_PARAM_ACM		0x10	/* Mask for ACM bit */
305#define WME_PARAM_ACM_S		4	/* Shift for ACM bit */
306#define WME_PARAM_AIFSN		0x0f	/* Mask for aifsn field */
307#define WME_PARAM_AIFSN_S	0	/* Shift for aifsn field */
308#define WME_PARAM_LOGCWMIN	0x0f	/* Mask for CwMin field (in log) */
309#define WME_PARAM_LOGCWMIN_S	0	/* Shift for CwMin field */
310#define WME_PARAM_LOGCWMAX	0xf0	/* Mask for CwMax field (in log) */
311#define WME_PARAM_LOGCWMAX_S	4	/* Shift for CwMax field */
312
313#define WME_AC_TO_TID(_ac) (       \
314	((_ac) == WME_AC_VO) ? 6 : \
315	((_ac) == WME_AC_VI) ? 5 : \
316	((_ac) == WME_AC_BK) ? 1 : \
317	0)
318
319#define TID_TO_WME_AC(_tid) (      \
320	((_tid) == 0 || (_tid) == 3) ? WME_AC_BE : \
321	((_tid) < 3) ? WME_AC_BK : \
322	((_tid) < 6) ? WME_AC_VI : \
323	WME_AC_VO)
324
325/*
326 * WME Parameter Element
327 */
328struct ieee80211_wme_param {
329	uint8_t		param_id;
330	uint8_t		param_len;
331	uint8_t		param_oui[3];
332	uint8_t		param_oui_type;
333	uint8_t		param_oui_subtype;
334	uint8_t		param_version;
335	uint8_t		param_qosInfo;
336#define	WME_QOSINFO_COUNT	0x0f	/* Mask for param count field */
337	uint8_t		param_reserved;
338	struct ieee80211_wme_acparams	params_acParams[WME_NUM_AC];
339} __packed;
340
341/*
342 * WME U-APSD qos info field defines
343 */
344#define	WME_CAPINFO_UAPSD_EN                    0x00000080
345#define	WME_CAPINFO_UAPSD_VO                    0x00000001
346#define	WME_CAPINFO_UAPSD_VI                    0x00000002
347#define	WME_CAPINFO_UAPSD_BK                    0x00000004
348#define	WME_CAPINFO_UAPSD_BE                    0x00000008
349#define	WME_CAPINFO_UAPSD_ACFLAGS_SHIFT         0
350#define	WME_CAPINFO_UAPSD_ACFLAGS_MASK          0xF
351#define	WME_CAPINFO_UAPSD_MAXSP_SHIFT           5
352#define	WME_CAPINFO_UAPSD_MAXSP_MASK            0x3
353#define	WME_CAPINFO_IE_OFFSET                   8
354#define	WME_UAPSD_MAXSP(_qosinfo)				\
355	    (((_qosinfo) >> WME_CAPINFO_UAPSD_MAXSP_SHIFT) &	\
356	    WME_CAPINFO_UAPSD_MAXSP_MASK)
357#define	WME_UAPSD_AC_ENABLED(_ac, _qosinfo)			\
358	    ((1 << (3 - (_ac))) & (				\
359	    ((_qosinfo) >> WME_CAPINFO_UAPSD_ACFLAGS_SHIFT) &	\
360	    WME_CAPINFO_UAPSD_ACFLAGS_MASK))
361
362/*
363 * Management Notification Frame
364 */
365struct ieee80211_mnf {
366	uint8_t		mnf_category;
367	uint8_t		mnf_action;
368	uint8_t		mnf_dialog;
369	uint8_t		mnf_status;
370} __packed;
371#define	MNF_SETUP_REQ	0
372#define	MNF_SETUP_RESP	1
373#define	MNF_TEARDOWN	2
374
375/*
376 * 802.11n Management Action Frames
377 */
378/* generic frame format */
379struct ieee80211_action {
380	uint8_t		ia_category;
381	uint8_t		ia_action;
382} __packed;
383
384#define	IEEE80211_ACTION_CAT_SM		0	/* Spectrum Management */
385#define	IEEE80211_ACTION_CAT_QOS	1	/* QoS */
386#define	IEEE80211_ACTION_CAT_DLS	2	/* DLS */
387#define	IEEE80211_ACTION_CAT_BA		3	/* BA */
388#define	IEEE80211_ACTION_CAT_HT		7	/* HT */
389#define	IEEE80211_ACTION_CAT_MESH	13	/* Mesh */
390#define	IEEE80211_ACTION_CAT_SELF_PROT	15	/* Self-protected */
391/* 16 - 125 reserved */
392#define	IEEE80211_ACTION_CAT_VHT	21
393#define	IEEE80211_ACTION_CAT_VENDOR	127	/* Vendor Specific */
394
395#define	IEEE80211_ACTION_HT_TXCHWIDTH	0	/* recommended xmit chan width*/
396#define	IEEE80211_ACTION_HT_MIMOPWRSAVE	1	/* MIMO power save */
397
398/* HT - recommended transmission channel width */
399struct ieee80211_action_ht_txchwidth {
400	struct ieee80211_action	at_header;
401	uint8_t		at_chwidth;
402} __packed;
403
404#define	IEEE80211_A_HT_TXCHWIDTH_20	0
405#define	IEEE80211_A_HT_TXCHWIDTH_2040	1
406
407/* HT - MIMO Power Save (NB: D2.04) */
408struct ieee80211_action_ht_mimopowersave {
409	struct ieee80211_action am_header;
410	uint8_t		am_control;
411} __packed;
412
413#define	IEEE80211_A_HT_MIMOPWRSAVE_ENA		0x01	/* PS enabled */
414#define	IEEE80211_A_HT_MIMOPWRSAVE_MODE		0x02
415#define	IEEE80211_A_HT_MIMOPWRSAVE_MODE_S	1
416#define	IEEE80211_A_HT_MIMOPWRSAVE_DYNAMIC	0x02	/* Dynamic Mode */
417#define	IEEE80211_A_HT_MIMOPWRSAVE_STATIC	0x00	/* no SM packets */
418/* bits 2-7 reserved */
419
420/* Block Ack actions */
421#define IEEE80211_ACTION_BA_ADDBA_REQUEST       0   /* ADDBA request */
422#define IEEE80211_ACTION_BA_ADDBA_RESPONSE      1   /* ADDBA response */
423#define IEEE80211_ACTION_BA_DELBA	        2   /* DELBA */
424
425/* Block Ack Parameter Set */
426#define	IEEE80211_BAPS_BUFSIZ	0xffc0		/* buffer size */
427#define	IEEE80211_BAPS_BUFSIZ_S	6
428#define	IEEE80211_BAPS_TID	0x003c		/* TID */
429#define	IEEE80211_BAPS_TID_S	2
430#define	IEEE80211_BAPS_POLICY	0x0002		/* block ack policy */
431#define	IEEE80211_BAPS_POLICY_S	1
432#define	IEEE80211_BAPS_AMSDU	0x0001		/* A-MSDU permitted */
433#define	IEEE80211_BAPS_AMSDU_S	0
434
435#define	IEEE80211_BAPS_POLICY_DELAYED	(0<<IEEE80211_BAPS_POLICY_S)
436#define	IEEE80211_BAPS_POLICY_IMMEDIATE	(1<<IEEE80211_BAPS_POLICY_S)
437
438/* Block Ack Sequence Control */
439#define	IEEE80211_BASEQ_START	0xfff0		/* starting seqnum */
440#define	IEEE80211_BASEQ_START_S	4
441#define	IEEE80211_BASEQ_FRAG	0x000f		/* fragment number */
442#define	IEEE80211_BASEQ_FRAG_S	0
443
444/* Delayed Block Ack Parameter Set */
445#define	IEEE80211_DELBAPS_TID	0xf000		/* TID */
446#define	IEEE80211_DELBAPS_TID_S	12
447#define	IEEE80211_DELBAPS_INIT	0x0800		/* initiator */
448#define	IEEE80211_DELBAPS_INIT_S 11
449
450/* BA - ADDBA request */
451struct ieee80211_action_ba_addbarequest {
452	struct ieee80211_action rq_header;
453	uint8_t		rq_dialogtoken;
454	uint16_t	rq_baparamset;
455	uint16_t	rq_batimeout;		/* in TUs */
456	uint16_t	rq_baseqctl;
457} __packed;
458
459/* BA - ADDBA response */
460struct ieee80211_action_ba_addbaresponse {
461	struct ieee80211_action rs_header;
462	uint8_t		rs_dialogtoken;
463	uint16_t	rs_statuscode;
464	uint16_t	rs_baparamset;
465	uint16_t	rs_batimeout;		/* in TUs */
466} __packed;
467
468/* BA - DELBA */
469struct ieee80211_action_ba_delba {
470	struct ieee80211_action dl_header;
471	uint16_t	dl_baparamset;
472	uint16_t	dl_reasoncode;
473} __packed;
474
475/* BAR Control */
476#define	IEEE80211_BAR_TID	0xf000		/* TID */
477#define	IEEE80211_BAR_TID_S	12
478#define	IEEE80211_BAR_COMP	0x0004		/* Compressed Bitmap */
479#define	IEEE80211_BAR_MTID	0x0002		/* Multi-TID */
480#define	IEEE80211_BAR_NOACK	0x0001		/* No-Ack policy */
481
482/* BAR Starting Sequence Control */
483#define	IEEE80211_BAR_SEQ_START	0xfff0		/* starting seqnum */
484#define	IEEE80211_BAR_SEQ_START_S	4
485
486struct ieee80211_ba_request {
487	uint16_t	rq_barctl;
488	uint16_t	rq_barseqctl;
489} __packed;
490
491/*
492 * Control frames.
493 */
494struct ieee80211_frame_min {
495	uint8_t		i_fc[2];
496	uint8_t		i_dur[2];
497	uint8_t		i_addr1[IEEE80211_ADDR_LEN];
498	uint8_t		i_addr2[IEEE80211_ADDR_LEN];
499	/* FCS */
500} __packed;
501
502struct ieee80211_frame_rts {
503	uint8_t		i_fc[2];
504	uint8_t		i_dur[2];
505	uint8_t		i_ra[IEEE80211_ADDR_LEN];
506	uint8_t		i_ta[IEEE80211_ADDR_LEN];
507	/* FCS */
508} __packed;
509
510struct ieee80211_frame_cts {
511	uint8_t		i_fc[2];
512	uint8_t		i_dur[2];
513	uint8_t		i_ra[IEEE80211_ADDR_LEN];
514	/* FCS */
515} __packed;
516
517struct ieee80211_frame_ack {
518	uint8_t		i_fc[2];
519	uint8_t		i_dur[2];
520	uint8_t		i_ra[IEEE80211_ADDR_LEN];
521	/* FCS */
522} __packed;
523
524struct ieee80211_frame_pspoll {
525	uint8_t		i_fc[2];
526	uint8_t		i_aid[2];
527	uint8_t		i_bssid[IEEE80211_ADDR_LEN];
528	uint8_t		i_ta[IEEE80211_ADDR_LEN];
529	/* FCS */
530} __packed;
531
532struct ieee80211_frame_cfend {		/* NB: also CF-End+CF-Ack */
533	uint8_t		i_fc[2];
534	uint8_t		i_dur[2];	/* should be zero */
535	uint8_t		i_ra[IEEE80211_ADDR_LEN];
536	uint8_t		i_bssid[IEEE80211_ADDR_LEN];
537	/* FCS */
538} __packed;
539
540struct ieee80211_frame_bar {
541	uint8_t		i_fc[2];
542	uint8_t		i_dur[2];
543	uint8_t		i_ra[IEEE80211_ADDR_LEN];
544	uint8_t		i_ta[IEEE80211_ADDR_LEN];
545	uint16_t	i_ctl;
546	uint16_t	i_seq;
547	/* FCS */
548} __packed;
549
550/*
551 * BEACON management packets
552 *
553 *	octet timestamp[8]
554 *	octet beacon interval[2]
555 *	octet capability information[2]
556 *	information element
557 *		octet elemid
558 *		octet length
559 *		octet information[length]
560 */
561
562#define	IEEE80211_BEACON_INTERVAL(beacon) \
563	((beacon)[8] | ((beacon)[9] << 8))
564#define	IEEE80211_BEACON_CAPABILITY(beacon) \
565	((beacon)[10] | ((beacon)[11] << 8))
566
567#define	IEEE80211_CAPINFO_ESS			0x0001
568#define	IEEE80211_CAPINFO_IBSS			0x0002
569#define	IEEE80211_CAPINFO_CF_POLLABLE		0x0004
570#define	IEEE80211_CAPINFO_CF_POLLREQ		0x0008
571#define	IEEE80211_CAPINFO_PRIVACY		0x0010
572#define	IEEE80211_CAPINFO_SHORT_PREAMBLE	0x0020
573#define	IEEE80211_CAPINFO_PBCC			0x0040
574#define	IEEE80211_CAPINFO_CHNL_AGILITY		0x0080
575#define	IEEE80211_CAPINFO_SPECTRUM_MGMT		0x0100
576/* bit 9 is reserved */
577#define	IEEE80211_CAPINFO_SHORT_SLOTTIME	0x0400
578#define	IEEE80211_CAPINFO_RSN			0x0800
579/* bit 12 is reserved */
580#define	IEEE80211_CAPINFO_DSSSOFDM		0x2000
581/* bits 14-15 are reserved */
582
583#define	IEEE80211_CAPINFO_BITS \
584	"\20\1ESS\2IBSS\3CF_POLLABLE\4CF_POLLREQ\5PRIVACY\6SHORT_PREAMBLE" \
585	"\7PBCC\10CHNL_AGILITY\11SPECTRUM_MGMT\13SHORT_SLOTTIME\14RSN" \
586	"\16DSSOFDM"
587
588/*
589 * 802.11i/WPA information element (maximally sized).
590 */
591struct ieee80211_ie_wpa {
592	uint8_t		wpa_id;		/* IEEE80211_ELEMID_VENDOR */
593	uint8_t		wpa_len;	/* length in bytes */
594	uint8_t		wpa_oui[3];	/* 0x00, 0x50, 0xf2 */
595	uint8_t		wpa_type;	/* OUI type */
596	uint16_t	wpa_version;	/* spec revision */
597	uint32_t	wpa_mcipher[1];	/* multicast/group key cipher */
598	uint16_t	wpa_uciphercnt;	/* # pairwise key ciphers */
599	uint32_t	wpa_uciphers[8];/* ciphers */
600	uint16_t	wpa_authselcnt;	/* authentication selector cnt*/
601	uint32_t	wpa_authsels[8];/* selectors */
602	uint16_t	wpa_caps;	/* 802.11i capabilities */
603	uint16_t	wpa_pmkidcnt;	/* 802.11i pmkid count */
604	uint16_t	wpa_pmkids[8];	/* 802.11i pmkids */
605} __packed;
606
607/*
608 * 802.11n HT Capability IE
609 * NB: these reflect D1.10
610 */
611struct ieee80211_ie_htcap {
612	uint8_t		hc_id;			/* element ID */
613	uint8_t		hc_len;			/* length in bytes */
614	uint16_t	hc_cap;			/* HT caps (see below) */
615	uint8_t		hc_param;		/* HT params (see below) */
616	uint8_t 	hc_mcsset[16]; 		/* supported MCS set */
617	uint16_t	hc_extcap;		/* extended HT capabilities */
618	uint32_t	hc_txbf;		/* txbf capabilities */
619	uint8_t		hc_antenna;		/* antenna capabilities */
620} __packed;
621
622/* HT capability flags (ht_cap) */
623#define	IEEE80211_HTCAP_LDPC		0x0001	/* LDPC rx supported */
624#define	IEEE80211_HTCAP_CHWIDTH40	0x0002	/* 20/40 supported */
625#define	IEEE80211_HTCAP_SMPS		0x000c	/* SM Power Save mode */
626#define	IEEE80211_HTCAP_SMPS_OFF	0x000c	/* disabled */
627#define	IEEE80211_HTCAP_SMPS_DYNAMIC	0x0004	/* send RTS first */
628/* NB: SMPS value 2 is reserved */
629#define	IEEE80211_HTCAP_SMPS_ENA	0x0000	/* enabled (static mode) */
630#define	IEEE80211_HTCAP_GREENFIELD	0x0010	/* Greenfield supported */
631#define	IEEE80211_HTCAP_SHORTGI20	0x0020	/* Short GI in 20MHz */
632#define	IEEE80211_HTCAP_SHORTGI40	0x0040	/* Short GI in 40MHz */
633#define	IEEE80211_HTCAP_TXSTBC		0x0080	/* STBC tx ok */
634#define	IEEE80211_HTCAP_RXSTBC		0x0300  /* STBC rx support */
635#define	IEEE80211_HTCAP_RXSTBC_S	8
636#define	IEEE80211_HTCAP_RXSTBC_1STREAM	0x0100  /* 1 spatial stream */
637#define	IEEE80211_HTCAP_RXSTBC_2STREAM	0x0200  /* 1-2 spatial streams*/
638#define	IEEE80211_HTCAP_RXSTBC_3STREAM	0x0300  /* 1-3 spatial streams*/
639#define	IEEE80211_HTCAP_DELBA		0x0400	/* HT DELBA supported */
640#define	IEEE80211_HTCAP_MAXAMSDU	0x0800	/* max A-MSDU length */
641#define	IEEE80211_HTCAP_MAXAMSDU_7935	0x0800	/* 7935 octets */
642#define	IEEE80211_HTCAP_MAXAMSDU_3839	0x0000	/* 3839 octets */
643#define	IEEE80211_HTCAP_DSSSCCK40	0x1000  /* DSSS/CCK in 40MHz */
644#define	IEEE80211_HTCAP_PSMP		0x2000  /* PSMP supported */
645#define	IEEE80211_HTCAP_40INTOLERANT	0x4000  /* 40MHz intolerant */
646#define	IEEE80211_HTCAP_LSIGTXOPPROT	0x8000  /* L-SIG TXOP prot */
647
648#define	IEEE80211_HTCAP_BITS \
649	"\20\1LDPC\2CHWIDTH40\5GREENFIELD\6SHORTGI20\7SHORTGI40\10TXSTBC" \
650	"\13DELBA\14AMSDU(7935)\15DSSSCCK40\16PSMP\1740INTOLERANT" \
651	"\20LSIGTXOPPROT"
652
653/* HT parameters (hc_param) */
654#define	IEEE80211_HTCAP_MAXRXAMPDU	0x03	/* max rx A-MPDU factor */
655#define	IEEE80211_HTCAP_MAXRXAMPDU_S	0
656#define	IEEE80211_HTCAP_MAXRXAMPDU_8K	0
657#define	IEEE80211_HTCAP_MAXRXAMPDU_16K	1
658#define	IEEE80211_HTCAP_MAXRXAMPDU_32K	2
659#define	IEEE80211_HTCAP_MAXRXAMPDU_64K	3
660#define	IEEE80211_HTCAP_MPDUDENSITY	0x1c	/* min MPDU start spacing */
661#define	IEEE80211_HTCAP_MPDUDENSITY_S	2
662#define	IEEE80211_HTCAP_MPDUDENSITY_NA	0	/* no time restriction */
663#define	IEEE80211_HTCAP_MPDUDENSITY_025	1	/* 1/4 us */
664#define	IEEE80211_HTCAP_MPDUDENSITY_05	2	/* 1/2 us */
665#define	IEEE80211_HTCAP_MPDUDENSITY_1	3	/* 1 us */
666#define	IEEE80211_HTCAP_MPDUDENSITY_2	4	/* 2 us */
667#define	IEEE80211_HTCAP_MPDUDENSITY_4	5	/* 4 us */
668#define	IEEE80211_HTCAP_MPDUDENSITY_8	6	/* 8 us */
669#define	IEEE80211_HTCAP_MPDUDENSITY_16	7	/* 16 us */
670
671/* HT extended capabilities (hc_extcap) */
672#define	IEEE80211_HTCAP_PCO		0x0001	/* PCO capable */
673#define	IEEE80211_HTCAP_PCOTRANS	0x0006	/* PCO transition time */
674#define	IEEE80211_HTCAP_PCOTRANS_S	1
675#define	IEEE80211_HTCAP_PCOTRANS_04	0x0002	/* 400 us */
676#define	IEEE80211_HTCAP_PCOTRANS_15	0x0004	/* 1.5 ms */
677#define	IEEE80211_HTCAP_PCOTRANS_5	0x0006	/* 5 ms */
678/* bits 3-7 reserved */
679#define	IEEE80211_HTCAP_MCSFBACK	0x0300	/* MCS feedback */
680#define	IEEE80211_HTCAP_MCSFBACK_S	8
681#define	IEEE80211_HTCAP_MCSFBACK_NONE	0x0000	/* nothing provided */
682#define	IEEE80211_HTCAP_MCSFBACK_UNSOL	0x0200	/* unsolicited feedback */
683#define	IEEE80211_HTCAP_MCSFBACK_MRQ	0x0300	/* " "+respond to MRQ */
684#define	IEEE80211_HTCAP_HTC		0x0400	/* +HTC support */
685#define	IEEE80211_HTCAP_RDR		0x0800	/* reverse direction responder*/
686/* bits 12-15 reserved */
687
688/*
689 * 802.11n HT Information IE
690 */
691struct ieee80211_ie_htinfo {
692	uint8_t		hi_id;			/* element ID */
693	uint8_t		hi_len;			/* length in bytes */
694	uint8_t		hi_ctrlchannel;		/* primary channel */
695	uint8_t		hi_byte1;		/* ht ie byte 1 */
696	uint8_t		hi_byte2;		/* ht ie byte 2 */
697	uint8_t		hi_byte3;		/* ht ie byte 3 */
698	uint16_t	hi_byte45;		/* ht ie bytes 4+5 */
699	uint8_t 	hi_basicmcsset[16]; 	/* basic MCS set */
700} __packed;
701
702/* byte1 */
703#define	IEEE80211_HTINFO_2NDCHAN	0x03	/* secondary/ext chan offset */
704#define	IEEE80211_HTINFO_2NDCHAN_S	0
705#define	IEEE80211_HTINFO_2NDCHAN_NONE	0x00	/* no secondary/ext channel */
706#define	IEEE80211_HTINFO_2NDCHAN_ABOVE	0x01	/* above private channel */
707/* NB: 2 is reserved */
708#define	IEEE80211_HTINFO_2NDCHAN_BELOW	0x03	/* below primary channel */
709#define	IEEE80211_HTINFO_TXWIDTH	0x04	/* tx channel width */
710#define	IEEE80211_HTINFO_TXWIDTH_20	0x00	/* 20MHz width */
711#define	IEEE80211_HTINFO_TXWIDTH_2040	0x04	/* any supported width */
712#define	IEEE80211_HTINFO_RIFSMODE	0x08	/* Reduced IFS (RIFS) use */
713#define	IEEE80211_HTINFO_RIFSMODE_PROH	0x00	/* RIFS use prohibited */
714#define	IEEE80211_HTINFO_RIFSMODE_PERM	0x08	/* RIFS use permitted */
715#define	IEEE80211_HTINFO_PMSPONLY	0x10	/* PSMP required to associate */
716#define	IEEE80211_HTINFO_SIGRAN		0xe0	/* shortest Service Interval */
717#define	IEEE80211_HTINFO_SIGRAN_S	5
718#define	IEEE80211_HTINFO_SIGRAN_5	0x00	/* 5 ms */
719/* XXX add rest */
720
721/* bytes 2+3 */
722#define	IEEE80211_HTINFO_OPMODE		0x03	/* operating mode */
723#define	IEEE80211_HTINFO_OPMODE_S	0
724#define	IEEE80211_HTINFO_OPMODE_PURE	0x00	/* no protection */
725#define	IEEE80211_HTINFO_OPMODE_PROTOPT	0x01	/* protection optional */
726#define	IEEE80211_HTINFO_OPMODE_HT20PR	0x02	/* protection for HT20 sta's */
727#define	IEEE80211_HTINFO_OPMODE_MIXED	0x03	/* protection for legacy sta's*/
728#define	IEEE80211_HTINFO_NONGF_PRESENT	0x04	/* non-GF sta's present */
729#define	IEEE80211_HTINFO_TXBL		0x08	/* transmit burst limit */
730#define	IEEE80211_HTINFO_NONHT_PRESENT	0x10	/* non-HT sta's present */
731/* bits 5-15 reserved */
732
733/* bytes 4+5 */
734#define	IEEE80211_HTINFO_2NDARYBEACON	0x01
735#define	IEEE80211_HTINFO_LSIGTXOPPROT	0x02
736#define	IEEE80211_HTINFO_PCO_ACTIVE	0x04
737#define	IEEE80211_HTINFO_40MHZPHASE	0x08
738
739/* byte5 */
740#define	IEEE80211_HTINFO_BASIC_STBCMCS	0x7f
741#define	IEEE80211_HTINFO_BASIC_STBCMCS_S 0
742#define	IEEE80211_HTINFO_DUALPROTECTED	0x80
743
744/*
745 * 802.11ac definitions - 802.11ac-2013 .
746 */
747
748/*
749 * Maximum length of A-MPDU that the STA can RX in VHT.
750 * Length = 2 ^ (13 + max_ampdu_length_exp) - 1 (octets)
751 */
752#define	IEEE80211_VHTCAP_MAX_AMPDU_8K		0
753#define	IEEE80211_VHTCAP_MAX_AMPDU_16K		1
754#define	IEEE80211_VHTCAP_MAX_AMPDU_32K		2
755#define	IEEE80211_VHTCAP_MAX_AMPDU_64K		3
756#define	IEEE80211_VHTCAP_MAX_AMPDU_128K		4
757#define	IEEE80211_VHTCAP_MAX_AMPDU_256K		5
758#define	IEEE80211_VHTCAP_MAX_AMPDU_512K		6
759#define	IEEE80211_VHTCAP_MAX_AMPDU_1024K	7
760
761/*
762 * VHT MCS information.
763 * + rx_highest/tx_highest: optional; maximum long GI VHT PPDU
764 *    data rate.  1Mbit/sec units.
765 * + rx_mcs_map/tx_mcs_map: bitmap of per-stream supported MCS;
766 *    2 bits each.
767 */
768#define	IEEE80211_VHT_MCS_SUPPORT_0_7		0	/* MCS0-7 */
769#define	IEEE80211_VHT_MCS_SUPPORT_0_8		1	/* MCS0-8 */
770#define	IEEE80211_VHT_MCS_SUPPORT_0_9		2	/* MCS0-9 */
771#define	IEEE80211_VHT_MCS_NOT_SUPPORTED		3	/* not supported */
772
773struct ieee80211_vht_mcs_info {
774	uint16_t rx_mcs_map;
775	uint16_t rx_highest;
776	uint16_t tx_mcs_map;
777	uint16_t tx_highest;
778} __packed;
779
780/* VHT capabilities element: 802.11ac-2013 8.4.2.160 */
781struct ieee80211_ie_vhtcap {
782	uint8_t ie;
783	uint8_t len;
784	uint32_t vht_cap_info;
785	struct ieee80211_vht_mcs_info supp_mcs;
786} __packed;
787
788/* VHT operation mode subfields - 802.11ac-2013 Table 8.183x */
789#define	IEEE80211_VHT_CHANWIDTH_USE_HT		0	/* Use HT IE for chw */
790#define	IEEE80211_VHT_CHANWIDTH_80MHZ		1	/* 80MHz */
791#define	IEEE80211_VHT_CHANWIDTH_160MHZ		2	/* 160MHz */
792#define	IEEE80211_VHT_CHANWIDTH_80P80MHZ	3	/* 80+80MHz */
793
794/* VHT operation IE - 802.11ac-2013 8.4.2.161 */
795struct ieee80211_ie_vht_operation {
796	uint8_t ie;
797	uint8_t len;
798	uint8_t chan_width;
799	uint8_t center_freq_seg1_idx;
800	uint8_t center_freq_seg2_idx;
801	uint16_t basic_mcs_set;
802} __packed;
803
804/* 802.11ac VHT Capabilities */
805#define	IEEE80211_VHTCAP_MAX_MPDU_LENGTH_3895	0x00000000
806#define	IEEE80211_VHTCAP_MAX_MPDU_LENGTH_7991	0x00000001
807#define	IEEE80211_VHTCAP_MAX_MPDU_LENGTH_11454	0x00000002
808#define	IEEE80211_VHTCAP_MAX_MPDU_MASK		0x00000003
809#define	IEEE80211_VHTCAP_MAX_MPDU_MASK_S	0
810
811#define	IEEE80211_VHTCAP_SUPP_CHAN_WIDTH_MASK	0x0000000C
812#define	IEEE80211_VHTCAP_SUPP_CHAN_WIDTH_MASK_S	2
813#define	IEEE80211_VHTCAP_SUPP_CHAN_WIDTH_NONE		0
814#define	IEEE80211_VHTCAP_SUPP_CHAN_WIDTH_160MHZ		1
815#define	IEEE80211_VHTCAP_SUPP_CHAN_WIDTH_160_80P80MHZ	2
816#define	IEEE80211_VHTCAP_SUPP_CHAN_WIDTH_RESERVED	3
817
818#define	IEEE80211_VHTCAP_SUPP_CHAN_WIDTH_IS_160MHZ(_vhtcaps)		\
819    (_IEEE80211_MASKSHIFT(_vhtcaps, IEEE80211_VHTCAP_SUPP_CHAN_WIDTH_MASK) >= \
820            IEEE80211_VHTCAP_SUPP_CHAN_WIDTH_160MHZ)
821#define	IEEE80211_VHTCAP_SUPP_CHAN_WIDTH_IS_160_80P80MHZ(_vhtcaps)	\
822    (_IEEE80211_MASKSHIFT(_vhtcaps, IEEE80211_VHTCAP_SUPP_CHAN_WIDTH_MASK) == \
823            IEEE80211_VHTCAP_SUPP_CHAN_WIDTH_160_80P80MHZ)
824
825#define	IEEE80211_VHTCAP_RXLDPC		0x00000010
826#define	IEEE80211_VHTCAP_RXLDPC_S	4
827
828#define	IEEE80211_VHTCAP_SHORT_GI_80		0x00000020
829#define	IEEE80211_VHTCAP_SHORT_GI_80_S		5
830
831#define	IEEE80211_VHTCAP_SHORT_GI_160		0x00000040
832#define	IEEE80211_VHTCAP_SHORT_GI_160_S		6
833
834#define	IEEE80211_VHTCAP_TXSTBC		0x00000080
835#define	IEEE80211_VHTCAP_TXSTBC_S	7
836
837#define	IEEE80211_VHTCAP_RXSTBC_1		0x00000100
838#define	IEEE80211_VHTCAP_RXSTBC_2		0x00000200
839#define	IEEE80211_VHTCAP_RXSTBC_3		0x00000300
840#define	IEEE80211_VHTCAP_RXSTBC_4		0x00000400
841#define	IEEE80211_VHTCAP_RXSTBC_MASK		0x00000700
842#define	IEEE80211_VHTCAP_RXSTBC_MASK_S		8
843
844#define	IEEE80211_VHTCAP_SU_BEAMFORMER_CAPABLE	0x00000800
845#define	IEEE80211_VHTCAP_SU_BEAMFORMER_CAPABLE_S	11
846
847#define	IEEE80211_VHTCAP_SU_BEAMFORMEE_CAPABLE	0x00001000
848#define	IEEE80211_VHTCAP_SU_BEAMFORMEE_CAPABLE_S	12
849
850#define	IEEE80211_VHTCAP_BEAMFORMEE_STS_SHIFT	13
851#define	IEEE80211_VHTCAP_BEAMFORMEE_STS_MASK \
852	    (7 << IEEE80211_VHTCAP_BEAMFORMEE_STS_SHIFT)
853#define	IEEE80211_VHTCAP_BEAMFORMEE_STS_MASK_S	13
854
855#define	IEEE80211_VHTCAP_SOUNDING_DIMENSIONS_SHIFT	16
856#define	IEEE80211_VHTCAP_SOUNDING_DIMENSIONS_MASK \
857	    (7 << IEEE80211_VHTCAP_SOUNDING_DIMENSIONS_SHIFT)
858#define	IEEE80211_VHTCAP_SOUNDING_DIMENSIONS_MASK_S	16
859
860#define	IEEE80211_VHTCAP_MU_BEAMFORMER_CAPABLE	0x00080000
861#define	IEEE80211_VHTCAP_MU_BEAMFORMER_CAPABLE_S	19
862#define	IEEE80211_VHTCAP_MU_BEAMFORMEE_CAPABLE	0x00100000
863#define	IEEE80211_VHTCAP_MU_BEAMFORMEE_CAPABLE_S	20
864#define	IEEE80211_VHTCAP_VHT_TXOP_PS		0x00200000
865#define	IEEE80211_VHTCAP_VHT_TXOP_PS_S		21
866#define	IEEE80211_VHTCAP_HTC_VHT		0x00400000
867#define	IEEE80211_VHTCAP_HTC_VHT_S		22
868
869#define	IEEE80211_VHTCAP_MAX_A_MPDU_LENGTH_EXPONENT_SHIFT	23
870#define	IEEE80211_VHTCAP_MAX_A_MPDU_LENGTH_EXPONENT_MASK \
871	    (7 << IEEE80211_VHTCAP_MAX_A_MPDU_LENGTH_EXPONENT_SHIFT)
872#define	IEEE80211_VHTCAP_MAX_A_MPDU_LENGTH_EXPONENT_MASK_S	23
873
874#define	IEEE80211_VHTCAP_VHT_LINK_ADAPTATION_VHT_MASK	0x0c000000
875#define	IEEE80211_VHTCAP_VHT_LINK_ADAPTATION_VHT_UNSOL_MFB	0x08000000
876#define	IEEE80211_VHTCAP_VHT_LINK_ADAPTATION_VHT_MRQ_MFB	0x0c000000
877#define	IEEE80211_VHTCAP_VHT_LINK_ADAPTATION_VHT_MASK_S	26
878
879#define	IEEE80211_VHTCAP_RX_ANTENNA_PATTERN	0x10000000
880#define	IEEE80211_VHTCAP_RX_ANTENNA_PATTERN_S	28
881#define	IEEE80211_VHTCAP_TX_ANTENNA_PATTERN	0x20000000
882#define	IEEE80211_VHTCAP_TX_ANTENNA_PATTERN_S	29
883
884/*
885 * XXX TODO: add the rest of the bits
886 */
887#define	IEEE80211_VHTCAP_BITS \
888	"\20\1MPDU7991\2MPDU11454\3CHAN160\4CHAN8080\5RXLDPC\6SHORTGI80" \
889	"\7SHORTGI160\10RXSTBC1\11RXSTBC2\12RXSTBC3\13RXSTBC4\14BFERCAP" \
890	"\15BFEECAP\27VHT\37RXANTPTN\40TXANTPTN"
891
892/*
893 * VHT Transmit Power Envelope element - 802.11ac-2013 8.4.2.164
894 *
895 * This defines the maximum transmit power for various bandwidths.
896 */
897/*
898 * Count is how many elements follow and what they're for:
899 *
900 * 0 - 20 MHz
901 * 1 - 20+40 MHz
902 * 2 - 20+40+80 MHz
903 * 3 - 20+40+80+(160, 80+80) MHz
904 */
905#define	IEEE80211_VHT_TXPWRENV_INFO_COUNT_SHIFT	0
906#define	IEEE80211_VHT_TXPWRENV_INFO_COUNT_MASK	0x07
907
908/*
909 * Unit is the tx power representation.  It should be EIRP for now;
910 * other values are reserved.
911 */
912#define	IEEE80211_VHT_TXPWRENV_UNIT_MASK	0x38
913#define	IEEE80211_VHT_TXPWRENV_UNIT_SHIFT	3
914
915/* This value is within the unit mask/shift above */
916#define	IEEE80211_VHT_TXPWRENV_UNIT_EIRP	0
917
918struct ieee80211_ie_vht_txpwrenv {
919	uint8_t ie;
920	uint8_t len;
921	uint8_t tx_info;
922	int8_t tx_elem[0];	/* TX power elements, 1/2 dB, signed */
923};
924
925/* VHT action codes */
926#define	WLAN_ACTION_VHT_COMPRESSED_BF		0
927#define	WLAN_ACTION_VHT_GROUPID_MGMT		1
928#define	WLAN_ACTION_VHT_OPMODE_NOTIF		2
929
930/*
931 * Management information element payloads.
932 */
933
934enum {
935	IEEE80211_ELEMID_SSID		= 0,
936	IEEE80211_ELEMID_RATES		= 1,
937	IEEE80211_ELEMID_FHPARMS	= 2,
938	IEEE80211_ELEMID_DSPARMS	= 3,
939	IEEE80211_ELEMID_CFPARMS	= 4,
940	IEEE80211_ELEMID_TIM		= 5,
941	IEEE80211_ELEMID_IBSSPARMS	= 6,
942	IEEE80211_ELEMID_COUNTRY	= 7,
943	IEEE80211_ELEMID_BSSLOAD	= 11,
944	IEEE80211_ELEMID_TSPEC		= 13,
945	IEEE80211_ELEMID_TCLAS		= 14,
946	IEEE80211_ELEMID_CHALLENGE	= 16,
947	/* 17-31 reserved for challenge text extension */
948	IEEE80211_ELEMID_PWRCNSTR	= 32,
949	IEEE80211_ELEMID_PWRCAP		= 33,
950	IEEE80211_ELEMID_TPCREQ		= 34,
951	IEEE80211_ELEMID_TPCREP		= 35,
952	IEEE80211_ELEMID_SUPPCHAN	= 36,
953	IEEE80211_ELEMID_CSA		= 37,
954	IEEE80211_ELEMID_MEASREQ	= 38,
955	IEEE80211_ELEMID_MEASREP	= 39,
956	IEEE80211_ELEMID_QUIET		= 40,
957	IEEE80211_ELEMID_IBSSDFS	= 41,
958	IEEE80211_ELEMID_ERP		= 42,
959	IEEE80211_ELEMID_HTCAP		= 45,
960	IEEE80211_ELEMID_QOS		= 46,
961	IEEE80211_ELEMID_RESERVED_47	= 47,
962	IEEE80211_ELEMID_RSN		= 48,
963	IEEE80211_ELEMID_XRATES		= 50,
964	IEEE80211_ELEMID_APCHANREP	= 51,
965	IEEE80211_ELEMID_MOBILITY_DOMAIN	= 54,
966	IEEE80211_ELEMID_HTINFO		= 61,
967	IEEE80211_ELEMID_SECCHAN_OFFSET	= 62,
968	IEEE80211_ELEMID_RRM_ENACAPS	= 70,
969	IEEE80211_ELEMID_MULTIBSSID	= 71,
970	IEEE80211_ELEMID_COEX_2040	= 72,
971	IEEE80211_ELEMID_INTOL_CHN_REPORT	= 73,
972	IEEE80211_ELEMID_OVERLAP_BSS_SCAN_PARAM = 74,
973	IEEE80211_ELEMID_TSF_REQ	= 91,
974	IEEE80211_ELEMID_TSF_RESP	= 92,
975	IEEE80211_ELEMID_WNM_SLEEP_MODE	= 93,
976	IEEE80211_ELEMID_TIM_BCAST_REQ	= 94,
977	IEEE80211_ELEMID_TIM_BCAST_RESP	= 95,
978	IEEE80211_ELEMID_TPC		= 150,
979	IEEE80211_ELEMID_CCKM		= 156,
980	IEEE80211_ELEMID_VENDOR		= 221,	/* vendor private */
981
982	/*
983	 * 802.11s IEs
984	 * NB: On vanilla Linux still IEEE80211_ELEMID_MESHPEER = 55,
985	 * but they defined a new with id 117 called PEER_MGMT.
986	 * NB: complies with open80211
987	 */
988	IEEE80211_ELEMID_MESHCONF	= 113,
989	IEEE80211_ELEMID_MESHID		= 114,
990	IEEE80211_ELEMID_MESHLINK	= 115,
991	IEEE80211_ELEMID_MESHCNGST	= 116,
992	IEEE80211_ELEMID_MESHPEER	= 117,
993	IEEE80211_ELEMID_MESHCSA	= 118,
994	IEEE80211_ELEMID_MESHTIM	= 39, /* XXX: remove */
995	IEEE80211_ELEMID_MESHAWAKEW	= 119,
996	IEEE80211_ELEMID_MESHBEACONT	= 120,
997	/* 121-124 MMCAOP not implemented yet */
998	IEEE80211_ELEMID_MESHGANN	= 125,
999	IEEE80211_ELEMID_MESHRANN	= 126,
1000	/* 127 Extended Capabilities */
1001	IEEE80211_ELEMID_EXTCAP		= 127,
1002	/* 128-129 reserved */
1003	IEEE80211_ELEMID_MESHPREQ	= 130,
1004	IEEE80211_ELEMID_MESHPREP	= 131,
1005	IEEE80211_ELEMID_MESHPERR	= 132,
1006	/* 133-136 reserved */
1007	IEEE80211_ELEMID_MESHPXU	= 137,
1008	IEEE80211_ELEMID_MESHPXUC	= 138,
1009	IEEE80211_ELEMID_MESHAH		= 60, /* XXX: remove */
1010
1011	/* 802.11ac */
1012	IEEE80211_ELEMID_VHT_CAP	= 191,
1013	IEEE80211_ELEMID_VHT_OPMODE	= 192,
1014	IEEE80211_ELEMID_VHT_PWR_ENV	= 195,
1015};
1016
1017struct ieee80211_tim_ie {
1018	uint8_t		tim_ie;			/* IEEE80211_ELEMID_TIM */
1019	uint8_t		tim_len;
1020	uint8_t		tim_count;		/* DTIM count */
1021	uint8_t		tim_period;		/* DTIM period */
1022	uint8_t		tim_bitctl;		/* bitmap control */
1023	uint8_t		tim_bitmap[1];		/* variable-length bitmap */
1024} __packed;
1025
1026struct ieee80211_country_ie {
1027	uint8_t		ie;			/* IEEE80211_ELEMID_COUNTRY */
1028	uint8_t		len;
1029	uint8_t		cc[3];			/* ISO CC+(I)ndoor/(O)utdoor */
1030	struct {
1031		uint8_t schan;			/* starting channel */
1032		uint8_t nchan;			/* number channels */
1033		uint8_t maxtxpwr;		/* tx power cap */
1034	} __packed band[1];			/* sub bands (NB: var size) */
1035} __packed;
1036
1037#define	IEEE80211_COUNTRY_MAX_BANDS	84	/* max possible bands */
1038#define	IEEE80211_COUNTRY_MAX_SIZE \
1039	(sizeof(struct ieee80211_country_ie) + 3*(IEEE80211_COUNTRY_MAX_BANDS-1))
1040
1041struct ieee80211_bss_load_ie {
1042	uint8_t		ie;
1043	uint8_t		len;
1044	uint16_t	sta_count;	/* station count */
1045	uint8_t		chan_load;	/* channel utilization */
1046	uint8_t		aac;		/* available admission capacity */
1047} __packed;
1048
1049struct ieee80211_ap_chan_report_ie {
1050	uint8_t		ie;
1051	uint8_t		len;
1052	uint8_t		i_class; /* operating class */
1053	/* Annex E, E.1 Country information and operating classes */
1054	uint8_t		chan_list[0];
1055} __packed;
1056
1057#define IEEE80211_EXTCAP_CMS			(1ULL <<  0) /* 20/40 BSS coexistence management support */
1058#define IEEE80211_EXTCAP_RSVD_1			(1ULL <<  1)
1059#define IEEE80211_EXTCAP_ECS			(1ULL <<  2) /* extended channel switching */
1060#define IEEE80211_EXTCAP_RSVD_3			(1ULL <<  3)
1061#define IEEE80211_EXTCAP_PSMP_CAP		(1ULL <<  4) /* PSMP capability */
1062#define IEEE80211_EXTCAP_RSVD_5			(1ULL <<  5)
1063#define IEEE80211_EXTCAP_S_PSMP_SUPP		(1ULL <<  6)
1064#define IEEE80211_EXTCAP_EVENT			(1ULL <<  7)
1065#define IEEE80211_EXTCAP_DIAGNOSTICS		(1ULL <<  8)
1066#define IEEE80211_EXTCAP_MCAST_DIAG		(1ULL <<  9)
1067#define IEEE80211_EXTCAP_LOC_TRACKING		(1ULL << 10)
1068#define IEEE80211_EXTCAP_FMS			(1ULL << 11)
1069#define IEEE80211_EXTCAP_PROXY_ARP		(1ULL << 12)
1070#define IEEE80211_EXTCAP_CIR			(1ULL << 13) /* collocated interference reporting */
1071#define IEEE80211_EXTCAP_CIVIC_LOC		(1ULL << 14)
1072#define IEEE80211_EXTCAP_GEOSPATIAL_LOC		(1ULL << 15)
1073#define IEEE80211_EXTCAP_TFS			(1ULL << 16)
1074#define IEEE80211_EXTCAP_WNM_SLEEPMODE		(1ULL << 17)
1075#define IEEE80211_EXTCAP_TIM_BROADCAST		(1ULL << 18)
1076#define IEEE80211_EXTCAP_BSS_TRANSITION		(1ULL << 19)
1077#define IEEE80211_EXTCAP_QOS_TRAF_CAP		(1ULL << 20)
1078#define IEEE80211_EXTCAP_AC_STA_COUNT		(1ULL << 21)
1079#define IEEE80211_EXTCAP_M_BSSID		(1ULL << 22) /* multiple BSSID field */
1080#define IEEE80211_EXTCAP_TIMING_MEAS		(1ULL << 23)
1081#define IEEE80211_EXTCAP_CHAN_USAGE		(1ULL << 24)
1082#define IEEE80211_EXTCAP_SSID_LIST		(1ULL << 25)
1083#define IEEE80211_EXTCAP_DMS			(1ULL << 26)
1084#define IEEE80211_EXTCAP_UTC_TSF_OFFSET		(1ULL << 27)
1085#define IEEE80211_EXTCAP_TLDS_BUF_STA_SUPP	(1ULL << 28) /* TDLS peer U-APSP buffer STA support */
1086#define IEEE80211_EXTCAP_TLDS_PPSM_SUPP		(1ULL << 29) /* TDLS peer PSM support */
1087#define IEEE80211_EXTCAP_TLDS_CH_SW		(1ULL << 30) /* TDLS channel switching */
1088#define IEEE80211_EXTCAP_INTERWORKING		(1ULL << 31)
1089#define IEEE80211_EXTCAP_QOSMAP			(1ULL << 32)
1090#define IEEE80211_EXTCAP_EBR			(1ULL << 33)
1091#define IEEE80211_EXTCAP_SSPN_IF		(1ULL << 34)
1092#define IEEE80211_EXTCAP_RSVD_35		(1ULL << 35)
1093#define IEEE80211_EXTCAP_MSGCF_CAP		(1ULL << 36)
1094#define IEEE80211_EXTCAP_TLDS_SUPP		(1ULL << 37)
1095#define IEEE80211_EXTCAP_TLDS_PROHIB		(1ULL << 38)
1096#define IEEE80211_EXTCAP_TLDS_CH_SW_PROHIB	(1ULL << 39) /* TDLS channel switching prohibited */
1097#define IEEE80211_EXTCAP_RUF			(1ULL << 40) /* reject unadmitted frame */
1098/* service interval granularity */
1099#define IEEE80211_EXTCAP_SIG \
1100				((1ULL << 41) | (1ULL << 42) | (1ULL << 43))
1101#define IEEE80211_EXTCAP_ID_LOC			(1ULL << 44)
1102#define IEEE80211_EXTCAP_U_APSD_COEX		(1ULL << 45)
1103#define IEEE80211_EXTCAP_WNM_NOTIFICATION	(1ULL << 46)
1104#define IEEE80211_EXTCAP_RSVD_47		(1ULL << 47)
1105#define IEEE80211_EXTCAP_SSID			(1ULL << 48) /* UTF-8 SSID */
1106/* bits 49-n are reserved */
1107
1108struct ieee80211_extcap_ie {
1109	uint8_t		ie;
1110	uint8_t		len;
1111} __packed;
1112
1113/*
1114 * 802.11h Quiet Time Element.
1115 */
1116struct ieee80211_quiet_ie {
1117	uint8_t		quiet_ie;		/* IEEE80211_ELEMID_QUIET */
1118	uint8_t		len;
1119	uint8_t		tbttcount;		/* quiet start */
1120	uint8_t		period;			/* beacon intervals between quiets */
1121	uint16_t	duration;		/* TUs of each quiet*/
1122	uint16_t	offset;			/* TUs of from TBTT of quiet start */
1123} __packed;
1124
1125/*
1126 * 802.11h Channel Switch Announcement (CSA).
1127 */
1128struct ieee80211_csa_ie {
1129	uint8_t		csa_ie;		/* IEEE80211_ELEMID_CHANSWITCHANN */
1130	uint8_t		csa_len;
1131	uint8_t		csa_mode;		/* Channel Switch Mode */
1132	uint8_t		csa_newchan;		/* New Channel Number */
1133	uint8_t		csa_count;		/* Channel Switch Count */
1134} __packed;
1135
1136/*
1137 * Note the min acceptable CSA count is used to guard against
1138 * malicious CSA injection in station mode.  Defining this value
1139 * as other than 0 violates the 11h spec.
1140 */
1141#define	IEEE80211_CSA_COUNT_MIN	2
1142#define	IEEE80211_CSA_COUNT_MAX	255
1143
1144/* rate set entries are in .5 Mb/s units, and potentially marked as basic */
1145#define	IEEE80211_RATE_BASIC		0x80
1146#define	IEEE80211_RATE_VAL		0x7f
1147#define	IEEE80211_RV(v)			((v) & IEEE80211_RATE_VAL)
1148
1149/* ERP information element flags */
1150#define	IEEE80211_ERP_NON_ERP_PRESENT	0x01
1151#define	IEEE80211_ERP_USE_PROTECTION	0x02
1152#define	IEEE80211_ERP_LONG_PREAMBLE	0x04
1153
1154#define	IEEE80211_ERP_BITS \
1155	"\20\1NON_ERP_PRESENT\2USE_PROTECTION\3LONG_PREAMBLE"
1156
1157#define	ATH_OUI			0x7f0300	/* Atheros OUI */
1158#define	ATH_OUI_TYPE		0x01		/* Atheros protocol ie */
1159
1160/* NB: Atheros allocated the OUI for this purpose ~2005 but beware ... */
1161#define	TDMA_OUI		ATH_OUI
1162#define	TDMA_OUI_TYPE		0x02		/* TDMA protocol ie */
1163
1164#define	BCM_OUI			0x4c9000	/* Broadcom OUI */
1165#define	BCM_OUI_HTCAP		51		/* pre-draft HTCAP ie */
1166#define	BCM_OUI_HTINFO		52		/* pre-draft HTINFO ie */
1167
1168#define	WPA_OUI			0xf25000
1169#define	WPA_OUI_TYPE		0x01
1170#define	WPA_VERSION		1		/* current supported version */
1171
1172#define	WPA_CSE_NULL		0x00
1173#define	WPA_CSE_WEP40		0x01
1174#define	WPA_CSE_TKIP		0x02
1175#define	WPA_CSE_CCMP		0x04
1176#define	WPA_CSE_WEP104		0x05
1177
1178#define	WPA_ASE_NONE		0x00
1179#define	WPA_ASE_8021X_UNSPEC	0x01
1180#define	WPA_ASE_8021X_PSK	0x02
1181
1182#define	WPS_OUI_TYPE		0x04
1183
1184#define	RSN_OUI			0xac0f00
1185#define	RSN_VERSION		1		/* current supported version */
1186
1187#define	RSN_CSE_NULL		0x00
1188#define	RSN_CSE_WEP40		0x01
1189#define	RSN_CSE_TKIP		0x02
1190#define	RSN_CSE_WRAP		0x03
1191#define	RSN_CSE_CCMP		0x04
1192#define	RSN_CSE_WEP104		0x05
1193
1194#define	RSN_ASE_NONE		0x00
1195#define	RSN_ASE_8021X_UNSPEC	0x01
1196#define	RSN_ASE_8021X_PSK	0x02
1197
1198#define	RSN_CAP_PREAUTH		0x01
1199
1200#define	WME_OUI			0xf25000
1201#define	WME_OUI_TYPE		0x02
1202#define	WME_INFO_OUI_SUBTYPE	0x00
1203#define	WME_PARAM_OUI_SUBTYPE	0x01
1204#define	WME_VERSION		1
1205
1206/* WME stream classes */
1207#define	WME_AC_BE	0		/* best effort */
1208#define	WME_AC_BK	1		/* background */
1209#define	WME_AC_VI	2		/* video */
1210#define	WME_AC_VO	3		/* voice */
1211
1212/*
1213 * AUTH management packets
1214 *
1215 *	octet algo[2]
1216 *	octet seq[2]
1217 *	octet status[2]
1218 *	octet chal.id
1219 *	octet chal.length
1220 *	octet chal.text[253]		NB: 1-253 bytes
1221 */
1222
1223/* challenge length for shared key auth */
1224#define IEEE80211_CHALLENGE_LEN		128
1225
1226#define	IEEE80211_AUTH_ALG_OPEN		0x0000
1227#define	IEEE80211_AUTH_ALG_SHARED	0x0001
1228#define	IEEE80211_AUTH_ALG_LEAP		0x0080
1229
1230enum {
1231	IEEE80211_AUTH_OPEN_REQUEST		= 1,
1232	IEEE80211_AUTH_OPEN_RESPONSE		= 2,
1233};
1234
1235enum {
1236	IEEE80211_AUTH_SHARED_REQUEST		= 1,
1237	IEEE80211_AUTH_SHARED_CHALLENGE		= 2,
1238	IEEE80211_AUTH_SHARED_RESPONSE		= 3,
1239	IEEE80211_AUTH_SHARED_PASS		= 4,
1240};
1241
1242/*
1243 * Reason and status codes.
1244 *
1245 * Reason codes are used in management frames to indicate why an
1246 * action took place (e.g. on disassociation).  Status codes are
1247 * used in management frames to indicate the result of an operation.
1248 *
1249 * Unlisted codes are reserved
1250 */
1251
1252enum {
1253	IEEE80211_REASON_UNSPECIFIED		= 1,
1254	IEEE80211_REASON_AUTH_EXPIRE		= 2,
1255	IEEE80211_REASON_AUTH_LEAVE		= 3,
1256	IEEE80211_REASON_ASSOC_EXPIRE		= 4,
1257	IEEE80211_REASON_ASSOC_TOOMANY		= 5,
1258	IEEE80211_REASON_NOT_AUTHED		= 6,
1259	IEEE80211_REASON_NOT_ASSOCED		= 7,
1260	IEEE80211_REASON_ASSOC_LEAVE		= 8,
1261	IEEE80211_REASON_ASSOC_NOT_AUTHED	= 9,
1262	IEEE80211_REASON_DISASSOC_PWRCAP_BAD	= 10,	/* 11h */
1263	IEEE80211_REASON_DISASSOC_SUPCHAN_BAD	= 11,	/* 11h */
1264	IEEE80211_REASON_IE_INVALID		= 13,	/* 11i */
1265	IEEE80211_REASON_MIC_FAILURE		= 14,	/* 11i */
1266	IEEE80211_REASON_4WAY_HANDSHAKE_TIMEOUT	= 15,	/* 11i */
1267	IEEE80211_REASON_GROUP_KEY_UPDATE_TIMEOUT = 16,	/* 11i */
1268	IEEE80211_REASON_IE_IN_4WAY_DIFFERS	= 17,	/* 11i */
1269	IEEE80211_REASON_GROUP_CIPHER_INVALID	= 18,	/* 11i */
1270	IEEE80211_REASON_PAIRWISE_CIPHER_INVALID= 19,	/* 11i */
1271	IEEE80211_REASON_AKMP_INVALID		= 20,	/* 11i */
1272	IEEE80211_REASON_UNSUPP_RSN_IE_VERSION	= 21,	/* 11i */
1273	IEEE80211_REASON_INVALID_RSN_IE_CAP	= 22,	/* 11i */
1274	IEEE80211_REASON_802_1X_AUTH_FAILED	= 23,	/* 11i */
1275	IEEE80211_REASON_CIPHER_SUITE_REJECTED	= 24,	/* 11i */
1276	IEEE80211_REASON_UNSPECIFIED_QOS	= 32,	/* 11e */
1277	IEEE80211_REASON_INSUFFICIENT_BW	= 33,	/* 11e */
1278	IEEE80211_REASON_TOOMANY_FRAMES		= 34,	/* 11e */
1279	IEEE80211_REASON_OUTSIDE_TXOP		= 35,	/* 11e */
1280	IEEE80211_REASON_LEAVING_QBSS		= 36,	/* 11e */
1281	IEEE80211_REASON_BAD_MECHANISM		= 37,	/* 11e */
1282	IEEE80211_REASON_SETUP_NEEDED		= 38,	/* 11e */
1283	IEEE80211_REASON_TIMEOUT		= 39,	/* 11e */
1284
1285	IEEE80211_REASON_PEER_LINK_CANCELED	= 52,	/* 11s */
1286	IEEE80211_REASON_MESH_MAX_PEERS		= 53,	/* 11s */
1287	IEEE80211_REASON_MESH_CPVIOLATION	= 54,	/* 11s */
1288	IEEE80211_REASON_MESH_CLOSE_RCVD	= 55,	/* 11s */
1289	IEEE80211_REASON_MESH_MAX_RETRIES	= 56,	/* 11s */
1290	IEEE80211_REASON_MESH_CONFIRM_TIMEOUT	= 57,	/* 11s */
1291	IEEE80211_REASON_MESH_INVALID_GTK	= 58,	/* 11s */
1292	IEEE80211_REASON_MESH_INCONS_PARAMS	= 59,	/* 11s */
1293	IEEE80211_REASON_MESH_INVALID_SECURITY	= 60,	/* 11s */
1294	IEEE80211_REASON_MESH_PERR_NO_PROXY	= 61,	/* 11s */
1295	IEEE80211_REASON_MESH_PERR_NO_FI	= 62,	/* 11s */
1296	IEEE80211_REASON_MESH_PERR_DEST_UNREACH	= 63,	/* 11s */
1297	IEEE80211_REASON_MESH_MAC_ALRDY_EXISTS_MBSS = 64, /* 11s */
1298	IEEE80211_REASON_MESH_CHAN_SWITCH_REG	= 65,	/* 11s */
1299	IEEE80211_REASON_MESH_CHAN_SWITCH_UNSPEC = 66,	/* 11s */
1300
1301	IEEE80211_STATUS_SUCCESS		= 0,
1302	IEEE80211_STATUS_UNSPECIFIED		= 1,
1303	IEEE80211_STATUS_CAPINFO		= 10,
1304	IEEE80211_STATUS_NOT_ASSOCED		= 11,
1305	IEEE80211_STATUS_OTHER			= 12,
1306	IEEE80211_STATUS_ALG			= 13,
1307	IEEE80211_STATUS_SEQUENCE		= 14,
1308	IEEE80211_STATUS_CHALLENGE		= 15,
1309	IEEE80211_STATUS_TIMEOUT		= 16,
1310	IEEE80211_STATUS_TOOMANY		= 17,
1311	IEEE80211_STATUS_BASIC_RATE		= 18,
1312	IEEE80211_STATUS_SP_REQUIRED		= 19,	/* 11b */
1313	IEEE80211_STATUS_PBCC_REQUIRED		= 20,	/* 11b */
1314	IEEE80211_STATUS_CA_REQUIRED		= 21,	/* 11b */
1315	IEEE80211_STATUS_SPECMGMT_REQUIRED	= 22,	/* 11h */
1316	IEEE80211_STATUS_PWRCAP_REQUIRED	= 23,	/* 11h */
1317	IEEE80211_STATUS_SUPCHAN_REQUIRED	= 24,	/* 11h */
1318	IEEE80211_STATUS_SHORTSLOT_REQUIRED	= 25,	/* 11g */
1319	IEEE80211_STATUS_DSSSOFDM_REQUIRED	= 26,	/* 11g */
1320	IEEE80211_STATUS_MISSING_HT_CAPS	= 27,	/* 11n D3.0 */
1321	IEEE80211_STATUS_INVALID_IE		= 40,	/* 11i */
1322	IEEE80211_STATUS_GROUP_CIPHER_INVALID	= 41,	/* 11i */
1323	IEEE80211_STATUS_PAIRWISE_CIPHER_INVALID = 42,	/* 11i */
1324	IEEE80211_STATUS_AKMP_INVALID		= 43,	/* 11i */
1325	IEEE80211_STATUS_UNSUPP_RSN_IE_VERSION	= 44,	/* 11i */
1326	IEEE80211_STATUS_INVALID_RSN_IE_CAP	= 45,	/* 11i */
1327	IEEE80211_STATUS_CIPHER_SUITE_REJECTED	= 46,	/* 11i */
1328};
1329
1330#define	IEEE80211_WEP_KEYLEN		5	/* 40bit */
1331#define	IEEE80211_WEP_IVLEN		3	/* 24bit */
1332#define	IEEE80211_WEP_KIDLEN		1	/* 1 octet */
1333#define	IEEE80211_WEP_CRCLEN		4	/* CRC-32 */
1334#define	IEEE80211_WEP_TOTLEN		(IEEE80211_WEP_IVLEN + \
1335					 IEEE80211_WEP_KIDLEN + \
1336					 IEEE80211_WEP_CRCLEN)
1337#define	IEEE80211_WEP_NKID		4	/* number of key ids */
1338
1339/*
1340 * 802.11i defines an extended IV for use with non-WEP ciphers.
1341 * When the EXTIV bit is set in the key id byte an additional
1342 * 4 bytes immediately follow the IV for TKIP.  For CCMP the
1343 * EXTIV bit is likewise set but the 8 bytes represent the
1344 * CCMP header rather than IV+extended-IV.
1345 */
1346#define	IEEE80211_WEP_EXTIV		0x20
1347#define	IEEE80211_WEP_EXTIVLEN		4	/* extended IV length */
1348#define	IEEE80211_WEP_MICLEN		8	/* trailing MIC */
1349
1350#define	IEEE80211_CRC_LEN		4
1351
1352/*
1353 * Maximum acceptable MTU is:
1354 *	IEEE80211_MAX_LEN - WEP overhead - CRC -
1355 *		QoS overhead - RSN/WPA overhead
1356 * Min is arbitrarily chosen > IEEE80211_MIN_LEN.  The default
1357 * mtu is Ethernet-compatible; it's set by ether_ifattach.
1358 */
1359#define	IEEE80211_MTU_MAX		2290
1360#define	IEEE80211_MTU_MIN		32
1361
1362#define	IEEE80211_MAX_LEN		(2300 + IEEE80211_CRC_LEN + \
1363    (IEEE80211_WEP_IVLEN + IEEE80211_WEP_KIDLEN + IEEE80211_WEP_CRCLEN))
1364#define	IEEE80211_ACK_LEN \
1365	(sizeof(struct ieee80211_frame_ack) + IEEE80211_CRC_LEN)
1366#define	IEEE80211_MIN_LEN \
1367	(sizeof(struct ieee80211_frame_min) + IEEE80211_CRC_LEN)
1368
1369/*
1370 * The 802.11 spec says at most 2007 stations may be
1371 * associated at once.  For most AP's this is way more
1372 * than is feasible so we use a default of IEEE80211_AID_DEF.
1373 * This number may be overridden by the driver and/or by
1374 * user configuration but may not be less than IEEE80211_AID_MIN
1375 * (see _ieee80211.h for implementation-specific settings).
1376 */
1377#define	IEEE80211_AID_MAX		2007
1378
1379#define	IEEE80211_AID(b)	((b) &~ 0xc000)
1380
1381/*
1382 * RTS frame length parameters.  The default is specified in
1383 * the 802.11 spec as 512; we treat it as implementation-dependent
1384 * so it's defined in ieee80211_var.h.  The max may be wrong
1385 * for jumbo frames.
1386 */
1387#define	IEEE80211_RTS_MIN		1
1388#define	IEEE80211_RTS_MAX		2346
1389
1390/*
1391 * TX fragmentation parameters.  As above for RTS, we treat
1392 * default as implementation-dependent so define it elsewhere.
1393 */
1394#define	IEEE80211_FRAG_MIN		256
1395#define	IEEE80211_FRAG_MAX		2346
1396
1397/*
1398 * Beacon interval (TU's).  Min+max come from WiFi requirements.
1399 * As above, we treat default as implementation-dependent so
1400 * define it elsewhere.
1401 */
1402#define	IEEE80211_BINTVAL_MAX	1000	/* max beacon interval (TU's) */
1403#define	IEEE80211_BINTVAL_MIN	25	/* min beacon interval (TU's) */
1404
1405/*
1406 * DTIM period (beacons).  Min+max are not really defined
1407 * by the protocol but we want them publicly visible so
1408 * define them here.
1409 */
1410#define	IEEE80211_DTIM_MAX	15	/* max DTIM period */
1411#define	IEEE80211_DTIM_MIN	1	/* min DTIM period */
1412
1413/*
1414 * Beacon miss threshold (beacons).  As for DTIM, we define
1415 * them here to be publicly visible.  Note the max may be
1416 * clamped depending on device capabilities.
1417 */
1418#define	IEEE80211_HWBMISS_MIN 	1
1419#define	IEEE80211_HWBMISS_MAX 	255
1420
1421/*
1422 * 802.11 frame duration definitions.
1423 */
1424
1425struct ieee80211_duration {
1426	uint16_t	d_rts_dur;
1427	uint16_t	d_data_dur;
1428	uint16_t	d_plcp_len;
1429	uint8_t		d_residue;	/* unused octets in time slot */
1430};
1431
1432/* One Time Unit (TU) is 1Kus = 1024 microseconds. */
1433#define IEEE80211_DUR_TU		1024
1434
1435/* IEEE 802.11b durations for DSSS PHY in microseconds */
1436#define IEEE80211_DUR_DS_LONG_PREAMBLE	144
1437#define IEEE80211_DUR_DS_SHORT_PREAMBLE	72
1438
1439#define IEEE80211_DUR_DS_SLOW_PLCPHDR	48
1440#define IEEE80211_DUR_DS_FAST_PLCPHDR	24
1441#define IEEE80211_DUR_DS_SLOW_ACK	112
1442#define IEEE80211_DUR_DS_FAST_ACK	56
1443#define IEEE80211_DUR_DS_SLOW_CTS	112
1444#define IEEE80211_DUR_DS_FAST_CTS	56
1445
1446#define IEEE80211_DUR_DS_SLOT		20
1447#define IEEE80211_DUR_DS_SIFS		10
1448#define IEEE80211_DUR_DS_PIFS	(IEEE80211_DUR_DS_SIFS + IEEE80211_DUR_DS_SLOT)
1449#define IEEE80211_DUR_DS_DIFS	(IEEE80211_DUR_DS_SIFS + \
1450				 2 * IEEE80211_DUR_DS_SLOT)
1451#define IEEE80211_DUR_DS_EIFS	(IEEE80211_DUR_DS_SIFS + \
1452				 IEEE80211_DUR_DS_SLOW_ACK + \
1453				 IEEE80211_DUR_DS_LONG_PREAMBLE + \
1454				 IEEE80211_DUR_DS_SLOW_PLCPHDR + \
1455				 IEEE80211_DUR_DIFS)
1456
1457#endif /* _NET80211_IEEE80211_H_ */
1458