[feature] OpenWrt: Made IEEE802.11w configurable #192

This patch is tested on these.
- OpenWrt: latest (4b587f25614f3f7215360f96807ce760fa4ef3aa)
- hardware: TP-Link Archer C6 v2

Closes #192

Signed-off-by: Masashi Honma <masashi.honma@gmail.com>

Author: masap

netjsonconfig/backends/openwrt/converters/wireless.py

@@ -271,6 +271,9 @@ def __netjson_encryption(self, wifi):
             if key.startswith('s:'):
                 key = key[2:]
             settings['key'] = key
+        # Management Frame Protection
+        if 'ieee80211w' in wifi:
+            settings['ieee80211w'] = wifi.pop('ieee80211w')
         # create NetJSON encryption object
         wifi['encryption'] = self.__netjson_encryption_typecast(settings)
 

netjsonconfig/schema.py

@@ -443,11 +443,23 @@
                 }
             }
         },
+        "encryption_mfp_property": {
+            "properties": {
+                "ieee80211w": {
+                    "type": "string",
+                    "title": "management frame protection",
+                    "enum": ["0", "1", "2"],
+                    "options": {"enum_titles": ["disabled", "optional", "required"]},
+                    "propertyOrder": 4,
+                }
+            }
+        },
         "encryption_wpa_personal": {
             "title": "WPA2/WPA Personal",
             "allOf": [
                 {"$ref": "#/definitions/encryption_base_settings"},
                 {"$ref": "#/definitions/encryption_cipher_property"},
+                {"$ref": "#/definitions/encryption_mfp_property"},
                 {
                     "properties": {
                         "protocol": {
@@ -495,6 +507,7 @@
             "allOf": [
                 {"$ref": "#/definitions/encryption_base_settings"},
                 {"$ref": "#/definitions/encryption_cipher_property"},
+                {"$ref": "#/definitions/encryption_mfp_property"},
                 {"$ref": "#/definitions/encryption_wpa_enterprise_base_settings"},
                 {
                     "required": ["server"],
@@ -536,6 +549,7 @@
             "additionalProperties": True,
             "allOf": [
                 {"$ref": "#/definitions/encryption_cipher_property"},
+                {"$ref": "#/definitions/encryption_mfp_property"},
                 {"$ref": "#/definitions/encryption_wpa_enterprise_base_settings"},
                 {
                     "properties": {

tests/openwrt/test_encryption.py

@@ -20,6 +20,7 @@ class TestEncryption(unittest.TestCase, _TabsMixin):
                         "protocol": "wpa2_personal",
                         "cipher": "tkip+ccmp",
                         "key": "passphrase012345",
+                        "ieee80211w": "2",
                     },
                 },
             }
@@ -36,6 +37,7 @@ class TestEncryption(unittest.TestCase, _TabsMixin):
 config wifi-iface 'wifi_wlan0'
     option device 'radio0'
     option encryption 'psk2+tkip+ccmp'
+    option ieee80211w '2'
     option ifname 'wlan0'
     option key 'passphrase012345'
     option mode 'ap'
@@ -65,6 +67,7 @@ def test_parse_wpa2_personal(self):
                         "protocol": "wpa_personal_mixed",
                         "cipher": "ccmp",
                         "key": "passphrase012345",
+                        "ieee80211w": "0",
                     },
                 },
             }
@@ -81,6 +84,7 @@ def test_parse_wpa2_personal(self):
 config wifi-iface 'wifi_wlan0'
     option device 'radio0'
     option encryption 'psk-mixed+ccmp'
+    option ieee80211w '0'
     option ifname 'wlan0'
     option key 'passphrase012345'
     option mode 'ap'
@@ -309,6 +313,7 @@ def test_parse_wpa_enterprise_ap(self):
                         "eap_type": "tls",
                         "identity": "test-identity",
                         "password": "test-password",
+                        "ieee80211w": "1",
                     },
                 },
             }
@@ -328,6 +333,7 @@ def test_parse_wpa_enterprise_ap(self):
     option eap_type 'tls'
     option encryption 'wpa2'
     option identity 'test-identity'
+    option ieee80211w '1'
     option ifname 'wlan0'
     option mode 'sta'
     option network 'wlan0'