openwrt/package/network/config/wifi-scripts/files-ucode/usr/share/schema/wireless.wifi-iface.json

{
	"$id": "https://openwrt.org/wifi.iface.json",
	"$schema": "http://json-schema.org/draft-07/schema#",
	"description": "OpenWrt WiFi Interface Schema",
	"type": "object",
	"properties": {
		"access_network_type": {
			"description": "Interworking Access Network Type",
			"type": "number",
			"minimum": 0,
			"maximum": 15
		},
		"acct_interval": {
			"type": "alias",
			"default": "radius_acct_interim_interval"
		},
		"acct_port": {
			"type": "alias",
			"default": "acct_server_port"
		},
		"acct_secret": {
			"type": "alias",
			"default": "acct_server_shared_secret"
		},
		"acct_server": {
			"type": "alias",
			"default": "acct_server_addr"
		},
		"acct_server_addr": {
			"description": "RADIUS accounting server to handle client authentication",
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"acct_server_port": {
			"description": "RADIUS accounting port",
			"type": "number",
			"default": 1813
		},
		"acct_server_shared_secret": {
			"description": "Shared accounting RADIUS secret",
			"type": "string"
		},
		"airtime_bss_limit": {
			"description": "Whether the current BSS should be limited (when airtime_mode=3)",
			"type": "boolean"
		},
		"airtime_bss_weight": {
			"description": "Per-BSS airtime weight. In multi-BSS mode, set for each BSS and hostapd will configure station weights to enforce the correct ratio between BSS weights depending on the number of active stations",
			"type": "number"
		},
		"airtime_sta_weight": {
			"description": "Static configuration of station weights (when airtime_mode=1). Kernel default weight is 256",
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"altsubject_match": {
			"description": "Semicolon separated string of entries to be matched against the alternative subject name of the authentication server certificate",
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"altsubject_match2": {
			"type": "array"
		},
		"anonymous_identity": {
			"description": "Anonymous identity string for EAP",
			"type": "string"
		},
		"anqp_3gpp_cell_net": {
			"description": "3GPP Cellular Network information",
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"anqp_domain_id": {
			"description": "An identifier for a set of APs in an ESS that share the same common ANQP information",
			"type": "number",
			"minimum": 0,
			"maximum": 65535,
			"default": 0
		},
		"ap_isolate": {
			"description": "Isolates wireless clients from each other, only applicable in ap mode",
			"type": "boolean",
			"default": false
		},
		"ap_max_inactivity": {
			"description": "Station inactivity limit in seconds: If a station does not send anything in ap_max_inactivity seconds, an empty data frame is sent to it in order to verify whether it is still in range. If this frame is not ACKed, the station will be disassociated and then deauthenticated",
			"type": "number"
		},
		"ap_pin": {
			"description": "Static access point PIN for WPS",
			"type": "string"
		},
		"ap_setup_locked": {
			"description": "AP can be configured into a locked state where new WPS Registrar are not accepted",
			"type": "boolean"
		},
		"anqp_elem": {
			"description": "Arbitrary ANQP-element configuration",
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"asra": {
			"description": "Additional Step Required for Access",
			"type": "boolean",
			"default": false
		},
		"assoc_sa_query_max_timeout": {
			"description": "Specifies the 802.11w Association SA Query maximum timeout.",
			"type": "number",
			"minimum": 1,
			"maximum": 4294967295
		},
		"assoc_sa_query_retry_timeout": {
			"description": "Association SA Query retry timeout",
			"type": "number",
			"minimum": 1,
			"maximum": 4294967295
		},
		"auth": {
			"description": "Defines the phase 2 (inner) authentication method, only applicable if eap_type is peap or ttl",
			"type": "string"
		},
		"auth_cache": {
			"type": "alias",
			"default": "okc"
		},
		"auth_port": {
			"type": "alias",
			"default": "auth_server_port"
		},
		"auth_secret": {
			"type": "alias",
			"default": "auth_server_shared_secret"
		},
		"auth_server": {
			"type": "alias",
			"default": "auth_server_addr"
		},
		"auth_server_addr": {
			"description": "RADIUS authentication server to handle client authentication",
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"auth_server_port": {
			"description": "RADIUS authentication port",
			"type": "number",
			"default": 1812
		},
		"auth_server_shared_secret": {
			"description": "Shared authentication RADIUS secret",
			"type": "string"
		},
		"basic_rate": {
			"type": "array"
		},
		"beacon_prot": {
			"description": "Management frame protection for Beacon frames",
			"type": "boolean"
		},
		"bss_load_update_period": {
			"description": "BSS Load update period (in BUs)",
			"type": "number",
			"default": 60
		},
		"bss_transition": {
			"description": "BSS Transition Management",
			"type": "boolean"
		},
		"bssid": {
			"description": "Override the BSSID of the network",
			"type": "string"
		},
		"bssid_blacklist": {
			"type": "array"
		},
		"bssid_whitelist": {
			"type": "array"
		},
		"ca_cert": {
			"description": "Specifies the path the CA certificate used for authentication",
			"type": "string"
		},
		"ca_cert2_usesystem": {
			"type": "boolean"
		},
		"ca_cert_usesystem": {
			"type": "boolean"
		},
		"chan_util_avg_period": {
			"description": "Channel utilization averaging period (in BUs)",
			"type": "number",
			"default": 600
		},
		"civic": {
			"description": "The content of a location civic measurement subelement",
			"type": "string"
		},
		"client_cert": {
			"description": "File path to client certificate file (PEM/DER)",
			"type": "string"
		},
		"dae_client": {
			"type": "alias",
			"default": "radius_das_client"
		},
		"dae_port": {
			"type": "alias",
			"default": "radius_das_port"
		},
		"dae_secret": {
			"type": "alias",
			"default": "radius_das_secret"
		},
		"default_disabled": {
			"type": "alias",
			"default": "disabled"
		},
		"device": {
			"description": "Devices to enable this interface on (wifi-device section names)",
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"device_name": {
			"description": "Primary Device Name used by WPS",
			"type": "string",
			"default": "OpenWrt AP"
		},
		"device_type": {
			"description": "Primary Device Type used by WPS",
			"type": "string",
			"default": "6-0050F204-1"
		},
		"disabled": {
			"description": "Do not bring the interface up automatically",
			"type": "boolean"
		},
		"disable_dgaf": {
			"description": "Disable Downstream Group-Addressed Forwarding",
			"type": "boolean",
			"default": false
		},
		"disassoc_low_ack": {
			"description": "Disassociate stations based on excessive transmission failures or other indications of connection loss. This depends on the driver capabilities and may not be available with all drivers.",
			"type": "boolean",
			"default": true
		},
		"domain_match": {
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"domain_match2": {
			"type": "array"
		},
		"domain_name" : {
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"domain_suffix_match": {
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"domain_suffix_match2": {
			"type": "array"
		},
		"dtim_period": {
			"description": "Set the DTIM (delivery traffic information message) period. There will be one DTIM per this many beacon frames. This may be set between 1 and 255. This option only has an effect on ap wifi-ifaces.",
			"type": "number",
			"default": 2,
			"minimum": 1,
			"maximum": 255
		},
		"dynamic_ownip": {
			"type": "alias",
			"default": "dynamic_own_ip_addr"
		},
		"dynamic_own_ip_addr": {
			"type": "boolean"
		},
		"dynamic_vlan": {
			"description": "Allow RADIUS authentication server to decide which VLAN is used for the stations (0 = disabled, 1 = optional, 2 = required)",
			"type": "number",
			"enum": [ 0, 1, 2 ],
			"default": 0
		},
		"eap_reauth_period": {
			"description": "EAP reauthentication period in seconds",
			"type": "number"
		},
		"eap_server": {
			"description": "Use integrated EAP server instead of external RADIUS authentication server",
			"type": "boolean"
		},
		"eap_type": {
			"type": "string"
		},
		"eap_user_file": {
			"description": "Path for EAP server user database",
			"type": "string"
		},
		"eapol_version": {
			"description": "IEEE 802.1X/EAPOL version",
			"type": "number",
			"enum": [ 1, 2 ]
		},
		"enable": {
			"description": "Enable the interface",
			"type": "boolean",
			"default": true
		},
		"encryption": {
			"type": "string"
		},
		"esr": {
			"description": "Emergency services reachable",
			"type": "boolean",
			"default": false
		},
		"ext_registrar": {
			"description": "WPS UPnP interface",
			"type": "boolean"
		},
		"fils": {
			"description": "Enable FILS",
			"type": "boolean"
		},
		"fils_dhcp": {
			"description": "DHCP server for FILS HLP. Set to '*' for automatic lookup.",
			"type": "string"
		},
		"ft_iface": {
			"description": "Inter-AP communication interface for 802.11r",
			"type": "string"
		},
		"ft_over_ds": {
			"description": "Whether to enable FT-over-DS",
			"type": "boolean",
			"default": false
		},
		"ft_psk_generate_local": {
			"description": "Whether to generate FT response locally for PSK networks. This avoids use of PMK-R1 push/pull from other APs with FT-PSK networks as the required information (PSK and other session data) is already locally available.",
			"type": "boolean"
		},
		"ftm_responder": {
			"description": "Publish fine timing measurement (FTM) responder functionality",
			"type": "boolean"
		},
		"gas_address3": {
			"type": "string"
		},
		"hidden": {
			"type": "alias",
			"default": "ignore_broadcast_ssid"
		},
		"hessid": {
			"description": "Homogeneous ESS identifier",
			"type": "string"
		},
		"hostapd_bss_options": {
			"description": "Additional raw options to be added",
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"hs20": {
			"description": "Enable Hotspot 2.0 support",
			"type": "boolean"
		},
		"hs20_conn_capab": {
			"description": "Connection Capability",
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"hs20_deauth_req_timeout": {
			"description": "Deauthentication request timeout",
			"type": "number",
			"default": 60
		},
		"hs20_operating_class": {
			"description": "Operating Class Indication",
			"type": "string"
		},
		"hs20_t_c_filename": {
			"description": "Terms and Conditions information",
			"type": "string"
		},
		"hs20_t_c_server_url": {
			"description": "Terms and Conditions server",
			"type": "string"
		},
		"hs20_t_c_timestamp": {
			"description": "Terms and Conditions timestamp",
			"type": "string"
		},
		"hs20_wan_metrics": {
			"description": "WAN Metrics",
			"type": "string"
		},
		"identity": {
			"description": "Identity string for EAP",
			"type": "string"
		},
		"ieee80211k": {
			"description": "Enables Radio Resource Measurement (802.11k) support",
			"type": "boolean"
		},
		"ieee80211r": {
			"description": "Enables fast BSS transition (802.11r) support.",
			"type": "boolean"
		},
		"ieee80211w": {
			"description": "Enables MFP (802.11w) support (0 = disabled, 1 = optional, 2 = required). Requires the 'full' version of wpad/hostapd and support from the Wi-Fi driver",
			"type": "number",
			"enum": [ 0, 1, 2 ],
			"default": 0
		},
		"ieee80211w_max_timeout": {
			"type": "alias",
			"default": "assoc_sa_query_max_timeout"
		},
		"ieee80211w_mgmt_cipher": {
			"description": "Group Management cypher",
			"type": "string"
		},
		"ieee80211w_retry_timeout": {
			"type": "alias",
			"default": "assoc_sa_query_retry_timeout"
		},
		"ifname": {
			"description": "Specifies a custom name for the Wi-Fi interface, which is otherwise automatically named. Maximum length: 15 characters",
			"type": "string"
		},
		"ignore_broadcast_ssid": {
			"description": "Disables the broadcasting of beacon frames if set to 1 and, in doing so, hides the ESSID. Where the ESSID is hidden, clients may fail to roam and airtime efficiency may be significantly reduced.",
			"type": "boolean",
			"default": false
		},
		"internet": {
			"description": "Whether the network provides connectivity to the Internet",
			"type": "boolean",
			"default": true
		},
		"isolate": {
			"type": "alias",
			"default": "ap_isolate"
		},

		"iw_access_network_type": {
			"type": "alias",
			"default": "access_network_type"
		},
		"iw_anqp_3gpp_cell_net": {
			"type": "alias",
			"default": "anqp_3gpp_cell_net"
		},
		"iw_anqp_elem": {
			"type": "alias",
			"default": "anqp_elem"
		},
		"iw_asra": {
			"type": "alias",
			"default": "asra"
		},
		"iw_domain_name": {
			"type": "alias",
			"default": "domain_name"
		},
		"iw_enabled": {
			"type": "boolean",
			"default": false
		},
		"iw_esr": {
			"type": "alias",
			"default": "esr"
		},
		"iw_gas_address3": {
			"type": "alias",
			"default": "gas_address3"
		},
		"iw_hessid": {
			"type": "alias",
			"default": "hessid"
		},
		"iw_internet": {
			"type": "alias",
			"default": "internet"
		},
		"iw_ipaddr_type_availability": {
			"type": "number"
		},
		"iw_nai_realm": {
			"type": "alias",
			"default": "nai_realm"
		},
		"iw_network_auth_type": {
			"type": "alias",
			"default": "network_auth_type"
		},
		"iw_qos_map_set": {
			"type": "alias",
			"default": "qos_map_set"
		},
		"roaming_consortium": {
			"type": "alias",
			"default": "roaming_consortium"
		},
		"iw_uesa": {
			"type": "alias",
			"default": "uesa"
		},
		"iw_venue_group": {
			"type": "alias",
			"default": "venue_group"
		},
		"iw_venue_name": {
			"type": "alias",
			"default": "venue_name"
		},
		"iw_venue_type": {
			"type": "alias",
			"default": "venue_type"
		},
		"iw_venue_url": {
			"type": "alias",
			"default": "venue_url"
		},
		"key": {
			"description": "Encryption key",
			"type": "string"
		},
		"lci": {
			"description": "The content of a LCI measurement subelement",
			"type": "string"
		},
		"macaddr": {
			"description": "Override the BSSID of the network",
			"type": "string"
		},
		"macfile": {
			"description": "File containing a list MACs used by the macfilter",
			"type": "string"
		},
		"macfilter": {
			"description": "Allow/deny associations based on the clients MAC",
			"type": "string",
			"enum": [ "allow", "deny" ]
		},
		"maclist": {
			"description": "List of MACs used by the macfilter option",
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"manufacturer": {
			"description": "Manufacturer used by WPS",
			"type": "string",
			"default": "www.openwrt.org"
		},
		"max_inactivity": {
			"type": "alias",
			"default": "ap_max_inactivity"
		},
		"max_listen_int": {
			"type": "alias",
			"default": "max_listen_interval"
		},
		"max_listen_interval": {
			"description": "How many Beacon periods STAs are allowed to remain asleep",
			"type": "number"
		},
		"max_num_sta": {
			"description": "Maximum number of stations allowed in station table",
			"type": "number"
		},
		"maxassoc": {
			"type": "alias",
			"default": "max_num_sta"
		},
		"mbo": {
			"description": "Multiband Operation",
			"type": "boolean"
		},
		"mcast_rate": {
			"description": "Allowed multicast rate",
			"type": "number"
		},
		"mesh_auto_open_plinks": {
			"type": "boolean"
		},
		"mesh_awake_window": {
			"type": "number"
		},
		"mesh_confirm_timeout": {
			"type": "number"
		},
		"mesh_element_ttl": {
			"type": "number"
		},
		"mesh_fwding": {
			"description": "Enable 802.11s layer-2 routing and forwarding",
			"type": "boolean"
		},
		"mesh_nolearn": {
			"description": "Disable 802.11s path discovery",
			"type": "boolean"
		},
		"mesh_gate_announcements": {
			"type": "number"
		},
		"mesh_holding_timeout": {
			"type": "number"
		},
		"mesh_hwmp_active_path_timeout": {
			"type": "number"
		},
		"mesh_hwmp_active_path_to_root_timeout": {
			"type": "number"
		},
		"mesh_hwmp_confirmation_interval": {
			"type": "number"
		},
		"mesh_hwmp_max_preq_retries": {
			"type": "number"
		},
		"mesh_hwmp_net_diameter_traversal_time": {
			"type": "number"
		},
		"mesh_hwmp_preq_min_interval": {
			"type": "number"
		},
		"mesh_hwmp_rann_interval": {
			"type": "number"
		},
		"mesh_hwmp_root_interval": {
			"type": "number"
		},
		"mesh_hwmp_rootmode": {
			"type": "number"
		},
		"mesh_id": {
			"type": "string"
		},
		"mesh_max_peer_links": {
			"type": "number"
		},
		"mesh_max_retries": {
			"type": "number"
		},
		"mesh_min_discovery_timeout": {
			"type": "number"
		},
		"mesh_path_refresh_time": {
			"type": "number"
		},
		"mesh_plink_timeout": {
			"type": "number"
		},
		"mesh_power_mode": {
			"type": "string"
		},
		"mesh_retry_timeout": {
			"type": "number"
		},
		"mesh_rssi_threshold": {
			"type": "number"
		},
		"mesh_sync_offset_max_neighor": {
			"type": "number"
		},
		"mesh_ttl": {
			"type": "number"
		},
		"mlo": {
			"description": "Multi-Link Operation",
			"type": "boolean"
		},
		"mobility_domain": {
			"description": "DID is used to indicate a group of APs between which a STA can use Fast BSS Transition.",
			"type": "string"
		},
		"mode": {
			"type": "string"
		},
		"multi_ap": {
			"description": "Enable Multi-AP functionality",
			"type": "number"
		},
		"multi_ap_vlanid": {
			"description": "Multi-AP Default VLAN ID",
			"type": "number"
		},
		"multi_ap_profile": {
			"description": "Multi-AP Profile",
			"type": "number"
		},
		"multi_ap_backhaul_key": {
			"type": "string"
		},
		"multi_ap_backhaul_ssid": {
			"description": "Multi-AP backhaul BSS SSID",
			"type": "string"
		},
		"multicast_to_unicast": {
			"description": "Request that the AP will do multicast-to-unicast conversion for ARP, IPv4, and IPv6 frames ",
			"type": "boolean"
		},
		"multicast_to_unicast_all": {
			"type": "alias",
			"default": "multicast_to_unicast"
		},
		"na_mcast_to_ucast": {
			"description": "IPv6 Neighbor Advertisement multicast-to-unicast conversion",
			"type": "boolean"
		},
		"nas_identifier": {
			"description": "NAS-Identifier string for RADIUS messages",
			"type": "string"
		},
		"nai_realm": {
			"description": "NAI Realm information",
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"nasid": {
			"type": "alias",
			"default": "nas_identifier"
		},
		"network": {
			"description": "Specifies one or multiple logical network interfaces declared in the network configuration, each one should be a L3 bridge to be able to attach this L2 wireless interface.",
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"network_auth_type": {
			"description": "Network Authentication Type",
			"type": "string"
		},
		"no_probe_resp_if_max_sta": {
			"description": "Do not answer probe requests if iface_max_num_sta was reached",
			"type": "boolean"
		},
		"ocv": {
			"description": "Operating Channel Validation",
			"type": "number",
			"minimum": 0,
			"maximum": 15
		},
		"okc": {
			"description": "PMKSA and Opportunistic Key Caching",
			"type": "boolean"
		},
		"owe_transition": {
			"description": "Indicate that an OWE BSS shall automatically add an unencrypted transition interface",
			"type": "boolean"
		},
		"owe_transition_bssid": {
			"description": "Pointer to the matching open/OWE BSS",
			"type": "string"
		},
		"owe_transition_ifname": {
			"description": "Alternatively, OWE transition mode BSSID/SSID can be configured with a reference to a BSS operated by this hostapd process.",
			"type": "string"
		},
		"owe_transition_ssid": {
			"description": "The SSID used by the OWE transition device",
			"type": "string"
		},
		"ownip": {
			"type": "alias",
			"default": "own_ip_addr"
		},
		"own_ip_addr": {
			"description": "The own IP address of the access point",
			"type": "string"
		},
		"password:wpakey": {
			"type": "string"
		},
		"pbc_in_m1": {
			"description": "WPS capability discovery workaround for PBC with Windows 7",
			"type": "boolean"
		},
		"per_sta_vif": {
			"description": "Per-Station AP_VLAN interface mode",
			"type": "boolean"
		},
		"pmk_r1_push": {
			"description": "Whether PMK-R1 push is enabled at R0KH",
			"type": "boolean",
			"default": false
		},
		"port:port": {
			"type": "number"
		},
		"powersave": {
			"type": "boolean"
		},
		"ppsk": {
			"description": "Lookup PSK2 Keys up via a Radius server",
			"type": "boolean"
		},
		"preamble": {
			"description": "Short Preamble",
			"type": "boolean",
			"default": true
		},
		"priv_key": {
			"type": "string"
		},
		"priv_key_pwd": {
			"type": "string"
		},
		"private_key": {
			"description": "Private key matching with the server certificate for EAP-TLS/PEAP/TTLS",
			"type": "string"
		},
		"private_key_passwd": {
			"description": "Passphrase for private key",
			"type": "string"
		},
		"proxy_arp": {
			"description": "Proxy ARP",
			"type": "boolean"
		},
		"qos_map_set": {
			"description": "QoS Map Set configuration",
			"type": "string",
			"default": "0,0,2,16,1,1,255,255,18,22,24,38,40,40,44,46,48,56"
		},
		"r0_key_lifetime": {
			"description": "Default lifetime of the PMK-R0 in seconds",
			"type": "number"
		},
		"r0kh": {
			"description": "List of R0KHs in the same Mobility Domain",
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"r1_key_holder": {
			"description": "PMK-R1 Key Holder identifier",
			"type": "string"
		},
		"r1kh": {
			"description": "List of R1KHs in the same Mobility Domain",
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"radios": {
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"radius_acct_interim_interval": {
			"description": "Interim accounting update interval",
			"type": "number"
		},
		"radius_acct_req_attr": {
			"description": "Additional Accounting-Request attributes",
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"radius_auth_req_attr": {
			"description": "Additional Access-Request attributes",
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"radius_client_addr": {
			"description": "RADIUS client forced local IP address for the access point",
			"type": "string"
		},
		"radius_das_client": {
			"description": "DAS client (the host that can send Disconnect/CoA requests)",
			"type": "string"
		},
		"radius_das_port": {
			"description": "Dynamic Authorization Extensions port",
			"type": "number"
		},
		"radius_das_secret": {
			"description": "Dynamic Authorization Extensions secret",
			"type": "string"
		},
		"radius_request_cui" :{
			"description": "Request Chargeable-User-Identity (RFC 4372)",
			"type": "boolean"
		},
		"reassociation_deadline": {
			"description": "Reassociation deadline in time units",
			"type": "number",
			"minimum": 1000,
			"maximum": 65535,
			"default": 20000
		},
		"request_cui": {
			"type": "alias",
			"default": "radius_request_cui"
		},
		"rrm_beacon_report": {
			"description": "Enable beacon report via radio measurements",
			"type": "boolean"
		},
		"rrm_neighbor_report": {
			"description": "Enable neighbor report via radio measurements",
			"type": "boolean"
		},
		"rnr": {
			"description": "Enable reduced neighbor reporting",
			"type": "boolean"
		},
		"roaming_consortium": {
			"description": "Roaming Consortium List",
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"rsn_preauth": {
			"type": "boolean"
		},
		"rsn_override": {
			"type": "number",
			"description": "Use RSNE override IE WPA3 compatibility (0: disabled, 1: enabled, 2:force WPA2 for older devices)",
			"default": 1
		},
		"sae_password_file": {
			"description": "External file containing VLAN SAE MAC address triplets",
			"type": "string"
		},
		"sae_pwe": {
			"description": "SAE mechanism for PWE derivation",
			"type": "number",
			"enum": [ 0, 1, 2 ]
		},
		"sae_require_mfp": {
			"description": "Require MFP for all associations using SAE",
			"type": "boolean"
		},
		"sae_track_password": {
			"description": "Tracking of SAE password use",
			"type": "number"
		},
		"server:host": {
			"type": "string"
		},
		"server_cert": {
			"description": "Server certificate (PEM or DER file) for EAP-TLS/PEAP/TTLS",
			"type": "string"
		},
		"server_id": {
			"description": "Server identity",
			"type": "string"
		},
		"short_preamble": {
			"type": "alias",
			"default": "preamble"
		},
		"skip_inactivity_poll": {
			"description": "The inactivity polling can be disabled to disconnect stations based on inactivity timeout so that idle stations are more likely to be disconnected even if they are still in range of the AP",
			"type": "boolean",
			"default": false
		},
		"spp_amsdu": {
			"description": "Signaling and Payload Protected A-MSDU",
			"type": "boolean"
		},
		"ssid": {
			"type": "string"
		},
		"ssid:string": {
			"type": "string"
		},
		"start_disabled": {
			"type": "number"
		},
		"subject_match": {
			"description": "Substring to be matched against the subject of the authentication server certificate",
			"type": "string"
		},
		"subject_match2": {
			"type": "string"
		},
		"supported_rates": {
			"type": "array"
		},
		"tdls_prohibit": {
			"description": "Prohibit use of TDLS in this BSS",
			"type": "boolean"
		},
		"time_advertisement": {
			"description": "Time advertisement",
			"type": "number",
			"enum": [ 0, 2 ]
		},
		"time_zone": {
			"description": "Local time zone as specified in 8.3 of IEEE Std 1003.1-2004",
			"type": "string"
		},
		"uapsd": {
			"type": "alias",
			"default": "uapsd_advertisement_enabled"
		},
		"uapsd_advertisement_enabled": {
			"description": "WMM-PS Unscheduled Automatic Power Save Delivery [U-APSD]",
			"type": "boolean",
			"default": true
		},
		"uesa": {
			"description": "Unauthenticated emergency service accessible",
			"type": "boolean",
			"default": false			
		},
		"utf8_ssid": {
			"description": "Whether the SSID is to be interpreted using UTF-8 encoding",
			"type": "boolean",
			"default": true
		},
		"vendor_elements": {
			"description": "Additional vendor specific elements for Beacon and Probe Response frames",
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"venue_group": {
			"type": "string"
		},
		"venue_name": {
			"description": "Venue Name information",
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"venue_type": {
			"type": "string"
		},
		"venue_url": {
			"description": "Venue URL information",
			"type": "array",
			"items": {
				"type": "string"
			}
		},
		"vlan_bridge": {
			"description": "Bridge (prefix) to add the wifi and the tagged interface to.",
			"type": "string"
		},
		"vlan_file": {
			"type": "string"
		},
		"vlan_naming": {
			"description": "When hostapd creates a VLAN interface on vlan_tagged_interfaces, it needs to know how to name it.",
			"type": "boolean",
			"default": true
		},
		"vlan_no_bridge": {
			"description": "To not setup a bridge for dynamic vlans",
			"type": "boolean"
		},
		"vlan_tagged_interface": {
			"type": "string"
		},
		"wds": {
			"type": "boolean"
		},
		"wds_bridge": {
			"description": "If bridge parameter is set, the WDS STA interface will be added to the same bridge by default",
			"type": "string"
		},
		"wds_sta": {
			"description": "If bridge parameter is set, the WDS STA interface will be added to the same bridge by default",
			"type": "boolean"
		},
		"wnm_sleep_mode": {
			"description": "WNM-Sleep Mode (extended sleep mode for stations)",
			"type": "boolean"
		},
		"wnm_sleep_mode_no_keys": {
			"description": "WNM-Sleep Mode GTK/IGTK workaround",
			"type": "boolean"
		},
		"wpa_disable_eapol_key_retries": {
			"description": "Workaround for key reinstallation attacks",
			"type": "boolean",
			"default": false
		},
		"wpa_gmk_rekey": {
			"description": "Time interval for rekeying GMK (master key used internally to generate GTKs)",
			"type": "number"
		},
		"wpa_group_rekey": {
			"description": "Time interval for rekeying GTK (broadcast/multicast encryption keys)",
			"type": "number"
		},
		"wpa_master_rekey": {
			"type": "alias",
			"default": "wpa_gmk_rekey"
		},
		"wpa_pair_rekey": {
			"type": "alias",
			"default": "wpa_ptk_rekey"
		},
		"wpa_psk_file": {
			"description": "External file conatining VLAN PSK MAC address triplets",
			"type": "string"
		},
		"wpa_ptk_rekey": {
			"description": "Maximum lifetime for PTK in seconds",
			"type": "number"
		},
		"wpa_strict_rekey": {
			"description": "Rekey GTK when any STA that possesses the current GTK is leaving the BSS",
			"type": "boolean"
		},
		"wps_ap_setup_locked": {
			"type": "alias",
			"default": "ap_setup_locked"
		},
		"wps_device_name": {
			"type": "alias",
			"default": "device_name"
		},
		"wps_device_type": {
			"type": "alias",
			"default": "device_type"
		},
		"wps_independent": {
			"description": "Whether to manage this interface independently from other WPS interfaces",
			"type": "number",
			"default": true
		},
		"wps_label": {
			"description": "Support WPS labels",
			"type": "boolean"
		},
		"wps_manufacturer": {
			"type": "alias",
			"default": "manufacturer"
		},
		"wps_pbc_in_m1": {
			"type": "alias",
			"default": "pbc_in_m1"
		},
		"wps_pin": {
			"type": "alias",
			"default": "ap_pin"
		},
		"wps_pushbutton": {
			"description": "Support WPS pushbutton",
			"type": "boolean"
		}
	}
}