/* 00comp_ipnet_8021x.cdf - IPNet 802.1X Supplicant configuration file */

/*
 * Copyright (c) 2007 Wind River Systems, Inc.
 *
 * The right to copy, distribute or otherwise make use of this software
 * may be licensed only pursuant to the terms of an applicable Wind River
 * license agreement. No license to Wind River intellectual property rights
 * is granted herein. All rights not licensed by Wind River are reserved
 * by Wind River.
 */

/*
modification history
--------------------
01c,06jul10,mry WIND00141200, NetCfg restructure
01b,04mar10,hfc  fix for WIND00184598
01a,07aug07,mry  created.
*/
#ifdef _WRS_CONFIG_COMPONENT_IP8021X
Folder FOLDER_IP8021X_SUPP {
    NAME        802.1X Supplicant Components
    SYNOPSIS    802.1X Supplicant Components
    CHILDREN    INCLUDE_IP8021X_SUPPLICANT \
                INCLUDE_DOT1X_SUPP_LEGACY_API \
                INCLUDE_IP8021X_SUPPLICANT_MIB
    _CHILDREN	FOLDER_NET_L5_APPLICATIONS
}

Component INCLUDE_IP8021X_SUPPLICANT {
    NAME            802.1X Supplicant
    SYNOPSIS        Enables 802.1X Supplicant functionality
    MODULES         ip8021x.o
    LINK_SYMS       ip8021x_cmd_8021x
    CONFIGLETTES    ip8021x_config.c
    CFG_PARAMS      IPSUPP_IFNAM \
					IPSUPP_SSID \
					IPSUPP_PSK \
					IPSUPP_AUTHTYPE \
					IPSUPP_ENCRTYPE \
					IPSUPP_ENFORCE_RFC4017 \
					IPSUPP_HELDPERIOD \
					IPSUPP_AUTHPERIOD \
					IPSUPP_STARTPERIOD \
					IPSUPP_MAXSTART \
					IP8021X_LOG_LEVEL
}

Component INCLUDE_DOT1X_SUPP_LEGACY_API {
    NAME            802.1X Supplicant Legacy API
    SYNOPSIS        Enables 802.1X Supplicant Legacy API support
    REQUIRES        INCLUDE_IP8021X_SUPPLICANT
    MODULES         ip8021x_supp_legacy_api.o
    LINK_SYMS       dot1xLegacyApiList
}

Component INCLUDE_IP8021X_SUPPLICANT_MIB {
    NAME            802.1X Supplicant MIB Component
    SYNOPSIS        802.1X Supplicant MIB Component
    REQUIRES        INCLUDE_IP8021X_SUPPLICANT \
                    INCLUDE_WINDMANAGE_SNMP_CORE \
                    INCLUDE_MIB_CONFIG
    INIT_RTN        dot1xMibAdd();
    _INIT_ORDER     usrNetAppInit
    MODULES         ip8021x_vxmib.o \
					snmpDot1x.o
    LINK_SYMS       ip8021x_vxmib_entry_get
}

/******************** Configuration Parameters *****************************/

Parameter IPSUPP_IFNAM {
    NAME        Interface Name
    SYNOPSIS    The Interface name to which the IP supplicant is bound.
    TYPE        char *
    DEFAULT     "wls0"
}

Parameter IPSUPP_SSID {
    NAME        Peer's SSID 
    SYNOPSIS    The Service Set IDentifier of the peer to which the \
				IP supplicant is authenticating. \
                  NOTE: Only Required for PSK mode. max 32 characters. 
    TYPE        char *
    DEFAULT     "wind"
}

Parameter IPSUPP_PSK {
    NAME        Pre-Shared Key 
    SYNOPSIS    The Pre-Shared Key either as a passphrase (8-63 characters) \
				or as a hex key (32 octets exactly)                       \
                e.g.: Passphrase: "Wind_River_Wireless_Security_6.9"      \
                      Hex Key: "0x00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
    TYPE        char *
    DEFAULT     "Wind_River_Wireless_Security_6.9"
}

Parameter IPSUPP_AUTHTYPE {
    NAME        Authentication Type 
    SYNOPSIS    Authentication Type used by the supplicant. \
				  Valid values: "wired", "wps", "wpa", "wpa-psk", "wpa2", "wpa2-psk"
				Note that when "wps" is selected, this is a WPS exclusive mode and the 
				supplicant will not handle 8021x exchanges until a valid WPS exchange
				is completed. This is a way to prevent the supplicant from negotiating 
				with a non WPS enabled device (i.e. an added security measure). 
				WPS mode can still be supported when the auth type is set to any of the
				wireless modes ("wpa", "wpa-psk", "wpa2", "wpa2-psk"), but it is not
				exclusive meaning if an association is made to a non WPS AP that supports
				the configured auth/encr types, a successful session may be established 
				even if WPS had been enabled.
    TYPE        char *
    DEFAULT     "wpa-psk"
}

Parameter IPSUPP_ENCRTYPE {
    NAME        Encryption Type 
    SYNOPSIS    Encryption Type used by the supplicant. \
				  Valid values: "tkip", "ccmp". \
				  NOTE: Irrelevant if AUTHTYPE == "wired" or "wps"
				  
    TYPE        char *
    DEFAULT     "tkip"
}

Parameter IPSUPP_ENFORCE_RFC4017 {
    NAME        Enforce RFC 4017 
    SYNOPSIS    If set, disables support for weak outer EAP methods \
                not suitable for wireless authenitcation as per RFC. \
				  Valid values: 0, 1. 				  
    TYPE        char *
    DEFAULT     "1"
}

Parameter IPSUPP_HELDPERIOD {
    NAME        dot1xSuppHeldPeriod
    SYNOPSIS    The value, in seconds, of the heldPeriod \
				constant currently in use by the Supplicant \
				PAE state machine  (IEEE Std 802.1X-2001, 8.5.8.1.2). 
    TYPE        char *
    DEFAULT     "60"
}

Parameter IPSUPP_AUTHPERIOD {
    NAME        dot1xSuppAuthPeriod
    SYNOPSIS    The value, in seconds, of the authPeriod \
				constant currently in use by the Supplicant \
				PAE state machine (IEEE Std 802.1X-2001, 8.5.8.1.2). 
    TYPE        char *
    DEFAULT     "30"
}

Parameter IPSUPP_STARTPERIOD {
    NAME        dot1xSuppStartPeriod
    SYNOPSIS    The value, in seconds, of the startPeriod \
				constant currently in use by the Supplicant \
				PAE state machine  (IEEE Std 802.1X-2001, 8.5.8.1.2). 
    TYPE        char *
    DEFAULT     "30"
}

Parameter IPSUPP_MAXSTART {
    NAME        dot1xSuppMaxStart
    SYNOPSIS    The value of the maxStart constant currently in use by \
				the Supplicant PAE state machine  (IEEE Std 802.1X-2001, 8.5.8.1.2). 
    TYPE        char *
    DEFAULT     "3"
}

Parameter IP8021X_LOG_LEVEL {
    NAME        IP8021X Syslog Level
    SYNOPSIS    Syslog Level for the IP8021X module. \
                One of: IPCOM_LOG_EMERG, IPCOM_LOG_CRIT, IPCOM_LOG_ERR, \
                IPCOM_LOG_WARNING, IPCOM_LOG_NOTICE, IPCOM_LOG_INFO, \
                IPCOM_LOG_DEBUG, IPCOM_LOG_DEBUG2
    TYPE        int
    DEFAULT     IPCOM_LOG_INFO
}
#endif