map-topology: 2.5.0.18

Anonymous call to DECT should be displayed as "Withheld"

bbf/Makefile

@@ -5,11 +5,11 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=libbbfdm
-PKG_VERSION:=6.8.9.33
+PKG_VERSION:=6.8.9.37
 
 PKG_SOURCE_PROTO:=git
-PKG_SOURCE_URL:=https://dev.iopsys.eu/iopsys/bbf.git
-PKG_SOURCE_VERSION:=7917dc531c32d4ac0f611e6610054317cb7e5274
+PKG_SOURCE_URL:=https://dev.iopsys.eu/bbf/bbfdm.git
+PKG_SOURCE_VERSION:=925a6ee278d827edf6a57715463263394eddac21
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-$(PKG_SOURCE_VERSION).tar.gz
 PKG_MIRROR_HASH:=skip
 

dectmngr/Makefile

@@ -8,13 +8,13 @@ include $(TOPDIR)/rules.mk
 
 PKG_NAME:=dectmngr
 PKG_RELEASE:=3
-PKG_VERSION:=3.5.6
+PKG_VERSION:=3.5.9
 
 LOCAL_DEV=0
 ifneq ($(LOCAL_DEV),1)
 PKG_SOURCE_URL:=https://dev.iopsys.eu/iopsys/dectmngr.git
 PKG_SOURCE_PROTO:=git
-PKG_SOURCE_VERSION:=81450033d98fcdb68911e2148f48d190492090a6
+PKG_SOURCE_VERSION:=eecab9a6d52bba25dd9dfab8616b6d30e0346e18
 PKG_MIRROR_HASH:=skip
 endif
 

easy-soc-libs/Makefile

@@ -7,13 +7,13 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=easy-soc-libs
-PKG_VERSION:=6.5.57
+PKG_VERSION:=6.5.60
 PKG_RELEASE:=1
 
 LOCAL_DEV=0
 ifneq ($(LOCAL_DEV),1)
 PKG_SOURCE_PROTO:=git
-PKG_SOURCE_VERSION:=3b07e800c1f27b5bf65946339e94a86dfd96a95d
+PKG_SOURCE_VERSION:=ec2e8d0341e246ff371481ae20418d8301dfcf12
 PKG_SOURCE_URL:=https://dev.iopsys.eu/iopsys/easy-soc-libs.git
 PKG_MAINTAINER:=Anjan Chanda <anjan.chanda@iopsys.eu>
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)_$(PKG_SOURCE_VERSION).tar.xz

endptmngr/Makefile

@@ -13,7 +13,7 @@ LOCAL_DEV=0
 ifneq ($(LOCAL_DEV),1)
 PKG_SOURCE_PROTO:=git
 PKG_SOURCE_URL:=https://dev.iopsys.eu/iopsys/endptmngr.git
-PKG_SOURCE_VERSION:=fb85081443c19b5062bede49c80b1802c0f05d34
+PKG_SOURCE_VERSION:=e5fb705f3a1b6065606e0cba82a54fb6eee10ae9
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-$(PKG_SOURCE_VERSION).tar.gz
 PKG_MIRROR_HASH:=skip
 endif

icwmp/Makefile

@@ -8,11 +8,11 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=icwmp
-PKG_VERSION:=8.4.25.14
+PKG_VERSION:=8.4.26.10
 
 PKG_SOURCE_PROTO:=git
 PKG_SOURCE_URL:=https://dev.iopsys.eu/iopsys/icwmp.git
-PKG_SOURCE_VERSION:=9ee5a5a95a336998f8c69acffae1404ca17d2607
+PKG_SOURCE_VERSION:=ac7410a726a7269dcaef4c80061cab7a4447f6d1
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-$(PKG_SOURCE_VERSION).tar.gz
 PKG_MIRROR_HASH:=skip
 
@@ -34,7 +34,7 @@ define Package/icwmp/default
 endef
 
 TARGET_CFLAGS += \
-	-D_GNU_SOURCE \
+	-D_GNU_SOURCE -g \
 	"-DCWMP_REVISION=\\\"$(PKG_SOURCE_VERSION)\\\""
 
 define Package/icwmp-openssl
@@ -98,7 +98,7 @@ define Package/icwmp/default/install
 	$(INSTALL_DATA) ./files/lib/upgrade/keep.d/icwmp $(1)/lib/upgrade/keep.d/icwmp
 	$(INSTALL_BIN) ./files/etc/icwmpd/update.sh $(1)/etc/icwmpd/update.sh
 	$(INSTALL_DATA) ./files/etc/bbfdm/json/CWMPManagementServer.json $(1)/etc/bbfdm/json/
-	$(INSTALL_BIN) ./files/etc/udhcpc.user.d/udhcpc_icwmp.user $(1)/etc/udhcpc.user.d/udhcpc_icwmp.user
+	$(INSTALL_BIN) $(PKG_BUILD_DIR)/files/etc/udhcpc.user.d/udhcpc_icwmp_opt125.user $(1)/etc/udhcpc.user.d/udhcpc_icwmp_opt125.user
 	$(INSTALL_BIN) $(PKG_BUILD_DIR)/files/etc/udhcpc.user.d/udhcpc_icwmp_opt43.user $(1)/etc/udhcpc.user.d/udhcpc_icwmp_opt43.user
 endef
 

icwmp/files/etc/init.d/icwmpd

@@ -64,7 +64,7 @@ enable_dhcp_option43() {
 	fi
 
 	newreqopts="$reqopts 43"
-	if [ "${proto}" == "dhcp" ]; then
+	if [ "${proto}" = "dhcp" ]; then
 		uci -q set network.$wan.reqopts="$newreqopts"
 		uci commit network
 		ubus call network reload
@@ -205,10 +205,8 @@ enable_dnsmasq_option125() {
 	fi
 }
 
-enable_disable_dhcp_option125() {
+enable_dhcp_option125() {
 	local wan="${1}"
-	local action="${2}"
-
 	local reqopts="$(uci -q get network.$wan.reqopts)"
 	local sendopts="$(uci -q get network.$wan.sendopts)"
 	local proto="$(uci -q get network.$wan.proto)"
@@ -233,35 +231,16 @@ enable_disable_dhcp_option125() {
 		fi
 	done
 
-	if [ "${proto}" == "dhcp" ]; then
-		if [ "${action}" == "enable" ]; then
-			if [ ${req125_present} -eq 0 ]; then
-				newreqopts="$reqopts 125"
-				uci -q set network.$wan.reqopts="$newreqopts"
-				network_uci_update=1
-			fi
+	if [ "${proto}" = "dhcp" ]; then
+		if [ ${req125_present} -eq 0 ]; then
+			newreqopts="$reqopts 125"
+			uci -q set network."${wan}".reqopts="$newreqopts"
+			network_uci_update=1
+		fi
 
-			if [ ${send125_present} -eq 0 ]; then
-				configure_send_op125 "${sendopts}" "${wan}" "network"
-				network_uci_update=1
-			fi
-		else
-			if [ ${req125_present} -eq 1 ]; then
-				newreqopts=$(echo ${reqopts/125/})
-				uci -q set network.$wan.reqopts="$newreqopts"
-				network_uci_update=1
-			fi
-
-			if [ ${send125_present} -eq 1 ]; then
-				for sopt in $sendopts; do
-					if [[ "$sopt" == "$opt125"* ]]; then
-						newsendopts=$(echo ${sendopts/"${sopt}"/})
-						uci -q set network.$wan.sendopts="$newreqopts"
-						network_uci_update=1
-						break
-					fi
-				done
-			fi
+		if [ ${send125_present} -eq 0 ]; then
+			configure_send_op125 "${sendopts}" "${wan}" "network"
+			network_uci_update=1
 		fi
 	fi
 
@@ -295,6 +274,7 @@ copy_cwmp_etc_files_to_varstate() {
 	if [ -f /etc/icwmpd/dm_enabled_notify.xml ]; then
 		cp -f /etc/icwmpd/dm_enabled_notify /var/run/icwmpd/ 2>/dev/null
 	fi
+	touch /var/run/icwmpd/cwmp
 }
 
 copy_cwmp_varstate_files_to_etc() {
@@ -424,11 +404,8 @@ boot() {
 	config_get lan_interface cpe default_lan_interface ""
 	if [ -n "${lan_interface}" ]; then
 		# Set dhcp_option 125 if not already configured
-		enable_disable_dhcp_option125 "${wan_interface}" "enable"
+		enable_dhcp_option125 "${wan_interface}"
 		enable_dnsmasq_option125 "${lan_interface}"
-	else
-		# Remove dhcp option 125 if exists
-		enable_disable_dhcp_option125 "${wan_interface}" "disable"
 	fi
 	
 	config_get ssl_capath acs ssl_capath
@@ -439,9 +416,7 @@ boot() {
 
 	# Copy backup data so that if it restart latter on it gets the info
 	copy_cwmp_etc_files_to_varstate
-	touch /etc/icwmpd/cwmp_notification
-	mkdir -p /var/run/icwmpd/
-	touch /var/run/icwmpd/cwmp
+	touch /etc/icwmpd/cwmp_notifications
 
 	start
 }

icwmp/files/etc/udhcpc.user.d/udhcpc_icwmp.user

@@ -1,133 +0,0 @@
-#!/bin/sh
-
-. /lib/functions.sh
-
-CLASS=""
-OUI=""
-SERIAL=""
-
-get_vivsoi() {
-	# opt125 environment variable has data in below format
-	# +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
-	# |	 enterprise-number1	  |
-	# |				  |
-	# +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
-	# |   data-len1   |		  |
-	# +-+-+-+-+-+-+-+-+ option-data1  |
-	# /				  /
-	# +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ -----
-	# |	 enterprise-number2	  |   ^
-	# |				  |   |
-	# +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+   |
-	# |   data-len2   |		  | optional
-	# +-+-+-+-+-+-+-+-+ option-data2  |   |
-	# /				  /   |
-	# +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+   |
-	# ~	       ...		  ~   V
-	# +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ -----
-
-	#  Enterprise Id  Len  Sub Op  SLen  Data Sub Op  SLen Data	  Sub Op  SLen Data
-	# +-------------+-----+------+------+----+------+-----+----+-----+------+-----+----+
-	# |	id    |  n  |	1  |  n1  | D1 |   2  |  n2 | D2 | ... |   6  |  n6 | D6 |
-	# +-------------+-----+------+------+----+------+-----+----+-----+------+-----+----+
-
-	local opt125="$1"
-	local len="$2"
-	local ent_id
-
-	#hex-string 2 character=1 Byte
-	# length in hex string will be twice of actual Byte length
-	[ "$len" -gt "8" ] || return
-
-	data="${opt125}"
-	rem_len="${len}"
-	while [ $rem_len -gt 0 ]; do
-		ent_id=${data:0:8}
-		ent_id=$(printf "%d\n" "0x$ent_id")
-
-		if [ $ent_id -ne  3561 ]; then
-			len_val=${data:8:2}
-			data_len=$(printf "%d\n" "0x$len_val")
-			# add 4 byte for ent_id and 1 byte for len
-			data_len=$(( data_len * 2 + 10 ))
-			# move ahead data to next enterprise id
-			data=${data:"${data_len}":"${rem_len}"}
-			rem_len=$(( rem_len - $data_len ))
-			continue
-		fi
-
-		# read the length of enterprise data
-		len_val=${data:8:2}
-		opt_len=$(printf "%d\n" "0x$len_val")
-		[ $opt_len -eq 0 ] && return
-
-		# populate the option data of enterprise id
-		sub_data_len=$(( opt_len * 2))
-		# starting 10 means ahead of length field
-		sub_data=${data:10:"${sub_data_len}"}
-
-		# parsing of suboption of option 125
-		while [ $sub_data_len -gt 0 ]; do
-			# get the suboption id
-			sub_opt_id=${sub_data:0:2}
-			sub_opt_id=$(printf "%d\n" "0x$sub_opt_id")
-
-			# get the length of suboption
-			sub_opt_len=${sub_data:2:2}
-			sub_opt_len=$(printf "%d\n" "0x$sub_opt_len")
-			sub_opt_len=$(( sub_opt_len * 2 ))
-
-			# get the value of sub option starting 4 means starting after length
-			sub_opt_val=${sub_data:4:${sub_opt_len}}
-
-			# assign the value found in sub option
-			case "${sub_opt_id}" in
-				"4") OUI=$(echo -n $sub_opt_val | sed 's/\([0-9A-F]\{2\}\)/\\\\\\x\1/gI' | xargs printf && echo '')
-				;;
-				"5") SERIAL=$(echo -n $sub_opt_val | sed 's/\([0-9A-F]\{2\}\)/\\\\\\x\1/gI' | xargs printf && echo '')
-				;;
-				"6") CLASS=$(echo -n $sub_opt_val | sed 's/\([0-9A-F]\{2\}\)/\\\\\\x\1/gI' | xargs printf && echo '')
-				;;
-			esac
-
-			# add 2 bytes for sub_opt id and sub_opt len field
-			sub_opt_end=$(( sub_opt_len + 4 ))
-
-			# fetch next sub option hex string
-			sub_data=${sub_data:${sub_opt_end}:${sub_data_len}}
-
-			# update the remaining sub option hex string length
-			sub_data_len=$((sub_data_len - sub_opt_end))
-		done
-
-		break
-	done
-}
-
-config_load cwmp
-config_get_bool enable_cwmp cpe enable 1
-config_get wan_intf cpe default_wan_interface "wan"
-
-if [ "$enable_cwmp" = "0" ]; then
-	return 0
-fi
-
-if [ "${wan_intf}" == "${INTERFACE}" ]; then
-	if [ -n "$opt125" ]; then
-		len=$(printf "$opt125"|wc -c)
-		get_vivsoi "$opt125" "$len"
-	fi
-
-	mkdir -p /var/state
-	touch /var/state/cwmp
-	sec=$(uci -q -c /var/state get cwmp.gatewayinfo)
-	if [ -z "${sec}" ]; then
-		sec=$(uci -q -c /var/state add cwmp gatewayinfo)
-		uci -q -c /var/state rename cwmp."${sec}"="gatewayinfo"
-	fi
-
-	uci -q -c /var/state set cwmp.gatewayinfo.class="$CLASS"
-	uci -q -c /var/state set cwmp.gatewayinfo.oui="$OUI"
-	uci -q -c /var/state set cwmp.gatewayinfo.serial="$SERIAL"
-	uci -q -c /var/state commit cwmp
-fi

ieee1905/Makefile

@@ -5,12 +5,12 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=ieee1905
-PKG_VERSION:=4.10.33
+PKG_VERSION:=4.10.40
 
 LOCAL_DEV=0
 ifneq ($(LOCAL_DEV),1)
 PKG_SOURCE_PROTO:=git
-PKG_SOURCE_VERSION:=a989b025e85bb74c0f5f56350745eef21eda487b
+PKG_SOURCE_VERSION:=4533751a58cfb0fcf4ee878785f6c0872949c68d
 PKG_SOURCE_URL:=https://dev.iopsys.eu/iopsys/ieee1905.git
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)_$(PKG_SOURCE_VERSION).tar.xz
 PKG_MIRROR_HASH:=skip

map-agent/Makefile

@@ -5,9 +5,9 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=map-agent
-PKG_VERSION:=2.10.2.7
+PKG_VERSION:=2.10.4.1
 PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)
-PKG_SOURCE_VERSION:=033642e1d4444e747ba6e586bd60d8e9e352b7e4
+PKG_SOURCE_VERSION:=9e52e1476bd012914dfdd454cb16b292c99a0669
 PKG_MAINTAINER:=Anjan Chanda <anjan.chanda@iopsys.eu>
 
 PKG_LICENSE:=BSD-3-Clause

map-agent/files/etc/init.d/mapagent

@@ -10,7 +10,6 @@ IS_CFG_VALID=1
 MAP_DEV="map_dev"
 MAP_IF="map"
 
-
 start_dynbhd_service() {
 	rm -f /tmp/multiap.backhaul
 	procd_open_instance

map-agent/files/lib/wifi/multiap

@@ -404,7 +404,7 @@ teardown_iface() {
 		uci -q set mapagent.${section}.enabled="0"
 		uci -q set mapagent.${section}.ssid="DISABLED-SSID"
 		uci -q set mapagent.${section}.key="DISABLED-KEY"
-		uci -q del mapagent.${section}.vid
+		#uci -q del mapagent.${section}.vid
 
 		# subshell in hopes to maintain mapagent config loaded
 		(mapagent_teardown_wireless $ifname)
@@ -864,6 +864,40 @@ set_uplink_backhaul_info() {
 	) 200>/var/lock/map.backhaul.lock
 }
 
+
+
+update_isolate_ebtables() {
+	parse_fh() {
+		local brcm_setup="$(uci -q get mapagent.agent.brcm_setup)"
+		local guest_isolate="$(uci -q get mapagent.agent.guest_isolation)"
+		local pvid="$(uci -q get mapagent.@policy[0].pvid)"
+		local section=$1
+		local prefix="TODO"
+		local action="del"
+
+		config_get vid $section vid
+		config_get band $section band
+		config_get ifname $section ifname
+
+		[ $vid -gt 4094 -o $vid -lt 1 ] && vid=$pvid
+		[ "$guest_isolate" = "1" -a "$vid" != "$pvid" ] && action="add"
+		if [ "$brcm_setup" = "1" ]; then
+			prefix="wds"
+		else
+			#todo
+			break;
+		fi
+
+		ts_sub "isolate" "$action" "$pvid" "$vid" "$band" "$ifname" "$prefix"
+
+	}
+	config_load mapagent
+
+
+	config_foreach parse_fh ap
+
+}
+
 set_uplink() {
 	local type=$1
 	local ifname=$2
@@ -881,8 +915,7 @@ set_uplink() {
 	) 200>/var/lock/map.backhaul.lock
 	json_cleanup
 
-	config_load mapagent
-
+	update_isolate_ebtables
 	island_prevention="$(uci -q get mapagent.agent.island_prevention)"
 
 	if [ "$island_prevention" = "1" -a "$type" = "eth" ]; then
@@ -894,8 +927,6 @@ set_uplink() {
 unset_uplink() {
 	local type=${1:-wifi}
 
-	config_load mapagent
-
 	island_prevention="$(uci -q get mapagent.agent.island_prevention)"
 
 	if [ "$island_prevention" = "1" -a "$type" = "eth" ]; then

map-agent/files/lib/wifi/traffic_separation

@@ -4,10 +4,11 @@
 
 AL_BRIDGE=${AL_BRIDGE-"br-lan"}
 PRIMARY_VID=${PRIMARY_VID-1}
+MAP_BH_FILE="/tmp/multiap.backhaul"
 
 ### Traffic Separation ###
 
-dbg() {
+ts_dbg() {
 	logger -t traffic_separation $@
 }
 
@@ -22,7 +23,181 @@ EOF
 	exit 1
 	}
 
+	_dhcp_cleanup() {
+		vid=$1
+
+		[ -n "$(uci -q get dhcp.guest${vid})" ] && {
+			uci -q delete dhcp.guest${vid}
+			uci commit dhcp
+			/etc/init.d/dnsmasq reload
+		}
+	}
+
+	_firewall_cleanup() {
+		vid=$1
+
+		guest_teardown() {
+				local section=$1
+				local config=$2
+				local val=$3
+				local option=$4
+
+				config_get name "$section" "$option"
+
+				[ "$val" != "$name" ] && continue
+
+				uci delete ${config}.${section}
+				uci commit ${config}
+			}
+
+			[ -n "$(uci -q get firewall.guest${vid}_dns)" ] && {
+				uci -q delete firewall.guest${vid}_dns
+				uci commit firewall
+			}
+
+			[ -n "$(uci -q get firewall.guest${vid}_dhcp)" ] && {
+				uci -q delete firewall.guest${vid}_dhcp
+				uci commit firewall
+			}
+
+			[ -n "$(uci -q get firewall.guest${vid}_ping)" ] && {
+				uci -q delete firewall.guest${vid}_ping
+				uci commit firewall
+			}
+
+			config_load firewall
+			config_foreach guest_teardown forwarding "firewall" guest${vid} "src" #delete firewall section with name = guest${vid}
+			config_load firewall
+			config_foreach guest_teardown zone "firewall" guest${vid} "name" #delete firewall section with name = guest${vid}
+	}
+
+	_network_cleanup() {
+		vid=$1
+
+		[ -n "$(uci -q get network.vlan${vid})" ] && {
+			uci -q delete network.vlan${vid}
+			uci commit network
+		}
+
+		[ -n "$(uci -q get network.guest${vid})" ] && {
+			uci -q delete network.guest${vid}
+			uci commit network
+		}
+
+		[ -n "$(uci -q get network.guest${vid}_8021q)" ] && {
+			uci -q delete network.guest${vid}_8021q
+			uci commit network
+		}
+	}
+
+	_guest_cleanup() {
+		vid=$1
+		_dhcp_cleanup $vid
+		_firewall_cleanup $vid
+		_network_cleanup $vid
+	}
+
 	ts_create() {
+		_dhcp_setup() {
+			local name=$1
+
+			[ -n "$(uci -q get dhcp.${name})" ] && return
+
+			uci -q set dhcp.${name}=dhcp
+			uci -q set dhcp.${name}.interface="${name}"
+			uci -q set dhcp.${name}.start="100"
+			uci -q set dhcp.${name}.limit="150"
+			uci -q set dhcp.${name}.leasetime="1h"
+			uci -q set dhcp.${name}.dhcpv4="server"
+			uci -q set dhcp.${name}.dhcpv6="server"
+			uci -q set dhcp.${name}.ra="server"
+			uci -q set dhcp.${name}.ra_slaac="1"
+			uci -q add_list dhcp.${name}.ra_flags="managed-config"
+			uci -q add_list dhcp.${name}.ra_flags="other-config"
+
+			uci -q commit dhcp
+		}
+
+
+		_firewall_setup() {
+			local name=$1
+			local network=$1
+			local vid=$2
+			local exists=0
+			local diff=0
+			local subnet=$(($vid % 256))
+			local ipaddr="192.168.${subnet}.1"
+
+			config_load firewall
+
+			_process_zone() {
+				local section=$1
+				local new_name=$2
+				local val=$3
+				local name
+
+				config_get name $section $val
+
+				[ "$name" == "$new_name" ] && exists=1
+			}
+
+			config_foreach _process_zone zone $name "name"
+			[ "$exists" == "0" ] && {
+				uci -q add firewall zone
+				uci -q set firewall.@zone[-1].name="$name"
+				uci -q add_list firewall.@zone[-1].network="$network"
+				uci -q set firewall.@zone[-1].input='DROP'
+				uci -q set firewall.@zone[-1].output='ACCEPT'
+				uci -q set firewall.@zone[-1].forward='DROP'
+				diff=1
+			}
+
+			exists=0
+			config_foreach _process_zone forwarding $name "src"
+			[ "$exists" == "0" ] && {
+				uci -q add firewall forwarding
+				uci -q set firewall.@forwarding[-1].src="$name"
+				uci -q set firewall.@forwarding[-1].dest="wan"
+				diff=1
+			}
+
+			[ -z "$(uci -q get firewall.${name}_dns)" ] && {
+				uci set firewall.${name}_dns=rule
+				uci set firewall.${name}_dns.name="Allow-DNS-${name}"
+				uci set firewall.${name}_dns.src="${name}"
+				uci set firewall.${name}_dns.dest_port="53"
+				uci set firewall.${name}_dns.proto="tcp udp"
+				uci set firewall.${name}_dns.target="ACCEPT"
+				diff=1
+			}
+
+			[ -z "$(uci -q get firewall.${name}_dhcp)" ] && {
+				uci set firewall.${name}_dhcp=rule
+				uci set firewall.${name}_dhcp.name="Allow-DHCP-${name}"
+				uci set firewall.${name}_dhcp.src="${name}"
+				uci set firewall.${name}_dhcp.src_port="68"
+				uci set firewall.${name}_dhcp.dest_port="67"
+				uci set firewall.${name}_dhcp.proto="udp"
+				uci set firewall.${name}_dhcp.family="ipv4"
+				uci set firewall.${name}_dhcp.target="ACCEPT"
+				diff=1
+			}
+
+			[ -z "$(uci -q get firewall.${name}_ping)" ] && {
+				uci set firewall.${name}_ping=rule
+				uci set firewall.${name}_ping.name="Allow-Ping-${name}"
+				uci set firewall.${name}_ping.src="${name}"
+				uci set firewall.${name}_ping.dest_ip="${ipaddr}"
+				uci set firewall.${name}_ping.proto="icmp"
+				uci set firewall.${name}_ping.icmp_type="echo-request"
+				uci set firewall.${name}_ping.family="ipv4"
+				uci set firewall.${name}_ping.target="ACCEPT"
+				diff=1
+			}
+
+			[ $diff -eq 1 ] && uci -q commit firewall
+		}
+
 		_net_setup() {
 			net_check_for_vlan() {
 				local section=$1
@@ -36,37 +211,114 @@ EOF
 				}
 			}
 
+			net_check_for_network() {
+				local section=$1
+				local vid=$2
+
+				config_get device "$section" device
+
+				[ "${AL_BRIDGE}.$vid" = "$device" ] && {
+					echo "1"
+					break
+				}
+			}
+
+			net_set_primary() {
+				local section=$1
+				local pvid=$2
+
+				config_get device "$section" device
+
+				[ "${AL_BRIDGE}" = "$device" ] && {
+					uci -q set network.${section}.device="${AL_BRIDGE}.${pvid}"
+					uci -q commit network
+					diff="1"
+					break;
+				}
+			}
 			local vid=$1
-			local name="vlan${vid}"
-			local br_dev="${AL_BRIDGE/-/_}"
-			local tag=":t"
-			local self_flags="untagged"
+			diff=""
 
 			config_load network
 
+			#[ -x "/usr/sbin/mapcontroller" ] && config_foreach net_set_primary interface $PRIMARY_VID
+
 			exists=$(config_foreach net_check_for_vlan bridge-vlan $vid)
+			[ -z "$exists" ] && {
+				local name="vlan${vid}"
+				local br_dev="${AL_BRIDGE/-/_}"
+				local tag=":t"
+				local self_flags="untagged"
 
-			[ -z "$exists" ] || return
+				uci -q set network.${name}="bridge-vlan"
+				uci -q set network.${name}.name="${name}"
+				uci -q set network.${name}.device="$AL_BRIDGE"
+				uci -q set network.${name}.vlan="$vid"
 
-			uci -q set network.${name}="bridge-vlan"
-			uci -q set network.${name}.name="${name}"
-			uci -q set network.${name}.device="$AL_BRIDGE"
-			uci -q set network.${name}.vlan="$vid"
+				[ "${vid}" = "${PRIMARY_VID}" ] && {
+#					self_flags="untagged pvid"
+					uci -q set network.${name}.flags="untagged pvid"
+					tag=":*"
+				}
 
-			[ "${vid}" = "${PRIMARY_VID}" ] && {
-				self_flags="untagged pvid"
-				tag=":*"
+#				uci -q set network.${name}.flags="${self_flags}"
+				uci -q set network.${name}.local='1'
+
+				for port in $(uci -q get network.${br_dev}.ports) ; do
+					uci -q get network.${name}.ports | grep -q "${port}${tag}" && continue
+					uci -q add_list network.${name}.ports="${port}${tag}"
+				done
+
+				uci -q commit network
+				diff="1"
 			}
 
-			uci -q set network.${name}.flags="${self_flags}"
-			uci -q set network.${name}.local='1'
+			exists=$(config_foreach net_check_for_network interface $vid)
+			[ -z "$exists" -a "$PRIMARY_VID" != "$vid" -a -x "/usr/sbin/mapcontroller" ] && {
+				net_get_albridge_ip() {
+					local section=$1
 
-			for port in $(uci -q get network.${br_dev}.ports) ; do
-				uci -q get network.${name}.ports | grep -q "${port}${tag}" && continue
-				uci -q add_list network.${name}.ports="${port}${tag}"
-			done
+					config_get device "$section" device
 
-			uci -q commit network
+					[ "${AL_BRIDGE}" = "$device" -o "${AL_BRIDGE}.${PRIMARY_VID}" = "$device" ] && {
+						ipaddr="$(uci -q get network.${section}.ipaddr)"
+						netmask="$(uci -q get network.${section}.netmask)"
+						break;
+					}
+				}
+				local name="guest${vid}"
+				local br_dev="${AL_BRIDGE/-/_}"
+				local tag=":t"
+				local self_flags="untagged"
+				local subnet=$(($vid % 256))
+				netmask="255.255.255.0"
+				ipaddr="192.168.1.1"
+
+				config_load network
+
+				config_foreach net_get_albridge_ip interface $PRIMARY_VID
+
+				# replace third octet of the ip with $subnet
+				ipaddr=$(echo $ipaddr | sed "s/\(\([0-9]\{1,3\}\.\)\{2\}\)[0-9]\{1,3\}/\1${subnet}/")
+
+				uci -q set network.${name}="interface"
+				uci -q set network.${name}.device="${AL_BRIDGE}.$vid"
+				uci -q set network.${name}.ipaddr="$ipaddr"
+				uci -q set network.${name}.netmask="$netmask"
+				uci -q set network.${name}.proto="static"
+
+				uci -q commit network
+				diff="1"
+			}
+
+			[ -z "$(uci -q get network.guest${vid}_8021q)" -a $PRIMARY_VID != $vid ] && {
+				uci -q set network.guest${vid}_8021q="device"
+				uci -q set network.guest${vid}_8021q.ifname="${AL_BRIDGE}"
+				uci -q set network.guest${vid}_8021q.name="${AL_BRIDGE}.$vid"
+				uci -q set network.guest${vid}_8021q.type="8021q"
+				uci -q set network.guest${vid}_8021q.vid="$vid"
+				uci -q set network.guest${vid}_8021q.native="1"
+			}
 		}
 
 		vid=$1
@@ -81,6 +333,11 @@ EOF
                 logger -t vlan "setup ts vid $vid"
                 _net_setup ${vid}
 
+		[ -x "/usr/sbin/mapcontroller" -a "$PRIMARY_VID" != "$vid" ] && {
+			_dhcp_setup guest${vid}
+			_firewall_setup guest${vid} $vid
+		}
+
                 # Disable pktfwd here and flush FlowCache rules
                 echo 0 > /proc/pktfwd_dhd/enable
                 echo 0 > /proc/pktfwd_wl/enable
@@ -122,14 +379,13 @@ EOF
 
 		[ -n "dhcp_reload" ] && /etc/init.d/dnsmasq reload
 		if [ "$restart" = "1" ]; then
-			dbg "trigger network restart"
+			ts_dbg "trigger network restart"
 			/etc/init.d/network restart
 		else
 			ubus call uci commit '{"config":"network"}'
 		fi
 		/etc/init.d/firewall reload
 
-
 		#for sink in $(ubus list network.interface.sink*) ; do
 		#	local sink_vlan=${sink/network.interface./}_vlan
 		#done
@@ -161,8 +417,8 @@ EOF
 				fi
 			done
 
-			uci -q delete network.$section
 			restart="1"
+			_guest_cleanup $vlan
 		}
 
 		config_load network
@@ -170,36 +426,30 @@ EOF
 
 		if [ "$restart" = "1" ]; then
 			uci commit network
-			dbg "trigger network restart"
+			ts_dbg "trigger network restart"
 			/etc/init.d/network restart
 		fi
 	}
 
 	ts_cleanup() {
-		local al_bridge=$(uci -q get mapagent.agent.al_bridge)
-		restart=""
-
-		[ "$al_bridge" = "" ] && al_bridge="br-lan"
-
-		bridge_device_teardown() {
+		guest_teardown() {
 			local section=$1
-			local bridge=$2
-			config_get device "$section" device
+			local config=$2
+			local val=$3
+			local option=$4
 
-			[ "$bridge" != "$device" ] && continue
+			config_get name "$section" "$option"
 
-			uci -q delete network.$section
+			[ "$val" != "$name" ] && continue
+
+			uci delete ${config}.${section}
+			uci commit ${config}
 			restart="1"
 		}
+		local vid=$1
+		restart=""
 
-		config_load network
-		config_foreach bridge_device_teardown bridge-vlan $al_bridge
-
-		if [ "$restart" = "1" ]; then
-			uci commit network
-			dbg "trigger network restart"
-			/etc/init.d/network restart
-		fi
+		_guest_cleanup $vid
 
 		# enable pktfwd again and flush FlowCache rules
 		echo 1 > /proc/pktfwd_dhd/enable
@@ -212,37 +462,80 @@ EOF
 	}
 
 	ts_isolate() {
+		ts_isolate_radio() {
+			local section=$1
+			local action=$2
+			local band=$3
+			local vid=$4
+			local ifname=$5
+
+			config_get apband "$section" band
+			[ "$band" = "$apband" ] && continue
+
+			config_get apvid "$section" vid
+			[ "$vid" != "$apvid" ] && continue
+
+			config_get apifname "$section" ifname
+			[ "$ifname" = "$apifname" ] && continue # this should never happen
+
+			ebtables -D FORWARD -i $ifname --o $apifname -j DROP > /dev/null 2>&1
+
+			[ "$action" != "add" ] && continue
+
+			ebtables -A FORWARD -i $ifname --o $apifname -j DROP > /dev/null 2>&1
+		}
 		local action=$1
 		shift
 		local pvid=$1 # pvid
 		shift
+		local vid=$1 # vid
+		shift
+		local band=$1 # band
+		shift
 		local ifname=$1 # guest fbss name
 		shift
-		local ifprefix=$@ # 4addr mode ifname prefix
+		local ifprefix=$1 # 4addr mode ifname prefix
+		local br_dev="${AL_BRIDGE/-/_}"
 
 		[ -z "$pvid" -o -z "$ifprefix" -o -z "$ifname" ] && return
 
+		config_load mapagent
+		config_foreach ts_isolate_radio ap $action $band $vid $ifname
+
+		# must not drop traffic to upstream
+		json_load "$(cat $MAP_BH_FILE)"
+		json_get_var bk_ifname ifname
+		json_cleanup
+
 		for prefix in $@; do
-			ebtables -D FORWARD -i $ifname --o ${prefix}+ --vlan-id ! $pvid -j DROP -p 802_1Q > /dev/null 2>&1
-			ebtables -D FORWARD -i ${prefix}+ --o ${ifname} --vlan-id ! $pvid -j DROP -p 802_1Q > /dev/null 2>&1
+			ebtables -D FORWARD -i $ifname --o ${prefix}+ -j DROP > /dev/null 2>&1
+			ebtables -D FORWARD -i ${prefix}+ --o $ifname -j DROP > /dev/null 2>&1
+
+			# isolate eth interfaces
+			for port in $(uci -q get network.${br_dev}.ports) ; do
+					ebtables -D FORWARD -i $ifname --o $port -j DROP > /dev/null 2>&1
+					ebtables -D FORWARD -i $port --o $ifname -j DROP  > /dev/null 2>&1
+
+					[ "$action" != "add" -o "$port" = "$bk_ifname" ] && continue
+					ebtables -A FORWARD -i $ifname --o $port -j DROP > /dev/null 2>&1
+					ebtables -A FORWARD -i $port --o $ifname -j DROP > /dev/null 2>&1
+			done
 
 			[ "$action" != "add" ] && continue
-			ebtables -A FORWARD -i $ifname --o ${prefix}+ --vlan-id ! $pvid -j DROP -p 802_1Q > /dev/null 2>&1
-			ebtables -A FORWARD -i ${prefix}+ --o ${ifname} --vlan-id ! $pvid -j DROP -p 802_1Q > /dev/null 2>&1
+			ebtables -A FORWARD -i $ifname --o ${prefix}+ -j DROP > /dev/null 2>&1
+			ebtables -A FORWARD -i ${prefix}+ --o $ifname -j DROP > /dev/null 2>&1
 		done
-
-
 	}
 
 	local func=$1
 	shift
 
 	case "$func" in
-		create) dbg "create $@"; ts_create $@;;
-		keep) dbg "keep $@"; ts_keep $@;;
-		reload) dbg "reload $@"; ts_reload $@;;
-		cleanup) dbg "cleanup $@"; ts_cleanup $@;;
-		isolate) dbg "isolate $@"; ts_isolate $@;;
+		create) ts_dbg "create $@"; ts_create $@;;
+		keep) ts_dbg "keep $@"; ts_keep $@;;
+		reload) ts_dbg "reload $@"; ts_reload $@;;
+		cleanup) ts_dbg "cleanup $@"; ts_cleanup $@;;
+		isolate) ts_dbg "isolate $@"; ts_isolate $@;;
 		--help|help) ts_usage;;
 		*) ts_usage; exit 1;;
 	esac

map-controller/Makefile

@@ -5,9 +5,9 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=map-controller
-PKG_VERSION:=2.8.0.19
+PKG_VERSION:=2.8.0.25
 PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)
-PKG_SOURCE_VERSION:=6d9bf21f968959319d908fd693c4489a710f5800
+PKG_SOURCE_VERSION:=209ffb0bb4932e29e3d4d05f515b71985491abce
 
 LOCAL_DEV=0
 ifneq ($(LOCAL_DEV),1)

map-topology/Config.in

@@ -18,5 +18,9 @@ config TOPOLOGYD_EASYMESH_VENDOR_EXT_OUI
 	enabled through TOPOLOGYD_EASYMESH_VENDOR_EXT. Please provide the Vendor's OUI
 	through which such features would be exposed.
 
+config TOPOLOGYD_ACTIVE_CONN_LIBCONNTRACK
+	bool "Support active connection fetch using netlink"
+	default n
+
 endmenu
 endif

map-topology/Makefile

@@ -6,11 +6,11 @@ include $(TOPDIR)/rules.mk
 include $(INCLUDE_DIR)/kernel.mk
 
 PKG_NAME:=map-topology
-PKG_VERSION:=2.5.0.15
+PKG_VERSION:=2.5.0.18
 
 LOCAL_DEV:=0
 ifneq ($(LOCAL_DEV),1)
-PKG_SOURCE_VERSION:=ad2df376c558d16286f21308759342cb470f3efd
+PKG_SOURCE_VERSION:=be7e37f2c85f3142af827a0279d2eec7088d796a
 PKG_SOURCE_PROTO:=git
 PKG_SOURCE_URL:=https://dev.iopsys.eu/iopsys/map-topology.git
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-$(PKG_SOURCE_VERSION).tar.xz
@@ -47,6 +47,10 @@ endef
 
 MAKE_PATH:=src
 
+ifeq ($(CONFIG_TOPOLOGYD_ACTIVE_CONN_LIBCONNTRACK),y)
+TARGET_CFLAGS += -DACTIVE_CONN_LIBCONNTRACK
+endif
+
 ifeq ($(CONFIG_TOPOLOGYD_EASYMESH_VENDOR_EXT),y)
 TARGET_CFLAGS += -DEASYMESH_VENDOR_EXT_OUI=\\\"$(CONFIG_TOPOLOGYD_EASYMESH_VENDOR_EXT_OUI)\\\"
 endif

obuspa/Makefile

@@ -5,7 +5,7 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=obuspa
-PKG_VERSION:=5.0.0.16.6
+PKG_VERSION:=5.0.0.16.7
 
 LOCAL_DEV:=0
 ifneq ($(LOCAL_DEV),1)

obuspa/files/etc/config/obuspa

@@ -2,7 +2,7 @@ config obuspa 'global'
 	option enabled '1'
 	option interface 'loopback'
 	#option ifname 'lo'
-	option debug '1'
+	option debug '0'
 	option log_level '1'
 	option prototrace '0'
 	#option db_file '/etc/obuspa/usp.db'

obuspa/patches/0004-suppress-notification-logs.patch

@@ -0,0 +1,20 @@
+--- a/src/core/data_model.c
++++ b/src/core/data_model.c
+@@ -1239,7 +1239,7 @@ int DATA_MODEL_NotifyInstanceAdded(char
+     // Exit if instance already exists - nothing to do
+     if (exists)
+     {
+-        USP_ERR_SetMessage("%s: Object (%s) already exists in the data model", __FUNCTION__, path);
++        // USP_ERR_SetMessage("%s: Object (%s) already exists in the data model", __FUNCTION__, path);
+         return USP_ERR_CREATION_FAILURE;
+     }
+ 
+@@ -1324,7 +1324,7 @@ int DATA_MODEL_NotifyInstanceDeleted(cha
+     // Exit if instance does not exist - nothing to do
+     if (exists == false)
+     {
+-        USP_ERR_SetMessage("%s: Object (%s) does not exist in the data model", __FUNCTION__, path);
++        // USP_ERR_SetMessage("%s: Object (%s) does not exist in the data model", __FUNCTION__, path);
+         return USP_ERR_OBJECT_DOES_NOT_EXIST;
+     }
+ 

wfadatad/Makefile

@@ -5,12 +5,12 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=wfadatad
-PKG_VERSION:=2.10.0.8
+PKG_VERSION:=2.10.1.2
 
 LOCAL_DEV=0
 ifneq ($(LOCAL_DEV),1)
 PKG_SOURCE_PROTO:=git
-PKG_SOURCE_VERSION:=0f30582473eed26864f243eae22d21bc54e1faea
+PKG_SOURCE_VERSION:=40c8630ec755840e0ece16ab3102d056563daef3
 PKG_SOURCE_URL:=https://dev.iopsys.eu/iopsys/wfadatad.git
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_SOURCE_VERSION).tar.gz
 PKG_MIRROR_HASH:=skip