i2400m.h 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557
  1. /*
  2. * Intel Wireless WiMax Connection 2400m
  3. * Host-Device protocol interface definitions
  4. *
  5. *
  6. * Copyright (C) 2007-2008 Intel Corporation. All rights reserved.
  7. *
  8. * Redistribution and use in source and binary forms, with or without
  9. * modification, are permitted provided that the following conditions
  10. * are met:
  11. *
  12. * * Redistributions of source code must retain the above copyright
  13. * notice, this list of conditions and the following disclaimer.
  14. * * Redistributions in binary form must reproduce the above copyright
  15. * notice, this list of conditions and the following disclaimer in
  16. * the documentation and/or other materials provided with the
  17. * distribution.
  18. * * Neither the name of Intel Corporation nor the names of its
  19. * contributors may be used to endorse or promote products derived
  20. * from this software without specific prior written permission.
  21. *
  22. * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
  23. * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
  24. * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
  25. * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
  26. * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  27. * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
  28. * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
  29. * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
  30. * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  31. * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  32. * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  33. *
  34. *
  35. * Intel Corporation <linux-wimax@intel.com>
  36. * Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com>
  37. * - Initial implementation
  38. *
  39. *
  40. * This header defines the data structures and constants used to
  41. * communicate with the device.
  42. *
  43. * BOOTMODE/BOOTROM/FIRMWARE UPLOAD PROTOCOL
  44. *
  45. * The firmware upload protocol is quite simple and only requires a
  46. * handful of commands. See drivers/net/wimax/i2400m/fw.c for more
  47. * details.
  48. *
  49. * The BCF data structure is for the firmware file header.
  50. *
  51. *
  52. * THE DATA / CONTROL PROTOCOL
  53. *
  54. * This is the normal protocol spoken with the device once the
  55. * firmware is uploaded. It transports data payloads and control
  56. * messages back and forth.
  57. *
  58. * It consists 'messages' that pack one or more payloads each. The
  59. * format is described in detail in drivers/net/wimax/i2400m/rx.c and
  60. * tx.c.
  61. *
  62. *
  63. * THE L3L4 PROTOCOL
  64. *
  65. * The term L3L4 refers to Layer 3 (the device), Layer 4 (the
  66. * driver/host software).
  67. *
  68. * This is the control protocol used by the host to control the i2400m
  69. * device (scan, connect, disconnect...). This is sent to / received
  70. * as control frames. These frames consist of a header and zero or
  71. * more TLVs with information. We call each control frame a "message".
  72. *
  73. * Each message is composed of:
  74. *
  75. * HEADER
  76. * [TLV0 + PAYLOAD0]
  77. * [TLV1 + PAYLOAD1]
  78. * [...]
  79. * [TLVN + PAYLOADN]
  80. *
  81. * The HEADER is defined by 'struct i2400m_l3l4_hdr'. The payloads are
  82. * defined by a TLV structure (Type Length Value) which is a 'header'
  83. * (struct i2400m_tlv_hdr) and then the payload.
  84. *
  85. * All integers are represented as Little Endian.
  86. *
  87. * - REQUESTS AND EVENTS
  88. *
  89. * The requests can be clasified as follows:
  90. *
  91. * COMMAND: implies a request from the host to the device requesting
  92. * an action being performed. The device will reply with a
  93. * message (with the same type as the command), status and
  94. * no (TLV) payload. Execution of a command might cause
  95. * events (of different type) to be sent later on as
  96. * device's state changes.
  97. *
  98. * GET/SET: similar to COMMAND, but will not cause other
  99. * EVENTs. The reply, in the case of GET, will contain
  100. * TLVs with the requested information.
  101. *
  102. * EVENT: asynchronous messages sent from the device, maybe as a
  103. * consequence of previous COMMANDs but disassociated from
  104. * them.
  105. *
  106. * Only one request might be pending at the same time (ie: don't
  107. * parallelize nor post another GET request before the previous
  108. * COMMAND has been acknowledged with it's corresponding reply by the
  109. * device).
  110. *
  111. * The different requests and their formats are described below:
  112. *
  113. * I2400M_MT_* Message types
  114. * I2400M_MS_* Message status (for replies, events)
  115. * i2400m_tlv_* TLVs
  116. *
  117. * data types are named 'struct i2400m_msg_OPNAME', OPNAME matching the
  118. * operation.
  119. */
  120. #ifndef __LINUX__WIMAX__I2400M_H__
  121. #define __LINUX__WIMAX__I2400M_H__
  122. #include <linux/types.h>
  123. /*
  124. * Host Device Interface (HDI) common to all busses
  125. */
  126. /* Boot-mode (firmware upload mode) commands */
  127. /* Header for the firmware file */
  128. struct i2400m_bcf_hdr {
  129. __le32 module_type;
  130. __le32 header_len;
  131. __le32 header_version;
  132. __le32 module_id;
  133. __le32 module_vendor;
  134. __le32 date; /* BCD YYYMMDD */
  135. __le32 size;
  136. __le32 key_size; /* in dwords */
  137. __le32 modulus_size; /* in dwords */
  138. __le32 exponent_size; /* in dwords */
  139. __u8 reserved[88];
  140. } __attribute__ ((packed));
  141. /* Boot mode opcodes */
  142. enum i2400m_brh_opcode {
  143. I2400M_BRH_READ = 1,
  144. I2400M_BRH_WRITE = 2,
  145. I2400M_BRH_JUMP = 3,
  146. I2400M_BRH_SIGNED_JUMP = 8,
  147. I2400M_BRH_HASH_PAYLOAD_ONLY = 9,
  148. };
  149. /* Boot mode command masks and stuff */
  150. enum i2400m_brh {
  151. I2400M_BRH_SIGNATURE = 0xcbbc0000,
  152. I2400M_BRH_SIGNATURE_MASK = 0xffff0000,
  153. I2400M_BRH_SIGNATURE_SHIFT = 16,
  154. I2400M_BRH_OPCODE_MASK = 0x0000000f,
  155. I2400M_BRH_RESPONSE_MASK = 0x000000f0,
  156. I2400M_BRH_RESPONSE_SHIFT = 4,
  157. I2400M_BRH_DIRECT_ACCESS = 0x00000400,
  158. I2400M_BRH_RESPONSE_REQUIRED = 0x00000200,
  159. I2400M_BRH_USE_CHECKSUM = 0x00000100,
  160. };
  161. /* Constants for bcf->module_id */
  162. enum i2400m_bcf_mod_id {
  163. /* Firmware file carries its own pokes -- pokes are a set of
  164. * magical values that have to be written in certain memory
  165. * addresses to get the device up and ready for firmware
  166. * download when it is in non-signed boot mode. */
  167. I2400M_BCF_MOD_ID_POKES = 0x000000001,
  168. };
  169. /**
  170. * i2400m_bootrom_header - Header for a boot-mode command
  171. *
  172. * @cmd: the above command descriptor
  173. * @target_addr: where on the device memory should the action be performed.
  174. * @data_size: for read/write, amount of data to be read/written
  175. * @block_checksum: checksum value (if applicable)
  176. * @payload: the beginning of data attached to this header
  177. */
  178. struct i2400m_bootrom_header {
  179. __le32 command; /* Compose with enum i2400_brh */
  180. __le32 target_addr;
  181. __le32 data_size;
  182. __le32 block_checksum;
  183. char payload[0];
  184. } __attribute__ ((packed));
  185. /*
  186. * Data / control protocol
  187. */
  188. /* Packet types for the host-device interface */
  189. enum i2400m_pt {
  190. I2400M_PT_DATA = 0,
  191. I2400M_PT_CTRL,
  192. I2400M_PT_TRACE, /* For device debug */
  193. I2400M_PT_RESET_WARM, /* device reset */
  194. I2400M_PT_RESET_COLD, /* USB[transport] reset, like reconnect */
  195. I2400M_PT_EDATA, /* Extended RX data */
  196. I2400M_PT_ILLEGAL
  197. };
  198. /*
  199. * Payload for a data packet
  200. *
  201. * This is prefixed to each and every outgoing DATA type.
  202. */
  203. struct i2400m_pl_data_hdr {
  204. __le32 reserved;
  205. } __attribute__((packed));
  206. /*
  207. * Payload for an extended data packet
  208. *
  209. * New in v1.4
  210. *
  211. * @cs: the type of data in the packet, as defined per (802.16e
  212. * T11.13.19.1). Currently only 2 (IPv4 packet) supported.
  213. *
  214. * This is prefixed to each and every INCOMING DATA packet.
  215. */
  216. struct i2400m_pl_edata_hdr {
  217. __le32 reorder;
  218. __u8 cs;
  219. __u8 reserved[11];
  220. } __attribute__((packed));
  221. enum i2400m_cs {
  222. I2400M_CS_IPV4_0 = 0,
  223. I2400M_CS_IPV4 = 2,
  224. };
  225. enum i2400m_reorder {
  226. I2400M_REORDER_NEEDED = 0x01,
  227. };
  228. /* Misc constants */
  229. enum {
  230. I2400M_PL_PAD = 16, /* Payload data size alignment */
  231. I2400M_PL_SIZE_MAX = 0x3EFF,
  232. I2400M_MAX_PLS_IN_MSG = 60,
  233. /* protocol barkers: sync sequences; for notifications they
  234. * are sent in groups of four. */
  235. I2400M_H2D_PREVIEW_BARKER = 0xcafe900d,
  236. I2400M_COLD_RESET_BARKER = 0xc01dc01d,
  237. I2400M_WARM_RESET_BARKER = 0x50f750f7,
  238. I2400M_NBOOT_BARKER = 0xdeadbeef,
  239. I2400M_SBOOT_BARKER = 0x0ff1c1a1,
  240. I2400M_ACK_BARKER = 0xfeedbabe,
  241. I2400M_D2H_MSG_BARKER = 0xbeefbabe,
  242. };
  243. /*
  244. * Hardware payload descriptor
  245. *
  246. * Bitfields encoded in a struct to enforce typing semantics.
  247. *
  248. * Look in rx.c and tx.c for a full description of the format.
  249. */
  250. struct i2400m_pld {
  251. __le32 val;
  252. } __attribute__ ((packed));
  253. #define I2400M_PLD_SIZE_MASK 0x00003fff
  254. #define I2400M_PLD_TYPE_SHIFT 16
  255. #define I2400M_PLD_TYPE_MASK 0x000f0000
  256. /*
  257. * Header for a TX message or RX message
  258. *
  259. * @barker: preamble
  260. * @size: used for management of the FIFO queue buffer; before
  261. * sending, this is converted to be a real preamble. This
  262. * indicates the real size of the TX message that starts at this
  263. * point. If the highest bit is set, then this message is to be
  264. * skipped.
  265. * @sequence: sequence number of this message
  266. * @offset: offset where the message itself starts -- see the comments
  267. * in the file header about message header and payload descriptor
  268. * alignment.
  269. * @num_pls: number of payloads in this message
  270. * @padding: amount of padding bytes at the end of the message to make
  271. * it be of block-size aligned
  272. *
  273. * Look in rx.c and tx.c for a full description of the format.
  274. */
  275. struct i2400m_msg_hdr {
  276. union {
  277. __le32 barker;
  278. __u32 size; /* same size type as barker!! */
  279. };
  280. union {
  281. __le32 sequence;
  282. __u32 offset; /* same size type as barker!! */
  283. };
  284. __le16 num_pls;
  285. __le16 rsv1;
  286. __le16 padding;
  287. __le16 rsv2;
  288. struct i2400m_pld pld[0];
  289. } __attribute__ ((packed));
  290. /*
  291. * L3/L4 control protocol
  292. */
  293. enum {
  294. /* Interface version */
  295. I2400M_L3L4_VERSION = 0x0100,
  296. };
  297. /* Message types */
  298. enum i2400m_mt {
  299. I2400M_MT_RESERVED = 0x0000,
  300. I2400M_MT_INVALID = 0xffff,
  301. I2400M_MT_REPORT_MASK = 0x8000,
  302. I2400M_MT_GET_SCAN_RESULT = 0x4202,
  303. I2400M_MT_SET_SCAN_PARAM = 0x4402,
  304. I2400M_MT_CMD_RF_CONTROL = 0x4602,
  305. I2400M_MT_CMD_SCAN = 0x4603,
  306. I2400M_MT_CMD_CONNECT = 0x4604,
  307. I2400M_MT_CMD_DISCONNECT = 0x4605,
  308. I2400M_MT_CMD_EXIT_IDLE = 0x4606,
  309. I2400M_MT_GET_LM_VERSION = 0x5201,
  310. I2400M_MT_GET_DEVICE_INFO = 0x5202,
  311. I2400M_MT_GET_LINK_STATUS = 0x5203,
  312. I2400M_MT_GET_STATISTICS = 0x5204,
  313. I2400M_MT_GET_STATE = 0x5205,
  314. I2400M_MT_GET_MEDIA_STATUS = 0x5206,
  315. I2400M_MT_SET_INIT_CONFIG = 0x5404,
  316. I2400M_MT_CMD_INIT = 0x5601,
  317. I2400M_MT_CMD_TERMINATE = 0x5602,
  318. I2400M_MT_CMD_MODE_OF_OP = 0x5603,
  319. I2400M_MT_CMD_RESET_DEVICE = 0x5604,
  320. I2400M_MT_CMD_MONITOR_CONTROL = 0x5605,
  321. I2400M_MT_CMD_ENTER_POWERSAVE = 0x5606,
  322. I2400M_MT_GET_TLS_OPERATION_RESULT = 0x6201,
  323. I2400M_MT_SET_EAP_SUCCESS = 0x6402,
  324. I2400M_MT_SET_EAP_FAIL = 0x6403,
  325. I2400M_MT_SET_EAP_KEY = 0x6404,
  326. I2400M_MT_CMD_SEND_EAP_RESPONSE = 0x6602,
  327. I2400M_MT_REPORT_SCAN_RESULT = 0xc002,
  328. I2400M_MT_REPORT_STATE = 0xd002,
  329. I2400M_MT_REPORT_POWERSAVE_READY = 0xd005,
  330. I2400M_MT_REPORT_EAP_REQUEST = 0xe002,
  331. I2400M_MT_REPORT_EAP_RESTART = 0xe003,
  332. I2400M_MT_REPORT_ALT_ACCEPT = 0xe004,
  333. I2400M_MT_REPORT_KEY_REQUEST = 0xe005,
  334. };
  335. /*
  336. * Message Ack Status codes
  337. *
  338. * When a message is replied-to, this status is reported.
  339. */
  340. enum i2400m_ms {
  341. I2400M_MS_DONE_OK = 0,
  342. I2400M_MS_DONE_IN_PROGRESS = 1,
  343. I2400M_MS_INVALID_OP = 2,
  344. I2400M_MS_BAD_STATE = 3,
  345. I2400M_MS_ILLEGAL_VALUE = 4,
  346. I2400M_MS_MISSING_PARAMS = 5,
  347. I2400M_MS_VERSION_ERROR = 6,
  348. I2400M_MS_ACCESSIBILITY_ERROR = 7,
  349. I2400M_MS_BUSY = 8,
  350. I2400M_MS_CORRUPTED_TLV = 9,
  351. I2400M_MS_UNINITIALIZED = 10,
  352. I2400M_MS_UNKNOWN_ERROR = 11,
  353. I2400M_MS_PRODUCTION_ERROR = 12,
  354. I2400M_MS_NO_RF = 13,
  355. I2400M_MS_NOT_READY_FOR_POWERSAVE = 14,
  356. I2400M_MS_THERMAL_CRITICAL = 15,
  357. I2400M_MS_MAX
  358. };
  359. /**
  360. * i2400m_tlv - enumeration of the different types of TLVs
  361. *
  362. * TLVs stand for type-length-value and are the header for a payload
  363. * composed of almost anything. Each payload has a type assigned
  364. * and a length.
  365. */
  366. enum i2400m_tlv {
  367. I2400M_TLV_L4_MESSAGE_VERSIONS = 129,
  368. I2400M_TLV_SYSTEM_STATE = 141,
  369. I2400M_TLV_MEDIA_STATUS = 161,
  370. I2400M_TLV_RF_OPERATION = 162,
  371. I2400M_TLV_RF_STATUS = 163,
  372. I2400M_TLV_DEVICE_RESET_TYPE = 132,
  373. I2400M_TLV_CONFIG_IDLE_PARAMETERS = 601,
  374. I2400M_TLV_CONFIG_IDLE_TIMEOUT = 611,
  375. I2400M_TLV_CONFIG_D2H_DATA_FORMAT = 614,
  376. };
  377. struct i2400m_tlv_hdr {
  378. __le16 type;
  379. __le16 length; /* payload's */
  380. __u8 pl[0];
  381. } __attribute__((packed));
  382. struct i2400m_l3l4_hdr {
  383. __le16 type;
  384. __le16 length; /* payload's */
  385. __le16 version;
  386. __le16 resv1;
  387. __le16 status;
  388. __le16 resv2;
  389. struct i2400m_tlv_hdr pl[0];
  390. } __attribute__((packed));
  391. /**
  392. * i2400m_system_state - different states of the device
  393. */
  394. enum i2400m_system_state {
  395. I2400M_SS_UNINITIALIZED = 1,
  396. I2400M_SS_INIT,
  397. I2400M_SS_READY,
  398. I2400M_SS_SCAN,
  399. I2400M_SS_STANDBY,
  400. I2400M_SS_CONNECTING,
  401. I2400M_SS_WIMAX_CONNECTED,
  402. I2400M_SS_DATA_PATH_CONNECTED,
  403. I2400M_SS_IDLE,
  404. I2400M_SS_DISCONNECTING,
  405. I2400M_SS_OUT_OF_ZONE,
  406. I2400M_SS_SLEEPACTIVE,
  407. I2400M_SS_PRODUCTION,
  408. I2400M_SS_CONFIG,
  409. I2400M_SS_RF_OFF,
  410. I2400M_SS_RF_SHUTDOWN,
  411. I2400M_SS_DEVICE_DISCONNECT,
  412. I2400M_SS_MAX,
  413. };
  414. /**
  415. * i2400m_tlv_system_state - report on the state of the system
  416. *
  417. * @state: see enum i2400m_system_state
  418. */
  419. struct i2400m_tlv_system_state {
  420. struct i2400m_tlv_hdr hdr;
  421. __le32 state;
  422. } __attribute__((packed));
  423. struct i2400m_tlv_l4_message_versions {
  424. struct i2400m_tlv_hdr hdr;
  425. __le16 major;
  426. __le16 minor;
  427. __le16 branch;
  428. __le16 reserved;
  429. } __attribute__((packed));
  430. struct i2400m_tlv_detailed_device_info {
  431. struct i2400m_tlv_hdr hdr;
  432. __u8 reserved1[400];
  433. __u8 mac_address[6];
  434. __u8 reserved2[2];
  435. } __attribute__((packed));
  436. enum i2400m_rf_switch_status {
  437. I2400M_RF_SWITCH_ON = 1,
  438. I2400M_RF_SWITCH_OFF = 2,
  439. };
  440. struct i2400m_tlv_rf_switches_status {
  441. struct i2400m_tlv_hdr hdr;
  442. __u8 sw_rf_switch; /* 1 ON, 2 OFF */
  443. __u8 hw_rf_switch; /* 1 ON, 2 OFF */
  444. __u8 reserved[2];
  445. } __attribute__((packed));
  446. enum {
  447. i2400m_rf_operation_on = 1,
  448. i2400m_rf_operation_off = 2
  449. };
  450. struct i2400m_tlv_rf_operation {
  451. struct i2400m_tlv_hdr hdr;
  452. __le32 status; /* 1 ON, 2 OFF */
  453. } __attribute__((packed));
  454. enum i2400m_tlv_reset_type {
  455. I2400M_RESET_TYPE_COLD = 1,
  456. I2400M_RESET_TYPE_WARM
  457. };
  458. struct i2400m_tlv_device_reset_type {
  459. struct i2400m_tlv_hdr hdr;
  460. __le32 reset_type;
  461. } __attribute__((packed));
  462. struct i2400m_tlv_config_idle_parameters {
  463. struct i2400m_tlv_hdr hdr;
  464. __le32 idle_timeout; /* 100 to 300000 ms [5min], 100 increments
  465. * 0 disabled */
  466. __le32 idle_paging_interval; /* frames */
  467. } __attribute__((packed));
  468. enum i2400m_media_status {
  469. I2400M_MEDIA_STATUS_LINK_UP = 1,
  470. I2400M_MEDIA_STATUS_LINK_DOWN,
  471. I2400M_MEDIA_STATUS_LINK_RENEW,
  472. };
  473. struct i2400m_tlv_media_status {
  474. struct i2400m_tlv_hdr hdr;
  475. __le32 media_status;
  476. } __attribute__((packed));
  477. /* New in v1.4 */
  478. struct i2400m_tlv_config_idle_timeout {
  479. struct i2400m_tlv_hdr hdr;
  480. __le32 timeout; /* 100 to 300000 ms [5min], 100 increments
  481. * 0 disabled */
  482. } __attribute__((packed));
  483. /* New in v1.4 -- for backward compat, will be removed */
  484. struct i2400m_tlv_config_d2h_data_format {
  485. struct i2400m_tlv_hdr hdr;
  486. __u8 format; /* 0 old format, 1 enhanced */
  487. __u8 reserved[3];
  488. } __attribute__((packed));
  489. #endif /* #ifndef __LINUX__WIMAX__I2400M_H__ */