{ %s }
';else
tpl='%s
%s
';return tpl.format(items.join(', '),lis.join('%s
'));case'concat':var items=[];for(var i=0;i
'));var have_fw4=L.hasSystemFeature('firewall4');if(have_fw4){s=m.section(form.NamedSection,'fwver','fwver','',_('Your device runs firewall4.'));}else{s=m.section(form.NamedSection,'fwver','fwver','',_('Your device does not run firewall4.'));} s=m.section(form.GridSection,'ipset',_('IP Sets'));s.addremove=true;s.anonymous=true;s.sortable=true;s.cloneable=true;s.nodescriptions=true;if(have_fw4){o=s.option(form.Value,'name',_('Name'));o.optional=false;o.rmempty=false;o.validate=function(section_id,value){if(!/^[a-zA-Z_.][a-zA-Z0-9\/_.-]*$/.test(value)) return _('Invalid set name');return true;};}else{o=s.option(form.Value,'name',_('Name'));o.depends({external:''});} o.placeholder=_('Unnamed set');o=s.option(form.Value,'comment',_('Comment'));o.placeholder=_('Comment');o.modalonly=true;o.rmempty=true;o=s.option(form.ListValue,'family',_('Family'));o.value('ipv4',_('IPv4'));o.value('ipv6',_('IPv6'));o.default='ipv4';o=s.option(form.DynamicList,'match',_('Packet Field Match'),_('Packet fields to match upon.
'+'Syntax: direction_datatype. e.g.:
src_port, dest_net.'+'Directions:
src, dst. Datatypes: ip, port, mac, net, set.'+'Direction prefixes are optional.
'+'*Note: datatype
set is unsupported in fw4.'));o.value('ip',_('ip: IP addr'));o.value('port',_('port: Port'));o.value('mac',_('mac: MAC addr'));o.value('net',_('net: (sub)net'));if(!have_fw4)
o.value('set',_('set: ipset*'));o.value('src_ip',_('src_ip: Source IP'));o.value('src_port',_('src_port: Source Port'));o.value('src_mac',_('src_mac: Source MAC addr'));o.value('src_net',_('src_net: Source (sub)net'));if(!have_fw4)
o.value('src_set',_('src_Set: Source ipset*'));o.value('dest_ip',_('dest_ip: Destination IP'));o.value('dest_port',_('dest_port: Destination Port'));o.value('dest_mac',_('dest_mac: Destination MAC addr'));o.value('dest_net',_('dest_net: Destination (sub)net'));if(!have_fw4)
o.value('dest_set',_('dest_set: Destination ipset*'));o.optional=false;o.rmempty=false;if(have_fw4){o=s.option(form.DynamicList,'entry',_('IPs/Networks/MACs'),_('macaddr|ip[/cidr]'));o.datatype='or(ipaddr,macaddr)';o.rmempty=true;o=s.option(form.Value,'maxelem',_('Max Entries'),_('up to 65536 entries.'));o.datatype='port';o.modalonly=true;o.rmempty=true;}else{o=s.option(form.Value,'external',_('Refer To External Set'));o.rmempty=true;o.optional=true;o=s.option(form.ListValue,'storage',_('Storage Method'));o.value('bitmap',_('bitmap'));o.value('hash',_('hash'));o.value('list',_('list'));o.validate=function(section_id,value){var family=this.section.formvalue(section_id,'family');if(value.match(/bitmap/)&&!family.match(/ipv4/)) return _('bitmap is ipv4 only');return true;} o=s.option(form.Value,'iprange',_('IP (range)'),_('ip[/cidr]
'+'For use with Match datatypes:
*_ip.'));o.datatype='ipaddr';o.depends({family:'ipv4',storage:'bitmap',match:/_ip|_mac/});o.depends({storage:'hash',match:/_ip/});o=s.option(form.DynamicList,'entry',_('IPs/Networks'),_('ip[/cidr]'));o.datatype='or(ipaddr,macaddr)';o.depends({storage:'hash',match:/_ip|_net|_mac/});o=s.option(form.Value,'portrange',_('Port range'),_('fromport-toport'));o.datatype='neg(portrange)';o.depends({family:'ipv4',storage:'bitmap',match:/_port/});o.depends({family:'ipv4',storage:'hash',match:/_port/});o.depends({family:'ipv6',storage:'hash',match:/_port/});o=s.option(form.Value,'netmask',_('Netmask'));o.datatype='or(ip4prefix,ip6prefix)';o.depends({family:'ipv4',storage:'bitmap',match:/_ip/});o.depends({storage:'hash',match:/_ip/});o=s.option(form.Value,'maxelem',_('Max Length'),_('up to 65536 entries.'));o.datatype='port';o.depends('storage','hash');o.depends('storage','list');o.modalonly=true;o=s.option(form.Value,'hashsize',_('Initial Hash Size'));o.depends('storage','hash');o.placeholder=_('1024');o.modalonly=true;} o=s.option(form.FileUpload,'loadfile',_('Include File'),_('Path to file of CIDRs, subnets, host IPs, etc.
'));o.root_directory='/etc/luci-uploads';o.enable_delete=true;o.enable_upload=true;o.datatype='file';o.rmempty=true;o=s.option(form.Value,'timeout',_('Timeout'),_('Unit: seconds. Default
0 means the entry is added permanently to the set.'+'Max: 2147483 seconds.'));o.placeholder=_('0');o.modalonly=true;o.rmempty=true;o=s.option(form.Flag,'counters',_('Counters'),_('Enables packet and byte count tracking for the set.'));o.modalonly=true;o.rmempty=true;o.default=false;o=s.option(form.Flag,'enabled',_('Enabled'));o.default=true;o.editable=true;o.modalonly=false;return m.render();}}); 07070100340AC0000081A400000000000000000000000169B8A75300003505000000FE0000000000000000000000000000003100000000www/luci-static/resources/view/firewall/zones.js 'use strict';'require view';'require rpc';'require uci';'require form';'require network';'require firewall';'require tools.firewall as fwtool';'require tools.widgets as widgets';return view.extend({callConntrackHelpers:rpc.declare({object:'luci',method:'getConntrackHelpers',expect:{result:[]}}),load:function(){return Promise.all([this.callConntrackHelpers(),firewall.getDefaults()]);},render:function(data){if(fwtool.checkLegacySNAT()) return fwtool.renderMigration();else return this.renderZones(data);},renderZones:function(data){var ctHelpers=data[0],fwDefaults=data[1],m,s,o,inp,out;var fw4=L.hasSystemFeature('firewall4');m=new form.Map('firewall',_('Firewall - Zone Settings'),_('The firewall creates zones over your network interfaces to control network traffic flow.'));s=m.section(form.TypedSection,'defaults',_('General Settings'));s.anonymous=true;s.addremove=false;o=s.option(form.Flag,'synflood_protect',_('Enable SYN-flood protection'));o.cfgvalue=function(section_id){var val=uci.get('firewall',section_id,'synflood_protect');return(val!=null)?val:uci.get('firewall',section_id,'syn_flood');};o.write=function(section_id,value){uci.unset('firewall',section_id,'syn_flood');uci.set('firewall',section_id,'synflood_protect',value);};o.remove=function(section_id){uci.unset('firewall',section_id,'syn_flood');uci.unset('firewall',section_id,'synflood_protect');};o=s.option(form.Flag,'drop_invalid',_('Drop invalid packets'));var p=[s.option(form.ListValue,'input',_('Input')),s.option(form.ListValue,'output',_('Output')),s.option(form.ListValue,'forward',_('Forward'))];for(var i=0;i
-p tcp --sport 443 to only match inbound HTTPS traffic.'));o.modalonly=true;o.cfgvalue=function(section_id){return uci.get('firewall',section_id,'extra_src')||uci.get('firewall',section_id,'extra');};o.write=function(section_id,value){uci.unset('firewall',section_id,'extra');uci.set('firewall',section_id,'extra_src',value);};o=s.taboption('extra',form.Value,'extra_dest',_('Extra destination arguments'),_('Additional raw iptables arguments to classify zone destination traffic, e.g. -p tcp --dport 443 to only match outbound HTTPS traffic.'));o.modalonly=true;o.cfgvalue=function(section_id){return uci.get('firewall',section_id,'extra_dest')||uci.get('firewall',section_id,'extra_src')||uci.get('firewall',section_id,'extra');};o.write=function(section_id,value){uci.unset('firewall',section_id,'extra');uci.set('firewall',section_id,'extra_dest',value);};}
o=s.taboption('general',form.DummyValue,'_forwardinfo');o.rawhtml=true;o.modalonly=true;o.cfgvalue=function(section_id){var name=uci.get('firewall',section_id,'name');if(name==null)
name=_("this new zone");return _('The options below control the forwarding policies between this zone (%s) and other zones. Destination zones cover forwarded traffic originating from %q. Source zones match forwarded traffic from other zones targeted at %q. The forwarding rule is unidirectional, e.g. a forward from lan to wan does not imply a permission to forward from wan to lan as well.').format(name);};out=o=s.taboption('general',widgets.ZoneSelect,'out',_('Allow forward to destination zones:'));o.nocreate=true;o.multiple=true;o.modalonly=true;o.filter=function(section_id,value){return(uci.get('firewall',section_id,'name')!=value);};o.cfgvalue=function(section_id){var out=(this.option=='out'),zone=this.lookupZone(uci.get('firewall',section_id,'name')),fwds=zone?zone.getForwardingsBy(out?'src':'dest'):[],value=[];for(var i=0;i/etc/ethers',localhost_v6:'::1',loopback_slash_8_v4:'127.0.0.0/8',not_found:'Not found',nxdomain:'NXDOMAIN',rfc_1918_link:'RFC1918',rfc_4193_link:'RFC4193',rfc_4291_link:'RFC4291',rfc_6303_link:'RFC6303',reverse_arpa:'*.IN-ADDR.ARPA,*.IP6.ARPA',servers_file_entry01:'server=1.2.3.4',servers_file_entry02:'server=/domain/1.2.3.4',};const recordtypes=['ANY','A','AAAA','ALIAS','CAA','CERT','CNAME','DS','HINFO','HIP','HTTPS','KEY','LOC','MX','NAPTR','NS','OPENPGPKEY','PTR','RP','SIG','SOA','SRV','SSHFP','SVCB','TLSA','TXT','URI',]
function customi18n(template,values){if(!values)
values=noi18nstrings;return template.replace(/\{(\w+)\}/g,(match,key)=>values[key]||match);};m=new form.Map('dhcp',_('DHCP and DNS'),_('Dnsmasq is a lightweight DHCP server and DNS forwarder.'));s=m.section(form.TypedSection,'dnsmasq');s.anonymous=false;s.addremove=true;s.addbtntitle=_('Add server instance','Dnsmasq instance');s.renderContents=function(){var renderTask=form.TypedSection.prototype.renderContents.apply(this,arguments),sections=this.cfgsections();return Promise.resolve(renderTask).then(function(nodes){if(sections.length<2){nodes.querySelector('#cbi-dhcp-dnsmasq > h3').remove();nodes.querySelector('#cbi-dhcp-dnsmasq > .cbi-section-remove').remove();}
else{nodes.querySelectorAll('#cbi-dhcp-dnsmasq > .cbi-section-remove').forEach(function(div,i){var section=uci.get('dhcp',sections[i]),hline=div.nextElementSibling,btn=div.firstElementChild;if(!section||section['.anonymous']){hline.innerText=i?_('Unnamed instance #%d','Dnsmasq instance').format(i+1):_('Default instance','Dnsmasq instance');btn.innerText=i?_('Remove instance #%d','Dnsmasq instance').format(i+1):_('Remove default instance','Dnsmasq instance');}
else{hline.innerText=_('Instance "%q"','Dnsmasq instance').format(section['.name']);btn.innerText=_('Remove instance "%q"','Dnsmasq instance').format(section['.name']);}});}
nodes.querySelector('#cbi-dhcp-dnsmasq > .cbi-section-create input').placeholder=_('New instance name…','Dnsmasq instance');return nodes;});};s.tab('general',_('General'));s.tab('cache',_('Cache'));s.tab('devices',_('Devices & Ports'));s.tab('dnsrecords',_('DNS Records'));s.tab('dnssecopt',_('DNSSEC'));s.tab('filteropts',_('Filter'));s.tab('forward',_('Forwards'));s.tab('limits',_('Limits'));s.tab('logging',_('Log'));s.tab('files',_('Resolv & Hosts Files'));s.tab('leases',_('Static Leases'));s.tab('ipsets',_('IP Sets'));s.tab('relay',_('Relay'));s.tab('pxe_tftp',_('PXE/TFTP'));o=s.taboption('cache',form.MultiValue,'cache_rr',_('Cache arbitrary RR'),_('By default, dnsmasq caches A, AAAA, CNAME and SRV DNS record types.')+''+ _('This option adds additional record types to the cache.'));o.optional=true;o.create=true;o.multiple=true;o.display_size=5;recordtypes.forEach(r=>{o.value(r);});s.taboption('filteropts',form.Flag,'domainneeded',_('Domain required'),_('Never forward DNS queries which lack dots or domain parts.')+'
'+ customi18n(_('Names not in {etc_hosts} are answered {not_found}.')));s.taboption('general',form.Flag,'authoritative',_('Authoritative'),_('This is the only DHCP server in the local network.'));o=s.taboption('general',form.Value,'local',_('Resolve these locally'),_('Never forward these matching domains or subdomains; resolve from DHCP or hosts files only.'));o.placeholder='/internal.example.com/private.example.com/example.org';s.taboption('general',form.Value,'domain',_('Local domain'),_('Local domain suffix appended to DHCP names and hosts file entries.'));s.taboption('general',form.Flag,'expandhosts',_('Expand hosts'),_('Add local domain suffix to names served from hosts files.'));o=s.taboption('logging',form.Flag,'logqueries',_('Log queries'),_('Write received DNS queries to syslog.')+' '+_('Dump cache on SIGUSR1, include requesting IP.'));o.optional=true;o=s.taboption('logging',form.Flag,'logdhcp',_('Extra DHCP logging'),_('Log all options sent to DHCP clients and the tags used to determine them.'));o.optional=true;o=s.taboption('logging',form.Value,'logfacility',_('Log facility'),_('Set log class/facility for syslog entries.'));o.optional=true;o.value('KERN');o.value('USER');o.value('MAIL');o.value('DAEMON');o.value('AUTH');o.value('LPR');o.value('NEWS');o.value('UUCP');o.value('CRON');o.value('LOCAL0');o.value('LOCAL1');o.value('LOCAL2');o.value('LOCAL3');o.value('LOCAL4');o.value('LOCAL5');o.value('LOCAL6');o.value('LOCAL7');o.value('-',_('stderr'));o=s.taboption('forward',form.DynamicList,'server',_('DNS Forwards'),_('Forward specific domain queries to specific upstream servers.'));o.optional=true;o.placeholder='/*.example.org/10.1.2.3';o.validate=validateServerSpec;o=s.taboption('general',form.DynamicList,'address',_('Addresses'),_('Resolve specified FQDNs to an IP.')+'
'+ customi18n(_('Syntax: {code_syntax}.'),{code_syntax:'
/fqdn[/fqdn…]/[ipaddr]'})+''+ customi18n(_('{example_nx} returns {nxdomain}.','hint:
/example.com/ returns NXDOMAIN.'),{example_nx:'/example.com/',nxdomain:'NXDOMAIN'})+''+ customi18n(_('{any_domain} matches any domain (and returns {nxdomain}).','hint:
/#/ matches any domain (and returns NXDOMAIN).'),{any_domain:'/#/',nxdomain:'NXDOMAIN'})+''+ customi18n(_('{example_null} returns {null_addr} addresses ({null_ipv4}, {null_ipv6}) for {example_com} and its subdomains.','hint:
/example.com/# returns NULL addresses (0.0.0.0, ::) for example.com and its subdomains.'),{example_null:'/example.com/#',null_addr:'NULL',null_ipv4:'0.0.0.0',null_ipv6:'::',example_com:'example.com',}));o.optional=true;o.placeholder='/router.local/router.lan/192.168.0.1';o=s.taboption('general',form.DynamicList,'ipset',_('IP sets'),_('List of IP sets to populate with the IPs of DNS lookup results of the FQDNs also specified here.'));o.optional=true;o.placeholder='/example.org/ipset,ipset6';o=s.taboption('filteropts',form.Flag,'rebind_protection',_('Rebind protection'),customi18n(_('Discard upstream responses containing {rfc_1918_link} addresses.'))+''+ customi18n(_('Discard also upstream responses containing {rfc_4193_link}, Link-Local and private IPv4-Mapped {rfc_4291_link} IPv6 Addresses.')));o.rmempty=false;o=s.taboption('filteropts',form.Flag,'rebind_localhost',_('Allow localhost'),customi18n(_('Exempt {loopback_slash_8_v4} and {localhost_v6} from rebinding checks, e.g. for RBL services.')));o.depends('rebind_protection','1');o=s.taboption('filteropts',form.DynamicList,'rebind_domain',_('Domain whitelist'),customi18n(_('List of domains to allow {rfc_1918_link} responses for.')));o.depends('rebind_protection','1');o.optional=true;o.placeholder='ihost.netflix.com';o.validate=validateAddressList;o=s.taboption('filteropts',form.Flag,'localservice',_('Local service only'),_('Accept DNS queries only from hosts whose address is on a local subnet.'));o.optional=false;o.rmempty=false;o=s.taboption('devices',form.Flag,'nonwildcard',_('Non-wildcard'),_('Bind only to configured interface addresses, instead of the wildcard address.'));o.default=o.enabled;o.optional=false;o.rmempty=true;o=s.taboption('devices',widgets.NetworkSelect,'interface',_('Listen interfaces'),_('Listen only on the specified interfaces, and loopback if not excluded explicitly.'));o.multiple=true;o.nocreate=true;o=s.taboption('devices',widgets.NetworkSelect,'notinterface',_('Exclude interfaces'),_('Do not listen on the specified interfaces.'));o.loopback=true;o.multiple=true;o.nocreate=true;o=s.taboption('relay',form.SectionValue,'__relays__',form.TableSection,'relay',null,_('Relay DHCP requests elsewhere. OK: v4↔v4, v6↔v6. Not OK: v4↔v6, v6↔v4.') +'
'+_('Note: you may also need a DHCP Proxy (currently unavailable) when specifying a non-standard Relay To port(
addr#port).')
+''+_('You may add multiple unique Relay To on the same Listen addr.'));ss=o.subsection;ss.addremove=true;ss.anonymous=true;ss.sortable=true;ss.rowcolors=true;ss.nodescriptions=true;so=ss.option(form.Value,'local_addr',_('Relay from'));so.rmempty=false;so.datatype='ipaddr';for(var family=4;family<=6;family+=2){for(var i=0;i
'+ _('Off: use all files in the directory including the instance specific hosts file'));o.optional=true;o=s.taboption('files',form.Flag,'nohosts',customi18n(_('Ignore {etc_hosts} file')));o.optional=true;o=s.taboption('files',form.DynamicList,'addnhosts',_('Additional hosts files'));o.optional=true;o.placeholder='/etc/dnsmasq.hosts';o=s.taboption('logging',form.Flag,'quietdhcp',_('Suppress logging'),_('Suppress logging of the routine operation for the DHCP protocol.'));o.optional=true;o.depends('logdhcp','0');o=s.taboption('general',form.Flag,'sequential_ip',_('Allocate IPs sequentially'),_('Allocate IP addresses sequentially, starting from the lowest available address.'));o.optional=true;o=s.taboption('filteropts',form.Flag,'boguspriv',_('Filter private'),customi18n(_('Reject reverse lookups to {rfc_6303_link} IP ranges ({reverse_arpa}) not in {etc_hosts}.')));o.default=o.enabled;s.taboption('filteropts',form.Flag,'filterwin2k',_('Filter SRV/SOA service discovery'),_('Filters SRV/SOA service discovery, to avoid triggering dial-on-demand links.')+'
'+ _('May prevent VoIP or other services from working.'));o=s.taboption('filteropts',form.Flag,'filter_aaaa',_('Filter IPv6 AAAA records'),_('Remove IPv6 addresses from the results and only return IPv4 addresses.')+'
'+ _('Can be useful if ISP has IPv6 nameservers but does not provide IPv6 routing.'));o.optional=true;o=s.taboption('filteropts',form.Flag,'filter_a',_('Filter IPv4 A records'),_('Remove IPv4 addresses from the results and only return IPv6 addresses.'));o.optional=true;o=s.taboption('filteropts',form.MultiValue,'filter_rr',_('Filter arbitrary RR'),_('Removes records of the specified type(s) from answers.'));o.optional=true;o.create=true;o.multiple=true;o.display_size=5;recordtypes.forEach(r=>{o.value(r);});s.taboption('filteropts',form.Flag,'localise_queries',_('Localise queries'),customi18n(_('Limit response records (from {etc_hosts}) to those that fall within the subnet of the querying interface.'))+'
'+ _('This prevents unreachable IPs in subnets not accessible to you.')+'
'+ _('Note: IPv4 only.'));if(L.hasSystemFeature('dnsmasq','dnssec')){o=s.taboption('dnssecopt',form.Flag,'dnssec',_('DNSSEC'),_('Validate DNS replies and cache DNSSEC data, requires upstream to support DNSSEC.'));o.optional=true;o=s.taboption('dnssecopt',form.Flag,'dnsseccheckunsigned',_('DNSSEC check unsigned'),_('Verify unsigned domain responses really come from unsigned domains.'));o.default=o.enabled;o.optional=true;} s.taboption('filteropts',form.Flag,'nonegcache',_('No negative cache'),_('Do not cache negative replies, e.g. for non-existent domains.'));o=s.taboption('forward',form.Value,'serversfile',_('Additional servers file'),customi18n(_('File listing upstream resolvers, optionally domain-specific, e.g. {servers_file_entry01}, {servers_file_entry02}.')));o.placeholder='/etc/dnsmasq.servers';o=s.taboption('forward',form.Value,'addmac',_('Add requestor MAC'),_('Add the MAC address of the requestor to DNS queries which are forwarded upstream.')+' '+'
'+ _('%s uses the default MAC address format encoding').format('
enabled')+' '+''+ _('%s uses an alternative encoding of the MAC as base64').format('
base64')+' '+''+ _('%s uses a human-readable encoding of hex-and-colons').format('
text'));o.optional=true;o.value('',_('off'));o.value('1',_('enabled (default)'));o.value('base64');o.value('text');s.taboption('forward',form.Flag,'stripmac',_('Remove MAC address before forwarding query'),_('Remove any MAC address information already in downstream queries before forwarding upstream.'));o=s.taboption('forward',form.Value,'addsubnet',_('Add subnet address to forwards'),_('Add a subnet address to the DNS queries which are forwarded upstream, leaving this value empty disables the feature.')+' '+
_('If an address is specified in the flag, it will be used, otherwise, the address of the requestor will be used.')+' '+
_('The amount of the address forwarded depends on the prefix length parameter: 32 (128 for IPv6) forwards the whole address, zero forwards none of it but still marks the request so that no upstream nameserver will add client address information either.')+' '+''+ _('The default (%s) is zero for both IPv4 and IPv6.').format('
0,0')+' '+''+ _('%s adds the /24 and /96 subnets of the requestor for IPv4 and IPv6 requestors, respectively.').format('
24,96')+' '+''+ _('%s adds 1.2.3.0/24 for IPv4 requestors and ::/0 for IPv6 requestors.').format('
1.2.3.4/24')+' '+''+ _('%s adds 1.2.3.0/24 for both IPv4 and IPv6 requestors.').format('
1.2.3.4/24,1.2.3.4/24'));o.optional=true;s.taboption('forward',form.Flag,'stripsubnet',_('Remove subnet address before forwarding query'),_('Remove any subnet address already present in a downstream query before forwarding it upstream.'));o=s.taboption('general',form.Flag,'allservers',_('All servers'),_('Query all available upstream resolvers.')+' '+_('First answer wins.'));o.optional=true;o=s.taboption('filteropts',form.DynamicList,'bogusnxdomain',customi18n(_('IPs to override with {nxdomain}')),customi18n(_('Transform replies which contain the specified addresses or subnets into {nxdomain} responses.')));o.optional=true;o.placeholder='64.94.110.11';o=s.taboption('devices',form.Value,'port',_('DNS server port'),_('Listening port for inbound DNS queries.'));o.optional=true;o.datatype='port';o.placeholder=53;o=s.taboption('devices',form.Value,'queryport',_('DNS query port'),_('Fixed source port for outbound DNS queries.'));o.optional=true;o.datatype='port';o.placeholder=_('any');o=s.taboption('devices',form.Value,'minport',_('Minimum source port #'),_('Min valid value %s.').format('1024')+' '+_('Useful for systems behind firewalls.'));o.optional=true;o.datatype='port';o.placeholder=1024;o.depends('queryport','');o=s.taboption('devices',form.Value,'maxport',_('Maximum source port #'),_('Max valid value %s.').format('65535')+' '+_('Useful for systems behind firewalls.'));o.optional=true;o.datatype='port';o.placeholder=50000;o.depends('queryport','');o=s.taboption('limits',form.Value,'dhcpleasemax',_('Max. DHCP leases'),_('Maximum allowed number of active DHCP leases.'));o.optional=true;o.datatype='uinteger';o.placeholder=150;o=s.taboption('limits',form.Value,'ednspacket_max',_('Max. EDNS0 packet size'),_('Maximum allowed size of EDNS0 UDP packets.'));o.optional=true;o.datatype='uinteger';o.placeholder=1280;o=s.taboption('limits',form.Value,'dnsforwardmax',_('Max. concurrent queries'),_('Maximum allowed number of concurrent DNS queries.'));o.optional=true;o.datatype='uinteger';o.placeholder=150;o=s.taboption('limits',form.Value,'cachesize',_('Size of DNS query cache'),_('Number of cached DNS entries, 10000 is maximum, 0 is no caching.'));o.optional=true;o.datatype='range(0,10000)';o.placeholder=150;o=s.taboption('limits',form.Value,'min_cache_ttl',_('Min cache TTL'),_('Extend short TTL values to the seconds value given when caching them. Use with caution.')+
_(' (Max 1h == 3600)'));o.optional=true;o.placeholder=60;o=s.taboption('limits',form.Value,'max_cache_ttl',_('Max cache TTL'),_('Set a maximum seconds TTL value for entries in the cache.'));o.optional=true;o.placeholder=3600;o=s.taboption('pxe_tftp',form.Flag,'enable_tftp',_('Enable TFTP server'),_('Enable the built-in single-instance TFTP server.'));o.optional=true;o=s.taboption('pxe_tftp',form.Value,'tftp_root',_('TFTP server root'),_('Root directory for files served via TFTP. Enable TFTP server and TFTP server root turn on the TFTP server and serve files from TFTP server root.'));o.depends('enable_tftp','1');o.optional=true;o.placeholder='/';o=s.taboption('pxe_tftp',form.Value,'dhcp_boot',_('Network boot image'),_('Filename of the boot image advertised to clients.'));o.depends('enable_tftp','1');o.optional=true;o.placeholder='pxelinux.0';o=s.taboption('pxe_tftp',form.SectionValue,'__pxe__',form.GridSection,'boot',null,_('Special PXE boot options for Dnsmasq.'));ss=o.subsection;ss.addremove=true;ss.anonymous=true;ss.modaltitle=_('Edit PXE/TFTP/BOOTP Host');ss.nodescriptions=true;so=ss.option(form.Value,'filename',_('Filename'),_('Host requests this filename from the boot server.'));so.optional=false;so.placeholder='pxelinux.0';so=ss.option(form.Value,'servername',_('Server name'),_('The hostname of the boot server'));so.optional=false;so.placeholder='myNAS';so=ss.option(form.Value,'serveraddress',_('Server address'),_('The IP address of the boot server'));so.optional=false;so.placeholder='192.168.1.2';so=ss.option(form.DynamicList,'dhcp_option',_('DHCP Options'),_('Additional options to send to the below match tags.')+''+ _('%s means "the address of the system running dnsmasq".').format('
0.0.0.0'));so.optional=true;so.placeholder='option:root-path,192.168.1.2:/data/netboot/root';so=ss.option(form.Value,'networkid',_('Match this Tag'),_('Only DHCP Clients with this tag are sent this boot option.'));so.optional=true;so.noaliases=true;so=ss.option(form.Flag,'force',_('Force'),_('Always send the chosen DHCP options. Sometimes needed, with e.g. PXELinux.'));so.optional=true;so=ss.option(form.Value,'instance',_('Instance'),_('Dnsmasq instance to which this boot section is bound. If unspecified, the section is valid for all dnsmasq instances.'));so.optional=true;Object.values(L.uci.sections('dhcp','dnsmasq')).forEach(function(val,index){var[name,display_str]=generateDnsmasqInstanceEntry(val);so.value(name,display_str);});o=s.taboption('dnsrecords',form.SectionValue,'__dnsrecords__',form.TypedSection,'__dnsrecords__');dnss=o.subsection;dnss.anonymous=true;dnss.cfgsections=function(){return['__dnsrecords__']};dnss.tab('hosts',_('Hostnames'));dnss.tab('srvhosts',_('SRV'));dnss.tab('mxhosts',_('MX'));dnss.tab('cnamehosts',_('CNAME'));dnss.tab('dnsrr',_('DNS-RR'));o=dnss.taboption('srvhosts',form.SectionValue,'__srvhosts__',form.TableSection,'srvhost',null,_('Bind service records to a domain name: specify the location of services. See RFC2782.').format('https://datatracker.ietf.org/doc/html/rfc2782')
+''+_('_service: _sip, _ldap, _imap, _stun, _xmpp-client, … . (Note: while _http is possible, no browsers support SRV records.)') +'
'+_('_proto: _tcp, _udp, _sctp, _quic, … .') +'
'+_('You may add multiple records for the same Target.') +'
'+_('Larger weights (of the same prio) are given a proportionately higher probability of being selected.'));ss=o.subsection;ss.addremove=true;ss.anonymous=true;ss.sortable=true;ss.rowcolors=true;so=ss.option(form.Value,'srv',_('SRV'),_('Syntax:')+' '+'
_service._proto.example.com.');so.rmempty=false;so.datatype='hostname';so.placeholder='_sip._tcp.example.com.';so=ss.option(form.Value,'target',_('Target'),_('CNAME or fqdn'));so.rmempty=false;so.datatype='hostname';so.placeholder='sip.example.com.';so=ss.option(form.Value,'port',_('Port'));so.rmempty=false;so.datatype='port';so.placeholder='5060';so=ss.option(form.Value,'class',_('Priority'),_('Ordinal: lower comes first.'));so.rmempty=true;so.datatype='range(0,65535)';so.placeholder='10';so=ss.option(form.Value,'weight',_('Weight'));so.rmempty=true;so.datatype='range(0,65535)';so.placeholder='50';o=dnss.taboption('mxhosts',form.SectionValue,'__mxhosts__',form.TableSection,'mxhost',null,_('Bind service records to a domain name: specify the location of services.')
+''+_('You may add multiple records for the same domain.'));ss=o.subsection;ss.addremove=true;ss.anonymous=true;ss.sortable=true;ss.rowcolors=true;ss.nodescriptions=true;so=ss.option(form.Value,'domain',_('Domain'));so.rmempty=false;so.datatype='hostname';so.placeholder='example.com.';so=ss.option(form.Value,'relay',_('Relay'));so.rmempty=false;so.datatype='hostname';so.placeholder='relay.example.com.';so=ss.option(form.Value,'pref',_('Priority'),_('Ordinal: lower comes first.'));so.rmempty=true;so.datatype='range(0,65535)';so.placeholder='0';o=dnss.taboption('cnamehosts',form.SectionValue,'__cname__',form.TableSection,'cname',null,_('Set an alias for a hostname.'));ss=o.subsection;ss.addremove=true;ss.anonymous=true;ss.sortable=true;ss.rowcolors=true;ss.nodescriptions=true;so=ss.option(form.Value,'cname',_('Domain'));so.rmempty=false;so.validate=validateHostname;so.placeholder='www.example.com.';so=ss.option(form.Value,'target',_('Target'));so.rmempty=false;so.datatype='hostname';so.placeholder='example.com.';o=dnss.taboption('hosts',form.SectionValue,'__hosts__',form.GridSection,'domain',null,_('Hostnames are used to bind a domain name to an IP address. This setting is redundant for hostnames already configured with static leases, but it can be useful to rebind an FQDN.'));ss=o.subsection;ss.addremove=true;ss.anonymous=true;ss.sortable=true;so=ss.option(form.Value,'name',_('Hostname'));so.rmempty=false;so.datatype='hostname';so=ss.option(form.Value,'ip',_('IP address'));so.rmempty=false;so.datatype='ipaddr("nomask")';var ipaddrs={};Object.keys(hosts).forEach(function(mac){var addrs=L.toArray(hosts[mac].ipaddrs||hosts[mac].ipv4);for(var i=0;i
'+ _('The netfilter components below are only regarded when running fw4.'));ss=o.subsection;ss.addremove=true;ss.anonymous=true;ss.sortable=true;ss.rowcolors=true;ss.nodescriptions=true;ss.modaltitle=_('Edit IP set');so=ss.option(form.DynamicList,'name',_('Name of the set'));uci.sections('firewall','ipset',function(s){if(typeof(s.name)=='string') so.value(s.name,s.comment?'%s (%s)'.format(s.name,s.comment):s.name);});so.rmempty=false;so.editable=false;so.datatype='string';so=ss.option(form.DynamicList,'domain',_('FQDN'));so.rmempty=false;so.editable=false;so.datatype='hostname';so=ss.option(form.Value,'table',_('Netfilter table name'),_('Defaults to fw4.'));so.editable=false;so.placeholder='fw4';so.rmempty=true;so=ss.option(form.ListValue,'table_family',_('Table IP family'),_('Defaults to IPv4+6.')+' '+_('Can be hinted by adding 4 or 6 to the name.')+'
'+ _('Adding an IPv6 to an IPv4 set and vice-versa silently fails.'));so.editable=false;so.rmempty=true;so.value('inet',_('IPv4+6'));so.value('ip',_('IPv4'));so.value('ip6',_('IPv6'));o=s.taboption('leases',form.SectionValue,'__leases__',form.GridSection,'host',null,_('Static leases are used to assign fixed IP addresses and symbolic hostnames to DHCP clients. They are also required for non-dynamic interface configurations where only hosts with a corresponding lease are served.')+'
'+ _('Use the Add Button to add a new lease entry. The MAC address identifies the host, the IPv4 address specifies the fixed address to use, and the Hostname is assigned as a symbolic name to the requesting host. The optional Lease time can be used to set non-standard host-specific lease time, e.g. 12h, 3d or infinite.')+'
'+ _('The tag construct filters which host directives are used; more than one tag can be provided, in this case the request must match all of them. Tagged directives are used in preference to untagged ones. Note that one of mac, duid or hostname still needs to be specified (can be a wildcard).'));ss=o.subsection;ss.addremove=true;ss.anonymous=true;ss.sortable=true;ss.nodescriptions=true;ss.max_cols=8;ss.modaltitle=_('Edit static lease');so=ss.option(form.Value,'name',_('Hostname'),_('Optional hostname to assign'));so.validate=validateHostname;so.rmempty=true;so.write=function(section,value){uci.set('dhcp',section,'name',value);uci.set('dhcp',section,'dns','1');};so.remove=function(section){uci.unset('dhcp',section,'name');uci.unset('dhcp',section,'dns');};so=ss.option(form.DynamicList,'mac',_('MAC address(es)'),_('The hardware address(es) of this entry/host.')+'
'+ _('In DHCPv4, it is possible to include more than one mac address. This allows an IP address to be associated with multiple macaddrs, and dnsmasq abandons a DHCP lease to one of the macaddrs when another asks for a lease. It only works reliably if only one of the macaddrs is active at any time.'));so.rmempty=true;so.cfgvalue=function(section){var macs=uci.get('dhcp',section,'mac');if(!Array.isArray(macs)){return expandAndFormatMAC(L.toArray(macs));}else{return expandAndFormatMAC(macs);}};so.validate=validateMACAddr.bind(so,pools);Object.keys(hosts).forEach(function(mac){var hint=hosts[mac].name||L.toArray(hosts[mac].ipaddrs||hosts[mac].ipv4)[0];so.value(mac,hint?'%s (%s)'.format(mac,hint):mac);});so=ss.option(form.Value,'ip',_('IPv4 address'),_('The IP address to be used for this host, or ignore to ignore any DHCP request from this host.'));so.value('ignore',_('Ignore'));so.datatype='or(ip4addr,"ignore")';so.validate=function(section,value){var m=this.section.formvalue(section,'mac'),n=this.section.formvalue(section,'name');if((m&&!m.length>0)&&!n) return _('One of hostname or MAC address must be specified!');if(!value||value=='ignore') return true;var leases=uci.sections('dhcp','host');for(var i=0;i
3h, 7d.'));so.rmempty=true;so.value('5m',_('5m (5 minutes)'));so.value('3h',_('3h (3 hours)'));so.value('12h',_('12h (12 hours - default)'));so.value('7d',_('7d (7 days)'));so.value('infinite',_('infinite (lease does not expire)'));so=ss.option(form.Value,'duid',_('DUID'),_('The DHCPv6-DUID (DHCP unique identifier) of this host.'));so.datatype='and(rangelength(20,36),hexstring)';Object.keys(duids).forEach(function(duid){so.value(duid,'%s (%s)'.format(duid,duids[duid].hostname||duids[duid].macaddr||duids[duid].ip6addr||'?'));});so=ss.option(form.Value,'hostid',_('IPv6-Suffix (hex)'),_('The IPv6 interface identifier (address suffix) as hexadecimal number (max. 16 chars).'));so.datatype='and(rangelength(0,16),hexstring)';so=ss.option(form.DynamicList,'tag',_('Tag'),_('Assign new, freeform tags to this entry.'));so=ss.option(form.DynamicList,'match_tag',_('Match Tag'),_('When a host matches an entry then the special tag %s is set. Use %s to match all known hosts.').format('known','known')+''+ _('Ignore requests from unknown machines using %s.').format('
!known')+''+ _('If a host matches an entry which cannot be used because it specifies an address on a different subnet, the tag %s is set.').format('
known-othernet'));so.value('known',_('known'));so.value('!known',_('!known (not known)'));so.value('known-othernet',_('known-othernet (on different subnet)'));so.optional=true;so=ss.option(form.Value,'instance',_('Instance'),_('Dnsmasq instance to which this DHCP host section is bound. If unspecified, the section is valid for all dnsmasq instances.'));so.optional=true;Object.values(L.uci.sections('dhcp','dnsmasq')).forEach(function(val,index){var[name,display_str]=generateDnsmasqInstanceEntry(val);so.value(name,display_str);});so=ss.option(form.Flag,'broadcast',_('Broadcast'),_('Force broadcast DHCP response.'));so=ss.option(form.Flag,'dns',_('Forward/reverse DNS'),_('Add static forward and reverse DNS entries for this host.'));o=s.taboption('leases',CBILeaseStatus,'__status__');if(has_dhcpv6)
o=s.taboption('leases',CBILease6Status,'__status6__');return m.render().then(function(mapEl){poll.add(function(){return callDHCPLeases().then(function(leaseinfo){var leases=Array.isArray(leaseinfo.dhcp_leases)?leaseinfo.dhcp_leases:[],leases6=Array.isArray(leaseinfo.dhcp6_leases)?leaseinfo.dhcp6_leases:[];cbi_update_table(mapEl.querySelector('#lease_status_table'),leases.map(function(lease){var exp;if(lease.expires===false)
exp=E('em',_('unlimited'));else if(lease.expires<=0)
exp=E('em',_('expired'));else
exp='%t'.format(lease.expires);var hint=lease.macaddr?hosts[lease.macaddr]:null,name=hint?hint.name:null,host=null;if(name&&lease.hostname&&lease.hostname!=name)
host='%s (%s)'.format(lease.hostname,name);else if(lease.hostname)
host=lease.hostname;return[host||'-',lease.ipaddr,lease.macaddr,exp];}),E('em',_('There are no active leases')));if(has_dhcpv6){cbi_update_table(mapEl.querySelector('#lease6_status_table'),leases6.map(function(lease){var exp;if(lease.expires===false)
exp=E('em',_('unlimited'));else if(lease.expires<=0)
exp=E('em',_('expired'));else
exp='%t'.format(lease.expires);var hint=lease.macaddr?hosts[lease.macaddr]:null,name=hint?(hint.name||L.toArray(hint.ipaddrs||hint.ipv4)[0]||L.toArray(hint.ip6addrs||hint.ipv6)[0]):null,host=null;if(name&&lease.hostname&&lease.hostname!=name&&lease.ip6addr!=name)
host='%s (%s)'.format(lease.hostname,name);else if(lease.hostname)
host=lease.hostname;else if(name)
host=name;return[host||'-',lease.ip6addrs?lease.ip6addrs.join(''):lease.ip6addr,lease.duid,exp];}),E('em',_('There are no active leases')));}});});return mapEl;});}});07070100340B39000081A400000000000000000000000169B8A7530001366C000000FE0000000000000000000000000000003300000000www/luci-static/resources/view/network/wireless.js 'use strict';'require view';'require dom';'require poll';'require fs';'require ui';'require rpc';'require uci';'require form';'require network';'require firewall';'require tools.widgets as widgets';const isReadonlyView=!L.hasViewPermission();function count_changes(section_id){const changes=ui.changes.changes?.wireless;if(!Array.isArray(changes))return 0;return changes.reduce((count,[,id])=>count+(id===section_id),0);} function render_radio_badge(radioDev){return E('span',{'class':'ifacebadge'},[E('img',{'src':L.resource('icons/wifi%s.svg').format(radioDev.isUp()?'':'_disabled')}),' ',radioDev.getName()]);} function render_signal_badge(signalPercent,signalValue,noiseValue,wrap,mode){let icon=L.resource('icons/signal-075-100.svg'),title,value;switch(true){case(signalPercent<0):icon=L.resource('icons/signal-none.svg');break;case(signalPercent==0):icon=L.resource('icons/signal-000-000.svg');break;case(signalPercent<25):icon=L.resource('icons/signal-000-025.svg');break;case(signalPercent<50):icon=L.resource('icons/signal-025-050.svg');break;case(signalPercent<75):icon=L.resource('icons/signal-050-075.svg');break;} if(signalValue){if(noiseValue){value=`${signalValue}/${noiseValue}\xa0${_('dBm')}`;title=[`${_('Signal')}: ${signalValue} ${_('dBm')}`,`${_('Noise')}: ${noiseValue} ${_('dBm')}`,`${_('SNR')}: ${signalValue - noiseValue} ${_('dBm')}`].filter(Boolean).join(' / ');} else{value=`${signalValue}\xa0${_('dBm')}`;title=`${_('Signal')} ${signalValue} ${_('dBm')}`;}} else if(signalPercent>-1){switch(mode){case'ap':title=_('No client associated');break;case'sta':case'adhoc':case'mesh':title=_('Not associated');break;default:title=_('No RX signal');} if(noiseValue){value=`---/${noiseValue}\xa0${_('dBm')}`;title=`${title} / ${_('Noise')}: ${noiseValue} ${_('dBm')}`;} else{value=`---\xa0${_('dBm')}`;}} else{value=E('em',{},E('small',{},[_('disabled')]));title=_('Interface is disabled');} return E('div',{'class':wrap?'center':'ifacebadge','title':title,'data-signal':signalValue,'data-noise':noiseValue},[E('img',{'src':icon}),E('span',{},[wrap?E('br'):' ',value])]);} function render_network_badge(radioNet){return render_signal_badge(radioNet.isUp()?radioNet.getSignalPercent():-1,radioNet.getSignal(),radioNet.getNoise(),false,radioNet.getMode());} function render_radio_status(radioDev,wifiNets){const name=radioDev.getI18n().replace(/ Wireless Controller .+$/,'');const node=E('div',[E('big',{},E('strong',{},name)),E('div')]);let channel,frequency,bitrate;wifiNets.forEach(wifiNet=>{channel=channel??wifiNet.getChannel();frequency=frequency??wifiNet.getFrequency();bitrate=bitrate??wifiNet.getBitRate();});if(radioDev.isUp()) L.itemlist(node.lastElementChild,[_('Channel'),`${channel || '?'} (${frequency || '?'} ${_('GHz')})`,_('Bitrate'),`${bitrate || '?'} ${_('Mbit/s')}`],' | ');else node.lastElementChild.appendChild(E('em',_('Device is not active')));return node;} function render_network_status(radioNet){const mode=radioNet.getActiveMode();const bssid=radioNet.getActiveBSSID();const channel=radioNet.getChannel();const disabled=(radioNet.get('disabled')=='1'||uci.get('wireless',radioNet.getWifiDeviceName(),'disabled')=='1');const is_assoc=(bssid&&bssid!='00:00:00:00:00:00'&&channel&&mode!='Unknown'&&!disabled);const is_mesh=(radioNet.getMode()=='mesh');const changecount=count_changes(radioNet.getName());let status_text=null;if(changecount) status_text=E('a',{href:'#',click:L.bind(ui.changes.displayChanges,ui.changes)},_('Interface has %d pending changes').format(changecount));else if(!is_assoc) status_text=E('em',disabled?_('Wireless is disabled'):_('Wireless is not associated'));return L.itemlist(E('div'),[is_mesh?_('Mesh ID'):_('SSID'),(is_mesh?radioNet.getMeshID():radioNet.getSSID())??'?',_('Mode'),mode,_('BSSID'),(!changecount&&is_assoc)?bssid:null,_('Encryption'),(!changecount&&is_assoc)?radioNet.getActiveEncryption()??_('None'):null,'',status_text],[' | ',E('br')]);} function render_modal_status(node,radioNet){if(!radioNet)return;const mode=radioNet.getActiveMode();const noise=radioNet.getNoise();const bssid=radioNet.getActiveBSSID();const channel=radioNet.getChannel();const disabled=(radioNet.get('disabled')=='1');const is_assoc=(bssid&&bssid!='00:00:00:00:00:00'&&channel&&mode!='Unknown'&&!disabled);if(node==null) node=E('span',{'class':'ifacebadge large','data-network':radioNet.getName()},[E('small'),E('span')]);dom.content(node.firstElementChild,render_signal_badge(disabled?-1:radioNet.getSignalPercent(),radioNet.getSignal(),noise,true,radioNet.getMode()));L.itemlist(node.lastElementChild,[_('Mode'),mode,_('SSID'),radioNet.getSSID()??'?',_('BSSID'),is_assoc?bssid:null,_('Encryption'),is_assoc?radioNet.getActiveEncryption()??_('None'):null,_('Channel'),is_assoc?`${radioNet.getChannel()} (${radioNet.getFrequency() ?? 0} ${_('GHz')})`:null,_('Tx-Power'),is_assoc?`${radioNet.getTXPower()} ${_('dBm')}`:null,_('Signal'),is_assoc?`${radioNet.getSignal()} ${_('dBm')}`:null,_('Noise'),(is_assoc&&noise!=null)?`${noise} ${_('dBm')}`:null,_('Bitrate'),is_assoc?`${radioNet.getBitRate() ?? 0} ${_('Mbit/s')}`:null,_('Country'),is_assoc?radioNet.getCountryCode():null],[' | ',E('br'),E('br'),E('br'),E('br'),E('br'),' | ',E('br'),' | ']);if(!is_assoc) dom.append(node.lastElementChild,E('em',disabled?_('Wireless is disabled'):_('Wireless is not associated')));return node;} function format_wifirate(rate){let s=`${rate.rate / 1000}\xa0${_('Mbit/s')}, ${rate.mhz}\xa0${_('MHz')}`;const ht=rate.ht;const vht=rate.vht;const nss=rate.nss;const mcs=rate.mcs;const sgi=rate.short_gi;const he=rate.he;const he_gi=rate.he_gi;const he_dcm=rate.he_dcm;const eht=rate?.eht??false;const eht_gi=rate?.eht_gi??0;const eht_dcm=rate?.eht_dcm??0;if(ht||vht)s+=[vht&&`, VHT-MCS\xa0${mcs}`,nss&&`, VHT-NSS\xa0${nss}`,ht&&`, MCS\xa0${mcs}`,sgi&&', '+_('Short GI').replace(/ /g,'\xa0')].filter(Boolean).join('');if(he)s+=[`, HE-MCS\xa0${mcs}`,nss&&`, HE-NSS\xa0${nss}`,he_gi&&`, HE-GI\xa0${he_gi}`,he_dcm&&`, HE-DCM\xa0${he_dcm}`].filter(Boolean).join('');if(eht)s+=[`, EHT-MCS\xa0${mcs}`,nss&&`, EHT-NSS\xa0${nss}`,he_gi&&`, EHT-GI\xa0${eht_gi}`,he_dcm&&`, EHT-DCM\xa0${eht_dcm}`].filter(Boolean).join('');return s;} function radio_restart(id,ev){const row=document.querySelector('.cbi-section-table-row[data-sid="%s"]'.format(id));const dsc=row.querySelector('[data-name="_stat"] > div');const btn=row.querySelector('.cbi-section-actions button');btn.blur();btn.classList.add('spinning');btn.disabled=true;dsc.setAttribute('restart','');dom.content(dsc,E('em',_('Device is restarting…')));} function network_updown(id,map,ev){const radio=uci.get('wireless',id,'device');const disabled=(uci.get('wireless',id,'disabled')=='1')||(uci.get('wireless',radio,'disabled')=='1');if(disabled){uci.unset('wireless',id,'disabled');uci.unset('wireless',radio,'disabled');} else{uci.set('wireless',id,'disabled','1');let all_networks_disabled=true;const wifi_ifaces=uci.sections('wireless','wifi-iface');wifi_ifaces.forEach(wifi_iface=>{if(wifi_iface.device==radio&&wifi_iface.disabled!='1') all_networks_disabled=false;});if(all_networks_disabled) uci.set('wireless',radio,'disabled','1');} return map.save().then(function(){ui.changes.apply();});} function next_free_sid(offset){let sid='wifinet'+offset;while(uci.get('wireless',sid)) sid='wifinet'+(++offset);return sid;} function add_dependency_permutations(o,deps){let res=[{}];Object.entries(deps).forEach(([key,list])=>{if(!Array.isArray(list))return;res=list.flatMap(value=>res.map(item=>({...item,[key]:value})));});res.forEach(dep=>o.depends(dep));} var CBIWifiFrequencyValue=form.Value.extend({callFrequencyList:rpc.declare({object:'iwinfo',method:'freqlist',params:['device'],expect:{results:[]}}),load:function(section_id){return Promise.all([network.getWifiDevice(section_id),this.callFrequencyList(section_id)]).then(L.bind(function(data){this.channels={'2g':L.hasSystemFeature('hostapd','acs')?['auto','auto',{available:true}]:[],'5g':L.hasSystemFeature('hostapd','acs')?['auto','auto',{available:true}]:[],'6g':L.hasSystemFeature('hostapd','acs')?['auto','auto',{available:true}]:[],'60g':[]};const wifidevs=data[0];const freqlist=data[1];freqlist.forEach(freq=>{if(!freq.band) return;const band='%dg'.format(freq.band);const available=(freq.restricted&&freq.no_ir)?false:true;this.channels[band].push(freq.channel,'%d (%d Mhz)'.format(freq.channel,freq.mhz),{available:available,no_outdoor:freq.no_outdoor});});const hwmodelist=L.toArray(wifidevs?wifidevs.getHWModes():null).reduce(function(o,v){o[v]=true;return o;},{});this.modes=['','Legacy',{available:hwmodelist.a||hwmodelist.b||hwmodelist.g},'n','N',{available:hwmodelist.n},'ac','AC',{available:L.hasSystemFeature('hostapd','11ac')&&hwmodelist.ac},'ax','AX',{available:L.hasSystemFeature('hostapd','11ax')&&hwmodelist.ax},'be','BE',{available:L.hasSystemFeature('hostapd','11be')&&hwmodelist.be}];const htmodelist=L.toArray(wifidevs?wifidevs.getHTModes():null).reduce(function(o,v){o[v]=true;return o;},{});this.htmodes={'':['','-',{available:true}],'n':['HT20','20 MHz',{available:htmodelist.HT20},'HT40','40 MHz',{available:htmodelist.HT40}],'ac':['VHT20','20 MHz',{available:htmodelist.VHT20},'VHT40','40 MHz',{available:htmodelist.VHT40},'VHT80','80 MHz',{available:htmodelist.VHT80},'VHT160','160 MHz',{available:htmodelist.VHT160}],'ax':['HE20','20 MHz',{available:htmodelist.HE20},'HE40','40 MHz',{available:htmodelist.HE40},'HE80','80 MHz',{available:htmodelist.HE80},'HE160','160 MHz',{available:htmodelist.HE160}],'be':['EHT20','20 MHz',{available:htmodelist.EHT20},'EHT40','40 MHz',{available:htmodelist.EHT40},'EHT80','80 MHz',{available:htmodelist.EHT80},'EHT160','160 MHz',{available:htmodelist.EHT160},'EHT320','320 MHz',{available:htmodelist.EHT320}]};this.bands={'':['2g','2.4 GHz',{available:this.channels['2g'].length>3},'5g','5 GHz',{available:this.channels['5g'].length>3},'60g','60 GHz',{available:this.channels['60g'].length>0}],'n':['2g','2.4 GHz',{available:this.channels['2g'].length>3},'5g','5 GHz',{available:this.channels['5g'].length>3}],'ac':['5g','5 GHz',{available:true}],'ax':['2g','2.4 GHz',{available:this.channels['2g'].length>3},'5g','5 GHz',{available:this.channels['5g'].length>3},'6g','6 GHz',{available:this.channels['6g'].length>3}],'be':['2g','2.4 GHz',{available:this.channels['2g'].length>3},'5g','5 GHz',{available:this.channels['5g'].length>3},'6g','6 GHz',{available:this.channels['6g'].length>3}]};},this));},setValues:function(sel,vals){if(sel.vals) sel.vals.selected=sel.selectedIndex;sel.options.length=0;for(let i=0;vals&&i
'+_('Operating frequency'),_('Some channels may be restricted to Indoor Only use by your Regulatory Domain. Make sure to follow this advice if a channel is reported as such.'));o.ucisection=s.section;if(hwtype=='mac80211'){o=ss.taboption('general',form.Flag,'legacy_rates',_('Allow legacy 802.11b rates'),_('Legacy or badly behaving devices may require legacy 802.11b rates to interoperate. Airtime efficiency may be significantly reduced where these are used. It is recommended to not allow 802.11b rates where possible.'));o.depends({'_freq':'2g','!contains':true});o=ss.taboption('general',CBIWifiTxPowerValue,'txpower',_('Maximum transmit power'),_('Specifies the maximum transmit power the wireless radio may use. Depending on regulatory requirements and wireless usage, the actual transmit power may be reduced by the driver.'));o.wifiNetwork=radioNet;o=ss.taboption('general',CBIWifiCountryValue,'country',_('Country Code'));o.wifiNetwork=radioNet;o=ss.taboption('advanced',form.ListValue,'cell_density',_('Coverage cell density'),_('Configures data rates based on the coverage cell density. Normal configures basic rates to 6, 12, 24 Mbps if legacy 802.11b rates are not used else to 5.5, 11 Mbps. High configures basic rates to 12, 24 Mbps if legacy 802.11b rates are not used else to the 11 Mbps rate. Very High configures 24 Mbps as the basic rate. Supported rates lower than the minimum basic rate are not offered.'));o.value('0',_('Disabled'));o.value('1',_('Normal'));o.value('2',_('High'));o.value('3',_('Very High'));o=ss.taboption('advanced',form.Value,'distance',_('Distance Optimization'),_('Distance to farthest network member in meters. Set only for distances above one kilometer; otherwise it is harmful.'));o.datatype='or(range(0,114750),"auto")';o.placeholder='auto';o=ss.taboption('advanced',form.Value,'frag',_('Fragmentation Threshold'));o.datatype='min(256)';o.placeholder=_('off');o=ss.taboption('advanced',form.Value,'rts',_('RTS/CTS Threshold'));o.datatype='uinteger';o.placeholder=_('off');o=ss.taboption('advanced',form.Flag,'noscan',_('Force 40MHz mode'),_('Always use 40MHz channels even if the secondary channel overlaps. Using this option does not comply with IEEE 802.11n-2009!'));o.rmempty=true;o=ss.taboption('advanced',form.Value,'beacon_int',_('Beacon Interval'));o.datatype='range(15,65535)';o.placeholder=100;o.rmempty=true;o=ss.taboption('advanced',form.Flag,'rxldpc',_('Rx LDPC'),_('Low-Density Parity-Check'));o.default='1';o=ss.taboption('advanced',form.Flag,'ldpc',_('Tx LDPC'));o.depends({'rxldpc':'1'});o.default='1';} o=s.option(form.SectionValue,'_device',form.NamedSection,radioNet.getName(),'wifi-iface',_('Interface Configuration'));o.modalonly=true;ss=o.subsection;ss.tab('general',_('General Setup'));ss.tab('encryption',_('Wireless Security'));ss.tab('macfilter',_('MAC-Filter'));ss.tab('advanced',_('Advanced Settings'));ss.tab('roaming',_('WLAN roaming'),_('Settings for assisting wireless clients in roaming between multiple APs: 802.11r, 802.11k and 802.11v'));o=ss.taboption('general',form.ListValue,'mode',_('Mode'));o.value('ap',_('Access Point'));o.value('sta',_('Client'));o.value('adhoc',_('Ad-Hoc'));o=ss.taboption('general',form.Value,'mesh_id',_('Mesh Id'));o.depends('mode','mesh');o=ss.taboption('advanced',form.Flag,'mesh_fwding',_('Forward mesh peer traffic'));o.rmempty=false;o.default='1';o.depends('mode','mesh');o=ss.taboption('advanced',form.Value,'mesh_rssi_threshold',_('RSSI threshold for joining mesh'),_('0 = not using RSSI threshold, 1 = do not change driver default')+' '+ _('Units: dBm. Where -255 is weakest, and -10 is strong.'));o.rmempty=false;o.default='0';o.datatype='range(-255,1)';o.depends('mode','mesh');o=ss.taboption('general',form.Value,'ssid',_('ESSID'));o.datatype='maxlength(32)';o.depends('mode','ap');o.depends('mode','sta');o.depends('mode','adhoc');o.depends('mode','ahdemo');o.depends('mode','monitor');o.depends('mode','ap-wds');o.depends('mode','sta-wds');o.depends('mode','wds');o=ss.taboption('general',form.Value,'bssid',_('BSSID'));o.datatype='macaddr';o=ss.taboption('general',widgets.NetworkSelect,'network',_('Network'),_('Choose the network(s) you want to attach to this wireless interface or fill out the custom field to define a new network.'));o.rmempty=true;o.multiple=true;o.novirtual=true;o.write=function(section_id,value){return network.getDevice(section_id).then(L.bind(function(dev){const old_networks=dev.getNetworks().reduce(function(o,v){o[v.getName()]=v;return o;},{});const new_networks={};const values=L.toArray(value);const tasks=[];values.forEach(value=>{new_networks[value]=true;if(old_networks[value]) return;tasks.push(network.getNetwork(value).then(L.bind(function(name,net){return net||network.addNetwork(name,{proto:'none'});},this,value)).then(L.bind(function(dev,net){if(net){if(!net.isEmpty()){let target_dev=net.getDevice();while(target_dev&&target_dev.getType()=='vlan') target_dev=target_dev.getParent();if(!target_dev||target_dev.getType()!='bridge') net.set('type','bridge');} net.addDevice(dev);}},this,dev)));});for(let name in old_networks) if(!new_networks[name]) tasks.push(network.getNetwork(name).then(L.bind(function(dev,net){if(net) net.deleteDevice(dev);},this,dev)));return Promise.all(tasks);},this));};let encr;if(hwtype=='mac80211'){const mode=ss.children.find(obj=>obj.option==='mode');const bssid=ss.children.find(obj=>obj.option==='bssid');if(have_mesh)mode.value('mesh','802.11s');mode.value('ahdemo',_('Pseudo Ad-Hoc (ahdemo)'));mode.value('monitor',_('Monitor'));bssid.depends('mode','adhoc');bssid.depends('mode','sta');bssid.depends('mode','sta-wds');o=ss.taboption('macfilter',form.ListValue,'macfilter',_('MAC Address Filter'));o.depends('mode','ap');o.depends('mode','ap-wds');o.value('',_('disable'));o.value('allow',_('Allow listed only'));o.value('deny',_('Allow all except listed'));o=ss.taboption('macfilter',form.DynamicList,'maclist',_('MAC-List'));o.datatype='macaddr';o.retain=true;o.depends('macfilter','allow');o.depends('macfilter','deny');o.load=function(section_id){return network.getHostHints().then(L.bind(function(hints){hints.getMACHints().map(L.bind(function(hint){this.value(hint[0],hint[1]?'%s (%s)'.format(hint[0],hint[1]):hint[0]);},this));return form.DynamicList.prototype.load.apply(this,[section_id]);},this));};mode.value('ap-wds','%s (%s)'.format(_('Access Point'),_('WDS')));mode.value('sta-wds','%s (%s)'.format(_('Client'),_('WDS')));mode.write=function(section_id,value){switch(value){case'ap-wds':uci.set('wireless',section_id,'mode','ap');uci.set('wireless',section_id,'wds','1');break;case'sta-wds':uci.set('wireless',section_id,'mode','sta');uci.set('wireless',section_id,'wds','1');break;default:uci.set('wireless',section_id,'mode',value);uci.unset('wireless',section_id,'wds');break;}};mode.cfgvalue=function(section_id){const mode=uci.get('wireless',section_id,'mode');const wds=uci.get('wireless',section_id,'wds');if(mode=='ap'&&wds) return'ap-wds';else if(mode=='sta'&&wds) return'sta-wds';return mode;};o=ss.taboption('general',form.Flag,'hidden',_('Hide ESSID'),_('Where the ESSID is hidden, clients may fail to roam and airtime efficiency may be significantly reduced.'));o.depends('mode','ap');o.depends('mode','ap-wds');o=ss.taboption('general',form.Flag,'wmm',_('WMM Mode'),_('Where Wi-Fi Multimedia (WMM) Mode QoS is disabled, clients may be limited to 802.11a/802.11g rates.'));o.depends('mode','ap');o.depends('mode','ap-wds');o.default=o.enabled;o=ss.taboption('advanced',form.Flag,'multicast_to_unicast_all',_('Multi To Unicast'),_('ARP, IPv4 and IPv6 (even 802.1Q) with multicast destination MACs are unicast to the STA MAC address. Note: This is not Directed Multicast Service (DMS) in 802.11v. Note: might break receiver STA multicast expectations.'));o.rmempty=true;o=ss.taboption('advanced',form.Flag,'isolate',_('Isolate Clients'),_('Prevents client-to-client communication'));o.depends('mode','ap');o.depends('mode','ap-wds');o=ss.taboption('advanced',form.Value,'ifname',_('Interface name'),_('Override default interface name'));o.optional=true;o.datatype='netdevname';o.placeholder=radioNet.getIfname();if(/^radio\d+\.network/.test(o.placeholder)) o.placeholder='';const macaddr=uci.get('wireless',radioNet.getName(),'macaddr');o=ss.taboption('advanced',form.Value,'macaddr',_('MAC address'),_('Override default MAC address - the range of usable addresses might be limited by the driver'));o.value('',_('driver default (%s)').format(!macaddr?radioNet.getActiveBSSID():_('no override')));o.value('random',_('randomly generated'));o.datatype="or('random',macaddr)";o=ss.taboption('advanced',form.Flag,'short_preamble',_('Short Preamble'));o.default=o.enabled;o=ss.taboption('advanced',form.Value,'dtim_period',_('DTIM Interval'),_('Delivery Traffic Indication Message Interval'));o.optional=true;o.placeholder=2;o.datatype='range(1,255)';o=ss.taboption('advanced',form.Value,'wpa_group_rekey',_('Time interval for rekeying GTK'),_('sec'));o.optional=true;o.placeholder=600;o.datatype='uinteger';o=ss.taboption('advanced',form.Flag,'skip_inactivity_poll',_('Disable Inactivity Polling'));o.optional=true;o.datatype='uinteger';o=ss.taboption('advanced',form.Value,'max_inactivity',_('Station inactivity limit'),_('802.11v: BSS Max Idle. Units: seconds.'));o.optional=true;o.placeholder=300;o.datatype='uinteger';o=ss.taboption('advanced',form.Value,'max_listen_interval',_('Maximum allowed Listen Interval'));o.optional=true;o.placeholder=65535;o.datatype='uinteger';o=ss.taboption('advanced',form.Flag,'disassoc_low_ack',_('Disassociate On Low Acknowledgement'),_('Allow AP mode to disconnect STAs based on low ACK condition'));o.default=o.enabled;} encr=o=ss.taboption('encryption',form.ListValue,'encryption',_('Encryption'));o.depends('mode','ap');o.depends('mode','sta');o.depends('mode','adhoc');o.depends('mode','ahdemo');o.depends('mode','ap-wds');o.depends('mode','sta-wds');o.depends('mode','mesh');o.cfgvalue=function(section_id){const v=String(uci.get('wireless',section_id,'encryption'));if(v=='wep') return'wep-open';else if(v.match(/\+/)) return v.replace(/\+.+$/,'');return v;};o.write=function(section_id,value){let e=this.section.children.filter(function(o){return o.option=='encryption';})[0].formvalue(section_id);const co=this.section.children.filter(function(o){return o.option=='cipher';})[0];const c=co.formvalue(section_id);if(value=='wpa'||value=='wpa2'||value=='wpa3'||value=='wpa3-mixed'||value=='wpa3-192') uci.unset('wireless',section_id,'key');if(co.isActive(section_id)&&e&&(c=='tkip'||c=='ccmp'||c=='ccmp256'||c=='gcmp'||c=='gcmp256'||c=='tkip+ccmp')) e+='+'+c;uci.set('wireless',section_id,'encryption',e);};o=ss.taboption('encryption',form.ListValue,'cipher',_('Cipher'));o.depends('encryption','wpa');o.depends('encryption','wpa2');o.depends('encryption','wpa3');o.depends('encryption','wpa3-mixed');o.depends('encryption','wpa3-192');o.depends('encryption','psk');o.depends('encryption','psk2');o.depends('encryption','wpa-mixed');o.depends('encryption','psk-mixed');o.value('auto',_('auto'));o.value('ccmp',_('Force CCMP (AES)'));o.value('ccmp256',_('Force CCMP-256 (AES)'));o.value('gcmp',_('Force GCMP (AES)'));o.value('gcmp256',_('Force GCMP-256 (AES)'));o.value('tkip',_('Force TKIP'));o.value('tkip+ccmp',_('Force TKIP and CCMP (AES)'));o.write=ss.children.filter(function(o){return o.option=='encryption';})[0].write;o.cfgvalue=function(section_id){let v=String(uci.get('wireless',section_id,'encryption'));if(v.match(/\+/)){v=v.replace(/^[^+]+\+/,'');if(v=='aes') v='ccmp';else if(v=='tkip+aes'||v=='aes+tkip'||v=='ccmp+tkip') v='tkip+ccmp';} return v;};const crypto_modes=[];if(hwtype=='mac80211'){const has_supplicant=L.hasSystemFeature('wpasupplicant');const has_hostapd=L.hasSystemFeature('hostapd');const has_ap_eap=L.hasSystemFeature('hostapd','eap');const has_sta_eap=L.hasSystemFeature('wpasupplicant','eap');const has_ap_sae=L.hasSystemFeature('hostapd','sae');const has_sta_sae=L.hasSystemFeature('wpasupplicant','sae');const has_ap_owe=L.hasSystemFeature('hostapd','owe');const has_sta_owe=L.hasSystemFeature('wpasupplicant','owe');const has_ap_eap192=L.hasSystemFeature('hostapd','suiteb192');const has_sta_eap192=L.hasSystemFeature('wpasupplicant','suiteb192');const has_ap_wep=L.hasSystemFeature('hostapd','wep');const has_sta_wep=L.hasSystemFeature('wpasupplicant','wep');if(has_hostapd||has_supplicant){crypto_modes.push(['psk2','WPA2-PSK',35]);crypto_modes.push(['psk-mixed','WPA-PSK/WPA2-PSK Mixed Mode',22]);crypto_modes.push(['psk','WPA-PSK',12]);} else{encr.description=_('WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP and ad-hoc mode) to be installed.');} if(has_ap_sae||has_sta_sae){crypto_modes.push(['sae','WPA3-SAE',31]);crypto_modes.push(['sae-mixed','WPA2-PSK/WPA3-SAE Mixed Mode',30]);} if(has_ap_wep||has_sta_wep){crypto_modes.push(['wep-open',_('WEP Open System'),11]);crypto_modes.push(['wep-shared',_('WEP Shared Key'),10]);} if(has_ap_eap||has_sta_eap){if(has_ap_eap192||has_sta_eap192){crypto_modes.push(['wpa3','WPA3-EAP',33]);crypto_modes.push(['wpa3-mixed','WPA2-EAP/WPA3-EAP Mixed Mode',32]);crypto_modes.push(['wpa3-192','WPA3-EAP 192-bit Mode',36]);} crypto_modes.push(['wpa2','WPA2-EAP',34]);crypto_modes.push(['wpa','WPA-EAP',20]);} if(has_ap_owe||has_sta_owe){crypto_modes.push(['owe','OWE',1]);} encr.crypto_support={'ap':{'wep-open':has_ap_wep||_('Requires hostapd with WEP support'),'wep-shared':has_ap_wep||_('Requires hostapd with WEP support'),'psk':has_hostapd||_('Requires hostapd'),'psk2':has_hostapd||_('Requires hostapd'),'psk-mixed':has_hostapd||_('Requires hostapd'),'sae':has_ap_sae||_('Requires hostapd with SAE support'),'sae-mixed':has_ap_sae||_('Requires hostapd with SAE support'),'wpa':has_ap_eap||_('Requires hostapd with EAP support'),'wpa2':has_ap_eap||_('Requires hostapd with EAP support'),'wpa3':has_ap_eap192||_('Requires hostapd with EAP Suite-B support'),'wpa3-mixed':has_ap_eap192||_('Requires hostapd with EAP Suite-B support'),'wpa3-192':has_ap_eap192||_('Requires hostapd with EAP Suite-B support'),'owe':has_ap_owe||_('Requires hostapd with OWE support')},'sta':{'wep-open':has_sta_wep||_('Requires wpa-supplicant with WEP support'),'wep-shared':has_sta_wep||_('Requires wpa-supplicant with WEP support'),'psk':has_supplicant||_('Requires wpa-supplicant'),'psk2':has_supplicant||_('Requires wpa-supplicant'),'psk-mixed':has_supplicant||_('Requires wpa-supplicant'),'sae':has_sta_sae||_('Requires wpa-supplicant with SAE support'),'sae-mixed':has_sta_sae||_('Requires wpa-supplicant with SAE support'),'wpa':has_sta_eap||_('Requires wpa-supplicant with EAP support'),'wpa2':has_sta_eap||_('Requires wpa-supplicant with EAP support'),'wpa3':has_sta_eap192||_('Requires wpa-supplicant with EAP Suite-B support'),'wpa3-mixed':has_sta_eap192||_('Requires wpa-supplicant with EAP Suite-B support'),'wpa3-192':has_sta_eap192||_('Requires wpa-supplicant with EAP Suite-B support'),'owe':has_sta_owe||_('Requires wpa-supplicant with OWE support')},'adhoc':{'wep-open':true,'wep-shared':true,'psk':has_supplicant||_('Requires wpa-supplicant'),'psk2':has_supplicant||_('Requires wpa-supplicant'),'psk-mixed':has_supplicant||_('Requires wpa-supplicant'),},'mesh':{'sae':has_sta_sae||_('Requires wpa-supplicant with SAE support')},'ahdemo':{'wep-open':true,'wep-shared':true},'wds':{'wep-open':true,'wep-shared':true}};encr.crypto_support['ap-wds']=encr.crypto_support['ap'];encr.crypto_support['sta-wds']=encr.crypto_support['sta'];encr.validate=function(section_id,value){const modeopt=this.section.children.filter(function(o){return o.option=='mode';})[0];const modeval=modeopt.formvalue(section_id);const modetitle=modeopt.vallist[modeopt.keylist.indexOf(modeval)];const enctitle=this.vallist[this.keylist.indexOf(value)];if(value=='none') return true;if(!L.isObject(this.crypto_support[modeval])||!this.crypto_support[modeval].hasOwnProperty(value)) return _('The selected %s mode is incompatible with %s encryption').format(modetitle,enctitle);return this.crypto_support[modeval][value];};} else if(hwtype=='broadcom'){crypto_modes.push(['psk2','WPA2-PSK',33]);crypto_modes.push(['psk+psk2','WPA-PSK/WPA2-PSK Mixed Mode',22]);crypto_modes.push(['psk','WPA-PSK',12]);crypto_modes.push(['wep-open',_('WEP Open System'),11]);crypto_modes.push(['wep-shared',_('WEP Shared Key'),10]);} crypto_modes.push(['none',_('No Encryption'),0]);crypto_modes.sort(function(a,b){return b[2]-a[2];});crypto_modes.forEach(crypto_mode=>{const security_level=(crypto_mode[2]>=30)?_('strong security'):(crypto_mode[2]>=20)?_('medium security'):(crypto_mode[2]>=10)?_('weak security'):_('open network');encr.value(crypto_mode[0],'%s (%s)'.format(crypto_mode[1],security_level));});o=ss.taboption('encryption',form.Flag,'ppsk',_('Enable Private PSK (PPSK)'),_('Private Pre-Shared Key (PPSK) allows the use of different Pre-Shared Key for each STA MAC address. Private MAC PSKs are stored on the RADIUS server.'));add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['psk','psk2','psk+psk2','psk-mixed']});o=ss.taboption('encryption',form.Value,'auth_server',_('RADIUS Authentication Server'));add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192']});add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['psk','psk2','psk+psk2','psk-mixed'],ppsk:['1']});o.rmempty=true;o.datatype='host(0)';o=ss.taboption('encryption',form.Value,'auth_port',_('RADIUS Authentication Port'));add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192']});add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['psk','psk2','psk+psk2','psk-mixed'],ppsk:['1']});o.rmempty=true;o.datatype='port';o.placeholder='1812';o=ss.taboption('encryption',form.Value,'auth_secret',_('RADIUS Authentication Secret'));add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192']});add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['psk','psk2','psk+psk2','psk-mixed'],ppsk:['1']});o.rmempty=true;o.password=true;o=ss.taboption('encryption',form.Value,'acct_server',_('RADIUS Accounting Server'));add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192']});o.rmempty=true;o.datatype='host(0)';o=ss.taboption('encryption',form.Value,'acct_port',_('RADIUS Accounting Port'));add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192']});o.rmempty=true;o.datatype='port';o.placeholder='1813';o=ss.taboption('encryption',form.Value,'acct_secret',_('RADIUS Accounting Secret'));add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192']});o.rmempty=true;o.password=true;const attr_validate=function(section_id,value){if(!value) return true;if(!/^[0-9]+(:s:.+|:d:[0-9]+|:x:([0-9a-zA-Z]{2})+)?$/.test(value)) return _('Must be in %s format.').format('
<attr_id>[:<syntax:value>]'+''+'
syntax: s = %s; '.format(_('string (UTF-8)'))+'d = %s; '.format(_('integer'))+'x = %s'.format(_('octet string'));o=ss.taboption('encryption',form.DynamicList,'radius_auth_req_attr',_('RADIUS Access-Request attributes'),_('Attributes to add/replace in each request.')+''+req_attr_syntax);add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192']});o.rmempty=true;o.validate=attr_validate;o.placeholder='126:s:Operator';o=ss.taboption('encryption',form.DynamicList,'radius_acct_req_attr',_('RADIUS Accounting-Request attributes'),_('Attributes to add/replace in each request.')+'
'+req_attr_syntax);add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192']});o.rmempty=true;o.validate=attr_validate;o.placeholder='77:x:74657374696e67';o=ss.taboption('encryption',form.ListValue,'dynamic_vlan',_('RADIUS Dynamic VLAN Assignment'),_('Required: Rejects auth if RADIUS server does not provide appropriate VLAN attributes.'));add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192']});add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['psk','psk2','psk+psk2','psk-mixed'],ppsk:['1']});o.value('0',_('Disabled'));o.value('1',_('Optional'));o.value('2',_('Required'));o.write=function(section_id,value){return this.super('write',[section_id,(value==0)?null:value]);};o=ss.taboption('encryption',form.Flag,'per_sta_vif',_('RADIUS Per STA VLAN'),_('Each STA is assigned its own AP_VLAN interface.'));add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192']});add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['psk','psk2','psk+psk2','psk-mixed'],ppsk:['1']});o=ss.taboption('encryption',form.Flag,'vlan_naming',_('RADIUS VLAN Naming'),_('Off:
vlanXXX, e.g., vlan1. On: vlan_tagged_interface.XXX, e.g. eth0.1.'));add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192']});add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['psk','psk2','psk+psk2','psk-mixed'],ppsk:['1']});o=ss.taboption('encryption',widgets.DeviceSelect,'vlan_tagged_interface',_('RADIUS VLAN Tagged Interface'),_('E.g. eth0, eth1'));add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192']});add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['psk','psk2','psk+psk2','psk-mixed'],ppsk:['1']});o.size=1;o.rmempty=true;o.multiple=false;o.noaliases=true;o.nocreate=true;o.noinactive=true;o=ss.taboption('encryption',form.Value,'vlan_bridge',_('RADIUS VLAN Bridge Naming Scheme'),_('E.g. br-vlan or brvlan.'));add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192']});add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['psk','psk2','psk+psk2','psk-mixed'],ppsk:['1']});o.rmempty=true;o=ss.taboption('encryption',form.Value,'dae_client',_('DAE-Client'),_('Dynamic Authorization Extension client.'));add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192']});o.rmempty=true;o.datatype='host(0)';o=ss.taboption('encryption',form.Value,'dae_port',_('DAE-Port'),_('Dynamic Authorization Extension port.'));add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192']});o.rmempty=true;o.datatype='port';o.placeholder='3799';o=ss.taboption('encryption',form.Value,'dae_secret',_('DAE-Secret'),_('Dynamic Authorization Extension secret.'));add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192']});o.rmempty=true;o.password=true;o=ss.taboption('encryption',form.Flag,'rsn_preauth',_('RSN Preauth'),_('Robust Security Network (RSN): Allow roaming preauth for WPA2-EAP networks (and advertise it in WLAN beacons). Only works if the specified network interface is a bridge. Shortens the time-critical reassociation process.'));add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['wpa2','wpa3','wpa3-mixed']});o=ss.taboption('encryption',form.Value,'_wpa_key',_('Key'));add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['psk','psk2','psk+psk2','psk-mixed'],ppsk:['0']});add_dependency_permutations(o,{mode:['sta','adhoc','mesh','sta-wds'],encryption:['psk','psk2','psk+psk2','psk-mixed']});o.depends('encryption','sae');o.depends('encryption','sae-mixed');o.datatype='wpakey';o.rmempty=true;o.password=true;o.cfgvalue=function(section_id){const key=uci.get('wireless',section_id,'key');return/^[1234]$/.test(key)?null:key;};o.write=function(section_id,value){uci.set('wireless',section_id,'key',value);uci.unset('wireless',section_id,'key1');uci.unset('wireless',section_id,'key2');uci.unset('wireless',section_id,'key3');uci.unset('wireless',section_id,'key4');};o=ss.taboption('encryption',form.ListValue,'_wep_key',_('Used Key Slot'));o.depends('encryption','wep-open');o.depends('encryption','wep-shared');o.value('1',_('Key #%d').format(1));o.value('2',_('Key #%d').format(2));o.value('3',_('Key #%d').format(3));o.value('4',_('Key #%d').format(4));o.cfgvalue=function(section_id){const slot=+uci.get('wireless',section_id,'key');return(slot>=1&&slot<=4)?String(slot):'';};o.write=function(section_id,value){uci.set('wireless',section_id,'key',value);};for(let slot=1;slot<=4;slot++){o=ss.taboption('encryption',form.Value,'key%d'.format(slot),_('Key #%d').format(slot));o.depends('encryption','wep-open');o.depends('encryption','wep-shared');o.datatype='wepkey';o.rmempty=true;o.password=true;o.write=function(section_id,value){if(value!=null&&(value.length==5||value.length==13))
value='s:%s'.format(value);uci.set('wireless',section_id,this.option,value);};}
if(hwtype=='mac80211'){const has_80211r=L.hasSystemFeature('hostapd','11r')||L.hasSystemFeature('hostapd','eap');o=ss.taboption('roaming',form.Flag,'ieee80211r',_('802.11r Fast Transition'),_('Enables fast roaming among access points that belong to the same Mobility Domain'));add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['wpa2','wpa3','wpa3-mixed',,'wpa3-192']});if(has_80211r)
add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['psk2','psk-mixed','sae','sae-mixed']});o.rmempty=true;o=ss.taboption('roaming',form.Value,'nasid',_('NAS ID'),_('Used for two different purposes: RADIUS NAS ID and 802.11r R0KH-ID. Not needed with normal WPA(2)-PSK.'));add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192']});o.depends({ieee80211r:'1'});o.rmempty=true;o=ss.taboption('roaming',form.Value,'mobility_domain',_('Mobility Domain'),_('4-character hexadecimal ID'));o.depends({ieee80211r:'1'});o.placeholder='4f57';o.datatype='and(hexstring,length(4))';o.rmempty=true;o=ss.taboption('roaming',form.Value,'reassociation_deadline',_('Reassociation Deadline'),_('time units (TUs / 1.024 ms) [1000-65535]'));o.depends({ieee80211r:'1'});o.placeholder='1000';o.datatype='range(1000,65535)';o.rmempty=true;o=ss.taboption('roaming',form.ListValue,'ft_over_ds',_('FT protocol'));o.depends({ieee80211r:'1'});o.value('0',_('FT over the Air'));o.value('1',_('FT over DS'));o.rmempty=true;o=ss.taboption('roaming',form.Flag,'ft_psk_generate_local',_('Generate PMK locally'),_('When using a PSK, the PMK can be automatically generated. When enabled, the R0/R1 key options below are not applied. Disable this to use the R0 and R1 key options.'));add_dependency_permutations(o,{ieee80211r:['1'],mode:['ap','ap-wds'],encryption:['psk2','psk-mixed']});o.default=o.enabled;o.rmempty=false;o=ss.taboption('roaming',form.Value,'r0_key_lifetime',_('R0 Key Lifetime'),_('minutes'));o.depends({ieee80211r:'1'});o.placeholder='10000';o.datatype='uinteger';o.rmempty=true;o=ss.taboption('roaming',form.Value,'r1_key_holder',_('R1 Key Holder'),_('6-octet identifier as a hex string - no colons'));o.depends({ieee80211r:'1'});o.placeholder='00004f577274';o.datatype='and(hexstring,length(12))';o.rmempty=true;o=ss.taboption('roaming',form.Flag,'pmk_r1_push',_('PMK R1 Push'));o.depends({ieee80211r:'1'});o.placeholder='0';o.rmempty=true;o=ss.taboption('roaming',form.DynamicList,'r0kh',_('External R0 Key Holder List'),_('List of R0KHs in the same Mobility Domain. Format: MAC-address,NAS-Identifier,256-bit key as hex string.
This list is used to map R0KH-ID (NAS Identifier) to a destination MAC address when requesting PMK-R1 key from the R0KH that the STA used during the Initial Mobility Domain Association.'));o.depends({ieee80211r:'1'});o.rmempty=true;o=ss.taboption('roaming',form.DynamicList,'r1kh',_('External R1 Key Holder List'),_('List of R1KHs in the same Mobility Domain.
Format: MAC-address,R1KH-ID as 6 octets with colons,256-bit key as hex string.
This list is used to map R1KH-ID to a destination MAC address when sending PMK-R1 key from the R0KH. This is also the list of authorized R1KHs in the MD that can request PMK-R1 keys.'));o.depends({ieee80211r:'1'});o.rmempty=true;if(L.hasSystemFeature('hostapd','eap')){o=ss.taboption('roaming',form.Flag,'ieee80211k',_('802.11k RRM'),_('Radio Resource Measurement - Sends beacons to assist roaming. Not all clients support this.'));o.depends('mode','ap');o.depends('mode','ap-wds');o=ss.taboption('roaming',form.Flag,'rrm_neighbor_report',_('Neighbour Report'),_('802.11k: Enable neighbor report via radio measurements.'));o.depends({ieee80211k:'1'});o.default=o.enabled;o=ss.taboption('roaming',form.Flag,'rrm_beacon_report',_('Beacon Report'),_('802.11k: Enable beacon report via radio measurements.'));o.depends({ieee80211k:'1'});o.default=o.enabled;o=ss.taboption('roaming',form.ListValue,'time_advertisement',_('Time advertisement'),_('802.11v: Time Advertisement in management frames.'));o.value('0',_('Disabled'));o.value('2',_('Enabled'));o.write=function(section_id,value){return this.super('write',[section_id,(value==2)?value:null]);};const tz=uci.get('system','@system[0]','timezone');o=ss.taboption('roaming',form.Value,'time_zone',_('Time zone'),_('802.11v: Local Time Zone Advertisement in management frames.'));o.value(tz);o.rmempty=true;o=ss.taboption('roaming',form.Flag,'wnm_sleep_mode',_('WNM Sleep Mode'),_('802.11v: Wireless Network Management (WNM) Sleep Mode (extended sleep mode for stations).'));o.rmempty=true;o=ss.taboption('roaming',form.Flag,'wnm_sleep_mode_no_keys',_('WNM Sleep Mode Fixes'),_('802.11v: Wireless Network Management (WNM) Sleep Mode Fixes: Prevents reinstallation attacks.'));o.rmempty=true;o=ss.taboption('roaming',form.Flag,'bss_transition',_('BSS Transition'),_('802.11v: Basic Service Set (BSS) transition management.'));o.rmempty=true;o=ss.taboption('roaming',form.Flag,'proxy_arp',_('ProxyARP'),_('802.11v: Proxy ARP enables non-AP STA to remain in power-save for longer.'));o.rmempty=true;}} if(hwtype=='mac80211'){o=ss.taboption('encryption',form.ListValue,'eap_type',_('EAP-Method'));o.value('tls','TLS');o.value('ttls','TTLS');o.value('peap','PEAP');o.value('fast','FAST');add_dependency_permutations(o,{mode:['sta','sta-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192']});o=ss.taboption('encryption',form.Flag,'ca_cert_usesystem',_('Use system certificates'),_("Validate server certificate using built-in system CA bundle,
requires the \"ca-bundle\" package"));o.enabled='1';o.disabled='0';o.default=o.disabled;add_dependency_permutations(o,{mode:['sta','sta-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192']});o.validate=function(section_id,value){if(value=='1'&&!L.hasSystemFeature('cabundle')){return _("This option cannot be used because the ca-bundle package is not installed.");} return true;};o=ss.taboption('encryption',form.FileUpload,'ca_cert',_('Path to CA-Certificate'));add_dependency_permutations(o,{mode:['sta','sta-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192'],ca_cert_usesystem:['0']});o=ss.taboption('encryption',form.Value,'subject_match',_('Certificate constraint (Subject)'),_("Certificate constraint substring - e.g. /CN=wifi.mycompany.com
See `logread -f` during handshake for actual values"));add_dependency_permutations(o,{mode:['sta','sta-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192']});o=ss.taboption('encryption',form.DynamicList,'altsubject_match',_('Certificate constraint (SAN)'),_("Certificate constraint(s) via Subject Alternate Name values
(supported attributes: EMAIL, DNS, URI) - e.g. DNS:wifi.mycompany.com"));add_dependency_permutations(o,{mode:['sta','sta-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192']});o=ss.taboption('encryption',form.DynamicList,'domain_match',_('Certificate constraint (Domain)'),_("Certificate constraint(s) against DNS SAN values (if available)
or Subject CN (exact match)"));add_dependency_permutations(o,{mode:['sta','sta-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192']});o=ss.taboption('encryption',form.DynamicList,'domain_suffix_match',_('Certificate constraint (Wildcard)'),_("Certificate constraint(s) against DNS SAN values (if available)
or Subject CN (suffix match)"));add_dependency_permutations(o,{mode:['sta','sta-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192']});o=ss.taboption('encryption',form.FileUpload,'client_cert',_('Path to Client-Certificate'));add_dependency_permutations(o,{mode:['sta','sta-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192'],eap_type:['tls']});o=ss.taboption('encryption',form.FileUpload,'priv_key',_('Path to Private Key'));add_dependency_permutations(o,{mode:['sta','sta-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192'],eap_type:['tls']});o=ss.taboption('encryption',form.Value,'priv_key_pwd',_('Password of Private Key'));add_dependency_permutations(o,{mode:['sta','sta-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192'],eap_type:['tls']});o.password=true;o=ss.taboption('encryption',form.ListValue,'auth',_('Authentication'));o.value('PAP','PAP');o.value('CHAP','CHAP');o.value('MSCHAP','MSCHAP');o.value('MSCHAPV2','MSCHAPv2');o.value('EAP-GTC','EAP-GTC');o.value('EAP-MD5','EAP-MD5');o.value('EAP-MSCHAPV2','EAP-MSCHAPv2');o.value('EAP-TLS','EAP-TLS');add_dependency_permutations(o,{mode:['sta','sta-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192'],eap_type:['fast','peap','ttls']});o.validate=function(section_id,value){const eo=this.section.children.filter(function(o){return o.option=='eap_type';})[0];const ev=eo.formvalue(section_id);if(ev!='ttls'&&(value=='PAP'||value=='CHAP'||value=='MSCHAP'||value=='MSCHAPV2')) return _('This authentication type is not applicable to the selected EAP method.');return true;};o=ss.taboption('encryption',form.Flag,'ca_cert2_usesystem',_('Use system certificates for inner-tunnel'),_("Validate server certificate using built-in system CA bundle,
requires the \"ca-bundle\" package"));o.enabled='1';o.disabled='0';o.default=o.disabled;add_dependency_permutations(o,{mode:['sta','sta-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192'],auth:['EAP-TLS']});o.validate=function(section_id,value){if(value=='1'&&!L.hasSystemFeature('cabundle')){return _("This option cannot be used because the ca-bundle package is not installed.");} return true;};o=ss.taboption('encryption',form.FileUpload,'ca_cert2',_('Path to inner CA-Certificate'));add_dependency_permutations(o,{mode:['sta','sta-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192'],auth:['EAP-TLS'],ca_cert2_usesystem:['0']});o=ss.taboption('encryption',form.Value,'subject_match2',_('Inner certificate constraint (Subject)'),_("Certificate constraint substring - e.g. /CN=wifi.mycompany.com
See `logread -f` during handshake for actual values"));add_dependency_permutations(o,{mode:['sta','sta-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192'],auth:['EAP-TLS']});o=ss.taboption('encryption',form.DynamicList,'altsubject_match2',_('Inner certificate constraint (SAN)'),_("Certificate constraint(s) via Subject Alternate Name values
(supported attributes: EMAIL, DNS, URI) - e.g. DNS:wifi.mycompany.com"));add_dependency_permutations(o,{mode:['sta','sta-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192'],auth:['EAP-TLS']});o=ss.taboption('encryption',form.DynamicList,'domain_match2',_('Inner certificate constraint (Domain)'),_("Certificate constraint(s) against DNS SAN values (if available)
or Subject CN (exact match)"));add_dependency_permutations(o,{mode:['sta','sta-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192'],auth:['EAP-TLS']});o=ss.taboption('encryption',form.DynamicList,'domain_suffix_match2',_('Inner certificate constraint (Wildcard)'),_("Certificate constraint(s) against DNS SAN values (if available)
or Subject CN (suffix match)"));add_dependency_permutations(o,{mode:['sta','sta-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192'],auth:['EAP-TLS']});o=ss.taboption('encryption',form.FileUpload,'client_cert2',_('Path to inner Client-Certificate'));add_dependency_permutations(o,{mode:['sta','sta-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192'],auth:['EAP-TLS']});o=ss.taboption('encryption',form.FileUpload,'priv_key2',_('Path to inner Private Key'));add_dependency_permutations(o,{mode:['sta','sta-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192'],auth:['EAP-TLS']});o=ss.taboption('encryption',form.Value,'priv_key2_pwd',_('Password of inner Private Key'));add_dependency_permutations(o,{mode:['sta','sta-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192'],auth:['EAP-TLS']});o.password=true;o=ss.taboption('encryption',form.Value,'identity',_('Identity'));add_dependency_permutations(o,{mode:['sta','sta-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192'],eap_type:['fast','peap','tls','ttls']});o=ss.taboption('encryption',form.Value,'anonymous_identity',_('Anonymous Identity'));add_dependency_permutations(o,{mode:['sta','sta-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192'],eap_type:['fast','peap','tls','ttls']});o=ss.taboption('encryption',form.Value,'password',_('Password'));add_dependency_permutations(o,{mode:['sta','sta-wds'],encryption:['wpa','wpa2','wpa3','wpa3-mixed','wpa3-192'],eap_type:['fast','peap','ttls']});o.password=true;if(hwtype=='mac80211'){o=ss.taboption('encryption',form.ListValue,'ieee80211w',_('802.11w Management Frame Protection'),_("Note: Some wireless drivers do not fully support 802.11w. E.g. mwlwifi may have problems"));o.value('0',_('Disabled'));o.value('1',_('Optional'));o.value('2',_('Required'));add_dependency_permutations(o,{mode:['ap','ap-wds','sta','sta-wds'],encryption:['owe','psk2','psk-mixed','sae','sae-mixed','wpa2','wpa3','wpa3-mixed']});o.defaults={'2':[{encryption:'sae'},{encryption:'owe'},{encryption:'wpa3'},{encryption:'wpa3-mixed'}],'1':[{encryption:'sae-mixed'}],'0':[]};o.write=function(section_id,value){if(value!=this.default) return form.ListValue.prototype.write.call(this,section_id,value);else return form.ListValue.prototype.remove.call(this,section_id);};o=ss.taboption('encryption',form.Value,'ieee80211w_max_timeout',_('802.11w maximum timeout'),_('802.11w Association SA Query maximum timeout'));o.depends('ieee80211w','1');o.depends('ieee80211w','2');o.datatype='uinteger';o.placeholder='1000';o.rmempty=true;o=ss.taboption('encryption',form.Value,'ieee80211w_retry_timeout',_('802.11w retry timeout'),_('802.11w Association SA Query retry timeout'));o.depends('ieee80211w','1');o.depends('ieee80211w','2');o.datatype='uinteger';o.placeholder='201';o.rmempty=true;if(L.hasSystemFeature('hostapd','ocv')||L.hasSystemFeature('wpasupplicant','ocv')){o=ss.taboption('encryption',form.ListValue,'ocv',_('Operating Channel Validation'),_("Note: Workaround mode allows a STA that claims OCV capability to connect even if the STA doesn't send OCI or negotiate PMF."));o.value('0',_('Disabled'));o.value('1',_('Enabled'));o.value('2',_('Enabled (workaround mode)'));o.default='0';o.depends('ieee80211w','1');o.depends('ieee80211w','2');o.validate=function(section_id,value){const modeopt=this.section.children.filter(function(o){return o.option=='mode';})[0];const modeval=modeopt.formvalue(section_id);if((value=='2')&&((modeval=='sta')||(modeval=='sta-wds'))){return _('Workaround mode can only be used when acting as an access point.');} return true;};} o=ss.taboption('encryption',form.Flag,'wpa_disable_eapol_key_retries',_('Enable key reinstallation (KRACK) countermeasures'),_('Complicates key reinstallation attacks on the client side by disabling retransmission of EAPOL-Key frames that are used to install keys. This workaround might cause interoperability issues and reduced robustness of key negotiation especially in environments with heavy traffic load.'));add_dependency_permutations(o,{mode:['ap','ap-wds'],encryption:['psk2','psk-mixed','sae','sae-mixed','wpa2','wpa3','wpa3-mixed']});if(L.hasSystemFeature('hostapd','wps')&&L.hasSystemFeature('wpasupplicant')){o=ss.taboption('encryption',form.Flag,'wps_pushbutton',_('Enable WPS pushbutton, requires WPA(2)-PSK/WPA3-SAE'));o.enabled='1';o.disabled='0';o.default=o.disabled;o.depends('encryption','psk');o.depends('encryption','psk2');o.depends('encryption','psk-mixed');o.depends('encryption','sae');o.depends('encryption','sae-mixed');}}}});};s.handleRemove=function(section_id,ev){document.querySelector('.cbi-section-table-row[data-sid="%s"]'.format(section_id)).style.opacity=0.5;return form.TypedSection.prototype.handleRemove.apply(this,[section_id,ev]);};s.handleScan=function(radioDev,ev){const table=E('table',{'class':'table'},[E('tr',{'class':'tr table-titles'},[E('th',{'class':'th col-2 middle center'},_('Signal')),E('th',{'class':'th col-4 middle left'},_('SSID')),E('th',{'class':'th col-2 middle center hide-xs'},_('Channel')),E('th',{'class':'th col-2 middle left hide-xs'},_('Mode')),E('th',{'class':'th col-3 middle left hide-xs'},_('BSSID')),E('th',{'class':'th col-3 middle left'},_('Encryption')),E('th',{'class':'th cbi-section-actions right'},' '),])]);const stop=E('button',{'class':'btn','click':L.bind(this.handleScanStartStop,this),'style':'display:none','data-state':'stop'},_('Stop refresh'));cbi_update_table(table,[],E('em',{class:'spinning'},_('Starting wireless scan...')));const md=ui.showModal(_('Join Network: Wireless Scan'),[table,E('div',{'class':'right'},[stop,' ',E('button',{'class':'btn','click':L.bind(this.handleScanAbort,this)},_('Dismiss'))])]);md.style.maxWidth='90%';md.style.maxHeight='none';this.pollFn=L.bind(this.handleScanRefresh,this,radioDev,{},table,stop);poll.add(this.pollFn);poll.start();};s.handleScanRefresh=function(radioDev,scanCache,table,stop){return radioDev.getScanList().then(L.bind(function(results){const rows=[];for(let r of results) scanCache[r.bssid]=r;for(let k in scanCache) if(scanCache[k].stale) results.push(scanCache[k]);results.sort(function(a,b){const diff=(b.quality-a.quality)||(a.channel-b.channel);if(diff) return diff;if(a.ssid
'+ _('The allowed characters are:
A-Z, a-z, 0-9 and _'));name.datatype='uciname';name.default='wwan';name.rmempty=false;name.validate=function(section_id,value){if(nameUsed(value))
return _('The network name is already used');return true;};for(let i=2;nameUsed(name.default);i++)
name.default='wwan%d'.format(i);if(is_wep||is_psk){passphrase=s2.option(form.Value,'password',is_wep?_('WEP passphrase'):_('WPA passphrase'),_('Specify the secret encryption key here.'));passphrase.datatype=is_wep?'wepkey':'wpakey';passphrase.password=true;passphrase.rmempty=false;}
if(bss.ssid!=null){bssid=s2.option(form.Flag,'bssid',_('Lock to BSSID'),_('Instead of joining any network with a matching SSID, only connect to the BSSID %h.').format(bss.bssid));bssid.default='0';}
zone=s2.option(widgets.ZoneSelect,'zone',_('Create / Assign firewall-zone'),_('Choose the firewall zone you want to assign to this interface. Select unspecified to remove the interface from the associated zone or fill out the custom field to define a new zone and attach the interface to it.'));zone.default='wan';return m2.render().then(L.bind(function(nodes){ui.showModal(_('Joining Network: %q').replace(/%q/,'"%h"'.format(bss.ssid)),[nodes,E('div',{'class':'right'},[E('button',{'class':'btn','click':ui.hideModal},_('Cancel')),' ',E('button',{'class':'cbi-button cbi-button-positive important','click':ui.createHandlerFn(this,'handleJoinConfirm',radioDev,bss,m2)},_('Submit'))])],'cbi-modal').querySelector('[id="%s"] input[class][type]'.format((passphrase||name).cbid('_new_'))).focus();},this));};s.handleAdd=function(radioDev,ev){const section_id=next_free_sid(uci.sections('wireless','wifi-iface').length);uci.unset('wireless',radioDev.getName(),'disabled');uci.add('wireless','wifi-iface',section_id);uci.set('wireless',section_id,'device',radioDev.getName());uci.set('wireless',section_id,'mode','ap');uci.set('wireless',section_id,'ssid','OpenWrt');uci.set('wireless',section_id,'encryption','none');m.addedSection=section_id;return this.renderMoreOptionsModal(section_id);};o=s.option(form.DummyValue,'_badge');o.modalonly=false;o.textvalue=function(section_id){const inst=this.section.lookupRadioOrNetwork(section_id);const node=E('div',{'class':'center'});if(inst.getWifiNetworks)
node.appendChild(render_radio_badge(inst));else
node.appendChild(render_network_badge(inst));return node;};o=s.option(form.DummyValue,'_stat');o.modalonly=false;o.textvalue=function(section_id){const inst=this.section.lookupRadioOrNetwork(section_id);if(inst.getWifiNetworks)
return render_radio_status(inst,this.section.wifis.filter(function(e){return(e.getWifiDeviceName()==inst.getName());}));else
return render_network_status(inst);};return m.render().then(L.bind(function(m,nodes){poll.add(L.bind(function(){const tasks=[network.getHostHints(),network.getWifiDevices()];m?.children[0]?.cfgsections?.().forEach(s=>{const row=nodes.querySelector('.cbi-section-table-row[data-sid="%s"]'.format(s));const dsc=row.querySelector('[data-name="_stat"] > div');const btns=row.querySelectorAll('.cbi-section-actions button');if(dsc.getAttribute('restart')==''){dsc.setAttribute('restart','1');tasks.push(fs.exec('/sbin/wifi',['up',s]).catch(function(e){ui.addNotification(null,E('p',e.message));}));}
else if(dsc.getAttribute('restart')=='1'){dsc.removeAttribute('restart');btns[0].classList.remove('spinning');btns[0].disabled=false;}});return Promise.all(tasks).then(L.bind(function(hosts_radios){const tasks=[];hosts_radios[1].forEach(r=>tasks.push(r.getWifiNetworks()));return Promise.all(tasks).then(function(data){hosts_radios[2]=[];for(let d of data)
hosts_radios[2].push.apply(hosts_radios[2],d);return hosts_radios;});},network)).then(L.bind(function(hosts_radios_wifis){const tasks=[];hosts_radios_wifis[2].forEach(hrw=>tasks.push(hrw.getAssocList()));return Promise.all(tasks).then(function(data){hosts_radios_wifis[3]=[];for(let i=0;i'+_('Routes go in routing tables and define the specific path to reach destinations.')+'
'+_('Rules determine which routing table to use, based on conditions like source address or interface.'));m.tabbed=true;for(var family=4;family<=6;family+=2){s=m.section(form.GridSection,(family==6)?'route6':'route',(family==6)?_('Static IPv6 Routes'):_('Static IPv4 Routes'));s.anonymous=true;s.addremove=true;s.sortable=true;s.cloneable=true;s.nodescriptions=true;s.tab('general',_('General Settings'));s.tab('advanced',_('Advanced Settings'));o=s.taboption('general',widgets.NetworkSelect,'interface',_('Interface'),_('Specifies the logical interface name of the parent (or master) interface this route belongs to'));o.loopback=true;o.nocreate=true;o.rmempty=true;o=s.taboption('general',form.ListValue,'type',_('Route type'),_('Specifies the route type to be created'));o.modalonly=true;o.value('','unicast');o.value('local');o.value('broadcast');o.value('multicast');o.value('unreachable');o.value('prohibit');o.value('blackhole');o.value('anycast');o.value('throw');o=s.taboption('general',form.Value,'target',_('Target'),_('Network address'));o.rmempty=false;o.datatype=(family==6)?'cidr6':'cidr4';o.placeholder=(family==6)?'::/0':'0.0.0.0/0';o.cfgvalue=function(section_id){var section_type=uci.get('network',section_id,'.type'),target=uci.get('network',section_id,'target'),mask=uci.get('network',section_id,'netmask'),v6=(section_type=='route6')?true:false,bits=mask?network.maskToPrefix(mask,v6):(v6?128:32);if(target){return target.split('/')[1]?target:target+'/'+bits;}} o.write=function(section_id,formvalue){uci.set('network',section_id,'target',formvalue);uci.unset('network',section_id,'netmask');} o=s.taboption('general',form.Value,'gateway',_('Gateway'),_('Specifies the network gateway. If omitted, the gateway from the parent interface is taken if any, otherwise creates a link scope route. If set to 0.0.0.0 no gateway will be specified for the route'));o.datatype=(family==6)?'ip6addr("nomask")':'ip4addr("nomask")';o.placeholder=(family==6)?'fe80::1':'192.168.0.1';o=s.taboption('advanced',form.Value,'metric',_('Metric'),_('Ordinal: routes with the lowest metric match first'));o.datatype='uinteger';o.placeholder=0;o.textvalue=function(section_id){return this.cfgvalue(section_id)||E('em',_('auto'));};o=s.taboption('advanced',form.Value,'mtu',_('MTU'),_('Packets exceeding this value may be fragmented'));o.modalonly=true;o.datatype='and(uinteger,range(64,9000))';o.placeholder=1500;o=s.taboption('advanced',form.Value,'table',_('Table'),_('Routing table into which to insert this rule.')+'
'+ _('A numeric table index, or symbol alias declared in %s. Special aliases local (255), main (254) and default (253) are also valid').format('
/etc/iproute2/rt_tables')
+''+_('Only interfaces using this table (via override) will use this route.'));o.datatype='or(uinteger, string)';for(var i=0;i
/etc/iproute2/rt_tables')
+''+_('Matched traffic re-targets to an interface using this table.'));o.datatype='or(uinteger, string)';for(var i=0;i
2m).'));so.optional=true;so.default='12h';so.validate=function(section_id,value){if(value==="infinite"||value==="deprecated"){return true;}
const regex=new RegExp("^[0-9]+[smhdw]?$","i");if(regex.test(value)){return true;}
return _("Invalid DHCP lease time format. Use integer values optionally followed by s, m, h, d, or w.");}
so=ss.taboption('advanced',form.Flag,'dynamicdhcp',_('Dynamic DHCP'),_('Dynamically allocate DHCP addresses for clients. If disabled, only clients having static leases will be served.'));so.default=so.enabled;ss.taboption('advanced',form.Flag,'force',_('Force'),_('Force DHCP on this network even if another server is detected.'));so=ss.taboption('advanced',form.Value,'netmask',_('IPv4-Netmask'),_('Override the netmask sent to clients. Normally it is calculated from the subnet that is served.'));so.optional=true;so.datatype='ip4addr';so.render=function(option_index,section_id,in_table){this.placeholder=get_netmask(s,true);return form.Value.prototype.render.apply(this,[option_index,section_id,in_table]);};so.validate=function(section_id,value){var uielem=this.getUIElement(section_id);if(uielem)
uielem.setPlaceholder(get_netmask(s,false));return form.Value.prototype.validate.apply(this,[section_id,value]);};ss.taboption('advanced',form.DynamicList,'dhcp_option',_('DHCP-Options'),_('Define additional DHCP options, for example "6,192.168.2.1,192.168.2.2" which advertises different DNS servers to clients.'));}
var has_other_master=uci.sections('dhcp','dhcp').filter(function(s){return(s.interface!=ifc.getName()&&s.master=='1');})[0];so=ss.taboption('ipv6',form.Flag,'master',_('Designated master'));so.readonly=has_other_master?true:false;so.description=has_other_master?_('Interface "%h" is already marked as designated master.').format(has_other_master.interface||has_other_master['.name']):_('Set this interface as master for RA and DHCPv6 relaying as well as NDP proxying.');so.validate=function(section_id,value){var hybrid_downstream_desc=_('Operate in relay mode if a designated master interface is configured and active, otherwise fall back to server mode.'),ndp_downstream_desc=_('Operate in relay mode if a designated master interface is configured and active, otherwise disable NDP proxying.'),hybrid_master_desc=_('Operate in relay mode if an upstream IPv6 prefix is present, otherwise disable service.'),ra_server_allowed=true,checked=this.formvalue(section_id),dhcpv6=this.section.getOption('dhcpv6').getUIElement(section_id),ndp=this.section.getOption('ndp').getUIElement(section_id),ra=this.section.getOption('ra').getUIElement(section_id);switch(protoval){case'dhcp':case'dhcpv6':case'3g':case'l2tp':case'ppp':case'pppoa':case'pppoe':case'pptp':case'pppossh':case'ipip':case'gre':case'grev6':ra_server_allowed=false;break;}
if(checked=='1'||!ra_server_allowed){dhcpv6.node.querySelector('li[data-value="server"]').setAttribute('unselectable','');if(dhcpv6.getValue()=='server')
dhcpv6.setValue('hybrid');ra.node.querySelector('li[data-value="server"]').setAttribute('unselectable','');if(ra.getValue()=='server')
ra.setValue('hybrid');}
if(checked=='1'){dhcpv6.node.querySelector('li[data-value="hybrid"] > div > span').innerHTML=hybrid_master_desc;ra.node.querySelector('li[data-value="hybrid"] > div > span').innerHTML=hybrid_master_desc;ndp.node.querySelector('li[data-value="hybrid"] > div > span').innerHTML=hybrid_master_desc;}
else{if(ra_server_allowed){dhcpv6.node.querySelector('li[data-value="server"]').removeAttribute('unselectable');ra.node.querySelector('li[data-value="server"]').removeAttribute('unselectable');}
dhcpv6.node.querySelector('li[data-value="hybrid"] > div > span').innerHTML=hybrid_downstream_desc;ra.node.querySelector('li[data-value="hybrid"] > div > span').innerHTML=hybrid_downstream_desc;ndp.node.querySelector('li[data-value="hybrid"] > div > span').innerHTML=ndp_downstream_desc;}
return true;};so=ss.taboption('ipv6',form.RichListValue,'ra',_('RA-Service'),_('Configures the operation mode of the RA service on this interface.'));so.optional=true;so.value('',_('disabled'),_('Do not send any RA messages on this interface.'));so.value('server',_('server mode'),_('Send RA messages advertising this device as IPv6 router.'));so.value('relay',_('relay mode'),_('Forward RA messages received on the designated master interface to downstream interfaces.'));so.value('hybrid',_('hybrid mode'),' ');so=ss.taboption('ipv6-ra',form.RichListValue,'ra_default',_('Default router'),_('Configures the default router advertisement in RA messages.'));so.optional=true;so.value('',_('automatic'),_('Announce this device as default router if a local IPv6 default route is present.'));so.value('1',_('on available prefix'),_('Announce this device as default router if a public IPv6 prefix is available, regardless of local default route availability.'));so.value('2',_('forced'),_('Announce this device as default router regardless of whether a prefix or default route is present.'));so.depends('ra','server');so.depends({ra:'hybrid',master:'0'});so=ss.taboption('ipv6-ra',form.Flag,'ra_slaac',_('Enable SLAAC'),_('Set the autonomous address-configuration flag in the prefix information options of sent RA messages. When enabled, clients will perform stateless IPv6 address autoconfiguration.'));so.default=so.enabled;so.depends('ra','server');so.depends({ra:'hybrid',master:'0'});so=ss.taboption('ipv6-ra',form.RichListValue,'ra_flags',_('RA Flags'),_('Specifies the flags sent in RA messages, for example to instruct clients to request further information via stateful DHCPv6.'));so.optional=true;so.value('managed-config',_('managed config (M)'),_('The Managed address configuration (M) flag indicates that IPv6 addresses are available via DHCPv6.'));so.value('other-config',_('other config (O)'),_('The Other configuration (O) flag indicates that other information, such as DNS servers, is available via DHCPv6.'));so.value('home-agent',_('mobile home agent (H)'),_('The Mobile IPv6 Home Agent (H) flag indicates that the device is also acting as Mobile IPv6 home agent on this link.'));so.multiple=true;so.select_placeholder=_('none');so.depends('ra','server');so.depends({ra:'hybrid',master:'0'});so.cfgvalue=function(section_id){var flags=L.toArray(uci.get('dhcp',section_id,'ra_flags'));return flags.length?flags:['other-config'];};so.remove=function(section_id){var existing=L.toArray(uci.get('dhcp',section_id,'ra_flags'));if(this.isActive(section_id)){if(existing.length!=1||existing[0]!='none')
uci.set('dhcp',section_id,'ra_flags',['none']);}
else if(existing.length){uci.unset('dhcp',section_id,'ra_flags');}};so=ss.taboption('ipv6-ra',form.Value,'ra_pref64',_('NAT64 prefix'),_('Announce NAT64 prefix in RA messages.')+' '+
_('See %s and %s.'.format('RFC6146','RFC8781').format('https://www.rfc-editor.org/rfc/rfc6146','https://www.rfc-editor.org/rfc/rfc8781')));so.optional=true;so.datatype='cidr6';so.placeholder='64:ff9b::/96';so.depends('ra','server');so.depends({ra:'hybrid',master:'0'});so=ss.taboption('ipv6-ra',form.Value,'ra_maxinterval',_('Max RA interval'),_('Maximum time allowed between sending unsolicited RA. Default is 600 seconds.'));so.optional=true;so.datatype='uinteger';so.placeholder='600';so.depends('ra','server');so.depends({ra:'hybrid',master:'0'});so=ss.taboption('ipv6-ra',form.Value,'ra_mininterval',_('Min RA interval'),_('Minimum time allowed between sending unsolicited RA. Default is 200 seconds.'));so.optional=true;so.datatype='uinteger';so.placeholder='200';so.depends('ra','server');so.depends({ra:'hybrid',master:'0'});so=ss.taboption('ipv6-ra',form.Value,'ra_reachabletime',_('RA Reachability Timer'),_('Units: milliseconds. 0 means unspecified.')+' '+
_('Dictates how long a node assumes a neighbor is reachable after a reachability confirmation; published in RA messages.'));so.optional=true;so.datatype='range(0, 3600000)';so.placeholder='0';so.depends('ra','server');so.depends({ra:'hybrid',master:'0'});so=ss.taboption('ipv6-ra',form.Value,'ra_retranstime',_('RA Retransmission Timer'),_('Units: milliseconds. 0 means unspecified.')+' '+
_('Controls retransmitted Neighbor Solicitation messages; published in RA messages.'));so.optional=true;so.placeholder='0';so.datatype='range(0, 60000)';so.depends('ra','server');so.depends({ra:'hybrid',master:'0'});so=ss.taboption('ipv6-ra',form.Value,'ra_lifetime',_('RA Lifetime'),_('Router Lifetime published in RA messages. Maximum is 9000 seconds.'));so.optional=true;so.datatype='range(0, 9000)';so.placeholder='2700';so.depends('ra','server');so.depends({ra:'hybrid',master:'0'});so=ss.taboption('ipv6-ra',form.Value,'ra_mtu',_('RA MTU'),_('The MTU to be published in RA messages. Minimum is 1280 bytes.'));so.optional=true;so.datatype='range(1280, 65535)';so.depends('ra','server');so.depends({ra:'hybrid',master:'0'});so.load=function(section_id){var dev=ifc.getL3Device(),path=dev?"/proc/sys/net/ipv6/conf/%s/mtu".format(dev.getName()):null;return Promise.all([dev?L.resolveDefault(fs.read(path),dev.getMTU()):null,this.super('load',[section_id])]).then(L.bind(function(res){this.placeholder=+res[0];return res[1];},this));};so=ss.taboption('ipv6-ra',form.Value,'ra_hoplimit',_('RA Hop Limit'),_('The maximum hops to be published in RA messages. Maximum is 255 hops.'));so.optional=true;so.datatype='range(0, 255)';so.depends('ra','server');so.depends({ra:'hybrid',master:'0'});so.load=function(section_id){var dev=ifc.getL3Device(),path=dev?"/proc/sys/net/ipv6/conf/%s/hop_limit".format(dev.getName()):null;return Promise.all([dev?L.resolveDefault(fs.read(path),64):null,this.super('load',[section_id])]).then(L.bind(function(res){this.placeholder=+res[0];return res[1];},this));};so=ss.taboption('ipv6-ra',form.Value,'max_preferred_lifetime',_('IPv6 Preferred Prefix Lifetime'),_('Maximum preferred lifetime for a prefix.'));so.optional=true;so.placeholder='45m';so.value('5m',_('5m (5 minutes)'));so.value('45m',_('45m (45 minutes - default)'));so.value('3h',_('3h (3 hours)'));so.value('12h',_('12h (12 hours)'));so.value('7d',_('7d (7 days)'));so.depends('ra','server');so.depends({ra:'hybrid',master:'0'});so=ss.taboption('ipv6-ra',form.Value,'max_valid_lifetime',_('IPv6 Valid Prefix Lifetime'),_('Maximum valid lifetime for a prefix.'));so.optional=true;so.placeholder='90m';so.value('5m',_('5m (5 minutes)'));so.value('90m',_('90m (90 minutes - default)'));so.value('3h',_('3h (3 hours)'));so.value('12h',_('12h (12 hours)'));so.value('7d',_('7d (7 days)'));so.depends('ra','server');so.depends({ra:'hybrid',master:'0'});so=ss.taboption('ipv6',form.RichListValue,'dhcpv6',_('DHCPv6-Service'),_('Configures the operation mode of the DHCPv6 service on this interface.'));so.optional=true;so.value('',_('disabled'),_('Do not offer DHCPv6 service on this interface.'));so.value('server',_('server mode'),_('Provide a DHCPv6 server on this interface and reply to DHCPv6 solicitations and requests.'));so.value('relay',_('relay mode'),_('Forward DHCPv6 messages between the designated master interface and downstream interfaces.'));so.value('hybrid',_('hybrid mode'),' ');so=ss.taboption('ipv6',form.Value,'dhcpv6_pd_min_len',_('PD minimum length'),_('Configures the minimum delegated prefix length assigned to a requesting downstream router, potentially overriding a requested prefix length. If left unspecified, the device will assign the smallest available prefix greater than or equal to the requested prefix.'));so.datatype='range(1,62)';so.depends('dhcpv6','server');so=ss.taboption('ipv6',form.DynamicList,'dns',_('Announced IPv6 DNS servers'),_('Specifies a fixed list of IPv6 DNS server addresses to announce via DHCPv6. If left unspecified, the device will announce itself as IPv6 DNS server unless the Local IPv6 DNS server option is disabled.'));so.datatype='ip6addr("nomask")';so.depends('ra','server');so.depends({ra:'hybrid',master:'0'});so.depends('dhcpv6','server');so.depends({dhcpv6:'hybrid',master:'0'});so=ss.taboption('ipv6',form.DynamicList,'dnr',_('Announce encrypted DNS servers'),_('Specifies a fixed list of encrypted DNS server addresses to announce via DHCPv6/RA (see %s).').format('RFC9463').format('https://www.rfc-editor.org/rfc/rfc9463')+''+ _('IPv4 addresses are only supported if
odhcpd also handles DHCPv4.')+''+ _('Syntax:
<numeric priority> <domain-name> [IP,...] [SVC parameter ...]')+''+ _('Example:
100 dns.example.com 2001:db8::53,192.168.1.53 alpn=doq port=853')+''+ _('Note: the
_lifetime=<seconds> SVC parameter sets the lifetime of the announced server (use 0 to indicate a server which should no longer be used).'));so.datatype='string';so.depends('ra','server');so.depends({ra:'hybrid',master:'0'});so.depends('dhcpv6','server');so.depends({dhcpv6:'hybrid',master:'0'});so=ss.taboption('ipv6',form.Flag,'dns_service',_('Local IPv6 DNS server'),_('Announce this device as IPv6 DNS server.'));so.default=so.enabled;so.depends({ra:'server',dns:/^$/});so.depends({ra:'hybrid',dns:/^$/,master:'0'});so.depends({dhcpv6:'server',dns:/^$/});so.depends({dhcpv6:'hybrid',dns:/^$/,master:'0'});so=ss.taboption('ipv6',form.DynamicList,'domain',_('Announced DNS domains'),_('Specifies a fixed list of DNS search domains to announce via DHCPv6. If left unspecified, the local device DNS search domain will be announced.'));so.datatype='hostname';so.depends('ra','server');so.depends({ra:'hybrid',master:'0'});so.depends('dhcpv6','server');so.depends({dhcpv6:'hybrid',master:'0'});so=ss.taboption('ipv6',form.DynamicList,'ntp',_('NTP Servers'),_('DHCPv6 option 56. %s.','DHCPv6 option 56. RFC5908 link').format('RFC5908').format('https://www.rfc-editor.org/rfc/rfc5908#section-4'));so.datatype='host(0)';for(var x of uci.get('system','ntp','server')||''){so.value(x);}
var local_nets=this.networks.filter(function(n){return n.getName()!='loopback'});if(local_nets){if(uci.get('system','ntp','enable_server')){local_nets.forEach(function(n){n.getIPAddrs().forEach(function(i4){so.value(i4.split('/')[0]);});n.getIP6Addrs().forEach(function(i6){so.value(i6.split('/')[0]);});});}}
so.optional=true;so.rmempty=true;so.depends('dhcpv6','server');so.depends({dhcpv6:'hybrid',master:'0'});so=ss.taboption('ipv6',form.RichListValue,'ndp',_('NDP-Proxy'),_('Configures the operation mode of the NDP proxy service on this interface.'));so.optional=true;so.value('',_('disabled'),_('Do not proxy any NDP packets.'));so.value('relay',_('relay mode'),_('Forward NDP NS and NA messages between the designated master interface and downstream interfaces.'));so.value('hybrid',_('hybrid mode'),' ');so=ss.taboption('ipv6',form.Flag,'ndproxy_routing',_('Learn routes'),_('Set up routes for proxied IPv6 neighbours.'));so.default=so.enabled;so.depends('ndp','relay');so.depends('ndp','hybrid');so=ss.taboption('ipv6',form.Flag,'ndproxy_slave',_('NDP-Proxy slave'),_('Set interface as NDP-Proxy external slave. Default is off.'));so.depends({ndp:'relay',master:'0'});so.depends({ndp:'hybrid',master:'0'});}
ifc.renderFormOptions(s);o=nettools.replaceOption(s,'advanced',form.Flag,'defaultroute',_('Use default gateway'),_('If unchecked, no default route is configured'));o.default=o.enabled;if(has_peerdns(protoval)){o=nettools.replaceOption(s,'advanced',form.Flag,'peerdns',_('Use DNS servers advertised by peer'),_('If unchecked, the advertised DNS server addresses are ignored'));o.default=o.enabled;}
o=nettools.replaceOption(s,'advanced',form.DynamicList,'dns',_('Use custom DNS servers'));if(has_peerdns(protoval))
o.depends('peerdns','0');o.datatype='ipaddr';o=nettools.replaceOption(s,'advanced',form.DynamicList,'dns_search',_('DNS search domains'));if(protoval!='static')
o.depends('peerdns','0');o.datatype='hostname';o=nettools.replaceOption(s,'advanced',form.Value,'dns_metric',_('DNS weight'),_('The DNS server entries in the local resolv.conf are primarily sorted by the weight specified here'));o.datatype='uinteger';o.placeholder='0';o=nettools.replaceOption(s,'advanced',form.Value,'metric',_('Use gateway metric'),_('Metric is an ordinal, where a gateway with 1 is chosen 1st, 2 is chosen 2nd, 3 is chosen 3rd, etc'));o.datatype='uinteger';o.placeholder='0';o=nettools.replaceOption(s,'advanced',form.Value,'ip4table',_('Override IPv4 routing table'));o.datatype='or(uinteger, string)';for(var i=0;i'+ l3mdevhelp2);o=s.option(form.Flag,'udp_l3mdev',_('UDP Layer 3 Master Device (udp_l3mdev) accept'),l3mdevhelp1.format('UDP')+'
'+ l3mdevhelp2);o=s.option(form.ListValue,'packet_steering',_('Packet Steering'),_('Enable packet steering across CPUs. May help or hinder network speed.'));o.value('0',_('Disabled'));o.value('1',_('Enabled'));o.value('2',_('Enabled (all CPUs)'));o.default='1';o.optional=true;var steer_flow=uci.get('network','globals','steering_flows');o=s.option(form.Value,'steering_flows',_('Steering flows (RPS)'),_('Directs packet flows to specific CPUs where the local socket owner listens (the local service).')+' '+ _('Note: this setting is for local services on the device only (not for forwarding).'));o.value('',_('Standard: none'));o.value('128',_('Suggested: 128'));o.value('256',_('256'));o.depends('packet_steering','1');o.depends('packet_steering','2');o.datatype='uinteger';o.default=steer_flow;if(dslModemType!=null){s=m.section(form.TypedSection,'dsl',_('DSL'));s.anonymous=true;o=s.option(form.ListValue,'annex',_('Annex'));if(dslModemType=='vdsl'){o.value('a',_('ADSL (all variants) Annex A/L/M + VDSL2 Annex A/B/C'));o.value('b',_('ADSL (all variants) Annex B + VDSL2 Annex A/B/C'));o.value('j',_('ADSL (all variants) Annex B/J + VDSL2 Annex A/B/C'));}else{o.value('a',_('ADSL (all variants) Annex A/L/M'));o.value('b',_('ADSL (all variants) Annex B'));o.value('j',_('ADSL (all variants) Annex B/J'));} o.value('m',_('ADSL (all variants) Annex M'));o.value('at1',_('ANSI T1.413'));o.value('admt',_('ADSL (G.992.1) Annex A'));o.value('bdmt',_('ADSL (G.992.1) Annex B'));o.value('alite',_('Splitterless ADSL (G.992.2) Annex A'));o.value('a2',_('ADSL2 (G.992.3) Annex A'));o.value('b2',_('ADSL2 (G.992.3) Annex B'));o.value('l',_('ADSL2 (G.992.3) Annex L'));o.value('m2',_('ADSL2 (G.992.3) Annex M'));o.value('a2p',_('ADSL2+ (G.992.5) Annex A'));o.value('b2p',_('ADSL2+ (G.992.5) Annex B'));o.value('m2p',_('ADSL2+ (G.992.5) Annex M'));o=s.option(form.ListValue,'tone',_('Tone'));o.value('',_('auto'));o.value('a',_('A43C + J43 + A43'));o.value('av',_('A43C + J43 + A43 + V43'));o.value('b',_('B43 + B43C'));o.value('bv',_('B43 + B43C + V43'));if(dslModemType=='vdsl'){o=s.option(form.ListValue,'xfer_mode',_('Encapsulation mode'));o.value('',_('auto'));o.value('atm',_('ATM (Asynchronous Transfer Mode)'));o.value('ptm',_('PTM/EFM (Packet Transfer Mode)'));o=s.option(form.ListValue,'line_mode',_('DSL line mode'));o.value('',_('auto'));o.value('adsl',_('ADSL'));o.value('vdsl',_('VDSL'));o=s.option(form.ListValue,'ds_snr_offset',_('Downstream SNR offset'));o.default='0';for(var i=-100;i<=100;i+=5) o.value(i,_('%.1f dB').format(i/10));} s.option(form.Value,'firmware',_('Firmware File'));} if(L.hasSystemFeature('br2684ctl')){s=m.section(form.TypedSection,'atm-bridge',_('ATM Bridges'),_('ATM bridges expose encapsulated ethernet in AAL5 connections as virtual Linux network interfaces which can be used in conjunction with DHCP or PPP to dial into the provider network.'));s.addremove=true;s.anonymous=true;s.addbtntitle=_('Add ATM Bridge');s.handleAdd=function(ev){var sections=uci.sections('network','atm-bridge'),max_unit=-1;for(var i=0;i
%d.').format(L.hasSystemFeature('apk')?'apk':'opkg',cmd,(res.code&0xff)||-1)));dlg.appendChild(E('div',{'class':'button-row'},E('div',{'class':'btn','click':L.bind(function(res){if(ui.menu&&ui.menu.flushCache)
ui.menu.flushCache();ui.hideModal();updateLists();if(res.code!==0)
rejectFn(new Error(res.stderr||'%s error %d'.format(L.hasSystemFeature('apk')?'apk':'opkg',res.code)));else
resolveFn(res);},this,res)},_('Dismiss'))));}).catch(function(err){ui.addNotification(null,E('p',_('Unable to execute %s %s command: %s').format(L.hasSystemFeature('apk')?'apk':'opkg',cmd,err)));ui.hideModal();});});}
function handleUpload(ev)
{var path='/tmp/upload.%s'.format(L.hasSystemFeature('apk')?'apk':'ipk');return ui.uploadFile(path).then(L.bind(function(btn,res){ui.showModal(_('Manually install package'),[E('p',{},_('Installing packages from untrusted sources is a potential security risk! Really attempt to install %h?').format(res.name)),E('ul',{},[res.size?E('li',{},'%s: %1024.2mB'.format(_('Size'),res.size)):'',res.checksum?E('li',{},'%s: %s'.format(_('MD5'),res.checksum)):'',res.sha256sum?E('li',{},'%s: %s'.format(_('SHA256'),res.sha256sum)):'']),E('div',{'class':'right'},[E('div',{'click':function(ev){ui.hideModal();fs.remove(path);},'class':'btn cbi-button-neutral'},_('Cancel')),' ',E('div',{'class':'btn cbi-button-action','data-command':'install','data-package':path,'click':function(ev){handlePkg(ev).finally(function(){fs.remove(path)});}},_('Install'))])]);},this,ev.target));}
function downloadLists()
{return Promise.all([callMountPoints(),fs.exec_direct('/usr/libexec/package-manager-call',['list-available']),fs.exec_direct('/usr/libexec/package-manager-call',['list-installed'])]);}
function updateLists(data)
{cbi_update_table('#packages',[],E('div',{'class':'spinning'},_('Loading package information…')));packages.available={providers:{},pkgs:{}};packages.installed={providers:{},pkgs:{}};return(data?Promise.resolve(data):downloadLists()).then(function(data){var pg=document.querySelector('.cbi-progressbar'),mount=L.toArray(data[0].filter(function(m){return m.mount=='/'||m.mount=='/overlay'})).sort(function(a,b){return a.mount>b.mount})[0]||{size:0,free:0};pg.firstElementChild.style.width=Math.floor(mount.size?(100/mount.size)*(mount.size-mount.free):100)+'%';pg.setAttribute('title',_('%s used (%1024mB used of %1024mB, %1024mB free)').format(pg.firstElementChild.style.width,mount.size-mount.free,mount.size,mount.free));parseList(data[1],packages.available);parseList(data[2],packages.installed);for(var pkgname in packages.installed.pkgs)
if(pkgname.indexOf('luci-i18n-base-')===0)
languages.push(pkgname.substring(15));display(document.querySelector('input[name="filter"]').value);});}
var inputTimeout=null;function handleInput(ev){if(inputTimeout!==null)
window.clearTimeout(inputTimeout);inputTimeout=window.setTimeout(function(){display(ev.target.value);},250);}
return view.extend({load:function(){return downloadLists();},render:function(listData){var query=decodeURIComponent(L.toArray(location.search.match(/\bquery=([^=]+)\b/))[1]||'');var view=E([],[E('style',{'type':'text/css'},[css]),E('h2',{},_('Software')),E('div',{'class':'cbi-map-descr'},[E('span',_('Install additional software and upgrade existing packages with %s.').format(L.hasSystemFeature('apk')?'apk':'opkg')),E('br'),E('span',_('Warning! Package operations can break your system.').format('href="https://openwrt.org/meta/infobox/upgrade_packages_warning" target="_blank" rel="noreferrer"'))]),E('div',{'class':'controls'},[E('div',{},[E('label',{},_('Disk space')+':'),E('div',{'class':'cbi-progressbar','title':_('unknown')},E('div',{},['\u00a0']))]),E('div',{},[E('label',{},_('Filter')+':'),E('span',{'class':'control-group'},[E('input',{'type':'text','name':'filter','placeholder':_('Type to filter…'),'value':query,'input':handleInput}),E('button',{'class':'btn cbi-button','click':handleReset},[_('Clear')])])]),E('div',{},[E('label',{},_('Download and install package')+':'),E('span',{'class':'control-group'},[E('input',{'type':'text','name':'install','placeholder':_('Package name or URL…'),'keydown':function(ev){if(ev.keyCode===13)handleManualInstall(ev)},'disabled':isReadonlyView}),E('button',{'class':'btn cbi-button cbi-button-action','click':handleManualInstall,'disabled':isReadonlyView},[_('OK')])])]),E('div',{},[E('label',{},_('Actions')+':'),' ',E('span',{'class':'control-group'},[E('button',{'class':'btn cbi-button-positive','data-command':'update','click':handlePkg,'disabled':isReadonlyView},[_('Update lists…')]),' ',E('button',{'class':'btn cbi-button-action','click':handleUpload,'disabled':isReadonlyView},[_('Upload Package…')]),' ',E('button',{'class':'btn cbi-button-neutral','click':handleConfig},[_('Configure %s').format(L.hasSystemFeature('apk')?'apk':'opkg')])])]),E('div',{},[E('label',{},_('Display LuCI translation packages')+':'),' ',E('div',[E('label',{'data-tooltip':_('Display base translation packages and translation packages for already installed languages only')},[E('input',{'type':'radio','name':'filter_i18n','value':'lang','change':handleI18nFilter,'checked':true}),' ',_('filtered','Display translation packages')]),' \u00a0 ',E('label',{'data-tooltip':_('Display all available translation packages')},[E('input',{'type':'radio','name':'filter_i18n','value':'all','change':handleI18nFilter}),' ',_('all','Display translation packages')]),' \u00a0 ',E('label',{'data-tooltip':_('Hide all translation packages')},[E('input',{'type':'radio','name':'filter_i18n','value':'none','change':handleI18nFilter}),' ',_('none','Display translation packages')])])])]),E('ul',{'class':'cbi-tabmenu mode'},[E('li',{'data-mode':'available','class':'available cbi-tab','click':handleMode},E('a',{'href':'#'},[_('Available')])),E('li',{'data-mode':'installed','class':'installed cbi-tab-disabled','click':handleMode},E('a',{'href':'#'},[_('Installed')])),E('li',{'data-mode':'updates','class':'installed cbi-tab-disabled','click':handleMode},E('a',{'href':'#'},[_('Updates')]))]),E('div',{'class':'controls','style':'display:none'},[E('div',{'class':'pager center'},[E('button',{'class':'btn cbi-button-neutral prev','aria-label':_('Previous page'),'click':handlePage},['«']),E('div',{'class':'text'},['dummy']),E('button',{'class':'btn cbi-button-neutral next','aria-label':_('Next page'),'click':handlePage},['»'])])]),E('table',{'id':'packages','class':'table'},[E('tr',{'class':'tr cbi-section-table-titles'},[E('th',{'class':'th col-2 left'},[_('Package name')]),E('th',{'class':'th col-2 left version'},[_('Version')]),E('th',{'class':'th col-1 center size'},[_('Size (%s)').format(L.hasSystemFeature('apk')?'.apk':'.ipk')]),E('th',{'class':'th col-10 left'},[_('Description')]),E('th',{'class':'th right cbi-section-actions'},['\u00a0'])])]),E('div',{'class':'controls','style':'display:none'},[E('div',{'class':'pager center'},[E('button',{'class':'btn cbi-button-neutral prev','aria-label':_('Previous page'),'click':handlePage},['«']),E('div',{'class':'text'},['dummy']),E('button',{'class':'btn cbi-button-neutral next','aria-label':_('Next page'),'click':handlePage},['»'])])])]);requestAnimationFrame(function(){updateLists(listData)});return view;},handleSave:null,handleSaveApply:null,handleReset:null}); 07070100340B6F000041ED00000000000000000000000269B8A75300000000000000FE0000000000000000000000000000002900000000www/luci-static/resources/view/bootstrap 07070100340B70000081A400000000000000000000000169B8A75300000283000000FE0000000000000000000000000000003400000000www/luci-static/resources/view/bootstrap/sysauth.js 'use strict';'require ui';'require view';return view.extend({render:function(){var form=document.querySelector('form'),btn=document.querySelector('button');var dlg=ui.showModal(_('Authorization Required'),[].slice.call(document.querySelectorAll('section > *')),'login');form.addEventListener('keypress',function(ev){if(ev.key=='Enter')
btn.click();});btn.addEventListener('click',function(){dlg.querySelectorAll('*').forEach(function(node){node.style.display='none'});dlg.appendChild(E('div',{'class':'spinning'},_('Logging in…')));form.submit()});document.querySelector('input[type="password"]').focus();return'';},addFooter:function(){}}); 07070100340B06000041ED00000000000000000000000369B8A75300000000000000FE0000000000000000000000000000002600000000www/luci-static/resources/view/system 07070100340B18000081A400000000000000000000000169B8A75300001C46000000FE0000000000000000000000000000003000000000www/luci-static/resources/view/system/system.js 'use strict';'require view';'require poll';'require ui';'require uci';'require rpc';'require form';'require tools.widgets as widgets';var callRcList,callRcInit,callTimezone,callGetLocaltime,callSetLocaltime,CBILocalTime;callRcList=rpc.declare({object:'rc',method:'list',params:['name'],expect:{'':{}},filter:function(res){for(var k in res)
return+res[k].enabled;return null;}});callRcInit=rpc.declare({object:'rc',method:'init',params:['name','action'],expect:{result:false}});callGetLocaltime=rpc.declare({object:'system',method:'info',expect:{localtime:0}});callSetLocaltime=rpc.declare({object:'luci',method:'setLocaltime',params:['localtime'],expect:{result:0}});callTimezone=rpc.declare({object:'luci',method:'getTimezones',expect:{'':{}}});function formatTime(epoch){var date=new Date(epoch*1000);return'%04d-%02d-%02d %02d:%02d:%02d'.format(date.getUTCFullYear(),date.getUTCMonth()+1,date.getUTCDate(),date.getUTCHours(),date.getUTCMinutes(),date.getUTCSeconds());}
CBILocalTime=form.DummyValue.extend({renderWidget:function(section_id,option_id,cfgvalue){return E([],[E('input',{'id':'localtime','type':'text','readonly':true,'value':formatTime(cfgvalue)}),E('br'),E('span',{'class':'control-group'},[E('button',{'class':'cbi-button cbi-button-apply','click':ui.createHandlerFn(this,function(){return callSetLocaltime(Math.floor(Date.now()/1000));}),'disabled':(this.readonly!=null)?this.readonly:this.map.readonly},_('Sync with browser')),' ',this.ntpd_support?E('button',{'class':'cbi-button cbi-button-apply','click':ui.createHandlerFn(this,function(){return callRcInit('sysntpd','restart');}),'disabled':(this.readonly!=null)?this.readonly:this.map.readonly},_('Sync with NTP-Server')):''])]);},});return view.extend({load:function(){return Promise.all([callRcList('sysntpd'),callTimezone(),callGetLocaltime(),uci.load('luci'),uci.load('system')]);},render:function(rpc_replies){var ntpd_enabled=rpc_replies[0],timezones=rpc_replies[1],localtime=rpc_replies[2],m,s,o;m=new form.Map('system',_('System'),_('Here you can configure the basic aspects of your device like its hostname or the timezone.'));m.chain('luci');s=m.section(form.TypedSection,'system',_('System Properties'));s.anonymous=true;s.addremove=false;s.tab('general',_('General Settings'));s.tab('logging',_('Logging'));s.tab('timesync',_('Time Synchronization'));s.tab('language',_('Language and Style'));o=s.taboption('general',CBILocalTime,'_systime',_('Local Time'));o.cfgvalue=function(){return localtime};o.ntpd_support=ntpd_enabled;o=s.taboption('general',form.Value,'hostname',_('Hostname'));o.datatype='hostname';o=s.taboption('general',form.Value,'description',_('Description'),_('An optional, short description for this device'));o.optional=true;o=s.taboption('general',form.TextValue,'notes',_('Notes'),_('Optional, free-form notes about this device'));o.optional=true;o=s.taboption('general',form.ListValue,'zonename',_('Timezone'));o.value('UTC');var zones=Object.keys(timezones||{}).sort();for(var i=0;i.pub file into the input field.')),E('div',{'class':'cbi-section-node'},list)]);},handleSaveApply:null,handleSave:null,handleReset:null}); 07070100340B0A000041ED00000000000000000000000269B8A75300000000000000FE0000000000000000000000000000003200000000www/luci-static/resources/view/system/led-trigger 07070100340B0B000081A400000000000000000000000169B8A753000000C9000000FE0000000000000000000000000000004000000000www/luci-static/resources/view/system/led-trigger/default-on.js 'use strict';'require baseclass';return baseclass.extend({trigger:_('Always on (kernel: default-on)'),description:_('The LED is always in default state on.'),kernel:true,addFormOptions:function(s){}}); 07070100340B0E000081A400000000000000000000000169B8A753000001CC000000FE0000000000000000000000000000003A00000000www/luci-static/resources/view/system/led-trigger/none.js 'use strict';'require form';'require baseclass';return baseclass.extend({trigger:_('Always off (kernel: none)'),description:_('The LED is always in default state off.'),kernel:true,addFormOptions:function(s){var o;o=s.option(form.Flag,'default',_('Default state'));o.rmempty=false;o.depends('trigger','none');o.textvalue=function(section_id){var cval=this.cfgvalue(section_id);if(cval==null)
cval=this.default;return(cval==this.enabled)?_('On'):_('Off');};}});07070100340B0D000081A400000000000000000000000169B8A7530000028F000000FE0000000000000000000000000000003C00000000www/luci-static/resources/view/system/led-trigger/netdev.js 'use strict';'require baseclass';'require form';'require tools.widgets as widgets';return baseclass.extend({trigger:_("Network device activity (kernel: netdev)"),description:_('The LED flashes with link status and activity on the configured interface.'),kernel:true,addFormOptions:function(s){var o;o=s.option(widgets.DeviceSelect,'_net_dev',_('Device'));o.rmempty=true;o.ucioption='dev';o.modalonly=true;o.noaliases=true;o.depends('trigger','netdev');o=s.option(form.MultiValue,'mode',_('Trigger Mode'));o.rmempty=true;o.modalonly=true;o.depends('trigger','netdev');o.value('link',_('Link On'));o.value('tx',_('Transmit'));o.value('rx',_('Receive'));}}); 07070100340B0C000081A400000000000000000000000169B8A75300000230000000FE0000000000000000000000000000003F00000000www/luci-static/resources/view/system/led-trigger/heartbeat.js 'use strict';'require baseclass';'require form';return baseclass.extend({trigger:_('Heartbeat interval (kernel: heartbeat)'),description:_('The LED flashes to simulate actual heart beat.')+
_('The frequency is in direct proportion to 1-minute average CPU load.'),kernel:true,addFormOptions:function(s){var o;o=s.option(form.Flag,'inverted',_('Invert blinking'),_('When inverted, the LED is continuously lit and flickers instead of it being off by default and blinking on system activity.'));o.rmempty=true;o.modalonly=true;o.depends('trigger','heartbeat');}});07070100340B0F000081A400000000000000000000000169B8A75300000225000000FE0000000000000000000000000000003B00000000www/luci-static/resources/view/system/led-trigger/timer.js 'use strict';'require baseclass';'require form';return baseclass.extend({trigger:_('Custom flash interval (kernel: timer)'),description:_('The LED blinks with the configured on/off frequency'),kernel:true,addFormOptions:function(s){var o;o=s.option(form.Value,'delayon',_('On-State Delay'),_('How long (in milliseconds) the LED should be on'));o.modalonly=true;o.depends('trigger','timer');o=s.option(form.Value,'delayoff',_('Off-State Delay'),_('How long (in milliseconds) the LED should be off'));o.modalonly=true;o.depends('trigger','timer');}}); 07070100340B08000081A400000000000000000000000169B8A75300000698000000FE0000000000000000000000000000003200000000www/luci-static/resources/view/system/dropbear.js 'use strict';'require view';'require form';'require tools.widgets as widgets';return view.extend({render:function(){var m,s,o;m=new form.Map('dropbear',_('SSH Access'),_('Dropbear offers SSH network shell access and an integrated SCP server'));s=m.section(form.TypedSection,'dropbear',_('Dropbear Instance'));s.anonymous=true;s.addremove=true;s.addbtntitle=_('Add instance');o=s.option(form.Flag,'enable',_('Enable Instance'),_('Enable SSH service instance'));o.default=o.enabled;o=s.option(form.Flag,'_direct',_('Bind to Interface'));o.default=o.disabled;o=s.option(widgets.NetworkSelect,'DirectInterface',_('Interface'),_('Listen only on the given interface or, if unspecified, on all'));o.nocreate=true;o.depends('_direct','1');o=s.option(widgets.NetworkSelect,'Interface',_('Interface'),_('Listen on up to 10 IPs on the given interface or, if unspecified, on all interfaces'));o.nocreate=true;o.depends('_direct','0');o=s.option(form.Value,'Port',_('Port'));o.datatype='port';o.placeholder=22;o=s.option(form.Flag,'PasswordAuth',_('Password authentication'),_('Allow SSH password authentication'));o.enabled='on';o.disabled='off';o.default=o.enabled;o.rmempty=false;o=s.option(form.Flag,'RootPasswordAuth',_('Allow root logins with password'),_('Allow the root user to log in with password'));o.enabled='on';o.disabled='off';o.default=o.enabled;o=s.option(form.Flag,'GatewayPorts',_('Gateway Ports'),_('Allow remote hosts to connect to local SSH forwarded ports'));o.enabled='on';o.disabled='off';o.default=o.disabled;return m.render();}});07070100340B14000081A400000000000000000000000169B8A75300002251000000FE0000000000000000000000000000003200000000www/luci-static/resources/view/system/repokeys.js 'use strict';
'require baseclass';
'require fs';
'require form';
'require ui';
'require view';
const APK_DIR = '/etc/apk/keys/';
const OPKG_DIR = '/etc/opkg/keys/';
const isReadonlyView = !L.hasViewPermission() || null;
let KEYDIR = null;
let KEYEXT = null;
/* This safeList is not bullet-proof, but should prevent users
accidentally deleting official repo keys */
const safeList = [
'd310c6f2833e97f7', // 24.10 release usign key
'openwrt-snapshots.pem', // main snapshots EC pub key
];
function isFileInSafeList(file){
for (let name of safeList) {
if (file === name)
return true;
if (file.toLocaleLowerCase().replace(/^openwrt-[0-9]+\.[0-9]+/i, '') !== file)
return true;
if (file.toLocaleLowerCase().replace(/^openwrt-snapshots/i, '') !== file)
return true;
}
return false;
}
function normalizeKey(s) {
return s?.replace(/\s+/g, ' ')?.trim();
}
function determineKeyEnv() {
return fs.stat(APK_DIR).then(() => {
KEYDIR = APK_DIR;
KEYEXT = '.pem'; // not strictly necessary - apk allows any extension
}).catch(() => {
KEYDIR = OPKG_DIR;
KEYEXT = null; // opkg requires key filenames without an extension
});
}
function listKeyFiles() {
return fs.list(KEYDIR).then(entries =>
Promise.all(entries.map(entry =>
fs.read(KEYDIR + entry.name).then(content => ({
filename: entry.name,
key: content
}))
))
);
}
function safeText(str) {
return String(str).replace(/[&<>"']/g, s => ({
'&': '&', '<': '<', '>': '>', '"': '"', "'": '''
}[s]));
}
function saveKeyFile(keyContent, file, fileContent) {
const ts = Date.now();
// Note: opkg can only verify against a key with filename that matches its key hash
// generate a file name in case key content was pasted
const filename = file ? file?.name?.split('.')?.[0] + (KEYEXT || '') : null;
const noname = 'key_' + ts + (KEYEXT || '');
return fs.write(KEYDIR + (filename ?? noname), fileContent ?? keyContent, 384 /* 0600 */);
}
function removeKey(ev, key) {
L.showModal(_('Delete key'), [
E('div', _('Really delete the following software repository public key?')),
E('pre', [ key.filename ]),
E('div', { class: 'right' }, [
E('div', { class: 'btn', click: L.hideModal }, _('Cancel')),
' ',
E('div', {
class: 'btn danger',
click: function() {
fs.remove(KEYDIR + key.filename)
.then(() => window.location.reload())
.catch(e => ui.addNotification(null, E('p', e.message)))
.finally(() => ui.hideModal());
}
}, _('Delete key'))
])
]);
}
function isPemFormat(content) {
return /-BEGIN ([A-Z ]+)?PUBLIC KEY-/.test(content);
}
function keyEnvironmentCheck(key) {
const isPem = isPemFormat(key);
// Reject PEM in OPKG; reject non-PEM in APK
if (KEYDIR === OPKG_DIR && isPem)
return _('This key appears to be in PEM format, which is not supported in an opkg environment.');
if (KEYDIR === APK_DIR && !isPem)
return _('This key does not appear to be in PEM format, which is required in an apk environment.');
return null;
}
function addKey(ev, file, fileContent) {
const input = document.getElementById('key-input');
const key = (fileContent ?? input?.value?.trim());
if (!key || !key.length)
return;
// Handle remote URL paste
if (/^https?:\/\/\S+$/i.test(key) && !fileContent) {
ui.addTimeLimitedNotification(_('Fetching key from URL…'), [], 5000, 'info');
L.Request.request(key, { method: 'GET' }).then(res => {
if (res.status !== 200) {
ui.addTimeLimitedNotification(_('Failed to fetch key'), [
E('p', _('HTTP error %d').format(res.status)),
], 7000, 'warning');
return;
}
const fetched = res.responseText?.trim();
if (!fetched || fetched.length > 8192) {
ui.addTimeLimitedNotification(_('Key file too large'), [
E('p', _('Fetched content seems too long. Maximum 8192 bytes.')),
], 7000, 'warning');
return;
}
if (!fetched || fetched.length < 32) {
ui.addTimeLimitedNotification(_('Invalid or empty key file'), [
E('p', _('Fetched content seems empty or too short.')),
], 7000, 'warning');
return;
}
const filename = res?.url?.split('/').pop().split('?')[0].split('#')[0];
// Remove extension if any (we'll re-add based on environment)
const file = {name: filename.replace(/\.[^.]+$/, '') };
addKey(ev, file, fetched);
}).catch(err => {
ui.addTimeLimitedNotification(_('Failed to fetch key'), [
E('p', err.message),
], 7000, 'warning');
});
return;
}
// From here on, key content (either pasted, fetched, or dropped)
const formatError = keyEnvironmentCheck(key);
if (formatError) {
ui.addTimeLimitedNotification(_('Invalid key format'), [
E('p', formatError)
], 7000, 'warning');
return;
}
// Prevent duplicates
listKeyFiles().then(existingKeys => {
if (existingKeys.some(k => normalizeKey(k.key) === normalizeKey(key))) {
ui.addTimeLimitedNotification(_('Add key'), [
E('div', _('The given software repository public key is already present.')),
], 7000, 'notice');
return;
}
// Save and refresh the UI
input.value = '';
saveKeyFile(key, file, fileContent)
.then(() => window.location.reload())
.catch(e => ui.addNotification(null, E('p', e.message)));
});
}
function dragKey(ev) {
ev.stopPropagation();
ev.preventDefault();
ev.dataTransfer.dropEffect = 'copy';
}
function dropKey(ev) {
ev.preventDefault();
ev.stopPropagation();
const input = document.getElementById('key-input');
if (!input)
return;
for (const file of ev.dataTransfer.files) {
const reader = new FileReader();
reader.onload = rev => {
input.value = rev.target.result;
addKey(ev, file, rev.target.result);
input.value = '';
};
reader.readAsText(file);
}
}
function handleWindowDragDropIgnore(ev) {
ev.preventDefault();
}
return view.extend({
load() {
return Promise.all([
determineKeyEnv().then(listKeyFiles),
]);
},
render([keys]) {
const m = new form.JSONMap({
keys: keys,
fup: {},
},
_('Repository Public Keys'), _(
_('Each software repository public key (from official or third party repositories) allows packages in lists signed by it to be installed by the package manager.') + '' + _('Each key is stored as a file in %s.').format(`
${KEYDIR}`)
));
m.submit = false;
m.reset = false;
m.readonly = isReadonlyView;
let s, o;
s = m.section(form.TableSection, 'keys');
s.anonymous = true;
s.nodescriptions = true;
o = s.option(form.DummyValue, 'filename', _('Name'));
o.width = '20%';
o = s.option(form.TextValue, 'key', _('Key'));
o.readonly = true;
o.monospace = true;
o.cols = 85;
o.rows = 5;
s.renderRowActions = function (section_id) {
const key = this.map.data.get(this.map.config, section_id);
const isReservedKey = isFileInSafeList(key.filename);
const btns = [
E('button', {
'class': 'cbi-button cbi-button-negative remove',
'click': ui.createHandlerFn(this, this.handleRemove, key),
'disabled': isReservedKey ? true : null,
}, [_('Delete')]),
];
return E('td', { 'class': 'td middle cbi-section-actions' }, E('div', btns));
};
s.handleRemove = function(key, ev) {
if (isFileInSafeList(key.filename)) {
ui.addTimeLimitedNotification(null, E('p', _('This key is protected and cannot be deleted.')), 3000, 'warning');
return;
}
return removeKey(ev, key)
};
s = m.section(form.NamedSection, 'fup');
o = s.option(form.DummyValue, '_newkey');
o.cfgvalue = function(section_id) {
const addInput = E('textarea', {
id: 'key-input',
'aria-label': _('Paste or drag repository public key'),
class: 'cbi-input-text',
type: 'text',
style: 'width: 100%; min-height: 120px;',
placeholder: _('Paste content of a file, or a URL to a key file, or drag and drop here to upload a software repository public key…'),
keydown: function(ev) { if (ev.keyCode === 13 && (ev.ctrlKey || ev.metaKey)) addKey(ev); },
disabled: isReadonlyView
});
addInput.addEventListener('dragover', handleWindowDragDropIgnore);
addInput.addEventListener('drop', handleWindowDragDropIgnore);
const addBtn = E('button', {
class: 'cbi-button',
click: ui.createHandlerFn(this, addKey),
disabled: isReadonlyView
}, _('Add key'));
return E('div', {
class: 'cbi-section-node',
dragover: isReadonlyView ? null : dragKey,
drop: isReadonlyView ? null : dropKey
}, [
E('div', { class: 'cbi-section-descr' }, _('Add new repository public key by pasting its content, a file, or a URL.')),
E('div', {
'style': 'height: 20px',
}, [' ']),
addInput,
E('div', { class: 'right' }, [ addBtn ])
]);
};
return m.render();
},
handleSaveApply: null,
handleSave: null,
handleReset: null
});
07070100340B19000081A400000000000000000000000169B8A75300000280000000FE0000000000000000000000000000003000000000www/luci-static/resources/view/system/uhttpd.js 'use strict';'require view';'require form';return view.extend({render:function(){var m,s,o;m=new form.Map('uhttpd',_('HTTP(S) Access'),_('uHTTPd offers HTTP or HTTPS network access.'));s=m.section(form.NamedSection,'main','uhttpd',_('Settings'));s.addremove=false;o=s.option(form.Flag,'redirect_https',_('Redirect to HTTPS'),_('Enable automatic redirection of HTTP requests to HTTPS port.'));o.rmempty=false;return m.render();}});07070100340B09000081A400000000000000000000000169B8A7530000386F000000FE0000000000000000000000000000002F00000000www/luci-static/resources/view/system/flash.js 'use strict';'require view';'require dom';'require form';'require rpc';'require fs';'require ui';var isReadonlyView=!L.hasViewPermission();var callSystemValidateFirmwareImage=rpc.declare({object:'system',method:'validate_firmware_image',params:['path'],expect:{'':{valid:false,forcable:true}}});function findStorageSize(procmtd,procpart){var kernsize=0,rootsize=0,wholesize=0;procmtd.split(/\n/).forEach(function(ln){var match=ln.match(/^mtd\d+: ([0-9a-f]+) [0-9a-f]+ "(.+)"$/),size=match?parseInt(match[1],16):0;switch(match?match[2]:''){case'linux':case'firmware':if(size>wholesize)
wholesize=size;break;case'kernel':case'kernel0':kernsize=size;break;case'rootfs':case'rootfs0':case'ubi':case'ubi0':rootsize=size;break;}});if(wholesize>0)
return wholesize;else if(kernsize>0&&rootsize>kernsize)
return kernsize+rootsize;procpart.split(/\n/).forEach(function(ln){var match=ln.match(/^\s*\d+\s+\d+\s+(\d+)\s+(\S+)$/);if(match){var size=parseInt(match[1],10);if(!match[2].match(/\d/)&&size>2048&&wholesize==0)
wholesize=size*1024;}});return wholesize;}
var mapdata={actions:{},config:{}};return view.extend({load:function(){var tasks=[L.resolveDefault(fs.stat('/lib/upgrade/platform.sh'),{}),fs.trimmed('/proc/sys/kernel/hostname'),fs.trimmed('/proc/mtd'),fs.trimmed('/proc/partitions'),fs.trimmed('/proc/mounts')];return Promise.all(tasks);},handleBackup:function(ev){var form=E('form',{method:'post',action:L.env.cgi_base+'/cgi-backup',enctype:'application/x-www-form-urlencoded'},E('input',{type:'hidden',name:'sessionid',value:rpc.getSessionID()}));ev.currentTarget.parentNode.appendChild(form);form.submit();form.parentNode.removeChild(form);},handleFirstboot:function(ev){if(!confirm(_('Do you really want to erase all settings?')))
return;ui.showModal(_('Erasing...'),[E('p',{'class':'spinning'},_('The system is erasing the configuration partition now and will reboot itself when finished.'))]);fs.exec('/sbin/firstboot',['-r','-y']);ui.awaitReconnect('192.168.1.1','openwrt.lan');},handleRestore:function(ev){return ui.uploadFile('/tmp/backup.tar.gz',ev.target).then(L.bind(function(btn,res){btn.firstChild.data=_('Checking archive…');return fs.exec('/bin/tar',['-tzf','/tmp/backup.tar.gz']);},this,ev.target)).then(L.bind(function(btn,res){if(res.code!=0){ui.addNotification(null,E('p',_('The uploaded backup archive is not readable')));return fs.remove('/tmp/backup.tar.gz');}
ui.showModal(_('Apply backup?'),[E('p',_('The uploaded backup archive appears to be valid and contains the files listed below. Press "Continue" to restore the backup and reboot, or "Cancel" to abort the operation.')),E('pre',{},[res.stdout]),E('div',{'class':'right'},[E('button',{'class':'btn','click':ui.createHandlerFn(this,function(ev){return fs.remove('/tmp/backup.tar.gz').finally(ui.hideModal);})},[_('Cancel')]),' ',E('button',{'class':'btn cbi-button-action important','click':ui.createHandlerFn(this,'handleRestoreConfirm',btn)},[_('Continue')])])]);},this,ev.target)).catch(function(e){ui.addNotification(null,E('p',e.message))}).finally(L.bind(function(btn,input){btn.firstChild.data=_('Upload archive...');},this,ev.target));},handleRestoreConfirm:function(btn,ev){return fs.exec('/sbin/sysupgrade',['--restore-backup','/tmp/backup.tar.gz']).then(L.bind(function(btn,res){if(res.code!=0){ui.addNotification(null,[E('p',_('The restore command failed with code %d').format(res.code)),res.stderr?E('pre',{},[res.stderr]):'']);L.raise('Error','Unpack failed');}
btn.firstChild.data=_('Rebooting…');return fs.exec('/sbin/reboot');},this,ev.target)).then(L.bind(function(res){if(res.code!=0){ui.addNotification(null,E('p',_('The reboot command failed with code %d').format(res.code)));L.raise('Error','Reboot failed');}
ui.showModal(_('Rebooting…'),[E('p',{'class':'spinning'},_('The system is rebooting now. If the restored configuration changed the current LAN IP address, you might need to reconnect manually.'))]);ui.awaitReconnect(window.location.host,'192.168.1.1','openwrt.lan');},this)).catch(function(e){ui.addNotification(null,E('p',e.message))}).finally(function(){btn.firstChild.data=_('Upload archive...')});},handleBlock:function(hostname,ev){var mtdblock=dom.parent(ev.target,'.cbi-section').querySelector('[data-name="mtdselect"] select');var mtdnumber=mtdblock.value;var mtdname=mtdblock.selectedOptions[0].text.replace(/([^a-zA-Z0-9]+)/g,'-');var form=E('form',{'method':'post','action':L.env.cgi_base+'/cgi-download','enctype':'application/x-www-form-urlencoded'},[E('input',{'type':'hidden','name':'sessionid','value':rpc.getSessionID()}),E('input',{'type':'hidden','name':'path','value':'/dev/mtdblock%d'.format(mtdnumber)}),E('input',{'type':'hidden','name':'filename','value':'%s.mtd%d.%s.bin'.format(hostname,mtdnumber,mtdname)})]);ev.currentTarget.parentNode.appendChild(form);form.submit();form.parentNode.removeChild(form);},handleSysupgrade:function(storage_size,has_rootfs_data,ev){return ui.uploadFile('/tmp/firmware.bin',ev.target.firstChild).then(L.bind(function(btn,reply){btn.firstChild.data=_('Checking image…');ui.showModal(_('Checking image…'),[E('span',{'class':'spinning'},_('Verifying the uploaded image file.'))]);return callSystemValidateFirmwareImage('/tmp/firmware.bin').then(function(res){return[reply,res];});},this,ev.target)).then(L.bind(function(btn,reply){return fs.exec('/sbin/sysupgrade',['--test','/tmp/firmware.bin']).then(function(res){reply.push(res);return reply;});},this,ev.target)).then(L.bind(function(btn,res){var opts={keep:[E('input',{type:'checkbox'}),false,'-n'],force:[E('input',{type:'checkbox'}),true,'--force'],skip_orig:[E('input',{type:'checkbox'}),true,'-u'],backup_pkgs:[E('input',{type:'checkbox'}),true,'-k'],},is_valid=res[1].valid,is_forceable=res[1].forceable,allow_backup=res[1].allow_backup,is_too_big=(storage_size>0&&res[0].size>storage_size),body=[];body.push(E('p',_("The flash image was uploaded. Below is the checksum and file size listed, compare them with the original file to ensure data integrity. Click 'Continue' below to start the flash procedure.")));body.push(E('ul',{},[res[0].size?E('li',{},'%s: %1024.2mB'.format(_('Size'),res[0].size)):'',res[0].checksum?E('li',{},'%s: %s'.format(_('MD5'),res[0].checksum)):'',res[0].sha256sum?E('li',{},'%s: %s'.format(_('SHA256'),res[0].sha256sum)):'']));body.push(E('p',{},E('label',{'class':'btn'},[opts.keep[0],' ',_('Keep settings and retain the current configuration')])));if(!is_valid||is_too_big) body.push(E('hr'));if(is_too_big) body.push(E('p',{'class':'alert-message'},[_('It appears that you are trying to flash an image that does not fit into the flash memory, please verify the image file!')]));if(!is_valid) body.push(E('p',{'class':'alert-message'},[res[2].stderr?res[2].stderr:'',res[2].stderr?E('br'):'',res[2].stderr?E('br'):'',_('The uploaded image file does not contain a supported format. Make sure that you choose the generic image format for your platform.')]));if(!allow_backup){body.push(E('p',{'class':'alert-message'},[_('The uploaded firmware does not allow keeping current configuration.')]));opts.keep[0].disabled=true;}else{opts.keep[0].checked=true;if(has_rootfs_data){body.push(E('p',{},E('label',{'class':'btn'},[opts.skip_orig[0],' ',_('Skip from backup files that are equal to those in /rom')])));} body.push(E('p',{},E('label',{'class':'btn'},[opts.backup_pkgs[0],' ',_('Include in backup a list of current installed packages at /etc/backup/installed_packages.txt')])));};var cntbtn=E('button',{'class':'btn cbi-button-action important','click':ui.createHandlerFn(this,'handleSysupgradeConfirm',btn,opts),},[_('Continue')]);if(res[2].code!=0){body.push(E('p',{'class':'alert-message danger'},E('label',{},[_('Image check failed:'),E('br'),E('br'),res[2].stderr])));};if((!is_valid||is_too_big||res[2].code!=0)&&is_forceable){body.push(E('p',{},E('label',{'class':'btn alert-message danger'},[opts.force[0],' ',_('Force upgrade'),E('br'),E('br'),_('Select \'Force upgrade\' to flash the image even if the image format check fails. Use only if you are sure that the firmware is correct and meant for your device!')])));cntbtn.disabled=true;};body.push(E('div',{'class':'right'},[E('button',{'class':'btn','click':ui.createHandlerFn(this,function(ev){return fs.remove('/tmp/firmware.bin').finally(ui.hideModal);})},[_('Cancel')]),' ',cntbtn]));opts.force[0].addEventListener('change',function(ev){cntbtn.disabled=!ev.target.checked;});opts.keep[0].addEventListener('change',function(ev){opts.skip_orig[0].disabled=!ev.target.checked;opts.backup_pkgs[0].disabled=!ev.target.checked;});ui.showModal(_('Flash image?'),body);},this,ev.target)).catch(function(e){ui.addNotification(null,E('p',e.message))}).finally(L.bind(function(btn){btn.firstChild.data=_('Flash image...');},this,ev.target));},handleSysupgradeConfirm:function(btn,opts,ev){btn.firstChild.data=_('Flashing…');ui.showModal(_('Flashing…'),[E('p',{'class':'spinning'},_('The system is flashing now.
DO NOT POWER OFF THE DEVICE!
Wait a few minutes before you try to reconnect. It might be necessary to renew the address of your computer to reach the device again, depending on your settings.'))]);var args=[];for(var key in opts) if(opts[key][0].checked==opts[key][1]) args.push(opts[key][2]);args.push('/tmp/firmware.bin');fs.exec('/sbin/sysupgrade',args);if(opts['keep'][0].checked) ui.awaitReconnect(window.location.host);else ui.awaitReconnect('192.168.1.1','openwrt.lan');},handleBackupList:function(ev){return fs.exec('/sbin/sysupgrade',['--list-backup']).then(function(res){if(res.code!=0){ui.addNotification(null,[E('p',_('The sysupgrade command failed with code %d').format(res.code)),res.stderr?E('pre',{},[res.stderr]):'']);L.raise('Error','Sysupgrade failed');} ui.showModal(_('Backup file list'),[E('p',_('Below is the determined list of files to backup. It consists of changed configuration files marked by opkg, essential base files and the user defined backup patterns.')),E('ul',{},(res.stdout||'').trim().split(/\n/).map(function(ln){return E('li',{},ln)})),E('div',{'class':'right'},[E('button',{'class':'btn','click':ui.hideModal},[_('Dismiss')])])],'cbi-modal');});},handleBackupSave:function(m,ev){return m.save(function(){return fs.write('/etc/sysupgrade.conf',mapdata.config.editlist.trim().replace(/\r\n/g,'\n')+'\n');}).then(function(){ui.addNotification(null,E('p',_('Contents have been saved.')),'info');}).catch(function(e){ui.addNotification(null,E('p',_('Unable to save contents: %s').format(e)));});},render:function(rpc_replies){var has_sysupgrade=(rpc_replies[0].type=='file'),hostname=rpc_replies[1],procmtd=rpc_replies[2],procpart=rpc_replies[3],procmounts=rpc_replies[4],has_rootfs_data=(procmtd.match(/"rootfs_data"/)!=null)||(procmounts.match("overlayfs:\/overlay \/ ")!=null),storage_size=findStorageSize(procmtd,procpart),m,s,o,ss;m=new form.JSONMap(mapdata,_('Flash operations'));m.tabbed=true;m.readonly=isReadonlyView;s=m.section(form.NamedSection,'actions',_('Actions'));o=s.option(form.SectionValue,'actions',form.NamedSection,'actions','actions',_('Backup'),_('Click "Generate archive" to download a tar archive of the current configuration files.'));ss=o.subsection;o=ss.option(form.Button,'dl_backup',_('Download backup'));o.inputstyle='action important';o.inputtitle=_('Generate archive');o.onclick=this.handleBackup;o=s.option(form.SectionValue,'actions',form.NamedSection,'actions','actions',_('Restore'),_('To restore configuration files, you can upload a previously generated backup archive here. To reset the firmware to its initial state, click "Perform reset" (only possible with squashfs images).'));ss=o.subsection;if(has_rootfs_data){o=ss.option(form.Button,'reset',_('Reset to defaults'));o.inputstyle='negative important';o.inputtitle=_('Perform reset');o.onclick=this.handleFirstboot;} o=ss.option(form.Button,'restore',_('Restore backup'),_('Custom files (certificates, scripts) may remain on the system. To prevent this, perform a factory-reset first.'));o.inputstyle='action important';o.inputtitle=_('Upload archive...');o.onclick=L.bind(this.handleRestore,this);var mtdblocks=[];procmtd.split(/\n/).forEach(function(ln){var match=ln.match(/^mtd(\d+): .+ "(.+?)"$/);if(match) mtdblocks.push(match[1],match[2]);});if(mtdblocks.length){o=s.option(form.SectionValue,'actions',form.NamedSection,'actions','actions',_('Save mtdblock contents'),_('Click "Save mtdblock" to download specified mtdblock file. (NOTE: THIS FEATURE IS FOR PROFESSIONALS! )'));ss=o.subsection;o=ss.option(form.ListValue,'mtdselect',_('Choose mtdblock'));for(var i=0;i
/dev/sda1)'));o.modalonly=true;o.depends({uuid:'',label:''});for(var i=0;i'+'mkdir -p /tmp/introot\n'+'mkdir -p /tmp/extroot\n'+'mount --bind / /tmp/introot\n'+'mount /dev/sda1 /tmp/extroot\n'+'tar -C /tmp/introot -cvf - . | tar -C /tmp/extroot -xf -\n'+'umount /tmp/introot\n'+'umount /tmp/extroot\n'+'';o=s.taboption('advanced',form.ListValue,'fstype',_('Filesystem'));o.textvalue=function(section_id){var dev=this.section.devices[section_id],text=this.cfgvalue(section_id)||'auto';if(dev&&dev.type&&dev.type!=text) text+=' (%s)'.format(dev.type);return text;};o.value('','auto');for(var i=0;i
/dev/sda1)'));o.modalonly=true;o.depends({uuid:'',label:''});for(var i=0;i${s}
`);x.querySelectorAll('br').forEach((br)=>{x.replaceChild(document.createTextNode('\n'),br);});return(x.textContent??x.innerText??'').replace(/([ \t]*\n)+/g,'\n');},titleFn(attr,...args){let s=null;if(typeof(this[attr])=='function')
s=this[attr](...args);else if(typeof(this[attr])=='string')
s=args.length?this[attr].format(...args):this[attr];if(s!=null)
s=this.stripTags(String(s)).trim();if(s==null||s=='')
return null;return s;}});const CBIMap=CBIAbstractElement.extend({__init__(config,...args){this.super('__init__',args);uci.load('luci');this.config=config;this.parsechain=[config];this.data=uci;},findElements(...args){let q=null;if(args.length==1)
q=args[0];else if(args.length==2)
q='[%s="%s"]'.format(args[0],args[1]);else
L.error('InternalError','Expecting one or two arguments to findElements()');return this.root.querySelectorAll(q);},findElement(...args){const res=this.findElements(...args);return res.length?res[0]:null;},chain(config){if(this.parsechain.indexOf(config)==-1)
this.parsechain.push(config);},section(cbiClass,...args){if(!CBIAbstractSection.isSubclass(cbiClass))
L.error('TypeError','Class must be a descendent of CBIAbstractSection');const obj=cbiClass.instantiate([this,...args]);this.append(obj);return obj;},load(){const doCheckACL=(!(this instanceof CBIJSONMap)&&this.readonly==null);const loadTasks=[doCheckACL?callSessionAccess('uci',this.config,'write'):true];const configs=this.parsechain??[this.config];loadTasks.push(...configs.map(L.bind((config,i)=>{return i?L.resolveDefault(this.data.load(config)):this.data.load(config);},this)));return Promise.all(loadTasks).then(L.bind((res)=>{if(res[0]===false)
this.readonly=true;return this.loadChildren();},this));},parse(){const tasks=[];if(Array.isArray(this.children))
for(let i=0;ikmod-bonding')+'':'')+ (!L.hasSystemFeature('vrf')&&isNew?''+ _('For VRF, install %s').format('
kmod-vrf')+'':''));o.readonly=!isNew;o.value('',_('Network device'));if(L.hasSystemFeature('bonding')){o.value('bonding',_('Bonding/Aggregation device'));} o.value('bridge',_('Bridge device'));o.value('8021q',_('VLAN (802.1q)'));o.value('8021ad',_('VLAN (802.1ad)'));o.value('macvlan',_('MAC VLAN'));o.value('veth',_('Virtual Ethernet'));if(L.hasSystemFeature('vrf')&&L.hasSystemFeature('netifd_vrf')){o.value('vrf',_('VRF device'));} o.validate=function(section_id,value){if(value=='bonding'||value=='bridge'||value=='veth'||value=='vrf') updatePlaceholders(this.section.getOption('name_complex'),section_id);return true;};o=this.replaceOption(s,'devgeneral',widgets.DeviceSelect,'name_simple',_('Existing device'));o.readonly=!isNew;o.rmempty=false;o.noaliases=true;o.default=(dev?dev.getName():'');o.ucioption='name';o.filter=function(section_id,value){var dev=network.instantiateDevice(value);return!deviceSectionExists(section_id,value)&&(dev.getType()!='wifi'||dev.isUp());};o.validate=function(section_id,value){updatePlaceholders(this,section_id);return deviceSectionExists(section_id,value)?_('A configuration for the device "%s" already exists').format(value):true;};o.onchange=function(ev,section_id,values){updatePlaceholders(this,section_id);};o.depends('type','');o=this.replaceOption(s,'devgeneral',widgets.DeviceSelect,'ifname_single',_('Base device'));o.readonly=!isNew;o.rmempty=false;o.noaliases=true;o.default=(dev?dev.getName():'').match(/^.+\.\d+$/)?dev.getName().replace(/\.\d+$/,''):'';o.ucioption='ifname';o.filter=function(section_id,value){var dev=network.instantiateDevice(value);return(dev.getType()!='wifi'||dev.isUp());};o.validate=function(section_id,value){updatePlaceholders(this,section_id);if(isNew){var type=this.section.formvalue(section_id,'type'),name=this.section.getUIElement(section_id,'name_complex');if(type=='macvlan'&&value&&name&&!name.isChanged()){var i=0;while(deviceSectionExists(section_id,'%smac%d'.format(value,i))) i++;name.setValue('%smac%d'.format(value,i));name.triggerValidation();}} return true;};o.onchange=function(ev,section_id,values){updatePlaceholders(this,section_id);};o.depends('type','8021q');o.depends('type','8021ad');o.depends('type','macvlan');o=this.replaceOption(s,'devgeneral',form.Value,'vid',_('VLAN ID'));o.readonly=!isNew;o.datatype='range(1, 4094)';o.rmempty=false;o.default=(dev?dev.getName():'').match(/^.+\.\d+$/)?dev.getName().replace(/^.+\./,''):'';o.validate=function(section_id,value){var base=this.section.formvalue(section_id,'ifname_single'),vid=this.section.formvalue(section_id,'vid'),name=this.section.getUIElement(section_id,'name_complex');if(base&&vid&&name&&!name.isChanged()&&isNew){name.setValue('%s.%d'.format(base,vid));name.triggerValidation();} return true;};o.depends('type','8021q');o.depends('type','8021ad');o=this.replaceOption(s,'devgeneral',form.ListValue,'mode',_('Mode'));o.value('vepa',_('VEPA (Virtual Ethernet Port Aggregator)','MACVLAN mode'));o.value('private',_('Private (Prevent communication between MAC VLANs)','MACVLAN mode'));o.value('bridge',_('Bridge (Support direct communication between MAC VLANs)','MACVLAN mode'));o.value('passthru',_('Pass-through (Mirror physical device to single MAC VLAN)','MACVLAN mode'));o.depends('type','macvlan');o=this.replaceOption(s,'devgeneral',form.Value,'name_complex',_('Device name'));o.rmempty=false;o.datatype='maxlength(15)';o.readonly=!isNew;o.ucioption='name';o.validate=function(section_id,value){var dev=network.instantiateDevice(value);if(deviceSectionExists(section_id,value)||(isNew&&(dev.dev||{}).idx)) return _('The device name "%s" is already taken').format(value);return true;};o.depends({type:'','!reverse':true});o=this.replaceOption(s,'devadvanced',form.DynamicList,'ingress_qos_mapping',_('Ingress QoS mapping'),_('Defines a mapping of VLAN header priority to the Linux internal packet priority on incoming frames'));o.rmempty=true;o.validate=validateQoSMap;o.depends('type','8021q');o.depends('type','8021ad');o=this.replaceOption(s,'devadvanced',form.DynamicList,'egress_qos_mapping',_('Egress QoS mapping'),_('Defines a mapping of Linux internal packet priority to VLAN header priority but for outgoing frames'));o.rmempty=true;o.validate=validateQoSMap;o.depends('type','8021q');o.depends('type','8021ad');o=this.replaceOption(s,'devgeneral',widgets.DeviceSelect,'ifname_multi-bond',_('Aggregation ports'));o.size=10;o.rmempty=true;o.multiple=true;o.noaliases=true;o.nobridges=true;o.ucioption='ports';o.default=L.toArray(dev?dev.getPorts():null).filter(function(p){return p.getType()!='wifi'}).map(function(p){return p.getName()});o.filter=function(section_id,device_name){var bridge_name=uci.get('network',section_id,'name'),choice_dev=network.instantiateDevice(device_name),parent_dev=choice_dev.getParent();if(choice_dev.getType()=='wifi'){var ifnames=L.toArray(uci.get('network',section_id,'ports'));for(var i=0;i
mii-tool')+'':null);o.default='';o.value('arp',_('ARP link monitoring'));o.value('mii',_('MII link monitoring'));o.cfgvalue=function(){var val=form.ListValue.prototype.cfgvalue.apply(this,arguments);switch(val||''){case'arp':case'1':return'arp';case'mii':case'2':return'mii';default:return'mii';}};o.depends('type','bonding');o=this.replaceOption(s,'devadvanced',form.Value,'monitor_interval',_('Monitor Interval'));o.description=_('Specifies the link monitoring frequency in milliseconds');o.placeholder='100';o.datatype='uinteger';o.depends('type','bonding');o=this.replaceOption(s,'devadvanced',form.DynamicList,'arp_target',_('ARP monitor target IP address'));o.datatype='ipaddr';o.depends({'type':'bonding','monitor_mode':'arp'});o=this.replaceOption(s,'devgeneral',form.Flag,'arp_all_targets',_('All ARP Targets'),_('All ARP targets must be reachable to consider the link valid'));o.default=o.disabled;o.depends({'type':'bonding','monitor_mode':'arp'});o=this.replaceOption(s,'devadvanced',form.ListValue,'arp_validate',_('ARP validation policy'));o.default='';o.value('none',_('None'));o.value('active',_('Active'));o.value('backup',_('Backup'));o.value('all',_('All'));o.value('filter',_('Filter'));o.value('filter_active',_('Filter active'));o.value('filter_backup',_('Filter backup'));o.cfgvalue=function(){var val=form.ListValue.prototype.cfgvalue.apply(this,arguments);switch(val||''){case'none':case'0':return'none';case'active':case'1':return'active';case'backup':case'2':return'backup';case'all':case'3':return'all';case'filter':case'4':return'filter';case'filter_active':case'5':return'filter_active';case'filter_backup':case'6':return'filter_backup';default:return'none';}};o.depends({'type':'bonding','policy':'balance-rr','monitor_mode':'arp'});o.depends({'type':'bonding','policy':'active-backup','monitor_mode':'arp'});o.depends({'type':'bonding','policy':'balance-xor','monitor_mode':'arp'});o.depends({'type':'bonding','policy':'broadcast','monitor_mode':'arp'});o=this.replaceOption(s,'devadvanced',form.Flag,'use_carrier',_('Use Carrier'),_('Use carrier status instead of MII result'));o.default=o.disabled;o.depends({'type':'bonding','monitor_mode':'mii'});o=this.replaceOption(s,'devadvanced',form.Value,'updelay',_('Monitor link-up delay'));o.description=_('Delay before enabling port after MII link up event (msec)');o.placeholder='0';o.datatype='uinteger';o.depends({'type':'bonding','monitor_mode':'mii'});o=this.replaceOption(s,'devadvanced',form.Value,'downdelay',_('Monitor link-down delay'));o.description=_('Delay before enabling port after MII link down event (msec)');o.placeholder='0';o.datatype='uinteger';o.depends({'type':'bonding','monitor_mode':'mii'});o=this.replaceOption(s,'devgeneral',widgets.DeviceSelect,'ifname_multi-bridge',dev?.getType()=='bridge'?_('Bridge ports'):_('Ports'));o.size=10;o.rmempty=true;o.multiple=true;o.noaliases=true;o.nobridges=true;o.ucioption='ports';o.default=L.toArray(dev?dev.getPorts():null).filter(function(p){return p.getType()!='wifi'}).map(function(p){return p.getName()});o.filter=function(section_id,device_name){var bridge_name=uci.get('network',section_id,'name'),choice_dev=network.instantiateDevice(device_name),parent_dev=choice_dev.getParent();if(choice_dev.getType()=='wifi'){var ifnames=L.toArray(uci.get('network',section_id,'ports'));for(var i=0;i+' "'+_('Custom Interface')+': \"{{value}}\"")
'+''+''+''});return widget.render();},});var CBIUserSelect=form.ListValue.extend({__name__:'CBI.UserSelect',load:function(section_id){return getUsers().then(L.bind(function(users){delete this.keylist;delete this.vallist;for(var i=0;i