xref: /freebsd/sys/net80211/ieee80211.h (revision 2be1a816b9ff69588e55be0a84cbe2a31efc0f2f)
1 /*-
2  * Copyright (c) 2001 Atsushi Onoe
3  * Copyright (c) 2002-2008 Sam Leffler, Errno Consulting
4  * All rights reserved.
5  *
6  * Redistribution and use in source and binary forms, with or without
7  * modification, are permitted provided that the following conditions
8  * are met:
9  * 1. Redistributions of source code must retain the above copyright
10  *    notice, this list of conditions and the following disclaimer.
11  * 2. Redistributions in binary form must reproduce the above copyright
12  *    notice, this list of conditions and the following disclaimer in the
13  *    documentation and/or other materials provided with the distribution.
14  *
15  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
16  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
17  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
18  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
19  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
20  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
21  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
22  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
23  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
24  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
25  *
26  * $FreeBSD$
27  */
28 #ifndef _NET80211_IEEE80211_H_
29 #define _NET80211_IEEE80211_H_
30 
31 /*
32  * 802.11 protocol definitions.
33  */
34 
35 #define	IEEE80211_ADDR_LEN	6		/* size of 802.11 address */
36 /* is 802.11 address multicast/broadcast? */
37 #define	IEEE80211_IS_MULTICAST(_a)	(*(_a) & 0x01)
38 
39 /* IEEE 802.11 PLCP header */
40 struct ieee80211_plcp_hdr {
41 	uint16_t	i_sfd;
42 	uint8_t		i_signal;
43 	uint8_t		i_service;
44 	uint16_t	i_length;
45 	uint16_t	i_crc;
46 } __packed;
47 
48 #define IEEE80211_PLCP_SFD      0xF3A0
49 #define IEEE80211_PLCP_SERVICE  0x00
50 
51 /*
52  * generic definitions for IEEE 802.11 frames
53  */
54 struct ieee80211_frame {
55 	uint8_t		i_fc[2];
56 	uint8_t		i_dur[2];
57 	uint8_t		i_addr1[IEEE80211_ADDR_LEN];
58 	uint8_t		i_addr2[IEEE80211_ADDR_LEN];
59 	uint8_t		i_addr3[IEEE80211_ADDR_LEN];
60 	uint8_t		i_seq[2];
61 	/* possibly followed by addr4[IEEE80211_ADDR_LEN]; */
62 	/* see below */
63 } __packed;
64 
65 struct ieee80211_qosframe {
66 	uint8_t		i_fc[2];
67 	uint8_t		i_dur[2];
68 	uint8_t		i_addr1[IEEE80211_ADDR_LEN];
69 	uint8_t		i_addr2[IEEE80211_ADDR_LEN];
70 	uint8_t		i_addr3[IEEE80211_ADDR_LEN];
71 	uint8_t		i_seq[2];
72 	uint8_t		i_qos[2];
73 	/* possibly followed by addr4[IEEE80211_ADDR_LEN]; */
74 	/* see below */
75 } __packed;
76 
77 struct ieee80211_qoscntl {
78 	uint8_t		i_qos[2];
79 };
80 
81 struct ieee80211_frame_addr4 {
82 	uint8_t		i_fc[2];
83 	uint8_t		i_dur[2];
84 	uint8_t		i_addr1[IEEE80211_ADDR_LEN];
85 	uint8_t		i_addr2[IEEE80211_ADDR_LEN];
86 	uint8_t		i_addr3[IEEE80211_ADDR_LEN];
87 	uint8_t		i_seq[2];
88 	uint8_t		i_addr4[IEEE80211_ADDR_LEN];
89 } __packed;
90 
91 
92 struct ieee80211_qosframe_addr4 {
93 	uint8_t		i_fc[2];
94 	uint8_t		i_dur[2];
95 	uint8_t		i_addr1[IEEE80211_ADDR_LEN];
96 	uint8_t		i_addr2[IEEE80211_ADDR_LEN];
97 	uint8_t		i_addr3[IEEE80211_ADDR_LEN];
98 	uint8_t		i_seq[2];
99 	uint8_t		i_addr4[IEEE80211_ADDR_LEN];
100 	uint8_t		i_qos[2];
101 } __packed;
102 
103 #define	IEEE80211_FC0_VERSION_MASK		0x03
104 #define	IEEE80211_FC0_VERSION_SHIFT		0
105 #define	IEEE80211_FC0_VERSION_0			0x00
106 #define	IEEE80211_FC0_TYPE_MASK			0x0c
107 #define	IEEE80211_FC0_TYPE_SHIFT		2
108 #define	IEEE80211_FC0_TYPE_MGT			0x00
109 #define	IEEE80211_FC0_TYPE_CTL			0x04
110 #define	IEEE80211_FC0_TYPE_DATA			0x08
111 
112 #define	IEEE80211_FC0_SUBTYPE_MASK		0xf0
113 #define	IEEE80211_FC0_SUBTYPE_SHIFT		4
114 /* for TYPE_MGT */
115 #define	IEEE80211_FC0_SUBTYPE_ASSOC_REQ		0x00
116 #define	IEEE80211_FC0_SUBTYPE_ASSOC_RESP	0x10
117 #define	IEEE80211_FC0_SUBTYPE_REASSOC_REQ	0x20
118 #define	IEEE80211_FC0_SUBTYPE_REASSOC_RESP	0x30
119 #define	IEEE80211_FC0_SUBTYPE_PROBE_REQ		0x40
120 #define	IEEE80211_FC0_SUBTYPE_PROBE_RESP	0x50
121 #define	IEEE80211_FC0_SUBTYPE_BEACON		0x80
122 #define	IEEE80211_FC0_SUBTYPE_ATIM		0x90
123 #define	IEEE80211_FC0_SUBTYPE_DISASSOC		0xa0
124 #define	IEEE80211_FC0_SUBTYPE_AUTH		0xb0
125 #define	IEEE80211_FC0_SUBTYPE_DEAUTH		0xc0
126 #define	IEEE80211_FC0_SUBTYPE_ACTION		0xd0
127 /* for TYPE_CTL */
128 #define	IEEE80211_FC0_SUBTYPE_BAR		0x80
129 #define	IEEE80211_FC0_SUBTYPE_PS_POLL		0xa0
130 #define	IEEE80211_FC0_SUBTYPE_RTS		0xb0
131 #define	IEEE80211_FC0_SUBTYPE_CTS		0xc0
132 #define	IEEE80211_FC0_SUBTYPE_ACK		0xd0
133 #define	IEEE80211_FC0_SUBTYPE_CF_END		0xe0
134 #define	IEEE80211_FC0_SUBTYPE_CF_END_ACK	0xf0
135 /* for TYPE_DATA (bit combination) */
136 #define	IEEE80211_FC0_SUBTYPE_DATA		0x00
137 #define	IEEE80211_FC0_SUBTYPE_CF_ACK		0x10
138 #define	IEEE80211_FC0_SUBTYPE_CF_POLL		0x20
139 #define	IEEE80211_FC0_SUBTYPE_CF_ACPL		0x30
140 #define	IEEE80211_FC0_SUBTYPE_NODATA		0x40
141 #define	IEEE80211_FC0_SUBTYPE_CFACK		0x50
142 #define	IEEE80211_FC0_SUBTYPE_CFPOLL		0x60
143 #define	IEEE80211_FC0_SUBTYPE_CF_ACK_CF_ACK	0x70
144 #define	IEEE80211_FC0_SUBTYPE_QOS		0x80
145 #define	IEEE80211_FC0_SUBTYPE_QOS_NULL		0xc0
146 
147 #define	IEEE80211_FC1_DIR_MASK			0x03
148 #define	IEEE80211_FC1_DIR_NODS			0x00	/* STA->STA */
149 #define	IEEE80211_FC1_DIR_TODS			0x01	/* STA->AP  */
150 #define	IEEE80211_FC1_DIR_FROMDS		0x02	/* AP ->STA */
151 #define	IEEE80211_FC1_DIR_DSTODS		0x03	/* AP ->AP  */
152 
153 #define	IEEE80211_FC1_MORE_FRAG			0x04
154 #define	IEEE80211_FC1_RETRY			0x08
155 #define	IEEE80211_FC1_PWR_MGT			0x10
156 #define	IEEE80211_FC1_MORE_DATA			0x20
157 #define	IEEE80211_FC1_WEP			0x40
158 #define	IEEE80211_FC1_ORDER			0x80
159 
160 #define	IEEE80211_SEQ_FRAG_MASK			0x000f
161 #define	IEEE80211_SEQ_FRAG_SHIFT		0
162 #define	IEEE80211_SEQ_SEQ_MASK			0xfff0
163 #define	IEEE80211_SEQ_SEQ_SHIFT			4
164 #define	IEEE80211_SEQ_RANGE			4096
165 
166 #define	IEEE80211_SEQ_ADD(seq, incr) \
167 	(((seq) + (incr)) & (IEEE80211_SEQ_RANGE-1))
168 #define	IEEE80211_SEQ_INC(seq)	IEEE80211_SEQ_ADD(seq,1)
169 #define	IEEE80211_SEQ_SUB(a, b) \
170 	(((a) + IEEE80211_SEQ_RANGE - (b)) & (IEEE80211_SEQ_RANGE-1))
171 
172 #define	IEEE80211_SEQ_BA_RANGE			2048	/* 2^11 */
173 #define	IEEE80211_SEQ_BA_BEFORE(a, b) \
174 	(IEEE80211_SEQ_SUB(b, a+1) < IEEE80211_SEQ_BA_RANGE-1)
175 
176 #define	IEEE80211_NWID_LEN			32
177 
178 #define	IEEE80211_QOS_TXOP			0x00ff
179 /* bit 8 is reserved */
180 #define	IEEE80211_QOS_AMSDU			0x80
181 #define	IEEE80211_QOS_AMSDU_S			7
182 #define	IEEE80211_QOS_ACKPOLICY			0x60
183 #define	IEEE80211_QOS_ACKPOLICY_S		5
184 #define	IEEE80211_QOS_ACKPOLICY_NOACK		0x20	/* No ACK required */
185 #define	IEEE80211_QOS_ACKPOLICY_BA		0x60	/* Block ACK */
186 #define	IEEE80211_QOS_ESOP			0x10
187 #define	IEEE80211_QOS_ESOP_S			4
188 #define	IEEE80211_QOS_TID			0x0f
189 
190 /* does frame have QoS sequence control data */
191 #define	IEEE80211_QOS_HAS_SEQ(wh) \
192 	(((wh)->i_fc[0] & \
193 	  (IEEE80211_FC0_TYPE_MASK | IEEE80211_FC0_SUBTYPE_QOS)) == \
194 	  (IEEE80211_FC0_TYPE_DATA | IEEE80211_FC0_SUBTYPE_QOS))
195 
196 /*
197  * WME/802.11e information element.
198  */
199 struct ieee80211_wme_info {
200 	uint8_t		wme_id;		/* IEEE80211_ELEMID_VENDOR */
201 	uint8_t		wme_len;	/* length in bytes */
202 	uint8_t		wme_oui[3];	/* 0x00, 0x50, 0xf2 */
203 	uint8_t		wme_type;	/* OUI type */
204 	uint8_t		wme_subtype;	/* OUI subtype */
205 	uint8_t		wme_version;	/* spec revision */
206 	uint8_t		wme_info;	/* QoS info */
207 } __packed;
208 
209 /*
210  * WME/802.11e Tspec Element
211  */
212 struct ieee80211_wme_tspec {
213 	uint8_t		ts_id;
214 	uint8_t		ts_len;
215 	uint8_t		ts_oui[3];
216 	uint8_t		ts_oui_type;
217 	uint8_t		ts_oui_subtype;
218 	uint8_t		ts_version;
219 	uint8_t		ts_tsinfo[3];
220 	uint8_t		ts_nom_msdu[2];
221 	uint8_t		ts_max_msdu[2];
222 	uint8_t		ts_min_svc[4];
223 	uint8_t		ts_max_svc[4];
224 	uint8_t		ts_inactv_intv[4];
225 	uint8_t		ts_susp_intv[4];
226 	uint8_t		ts_start_svc[4];
227 	uint8_t		ts_min_rate[4];
228 	uint8_t		ts_mean_rate[4];
229 	uint8_t		ts_max_burst[4];
230 	uint8_t		ts_min_phy[4];
231 	uint8_t		ts_peak_rate[4];
232 	uint8_t		ts_delay[4];
233 	uint8_t		ts_surplus[2];
234 	uint8_t		ts_medium_time[2];
235 } __packed;
236 
237 /*
238  * WME AC parameter field
239  */
240 struct ieee80211_wme_acparams {
241 	uint8_t		acp_aci_aifsn;
242 	uint8_t		acp_logcwminmax;
243 	uint16_t	acp_txop;
244 } __packed;
245 
246 #define WME_NUM_AC		4	/* 4 AC categories */
247 #define	WME_NUM_TID		16	/* 16 tids */
248 
249 #define WME_PARAM_ACI		0x60	/* Mask for ACI field */
250 #define WME_PARAM_ACI_S		5	/* Shift for ACI field */
251 #define WME_PARAM_ACM		0x10	/* Mask for ACM bit */
252 #define WME_PARAM_ACM_S		4	/* Shift for ACM bit */
253 #define WME_PARAM_AIFSN		0x0f	/* Mask for aifsn field */
254 #define WME_PARAM_AIFSN_S	0	/* Shift for aifsn field */
255 #define WME_PARAM_LOGCWMIN	0x0f	/* Mask for CwMin field (in log) */
256 #define WME_PARAM_LOGCWMIN_S	0	/* Shift for CwMin field */
257 #define WME_PARAM_LOGCWMAX	0xf0	/* Mask for CwMax field (in log) */
258 #define WME_PARAM_LOGCWMAX_S	4	/* Shift for CwMax field */
259 
260 #define WME_AC_TO_TID(_ac) (       \
261 	((_ac) == WME_AC_VO) ? 6 : \
262 	((_ac) == WME_AC_VI) ? 5 : \
263 	((_ac) == WME_AC_BK) ? 1 : \
264 	0)
265 
266 #define TID_TO_WME_AC(_tid) (      \
267 	((_tid) == 0 || (_tid) == 3) ? WME_AC_BE : \
268 	((_tid) < 3) ? WME_AC_BK : \
269 	((_tid) < 6) ? WME_AC_VI : \
270 	WME_AC_VO)
271 
272 /*
273  * WME Parameter Element
274  */
275 struct ieee80211_wme_param {
276 	uint8_t		param_id;
277 	uint8_t		param_len;
278 	uint8_t		param_oui[3];
279 	uint8_t		param_oui_type;
280 	uint8_t		param_oui_subtype;
281 	uint8_t		param_version;
282 	uint8_t		param_qosInfo;
283 #define	WME_QOSINFO_COUNT	0x0f	/* Mask for param count field */
284 	uint8_t		param_reserved;
285 	struct ieee80211_wme_acparams	params_acParams[WME_NUM_AC];
286 } __packed;
287 
288 /*
289  * Management Notification Frame
290  */
291 struct ieee80211_mnf {
292 	uint8_t		mnf_category;
293 	uint8_t		mnf_action;
294 	uint8_t		mnf_dialog;
295 	uint8_t		mnf_status;
296 } __packed;
297 #define	MNF_SETUP_REQ	0
298 #define	MNF_SETUP_RESP	1
299 #define	MNF_TEARDOWN	2
300 
301 /*
302  * 802.11n Management Action Frames
303  */
304 /* generic frame format */
305 struct ieee80211_action {
306 	uint8_t		ia_category;
307 	uint8_t		ia_action;
308 } __packed;
309 
310 #define	IEEE80211_ACTION_CAT_QOS	0	/* QoS */
311 #define	IEEE80211_ACTION_CAT_BA		3	/* BA */
312 #define	IEEE80211_ACTION_CAT_HT		7	/* HT */
313 
314 #define	IEEE80211_ACTION_HT_TXCHWIDTH	0	/* recommended xmit chan width*/
315 #define	IEEE80211_ACTION_HT_MIMOPWRSAVE	1	/* MIMO power save */
316 
317 /* HT - recommended transmission channel width */
318 struct ieee80211_action_ht_txchwidth {
319 	struct ieee80211_action	at_header;
320 	uint8_t		at_chwidth;
321 } __packed;
322 
323 #define	IEEE80211_A_HT_TXCHWIDTH_20	0
324 #define	IEEE80211_A_HT_TXCHWIDTH_2040	1
325 
326 /* HT - MIMO Power Save (NB: D2.04) */
327 struct ieee80211_action_ht_mimopowersave {
328 	struct ieee80211_action am_header;
329 	uint8_t		am_control;
330 } __packed;
331 
332 #define	IEEE80211_A_HT_MIMOPWRSAVE_ENA		0x01	/* PS enabled */
333 #define	IEEE80211_A_HT_MIMOPWRSAVE_MODE		0x02
334 #define	IEEE80211_A_HT_MIMOPWRSAVE_MODE_S	1
335 #define	IEEE80211_A_HT_MIMOPWRSAVE_DYNAMIC	0x02	/* Dynamic Mode */
336 #define	IEEE80211_A_HT_MIMOPWRSAVE_STATIC	0x00	/* no SM packets */
337 /* bits 2-7 reserved */
338 
339 /* Block Ack actions */
340 #define IEEE80211_ACTION_BA_ADDBA_REQUEST       0   /* ADDBA request */
341 #define IEEE80211_ACTION_BA_ADDBA_RESPONSE      1   /* ADDBA response */
342 #define IEEE80211_ACTION_BA_DELBA	        2   /* DELBA */
343 
344 /* Block Ack Parameter Set */
345 #define	IEEE80211_BAPS_BUFSIZ	0xffc0		/* buffer size */
346 #define	IEEE80211_BAPS_BUFSIZ_S	6
347 #define	IEEE80211_BAPS_TID	0x003c		/* TID */
348 #define	IEEE80211_BAPS_TID_S	2
349 #define	IEEE80211_BAPS_POLICY	0x0002		/* block ack policy */
350 #define	IEEE80211_BAPS_POLICY_S	1
351 
352 #define	IEEE80211_BAPS_POLICY_DELAYED	(0<<IEEE80211_BAPS_POLICY_S)
353 #define	IEEE80211_BAPS_POLICY_IMMEDIATE	(1<<IEEE80211_BAPS_POLICY_S)
354 
355 /* Block Ack Sequence Control */
356 #define	IEEE80211_BASEQ_START	0xfff0		/* starting seqnum */
357 #define	IEEE80211_BASEQ_START_S	4
358 #define	IEEE80211_BASEQ_FRAG	0x000f		/* fragment number */
359 #define	IEEE80211_BASEQ_FRAG_S	0
360 
361 /* Delayed Block Ack Parameter Set */
362 #define	IEEE80211_DELBAPS_TID	0xf000		/* TID */
363 #define	IEEE80211_DELBAPS_TID_S	12
364 #define	IEEE80211_DELBAPS_INIT	0x0800		/* initiator */
365 #define	IEEE80211_DELBAPS_INIT_S 11
366 
367 /* BA - ADDBA request */
368 struct ieee80211_action_ba_addbarequest {
369 	struct ieee80211_action rq_header;
370 	uint8_t		rq_dialogtoken;
371 	uint16_t	rq_baparamset;
372 	uint16_t	rq_batimeout;		/* in TUs */
373 	uint16_t	rq_baseqctl;
374 } __packed;
375 
376 /* BA - ADDBA response */
377 struct ieee80211_action_ba_addbaresponse {
378 	struct ieee80211_action rs_header;
379 	uint8_t		rs_dialogtoken;
380 	uint16_t	rs_statuscode;
381 	uint16_t	rs_baparamset;
382 	uint16_t	rs_batimeout;		/* in TUs */
383 } __packed;
384 
385 /* BA - DELBA */
386 struct ieee80211_action_ba_delba {
387 	struct ieee80211_action dl_header;
388 	uint16_t	dl_baparamset;
389 	uint16_t	dl_reasoncode;
390 } __packed;
391 
392 /* BAR Control */
393 #define	IEEE80211_BAR_TID	0xf000		/* TID */
394 #define	IEEE80211_BAR_TID_S	12
395 #define	IEEE80211_BAR_COMP	0x0004		/* compressed */
396 #define	IEEE80211_BAR_MTID	0x0002
397 #define	IEEE80211_BAR_NOACK	0x0001		/* no-ack policy */
398 
399 struct ieee80211_ba_request {
400 	uint16_t	rq_barctl;
401 	uint16_t	rq_barseqctl;
402 } __packed;
403 
404 /*
405  * Control frames.
406  */
407 struct ieee80211_frame_min {
408 	uint8_t		i_fc[2];
409 	uint8_t		i_dur[2];
410 	uint8_t		i_addr1[IEEE80211_ADDR_LEN];
411 	uint8_t		i_addr2[IEEE80211_ADDR_LEN];
412 	/* FCS */
413 } __packed;
414 
415 struct ieee80211_frame_rts {
416 	uint8_t		i_fc[2];
417 	uint8_t		i_dur[2];
418 	uint8_t		i_ra[IEEE80211_ADDR_LEN];
419 	uint8_t		i_ta[IEEE80211_ADDR_LEN];
420 	/* FCS */
421 } __packed;
422 
423 struct ieee80211_frame_cts {
424 	uint8_t		i_fc[2];
425 	uint8_t		i_dur[2];
426 	uint8_t		i_ra[IEEE80211_ADDR_LEN];
427 	/* FCS */
428 } __packed;
429 
430 struct ieee80211_frame_ack {
431 	uint8_t		i_fc[2];
432 	uint8_t		i_dur[2];
433 	uint8_t		i_ra[IEEE80211_ADDR_LEN];
434 	/* FCS */
435 } __packed;
436 
437 struct ieee80211_frame_pspoll {
438 	uint8_t		i_fc[2];
439 	uint8_t		i_aid[2];
440 	uint8_t		i_bssid[IEEE80211_ADDR_LEN];
441 	uint8_t		i_ta[IEEE80211_ADDR_LEN];
442 	/* FCS */
443 } __packed;
444 
445 struct ieee80211_frame_cfend {		/* NB: also CF-End+CF-Ack */
446 	uint8_t		i_fc[2];
447 	uint8_t		i_dur[2];	/* should be zero */
448 	uint8_t		i_ra[IEEE80211_ADDR_LEN];
449 	uint8_t		i_bssid[IEEE80211_ADDR_LEN];
450 	/* FCS */
451 } __packed;
452 
453 struct ieee80211_frame_bar {
454 	uint8_t		i_fc[2];
455 	uint8_t		i_dur[2];
456 	uint8_t		i_ra[IEEE80211_ADDR_LEN];
457 	uint8_t		i_ta[IEEE80211_ADDR_LEN];
458 	uint16_t	i_ctl;
459 	uint16_t	i_seq;
460 	/* FCS */
461 } __packed;
462 
463 /*
464  * BEACON management packets
465  *
466  *	octet timestamp[8]
467  *	octet beacon interval[2]
468  *	octet capability information[2]
469  *	information element
470  *		octet elemid
471  *		octet length
472  *		octet information[length]
473  */
474 
475 #define	IEEE80211_BEACON_INTERVAL(beacon) \
476 	((beacon)[8] | ((beacon)[9] << 8))
477 #define	IEEE80211_BEACON_CAPABILITY(beacon) \
478 	((beacon)[10] | ((beacon)[11] << 8))
479 
480 #define	IEEE80211_CAPINFO_ESS			0x0001
481 #define	IEEE80211_CAPINFO_IBSS			0x0002
482 #define	IEEE80211_CAPINFO_CF_POLLABLE		0x0004
483 #define	IEEE80211_CAPINFO_CF_POLLREQ		0x0008
484 #define	IEEE80211_CAPINFO_PRIVACY		0x0010
485 #define	IEEE80211_CAPINFO_SHORT_PREAMBLE	0x0020
486 #define	IEEE80211_CAPINFO_PBCC			0x0040
487 #define	IEEE80211_CAPINFO_CHNL_AGILITY		0x0080
488 #define	IEEE80211_CAPINFO_SPECTRUM_MGMT		0x0100
489 /* bit 9 is reserved */
490 #define	IEEE80211_CAPINFO_SHORT_SLOTTIME	0x0400
491 #define	IEEE80211_CAPINFO_RSN			0x0800
492 /* bit 12 is reserved */
493 #define	IEEE80211_CAPINFO_DSSSOFDM		0x2000
494 /* bits 14-15 are reserved */
495 
496 /*
497  * 802.11i/WPA information element (maximally sized).
498  */
499 struct ieee80211_ie_wpa {
500 	uint8_t		wpa_id;		/* IEEE80211_ELEMID_VENDOR */
501 	uint8_t		wpa_len;	/* length in bytes */
502 	uint8_t		wpa_oui[3];	/* 0x00, 0x50, 0xf2 */
503 	uint8_t		wpa_type;	/* OUI type */
504 	uint16_t	wpa_version;	/* spec revision */
505 	uint32_t	wpa_mcipher[1];	/* multicast/group key cipher */
506 	uint16_t	wpa_uciphercnt;	/* # pairwise key ciphers */
507 	uint32_t	wpa_uciphers[8];/* ciphers */
508 	uint16_t	wpa_authselcnt;	/* authentication selector cnt*/
509 	uint32_t	wpa_authsels[8];/* selectors */
510 	uint16_t	wpa_caps;	/* 802.11i capabilities */
511 	uint16_t	wpa_pmkidcnt;	/* 802.11i pmkid count */
512 	uint16_t	wpa_pmkids[8];	/* 802.11i pmkids */
513 } __packed;
514 
515 /*
516  * 802.11n HT Capability IE
517  * NB: these reflect D1.10
518  */
519 struct ieee80211_ie_htcap {
520 	uint8_t		hc_id;			/* element ID */
521 	uint8_t		hc_len;			/* length in bytes */
522 	uint16_t	hc_cap;			/* HT caps (see below) */
523 	uint8_t		hc_param;		/* HT params (see below) */
524 	uint8_t 	hc_mcsset[16]; 		/* supported MCS set */
525 	uint16_t	hc_extcap;		/* extended HT capabilities */
526 	uint32_t	hc_txbf;		/* txbf capabilities */
527 	uint8_t		hc_antenna;		/* antenna capabilities */
528 } __packed;
529 
530 /* HT capability flags (ht_cap) */
531 #define	IEEE80211_HTCAP_LDPC		0x0001	/* LDPC supported */
532 #define	IEEE80211_HTCAP_CHWIDTH40	0x0002	/* 20/40 supported */
533 #define	IEEE80211_HTCAP_SMPS		0x000c	/* SM Power Save mode */
534 #define	IEEE80211_HTCAP_SMPS_OFF	0x0000	/* none (static mode) */
535 #define	IEEE80211_HTCAP_SMPS_DYNAMIC	0x0004	/* send RTS first */
536 /* NB: SMPS value 2 is reserved */
537 #define	IEEE80211_HTCAP_SMPS_ENA	0x000c	/* enabled */
538 #define	IEEE80211_HTCAP_GREENFIELD	0x0010	/* Greenfield supported */
539 #define	IEEE80211_HTCAP_SHORTGI20	0x0020	/* Short GI in 20MHz */
540 #define	IEEE80211_HTCAP_SHORTGI40	0x0040	/* Short GI in 40MHz */
541 #define	IEEE80211_HTCAP_TXSTBC		0x0080	/* STBC tx ok */
542 #define	IEEE80211_HTCAP_RXSTBC		0x0300  /* STBC rx support */
543 #define	IEEE80211_HTCAP_RXSTBC_S	8
544 #define	IEEE80211_HTCAP_RXSTBC_1STREAM	0x0100  /* 1 spatial stream */
545 #define	IEEE80211_HTCAP_RXSTBC_2STREAM	0x0200  /* 1-2 spatial streams*/
546 #define	IEEE80211_HTCAP_RXSTBC_3STREAM	0x0300  /* 1-3 spatial streams*/
547 #define	IEEE80211_HTCAP_DELBA		0x0400	/* HT DELBA supported */
548 #define	IEEE80211_HTCAP_MAXAMSDU	0x0800	/* max A-MSDU length */
549 #define	IEEE80211_HTCAP_MAXAMSDU_7935	0x0800	/* 7935 octets */
550 #define	IEEE80211_HTCAP_MAXAMSDU_3839	0x0000	/* 3839 octets */
551 #define	IEEE80211_HTCAP_DSSSCCK40	0x1000  /* DSSS/CCK in 40MHz */
552 #define	IEEE80211_HTCAP_PSMP		0x2000  /* PSMP supported */
553 #define	IEEE80211_HTCAP_40INTOLERANT	0x4000  /* 40MHz intolerant */
554 #define	IEEE80211_HTCAP_LSIGTXOPPROT	0x8000  /* L-SIG TXOP prot */
555 
556 /* HT parameters (hc_param) */
557 #define	IEEE80211_HTCAP_MAXRXAMPDU	0x03	/* max rx A-MPDU factor */
558 #define	IEEE80211_HTCAP_MAXRXAMPDU_S	0
559 #define	IEEE80211_HTCAP_MAXRXAMPDU_8K	0
560 #define	IEEE80211_HTCAP_MAXRXAMPDU_16K	1
561 #define	IEEE80211_HTCAP_MAXRXAMPDU_32K	2
562 #define	IEEE80211_HTCAP_MAXRXAMPDU_64K	3
563 #define	IEEE80211_HTCAP_MPDUDENSITY	0x1c	/* min MPDU start spacing */
564 #define	IEEE80211_HTCAP_MPDUDENSITY_S	2
565 #define	IEEE80211_HTCAP_MPDUDENSITY_NA	0	/* no time restriction */
566 #define	IEEE80211_HTCAP_MPDUDENSITY_025	1	/* 1/4 us */
567 #define	IEEE80211_HTCAP_MPDUDENSITY_05	2	/* 1/2 us */
568 #define	IEEE80211_HTCAP_MPDUDENSITY_1	3	/* 1 us */
569 #define	IEEE80211_HTCAP_MPDUDENSITY_2	4	/* 2 us */
570 #define	IEEE80211_HTCAP_MPDUDENSITY_4	5	/* 4 us */
571 #define	IEEE80211_HTCAP_MPDUDENSITY_8	6	/* 8 us */
572 #define	IEEE80211_HTCAP_MPDUDENSITY_16	7	/* 16 us */
573 
574 /* HT extended capabilities (hc_extcap) */
575 #define	IEEE80211_HTCAP_PCO		0x0001	/* PCO capable */
576 #define	IEEE80211_HTCAP_PCOTRANS	0x0006	/* PCO transition time */
577 #define	IEEE80211_HTCAP_PCOTRANS_S	1
578 #define	IEEE80211_HTCAP_PCOTRANS_04	0x0002	/* 400 us */
579 #define	IEEE80211_HTCAP_PCOTRANS_15	0x0004	/* 1.5 ms */
580 #define	IEEE80211_HTCAP_PCOTRANS_5	0x0006	/* 5 ms */
581 /* bits 3-7 reserved */
582 #define	IEEE80211_HTCAP_MCSFBACK	0x0300	/* MCS feedback */
583 #define	IEEE80211_HTCAP_MCSFBACK_S	8
584 #define	IEEE80211_HTCAP_MCSFBACK_NONE	0x0000	/* nothing provided */
585 #define	IEEE80211_HTCAP_MCSFBACK_UNSOL	0x0200	/* unsolicited feedback */
586 #define	IEEE80211_HTCAP_MCSFBACK_MRQ	0x0300	/* " "+respond to MRQ */
587 #define	IEEE80211_HTCAP_HTC		0x0400	/* +HTC support */
588 #define	IEEE80211_HTCAP_RDR		0x0800	/* reverse direction responder*/
589 /* bits 12-15 reserved */
590 
591 /*
592  * 802.11n HT Information IE
593  */
594 struct ieee80211_ie_htinfo {
595 	uint8_t		hi_id;			/* element ID */
596 	uint8_t		hi_len;			/* length in bytes */
597 	uint8_t		hi_ctrlchannel;		/* primary channel */
598 	uint8_t		hi_byte1;		/* ht ie byte 1 */
599 	uint8_t		hi_byte2;		/* ht ie byte 2 */
600 	uint8_t		hi_byte3;		/* ht ie byte 3 */
601 	uint16_t	hi_byte45;		/* ht ie bytes 4+5 */
602 	uint8_t 	hi_basicmcsset[16]; 	/* basic MCS set */
603 } __packed;
604 
605 /* byte1 */
606 #define	IEEE80211_HTINFO_2NDCHAN	0x03	/* secondary/ext chan offset */
607 #define	IEEE80211_HTINFO_2NDCHAN_S	0
608 #define	IEEE80211_HTINFO_2NDCHAN_NONE	0x00	/* no secondary/ext channel */
609 #define	IEEE80211_HTINFO_2NDCHAN_ABOVE	0x01	/* above private channel */
610 /* NB: 2 is reserved */
611 #define	IEEE80211_HTINFO_2NDCHAN_BELOW	0x03	/* below primary channel */
612 #define	IEEE80211_HTINFO_TXWIDTH	0x04	/* tx channel width */
613 #define	IEEE80211_HTINFO_TXWIDTH_20	0x00	/* 20MHz width */
614 #define	IEEE80211_HTINFO_TXWIDTH_2040	0x04	/* any supported width */
615 #define	IEEE80211_HTINFO_RIFSMODE	0x08	/* Reduced IFS (RIFS) use */
616 #define	IEEE80211_HTINFO_RIFSMODE_PROH	0x00	/* RIFS use prohibited */
617 #define	IEEE80211_HTINFO_RIFSMODE_PERM	0x08	/* RIFS use permitted */
618 #define	IEEE80211_HTINFO_PMSPONLY	0x10	/* PSMP required to associate */
619 #define	IEEE80211_HTINFO_SIGRAN		0xe0	/* shortest Service Interval */
620 #define	IEEE80211_HTINFO_SIGRAN_S	5
621 #define	IEEE80211_HTINFO_SIGRAN_5	0x00	/* 5 ms */
622 /* XXX add rest */
623 
624 /* bytes 2+3 */
625 #define	IEEE80211_HTINFO_OPMODE		0x03	/* operating mode */
626 #define	IEEE80211_HTINFO_OPMODE_S	0
627 #define	IEEE80211_HTINFO_OPMODE_PURE	0x00	/* no protection */
628 #define	IEEE80211_HTINFO_OPMODE_PROTOPT	0x01	/* protection optional */
629 #define	IEEE80211_HTINFO_OPMODE_HT20PR	0x02	/* protection for HT20 sta's */
630 #define	IEEE80211_HTINFO_OPMODE_MIXED	0x03	/* protection for legacy sta's*/
631 #define	IEEE80211_HTINFO_NONGF_PRESENT	0x04	/* non-GF sta's present */
632 #define	IEEE80211_HTINFO_TXBL		0x08	/* transmit burst limit */
633 #define	IEEE80211_HTINFO_NONHT_PRESENT	0x10	/* non-HT sta's present */
634 /* bits 5-15 reserved */
635 
636 /* bytes 4+5 */
637 #define	IEEE80211_HTINFO_2NDARYBEACON	0x01
638 #define	IEEE80211_HTINFO_LSIGTXOPPROT	0x02
639 #define	IEEE80211_HTINFO_PCO_ACTIVE	0x04
640 #define	IEEE80211_HTINFO_40MHZPHASE	0x08
641 
642 /* byte5 */
643 #define	IEEE80211_HTINFO_BASIC_STBCMCS	0x7f
644 #define	IEEE80211_HTINFO_BASIC_STBCMCS_S 0
645 #define	IEEE80211_HTINFO_DUALPROTECTED	0x80
646 
647 /*
648  * Management information element payloads.
649  */
650 
651 enum {
652 	IEEE80211_ELEMID_SSID		= 0,
653 	IEEE80211_ELEMID_RATES		= 1,
654 	IEEE80211_ELEMID_FHPARMS	= 2,
655 	IEEE80211_ELEMID_DSPARMS	= 3,
656 	IEEE80211_ELEMID_CFPARMS	= 4,
657 	IEEE80211_ELEMID_TIM		= 5,
658 	IEEE80211_ELEMID_IBSSPARMS	= 6,
659 	IEEE80211_ELEMID_COUNTRY	= 7,
660 	IEEE80211_ELEMID_CHALLENGE	= 16,
661 	/* 17-31 reserved for challenge text extension */
662 	IEEE80211_ELEMID_PWRCNSTR	= 32,
663 	IEEE80211_ELEMID_PWRCAP		= 33,
664 	IEEE80211_ELEMID_TPCREQ		= 34,
665 	IEEE80211_ELEMID_TPCREP		= 35,
666 	IEEE80211_ELEMID_SUPPCHAN	= 36,
667 	IEEE80211_ELEMID_CHANSWITCHANN	= 37,
668 	IEEE80211_ELEMID_MEASREQ	= 38,
669 	IEEE80211_ELEMID_MEASREP	= 39,
670 	IEEE80211_ELEMID_QUIET		= 40,
671 	IEEE80211_ELEMID_IBSSDFS	= 41,
672 	IEEE80211_ELEMID_ERP		= 42,
673 	IEEE80211_ELEMID_HTCAP		= 45,
674 	IEEE80211_ELEMID_RSN		= 48,
675 	IEEE80211_ELEMID_XRATES		= 50,
676 	IEEE80211_ELEMID_HTINFO		= 61,
677 	IEEE80211_ELEMID_TPC		= 150,
678 	IEEE80211_ELEMID_CCKM		= 156,
679 	IEEE80211_ELEMID_VENDOR		= 221,	/* vendor private */
680 };
681 
682 struct ieee80211_tim_ie {
683 	uint8_t		tim_ie;			/* IEEE80211_ELEMID_TIM */
684 	uint8_t		tim_len;
685 	uint8_t		tim_count;		/* DTIM count */
686 	uint8_t		tim_period;		/* DTIM period */
687 	uint8_t		tim_bitctl;		/* bitmap control */
688 	uint8_t		tim_bitmap[1];		/* variable-length bitmap */
689 } __packed;
690 
691 struct ieee80211_country_ie {
692 	uint8_t		ie;			/* IEEE80211_ELEMID_COUNTRY */
693 	uint8_t		len;
694 	uint8_t		cc[3];			/* ISO CC+(I)ndoor/(O)utdoor */
695 	struct {
696 		uint8_t schan;			/* starting channel */
697 		uint8_t nchan;			/* number channels */
698 		uint8_t maxtxpwr;		/* tx power cap */
699 	} __packed band[1];			/* sub bands (NB: var size) */
700 } __packed;
701 
702 #define	IEEE80211_COUNTRY_MAX_BANDS	84	/* max possible bands */
703 #define	IEEE80211_COUNTRY_MAX_SIZE \
704 	(sizeof(struct ieee80211_country_ie) + 3*(IEEE80211_COUNTRY_MAX_BANDS-1))
705 
706 /*
707  * 802.11h Channel Switch Announcement (CSA).
708  */
709 struct ieee80211_csa_ie {
710 	uint8_t		csa_ie;		/* IEEE80211_ELEMID_CHANSWITCHANN */
711 	uint8_t		csa_len;
712 	uint8_t		csa_mode;		/* Channel Switch Mode */
713 	uint8_t		csa_newchan;		/* New Channel Number */
714 	uint8_t		csa_count;		/* Channel Switch Count */
715 } __packed;
716 
717 /*
718  * Atheros advanced capability information element.
719  */
720 struct ieee80211_ath_ie {
721 	uint8_t		ath_id;			/* IEEE80211_ELEMID_VENDOR */
722 	uint8_t		ath_len;		/* length in bytes */
723 	uint8_t		ath_oui[3];		/* 0x00, 0x03, 0x7f */
724 	uint8_t		ath_oui_type;		/* OUI type */
725 	uint8_t		ath_oui_subtype;	/* OUI subtype */
726 	uint8_t		ath_version;		/* spec revision */
727 	uint8_t		ath_capability;		/* capability info */
728 #define	ATHEROS_CAP_TURBO_PRIME		0x01	/* dynamic turbo--aka Turbo' */
729 #define	ATHEROS_CAP_COMPRESSION		0x02	/* data compression */
730 #define	ATHEROS_CAP_FAST_FRAME		0x04	/* fast (jumbo) frames */
731 #define	ATHEROS_CAP_XR			0x08	/* Xtended Range support */
732 #define	ATHEROS_CAP_AR			0x10	/* Advanded Radar support */
733 #define	ATHEROS_CAP_BURST		0x20	/* Bursting - not negotiated */
734 #define	ATHEROS_CAP_WME			0x40	/* CWMin tuning */
735 #define	ATHEROS_CAP_BOOST		0x80	/* use turbo/!turbo mode */
736 	uint8_t		ath_defkeyix[2];
737 } __packed;
738 
739 /* rate set entries are in .5 Mb/s units, and potentially marked as basic */
740 #define	IEEE80211_RATE_BASIC		0x80
741 #define	IEEE80211_RATE_VAL		0x7f
742 
743 /* EPR information element flags */
744 #define	IEEE80211_ERP_NON_ERP_PRESENT	0x01
745 #define	IEEE80211_ERP_USE_PROTECTION	0x02
746 #define	IEEE80211_ERP_LONG_PREAMBLE	0x04
747 
748 #define	ATH_OUI			0x7f0300	/* Atheros OUI */
749 #define	ATH_OUI_TYPE		0x01
750 #define	ATH_OUI_SUBTYPE		0x01
751 #define	ATH_OUI_VERSION		0x00
752 
753 #define	BCM_OUI			0x4c9000	/* Broadcom OUI */
754 #define	BCM_OUI_HTCAP		51		/* pre-draft HTCAP ie */
755 #define	BCM_OUI_HTINFO		52		/* pre-draft HTINFO ie */
756 
757 #define	WPA_OUI			0xf25000
758 #define	WPA_OUI_TYPE		0x01
759 #define	WPA_VERSION		1		/* current supported version */
760 
761 #define	WPA_CSE_NULL		0x00
762 #define	WPA_CSE_WEP40		0x01
763 #define	WPA_CSE_TKIP		0x02
764 #define	WPA_CSE_CCMP		0x04
765 #define	WPA_CSE_WEP104		0x05
766 
767 #define	WPA_ASE_NONE		0x00
768 #define	WPA_ASE_8021X_UNSPEC	0x01
769 #define	WPA_ASE_8021X_PSK	0x02
770 
771 #define	RSN_OUI			0xac0f00
772 #define	RSN_VERSION		1		/* current supported version */
773 
774 #define	RSN_CSE_NULL		0x00
775 #define	RSN_CSE_WEP40		0x01
776 #define	RSN_CSE_TKIP		0x02
777 #define	RSN_CSE_WRAP		0x03
778 #define	RSN_CSE_CCMP		0x04
779 #define	RSN_CSE_WEP104		0x05
780 
781 #define	RSN_ASE_NONE		0x00
782 #define	RSN_ASE_8021X_UNSPEC	0x01
783 #define	RSN_ASE_8021X_PSK	0x02
784 
785 #define	RSN_CAP_PREAUTH		0x01
786 
787 #define	WME_OUI			0xf25000
788 #define	WME_OUI_TYPE		0x02
789 #define	WME_INFO_OUI_SUBTYPE	0x00
790 #define	WME_PARAM_OUI_SUBTYPE	0x01
791 #define	WME_VERSION		1
792 
793 /* WME stream classes */
794 #define	WME_AC_BE	0		/* best effort */
795 #define	WME_AC_BK	1		/* background */
796 #define	WME_AC_VI	2		/* video */
797 #define	WME_AC_VO	3		/* voice */
798 
799 /*
800  * AUTH management packets
801  *
802  *	octet algo[2]
803  *	octet seq[2]
804  *	octet status[2]
805  *	octet chal.id
806  *	octet chal.length
807  *	octet chal.text[253]		NB: 1-253 bytes
808  */
809 
810 /* challenge length for shared key auth */
811 #define IEEE80211_CHALLENGE_LEN		128
812 
813 #define	IEEE80211_AUTH_ALG_OPEN		0x0000
814 #define	IEEE80211_AUTH_ALG_SHARED	0x0001
815 #define	IEEE80211_AUTH_ALG_LEAP		0x0080
816 
817 enum {
818 	IEEE80211_AUTH_OPEN_REQUEST		= 1,
819 	IEEE80211_AUTH_OPEN_RESPONSE		= 2,
820 };
821 
822 enum {
823 	IEEE80211_AUTH_SHARED_REQUEST		= 1,
824 	IEEE80211_AUTH_SHARED_CHALLENGE		= 2,
825 	IEEE80211_AUTH_SHARED_RESPONSE		= 3,
826 	IEEE80211_AUTH_SHARED_PASS		= 4,
827 };
828 
829 /*
830  * Reason and status codes.
831  *
832  * Reason codes are used in management frames to indicate why an
833  * action took place (e.g. on disassociation).  Status codes are
834  * used in management frames to indicate the result of an operation.
835  *
836  * Unlisted codes are reserved
837  */
838 
839 enum {
840 	IEEE80211_REASON_UNSPECIFIED		= 1,
841 	IEEE80211_REASON_AUTH_EXPIRE		= 2,
842 	IEEE80211_REASON_AUTH_LEAVE		= 3,
843 	IEEE80211_REASON_ASSOC_EXPIRE		= 4,
844 	IEEE80211_REASON_ASSOC_TOOMANY		= 5,
845 	IEEE80211_REASON_NOT_AUTHED		= 6,
846 	IEEE80211_REASON_NOT_ASSOCED		= 7,
847 	IEEE80211_REASON_ASSOC_LEAVE		= 8,
848 	IEEE80211_REASON_ASSOC_NOT_AUTHED	= 9,
849 	IEEE80211_REASON_DISASSOC_PWRCAP_BAD	= 10,	/* 11h */
850 	IEEE80211_REASON_DISASSOC_SUPCHAN_BAD	= 11,	/* 11h */
851 	IEEE80211_REASON_IE_INVALID		= 13,	/* 11i */
852 	IEEE80211_REASON_MIC_FAILURE		= 14,	/* 11i */
853 	IEEE80211_REASON_4WAY_HANDSHAKE_TIMEOUT	= 15,	/* 11i */
854 	IEEE80211_REASON_GROUP_KEY_UPDATE_TIMEOUT = 16,	/* 11i */
855 	IEEE80211_REASON_IE_IN_4WAY_DIFFERS	= 17,	/* 11i */
856 	IEEE80211_REASON_GROUP_CIPHER_INVALID	= 18,	/* 11i */
857 	IEEE80211_REASON_PAIRWISE_CIPHER_INVALID= 19,	/* 11i */
858 	IEEE80211_REASON_AKMP_INVALID		= 20,	/* 11i */
859 	IEEE80211_REASON_UNSUPP_RSN_IE_VERSION	= 21,	/* 11i */
860 	IEEE80211_REASON_INVALID_RSN_IE_CAP	= 22,	/* 11i */
861 	IEEE80211_REASON_802_1X_AUTH_FAILED	= 23,	/* 11i */
862 	IEEE80211_REASON_CIPHER_SUITE_REJECTED	= 24,	/* 11i */
863 
864 	IEEE80211_STATUS_SUCCESS		= 0,
865 	IEEE80211_STATUS_UNSPECIFIED		= 1,
866 	IEEE80211_STATUS_CAPINFO		= 10,
867 	IEEE80211_STATUS_NOT_ASSOCED		= 11,
868 	IEEE80211_STATUS_OTHER			= 12,
869 	IEEE80211_STATUS_ALG			= 13,
870 	IEEE80211_STATUS_SEQUENCE		= 14,
871 	IEEE80211_STATUS_CHALLENGE		= 15,
872 	IEEE80211_STATUS_TIMEOUT		= 16,
873 	IEEE80211_STATUS_TOOMANY		= 17,
874 	IEEE80211_STATUS_BASIC_RATE		= 18,
875 	IEEE80211_STATUS_SP_REQUIRED		= 19,	/* 11b */
876 	IEEE80211_STATUS_PBCC_REQUIRED		= 20,	/* 11b */
877 	IEEE80211_STATUS_CA_REQUIRED		= 21,	/* 11b */
878 	IEEE80211_STATUS_SPECMGMT_REQUIRED	= 22,	/* 11h */
879 	IEEE80211_STATUS_PWRCAP_REQUIRED	= 23,	/* 11h */
880 	IEEE80211_STATUS_SUPCHAN_REQUIRED	= 24,	/* 11h */
881 	IEEE80211_STATUS_SHORTSLOT_REQUIRED	= 25,	/* 11g */
882 	IEEE80211_STATUS_DSSSOFDM_REQUIRED	= 26,	/* 11g */
883 	IEEE80211_STATUS_INVALID_IE		= 40,	/* 11i */
884 	IEEE80211_STATUS_GROUP_CIPHER_INVALID	= 41,	/* 11i */
885 	IEEE80211_STATUS_PAIRWISE_CIPHER_INVALID = 42,	/* 11i */
886 	IEEE80211_STATUS_AKMP_INVALID		= 43,	/* 11i */
887 	IEEE80211_STATUS_UNSUPP_RSN_IE_VERSION	= 44,	/* 11i */
888 	IEEE80211_STATUS_INVALID_RSN_IE_CAP	= 45,	/* 11i */
889 	IEEE80211_STATUS_CIPHER_SUITE_REJECTED	= 46,	/* 11i */
890 };
891 
892 #define	IEEE80211_WEP_KEYLEN		5	/* 40bit */
893 #define	IEEE80211_WEP_IVLEN		3	/* 24bit */
894 #define	IEEE80211_WEP_KIDLEN		1	/* 1 octet */
895 #define	IEEE80211_WEP_CRCLEN		4	/* CRC-32 */
896 #define	IEEE80211_WEP_TOTLEN		(IEEE80211_WEP_IVLEN + \
897 					 IEEE80211_WEP_KIDLEN + \
898 					 IEEE80211_WEP_CRCLEN)
899 #define	IEEE80211_WEP_NKID		4	/* number of key ids */
900 
901 /*
902  * 802.11i defines an extended IV for use with non-WEP ciphers.
903  * When the EXTIV bit is set in the key id byte an additional
904  * 4 bytes immediately follow the IV for TKIP.  For CCMP the
905  * EXTIV bit is likewise set but the 8 bytes represent the
906  * CCMP header rather than IV+extended-IV.
907  */
908 #define	IEEE80211_WEP_EXTIV		0x20
909 #define	IEEE80211_WEP_EXTIVLEN		4	/* extended IV length */
910 #define	IEEE80211_WEP_MICLEN		8	/* trailing MIC */
911 
912 #define	IEEE80211_CRC_LEN		4
913 
914 /*
915  * Maximum acceptable MTU is:
916  *	IEEE80211_MAX_LEN - WEP overhead - CRC -
917  *		QoS overhead - RSN/WPA overhead
918  * Min is arbitrarily chosen > IEEE80211_MIN_LEN.  The default
919  * mtu is Ethernet-compatible; it's set by ether_ifattach.
920  */
921 #define	IEEE80211_MTU_MAX		2290
922 #define	IEEE80211_MTU_MIN		32
923 
924 #define	IEEE80211_MAX_LEN		(2300 + IEEE80211_CRC_LEN + \
925     (IEEE80211_WEP_IVLEN + IEEE80211_WEP_KIDLEN + IEEE80211_WEP_CRCLEN))
926 #define	IEEE80211_ACK_LEN \
927 	(sizeof(struct ieee80211_frame_ack) + IEEE80211_CRC_LEN)
928 #define	IEEE80211_MIN_LEN \
929 	(sizeof(struct ieee80211_frame_min) + IEEE80211_CRC_LEN)
930 
931 /*
932  * The 802.11 spec says at most 2007 stations may be
933  * associated at once.  For most AP's this is way more
934  * than is feasible so we use a default of IEEE80211_AID_DEF.
935  * This number may be overridden by the driver and/or by
936  * user configuration but may not be less than IEEE80211_AID_MIN
937  * (see _ieee80211.h for implementation-specific settings).
938  */
939 #define	IEEE80211_AID_MAX		2007
940 
941 #define	IEEE80211_AID(b)	((b) &~ 0xc000)
942 
943 /*
944  * RTS frame length parameters.  The default is specified in
945  * the 802.11 spec as 512; we treat it as implementation-dependent
946  * so it's defined in ieee80211_var.h.  The max may be wrong
947  * for jumbo frames.
948  */
949 #define	IEEE80211_RTS_MIN		1
950 #define	IEEE80211_RTS_MAX		2346
951 
952 /*
953  * TX fragmentation parameters.  As above for RTS, we treat
954  * default as implementation-dependent so define it elsewhere.
955  */
956 #define	IEEE80211_FRAG_MIN		256
957 #define	IEEE80211_FRAG_MAX		2346
958 
959 /*
960  * Beacon interval (TU's).  Min+max come from WiFi requirements.
961  * As above, we treat default as implementation-dependent so
962  * define it elsewhere.
963  */
964 #define	IEEE80211_BINTVAL_MAX	1000	/* max beacon interval (TU's) */
965 #define	IEEE80211_BINTVAL_MIN	25	/* min beacon interval (TU's) */
966 
967 /*
968  * DTIM period (beacons).  Min+max are not really defined
969  * by the protocol but we want them publicly visible so
970  * define them here.
971  */
972 #define	IEEE80211_DTIM_MAX	15	/* max DTIM period */
973 #define	IEEE80211_DTIM_MIN	1	/* min DTIM period */
974 
975 /*
976  * Beacon miss threshold (beacons).  As for DTIM, we define
977  * them here to be publicly visible.  Note the max may be
978  * clamped depending on device capabilities.
979  */
980 #define	IEEE80211_HWBMISS_MIN 	1
981 #define	IEEE80211_HWBMISS_MAX 	255
982 
983 /*
984  * 802.11 frame duration definitions.
985  */
986 
987 struct ieee80211_duration {
988 	uint16_t	d_rts_dur;
989 	uint16_t	d_data_dur;
990 	uint16_t	d_plcp_len;
991 	uint8_t		d_residue;	/* unused octets in time slot */
992 };
993 
994 /* One Time Unit (TU) is 1Kus = 1024 microseconds. */
995 #define IEEE80211_DUR_TU		1024
996 
997 /* IEEE 802.11b durations for DSSS PHY in microseconds */
998 #define IEEE80211_DUR_DS_LONG_PREAMBLE	144
999 #define IEEE80211_DUR_DS_SHORT_PREAMBLE	72
1000 
1001 #define IEEE80211_DUR_DS_SLOW_PLCPHDR	48
1002 #define IEEE80211_DUR_DS_FAST_PLCPHDR	24
1003 #define IEEE80211_DUR_DS_SLOW_ACK	112
1004 #define IEEE80211_DUR_DS_FAST_ACK	56
1005 #define IEEE80211_DUR_DS_SLOW_CTS	112
1006 #define IEEE80211_DUR_DS_FAST_CTS	56
1007 
1008 #define IEEE80211_DUR_DS_SLOT		20
1009 #define IEEE80211_DUR_DS_SIFS		10
1010 #define IEEE80211_DUR_DS_PIFS	(IEEE80211_DUR_DS_SIFS + IEEE80211_DUR_DS_SLOT)
1011 #define IEEE80211_DUR_DS_DIFS	(IEEE80211_DUR_DS_SIFS + \
1012 				 2 * IEEE80211_DUR_DS_SLOT)
1013 #define IEEE80211_DUR_DS_EIFS	(IEEE80211_DUR_DS_SIFS + \
1014 				 IEEE80211_DUR_DS_SLOW_ACK + \
1015 				 IEEE80211_DUR_DS_LONG_PREAMBLE + \
1016 				 IEEE80211_DUR_DS_SLOW_PLCPHDR + \
1017 				 IEEE80211_DUR_DIFS)
1018 
1019 /*
1020  * Atheros fast-frame encapsulation format.
1021  * FF max payload:
1022  * 802.2 + FFHDR + HPAD + 802.3 + 802.2 + 1500 + SPAD + 802.3 + 802.2 + 1500:
1023  *   8   +   4   +  4   +   14  +   8   + 1500 +  6   +   14  +   8   + 1500
1024  * = 3066
1025  */
1026 /* fast frame header is 32-bits */
1027 #define	ATH_FF_PROTO	0x0000003f	/* protocol */
1028 #define	ATH_FF_PROTO_S	0
1029 #define	ATH_FF_FTYPE	0x000000c0	/* frame type */
1030 #define	ATH_FF_FTYPE_S	6
1031 #define	ATH_FF_HLEN32	0x00000300	/* optional hdr length */
1032 #define	ATH_FF_HLEN32_S	8
1033 #define	ATH_FF_SEQNUM	0x001ffc00	/* sequence number */
1034 #define	ATH_FF_SEQNUM_S	10
1035 #define	ATH_FF_OFFSET	0xffe00000	/* offset to 2nd payload */
1036 #define	ATH_FF_OFFSET_S	21
1037 
1038 #define	ATH_FF_MAX_HDR_PAD	4
1039 #define	ATH_FF_MAX_SEP_PAD	6
1040 #define	ATH_FF_MAX_HDR		30
1041 
1042 #define	ATH_FF_PROTO_L2TUNNEL	0	/* L2 tunnel protocol */
1043 #define	ATH_FF_ETH_TYPE		0x88bd	/* Ether type for encapsulated frames */
1044 #define	ATH_FF_SNAP_ORGCODE_0	0x00
1045 #define	ATH_FF_SNAP_ORGCODE_1	0x03
1046 #define	ATH_FF_SNAP_ORGCODE_2	0x7f
1047 
1048 #endif /* _NET80211_IEEE80211_H_ */
1049