blob: ad36e073a70c5ebcde5e905a3986226da176ae46 [file] [log] [blame]
Inaky Perez-Gonzalezea246522008-12-20 16:57:43 -08001/*
2 * Intel Wireless WiMax Connection 2400m
3 * Host-Device protocol interface definitions
4 *
5 *
6 * Copyright (C) 2007-2008 Intel Corporation. All rights reserved.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
10 * are met:
11 *
12 * * Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
14 * * Redistributions in binary form must reproduce the above copyright
15 * notice, this list of conditions and the following disclaimer in
16 * the documentation and/or other materials provided with the
17 * distribution.
18 * * Neither the name of Intel Corporation nor the names of its
19 * contributors may be used to endorse or promote products derived
20 * from this software without specific prior written permission.
21 *
22 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
23 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
24 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
25 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
26 * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
27 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
28 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
29 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
30 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
31 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
32 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
33 *
34 *
35 * Intel Corporation <linux-wimax@intel.com>
36 * Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com>
37 * - Initial implementation
38 *
39 *
40 * This header defines the data structures and constants used to
41 * communicate with the device.
42 *
43 * BOOTMODE/BOOTROM/FIRMWARE UPLOAD PROTOCOL
44 *
45 * The firmware upload protocol is quite simple and only requires a
46 * handful of commands. See drivers/net/wimax/i2400m/fw.c for more
47 * details.
48 *
49 * The BCF data structure is for the firmware file header.
50 *
51 *
52 * THE DATA / CONTROL PROTOCOL
53 *
54 * This is the normal protocol spoken with the device once the
55 * firmware is uploaded. It transports data payloads and control
56 * messages back and forth.
57 *
58 * It consists 'messages' that pack one or more payloads each. The
59 * format is described in detail in drivers/net/wimax/i2400m/rx.c and
60 * tx.c.
61 *
62 *
63 * THE L3L4 PROTOCOL
64 *
65 * The term L3L4 refers to Layer 3 (the device), Layer 4 (the
66 * driver/host software).
67 *
68 * This is the control protocol used by the host to control the i2400m
69 * device (scan, connect, disconnect...). This is sent to / received
70 * as control frames. These frames consist of a header and zero or
71 * more TLVs with information. We call each control frame a "message".
72 *
73 * Each message is composed of:
74 *
75 * HEADER
76 * [TLV0 + PAYLOAD0]
77 * [TLV1 + PAYLOAD1]
78 * [...]
79 * [TLVN + PAYLOADN]
80 *
81 * The HEADER is defined by 'struct i2400m_l3l4_hdr'. The payloads are
82 * defined by a TLV structure (Type Length Value) which is a 'header'
83 * (struct i2400m_tlv_hdr) and then the payload.
84 *
85 * All integers are represented as Little Endian.
86 *
87 * - REQUESTS AND EVENTS
88 *
89 * The requests can be clasified as follows:
90 *
91 * COMMAND: implies a request from the host to the device requesting
92 * an action being performed. The device will reply with a
93 * message (with the same type as the command), status and
94 * no (TLV) payload. Execution of a command might cause
95 * events (of different type) to be sent later on as
96 * device's state changes.
97 *
98 * GET/SET: similar to COMMAND, but will not cause other
99 * EVENTs. The reply, in the case of GET, will contain
100 * TLVs with the requested information.
101 *
102 * EVENT: asynchronous messages sent from the device, maybe as a
103 * consequence of previous COMMANDs but disassociated from
104 * them.
105 *
106 * Only one request might be pending at the same time (ie: don't
107 * parallelize nor post another GET request before the previous
108 * COMMAND has been acknowledged with it's corresponding reply by the
109 * device).
110 *
111 * The different requests and their formats are described below:
112 *
113 * I2400M_MT_* Message types
114 * I2400M_MS_* Message status (for replies, events)
115 * i2400m_tlv_* TLVs
116 *
117 * data types are named 'struct i2400m_msg_OPNAME', OPNAME matching the
118 * operation.
119 */
120
121#ifndef __LINUX__WIMAX__I2400M_H__
122#define __LINUX__WIMAX__I2400M_H__
123
124#include <linux/types.h>
125
126
127/*
128 * Host Device Interface (HDI) common to all busses
129 */
130
131/* Boot-mode (firmware upload mode) commands */
132
133/* Header for the firmware file */
134struct i2400m_bcf_hdr {
135 __le32 module_type;
136 __le32 header_len;
137 __le32 header_version;
138 __le32 module_id;
139 __le32 module_vendor;
140 __le32 date; /* BCD YYYMMDD */
141 __le32 size;
142 __le32 key_size; /* in dwords */
143 __le32 modulus_size; /* in dwords */
144 __le32 exponent_size; /* in dwords */
145 __u8 reserved[88];
146} __attribute__ ((packed));
147
148/* Boot mode opcodes */
149enum i2400m_brh_opcode {
150 I2400M_BRH_READ = 1,
151 I2400M_BRH_WRITE = 2,
152 I2400M_BRH_JUMP = 3,
153 I2400M_BRH_SIGNED_JUMP = 8,
154 I2400M_BRH_HASH_PAYLOAD_ONLY = 9,
155};
156
157/* Boot mode command masks and stuff */
158enum i2400m_brh {
159 I2400M_BRH_SIGNATURE = 0xcbbc0000,
160 I2400M_BRH_SIGNATURE_MASK = 0xffff0000,
161 I2400M_BRH_SIGNATURE_SHIFT = 16,
162 I2400M_BRH_OPCODE_MASK = 0x0000000f,
163 I2400M_BRH_RESPONSE_MASK = 0x000000f0,
164 I2400M_BRH_RESPONSE_SHIFT = 4,
165 I2400M_BRH_DIRECT_ACCESS = 0x00000400,
166 I2400M_BRH_RESPONSE_REQUIRED = 0x00000200,
167 I2400M_BRH_USE_CHECKSUM = 0x00000100,
168};
169
170
171/* Constants for bcf->module_id */
172enum i2400m_bcf_mod_id {
173 /* Firmware file carries its own pokes -- pokes are a set of
174 * magical values that have to be written in certain memory
175 * addresses to get the device up and ready for firmware
176 * download when it is in non-signed boot mode. */
177 I2400M_BCF_MOD_ID_POKES = 0x000000001,
178};
179
180
181/**
182 * i2400m_bootrom_header - Header for a boot-mode command
183 *
184 * @cmd: the above command descriptor
185 * @target_addr: where on the device memory should the action be performed.
186 * @data_size: for read/write, amount of data to be read/written
187 * @block_checksum: checksum value (if applicable)
188 * @payload: the beginning of data attached to this header
189 */
190struct i2400m_bootrom_header {
191 __le32 command; /* Compose with enum i2400_brh */
192 __le32 target_addr;
193 __le32 data_size;
194 __le32 block_checksum;
195 char payload[0];
196} __attribute__ ((packed));
197
198
199/*
200 * Data / control protocol
201 */
202
203/* Packet types for the host-device interface */
204enum i2400m_pt {
205 I2400M_PT_DATA = 0,
206 I2400M_PT_CTRL,
207 I2400M_PT_TRACE, /* For device debug */
208 I2400M_PT_RESET_WARM, /* device reset */
209 I2400M_PT_RESET_COLD, /* USB[transport] reset, like reconnect */
Inaky Perez-Gonzalezfd5c5652009-02-28 23:42:52 +0000210 I2400M_PT_EDATA, /* Extended RX data */
Inaky Perez-Gonzalezea246522008-12-20 16:57:43 -0800211 I2400M_PT_ILLEGAL
212};
213
214
215/*
216 * Payload for a data packet
217 *
218 * This is prefixed to each and every outgoing DATA type.
219 */
220struct i2400m_pl_data_hdr {
221 __le32 reserved;
222} __attribute__((packed));
223
224
Inaky Perez-Gonzalezfd5c5652009-02-28 23:42:52 +0000225/*
226 * Payload for an extended data packet
227 *
228 * New in v1.4
229 *
230 * @cs: the type of data in the packet, as defined per (802.16e
231 * T11.13.19.1). Currently only 2 (IPv4 packet) supported.
232 *
233 * This is prefixed to each and every INCOMING DATA packet.
234 */
235struct i2400m_pl_edata_hdr {
236 __le32 reorder;
237 __u8 cs;
238 __u8 reserved[11];
239} __attribute__((packed));
240
241enum i2400m_cs {
242 I2400M_CS_IPV4_0 = 0,
243 I2400M_CS_IPV4 = 2,
244};
245
246enum i2400m_reorder {
247 I2400M_REORDER_NEEDED = 0x01,
248};
249
250
Inaky Perez-Gonzalezea246522008-12-20 16:57:43 -0800251/* Misc constants */
252enum {
253 I2400M_PL_PAD = 16, /* Payload data size alignment */
254 I2400M_PL_SIZE_MAX = 0x3EFF,
255 I2400M_MAX_PLS_IN_MSG = 60,
256 /* protocol barkers: sync sequences; for notifications they
257 * are sent in groups of four. */
258 I2400M_H2D_PREVIEW_BARKER = 0xcafe900d,
259 I2400M_COLD_RESET_BARKER = 0xc01dc01d,
260 I2400M_WARM_RESET_BARKER = 0x50f750f7,
261 I2400M_NBOOT_BARKER = 0xdeadbeef,
262 I2400M_SBOOT_BARKER = 0x0ff1c1a1,
263 I2400M_ACK_BARKER = 0xfeedbabe,
264 I2400M_D2H_MSG_BARKER = 0xbeefbabe,
265};
266
267
268/*
269 * Hardware payload descriptor
270 *
271 * Bitfields encoded in a struct to enforce typing semantics.
272 *
273 * Look in rx.c and tx.c for a full description of the format.
274 */
275struct i2400m_pld {
276 __le32 val;
277} __attribute__ ((packed));
278
279#define I2400M_PLD_SIZE_MASK 0x00003fff
280#define I2400M_PLD_TYPE_SHIFT 16
281#define I2400M_PLD_TYPE_MASK 0x000f0000
282
283/*
284 * Header for a TX message or RX message
285 *
286 * @barker: preamble
287 * @size: used for management of the FIFO queue buffer; before
288 * sending, this is converted to be a real preamble. This
289 * indicates the real size of the TX message that starts at this
290 * point. If the highest bit is set, then this message is to be
291 * skipped.
292 * @sequence: sequence number of this message
293 * @offset: offset where the message itself starts -- see the comments
294 * in the file header about message header and payload descriptor
295 * alignment.
296 * @num_pls: number of payloads in this message
297 * @padding: amount of padding bytes at the end of the message to make
298 * it be of block-size aligned
299 *
300 * Look in rx.c and tx.c for a full description of the format.
301 */
302struct i2400m_msg_hdr {
303 union {
304 __le32 barker;
305 __u32 size; /* same size type as barker!! */
306 };
307 union {
308 __le32 sequence;
309 __u32 offset; /* same size type as barker!! */
310 };
311 __le16 num_pls;
312 __le16 rsv1;
313 __le16 padding;
314 __le16 rsv2;
315 struct i2400m_pld pld[0];
316} __attribute__ ((packed));
317
318
319
320/*
321 * L3/L4 control protocol
322 */
323
324enum {
325 /* Interface version */
326 I2400M_L3L4_VERSION = 0x0100,
327};
328
329/* Message types */
330enum i2400m_mt {
331 I2400M_MT_RESERVED = 0x0000,
332 I2400M_MT_INVALID = 0xffff,
333 I2400M_MT_REPORT_MASK = 0x8000,
334
335 I2400M_MT_GET_SCAN_RESULT = 0x4202,
336 I2400M_MT_SET_SCAN_PARAM = 0x4402,
337 I2400M_MT_CMD_RF_CONTROL = 0x4602,
338 I2400M_MT_CMD_SCAN = 0x4603,
339 I2400M_MT_CMD_CONNECT = 0x4604,
340 I2400M_MT_CMD_DISCONNECT = 0x4605,
341 I2400M_MT_CMD_EXIT_IDLE = 0x4606,
342 I2400M_MT_GET_LM_VERSION = 0x5201,
343 I2400M_MT_GET_DEVICE_INFO = 0x5202,
344 I2400M_MT_GET_LINK_STATUS = 0x5203,
345 I2400M_MT_GET_STATISTICS = 0x5204,
346 I2400M_MT_GET_STATE = 0x5205,
347 I2400M_MT_GET_MEDIA_STATUS = 0x5206,
348 I2400M_MT_SET_INIT_CONFIG = 0x5404,
349 I2400M_MT_CMD_INIT = 0x5601,
350 I2400M_MT_CMD_TERMINATE = 0x5602,
351 I2400M_MT_CMD_MODE_OF_OP = 0x5603,
352 I2400M_MT_CMD_RESET_DEVICE = 0x5604,
353 I2400M_MT_CMD_MONITOR_CONTROL = 0x5605,
354 I2400M_MT_CMD_ENTER_POWERSAVE = 0x5606,
355 I2400M_MT_GET_TLS_OPERATION_RESULT = 0x6201,
356 I2400M_MT_SET_EAP_SUCCESS = 0x6402,
357 I2400M_MT_SET_EAP_FAIL = 0x6403,
358 I2400M_MT_SET_EAP_KEY = 0x6404,
359 I2400M_MT_CMD_SEND_EAP_RESPONSE = 0x6602,
360 I2400M_MT_REPORT_SCAN_RESULT = 0xc002,
361 I2400M_MT_REPORT_STATE = 0xd002,
362 I2400M_MT_REPORT_POWERSAVE_READY = 0xd005,
363 I2400M_MT_REPORT_EAP_REQUEST = 0xe002,
364 I2400M_MT_REPORT_EAP_RESTART = 0xe003,
365 I2400M_MT_REPORT_ALT_ACCEPT = 0xe004,
366 I2400M_MT_REPORT_KEY_REQUEST = 0xe005,
367};
368
369
370/*
371 * Message Ack Status codes
372 *
373 * When a message is replied-to, this status is reported.
374 */
375enum i2400m_ms {
376 I2400M_MS_DONE_OK = 0,
377 I2400M_MS_DONE_IN_PROGRESS = 1,
378 I2400M_MS_INVALID_OP = 2,
379 I2400M_MS_BAD_STATE = 3,
380 I2400M_MS_ILLEGAL_VALUE = 4,
381 I2400M_MS_MISSING_PARAMS = 5,
382 I2400M_MS_VERSION_ERROR = 6,
383 I2400M_MS_ACCESSIBILITY_ERROR = 7,
384 I2400M_MS_BUSY = 8,
385 I2400M_MS_CORRUPTED_TLV = 9,
386 I2400M_MS_UNINITIALIZED = 10,
387 I2400M_MS_UNKNOWN_ERROR = 11,
388 I2400M_MS_PRODUCTION_ERROR = 12,
389 I2400M_MS_NO_RF = 13,
390 I2400M_MS_NOT_READY_FOR_POWERSAVE = 14,
391 I2400M_MS_THERMAL_CRITICAL = 15,
392 I2400M_MS_MAX
393};
394
395
396/**
397 * i2400m_tlv - enumeration of the different types of TLVs
398 *
399 * TLVs stand for type-length-value and are the header for a payload
400 * composed of almost anything. Each payload has a type assigned
401 * and a length.
402 */
403enum i2400m_tlv {
404 I2400M_TLV_L4_MESSAGE_VERSIONS = 129,
405 I2400M_TLV_SYSTEM_STATE = 141,
406 I2400M_TLV_MEDIA_STATUS = 161,
407 I2400M_TLV_RF_OPERATION = 162,
408 I2400M_TLV_RF_STATUS = 163,
409 I2400M_TLV_DEVICE_RESET_TYPE = 132,
410 I2400M_TLV_CONFIG_IDLE_PARAMETERS = 601,
Inaky Perez-Gonzalez89876912009-02-28 23:42:50 +0000411 I2400M_TLV_CONFIG_IDLE_TIMEOUT = 611,
Inaky Perez-Gonzalezfd5c5652009-02-28 23:42:52 +0000412 I2400M_TLV_CONFIG_D2H_DATA_FORMAT = 614,
Inaky Perez-Gonzalezea246522008-12-20 16:57:43 -0800413};
414
415
416struct i2400m_tlv_hdr {
417 __le16 type;
418 __le16 length; /* payload's */
419 __u8 pl[0];
420} __attribute__((packed));
421
422
423struct i2400m_l3l4_hdr {
424 __le16 type;
425 __le16 length; /* payload's */
426 __le16 version;
427 __le16 resv1;
428 __le16 status;
429 __le16 resv2;
430 struct i2400m_tlv_hdr pl[0];
431} __attribute__((packed));
432
433
434/**
435 * i2400m_system_state - different states of the device
436 */
437enum i2400m_system_state {
438 I2400M_SS_UNINITIALIZED = 1,
439 I2400M_SS_INIT,
440 I2400M_SS_READY,
441 I2400M_SS_SCAN,
442 I2400M_SS_STANDBY,
443 I2400M_SS_CONNECTING,
444 I2400M_SS_WIMAX_CONNECTED,
445 I2400M_SS_DATA_PATH_CONNECTED,
446 I2400M_SS_IDLE,
447 I2400M_SS_DISCONNECTING,
448 I2400M_SS_OUT_OF_ZONE,
449 I2400M_SS_SLEEPACTIVE,
450 I2400M_SS_PRODUCTION,
451 I2400M_SS_CONFIG,
452 I2400M_SS_RF_OFF,
453 I2400M_SS_RF_SHUTDOWN,
454 I2400M_SS_DEVICE_DISCONNECT,
455 I2400M_SS_MAX,
456};
457
458
459/**
460 * i2400m_tlv_system_state - report on the state of the system
461 *
462 * @state: see enum i2400m_system_state
463 */
464struct i2400m_tlv_system_state {
465 struct i2400m_tlv_hdr hdr;
466 __le32 state;
467} __attribute__((packed));
468
469
470struct i2400m_tlv_l4_message_versions {
471 struct i2400m_tlv_hdr hdr;
472 __le16 major;
473 __le16 minor;
474 __le16 branch;
475 __le16 reserved;
476} __attribute__((packed));
477
478
479struct i2400m_tlv_detailed_device_info {
480 struct i2400m_tlv_hdr hdr;
481 __u8 reserved1[400];
482 __u8 mac_address[6];
483 __u8 reserved2[2];
484} __attribute__((packed));
485
486
487enum i2400m_rf_switch_status {
488 I2400M_RF_SWITCH_ON = 1,
489 I2400M_RF_SWITCH_OFF = 2,
490};
491
492struct i2400m_tlv_rf_switches_status {
493 struct i2400m_tlv_hdr hdr;
494 __u8 sw_rf_switch; /* 1 ON, 2 OFF */
495 __u8 hw_rf_switch; /* 1 ON, 2 OFF */
496 __u8 reserved[2];
497} __attribute__((packed));
498
499
500enum {
501 i2400m_rf_operation_on = 1,
502 i2400m_rf_operation_off = 2
503};
504
505struct i2400m_tlv_rf_operation {
506 struct i2400m_tlv_hdr hdr;
507 __le32 status; /* 1 ON, 2 OFF */
508} __attribute__((packed));
509
510
511enum i2400m_tlv_reset_type {
512 I2400M_RESET_TYPE_COLD = 1,
513 I2400M_RESET_TYPE_WARM
514};
515
516struct i2400m_tlv_device_reset_type {
517 struct i2400m_tlv_hdr hdr;
518 __le32 reset_type;
519} __attribute__((packed));
520
521
522struct i2400m_tlv_config_idle_parameters {
523 struct i2400m_tlv_hdr hdr;
524 __le32 idle_timeout; /* 100 to 300000 ms [5min], 100 increments
525 * 0 disabled */
526 __le32 idle_paging_interval; /* frames */
527} __attribute__((packed));
528
529
530enum i2400m_media_status {
531 I2400M_MEDIA_STATUS_LINK_UP = 1,
532 I2400M_MEDIA_STATUS_LINK_DOWN,
533 I2400M_MEDIA_STATUS_LINK_RENEW,
534};
535
536struct i2400m_tlv_media_status {
537 struct i2400m_tlv_hdr hdr;
538 __le32 media_status;
539} __attribute__((packed));
540
Inaky Perez-Gonzalez89876912009-02-28 23:42:50 +0000541
542/* New in v1.4 */
543struct i2400m_tlv_config_idle_timeout {
544 struct i2400m_tlv_hdr hdr;
545 __le32 timeout; /* 100 to 300000 ms [5min], 100 increments
546 * 0 disabled */
547} __attribute__((packed));
548
Inaky Perez-Gonzalezfd5c5652009-02-28 23:42:52 +0000549/* New in v1.4 -- for backward compat, will be removed */
550struct i2400m_tlv_config_d2h_data_format {
551 struct i2400m_tlv_hdr hdr;
552 __u8 format; /* 0 old format, 1 enhanced */
553 __u8 reserved[3];
554} __attribute__((packed));
555
Inaky Perez-Gonzalez89876912009-02-28 23:42:50 +0000556
Inaky Perez-Gonzalezea246522008-12-20 16:57:43 -0800557#endif /* #ifndef __LINUX__WIMAX__I2400M_H__ */