2 *************************************************************************
4 * 5F., No.36, Taiyuan St., Jhubei City,
8 * (c) Copyright 2002-2007, Ralink Technology, Inc.
10 * This program is free software; you can redistribute it and/or modify *
11 * it under the terms of the GNU General Public License as published by *
12 * the Free Software Foundation; either version 2 of the License, or *
13 * (at your option) any later version. *
15 * This program is distributed in the hope that it will be useful, *
16 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
17 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
18 * GNU General Public License for more details. *
20 * You should have received a copy of the GNU General Public License *
21 * along with this program; if not, write to the *
22 * Free Software Foundation, Inc., *
23 * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
25 *************************************************************************
34 -------- ---------- ----------------------------------------------
35 John Chang 2004-09-01 modified for rt2561/2661
37 #include "../rt_config.h"
39 // 2.4 Ghz channel plan index in the TxPower arrays.
40 #define BG_BAND_REGION_0_START 0 // 1,2,3,4,5,6,7,8,9,10,11
41 #define BG_BAND_REGION_0_SIZE 11
42 #define BG_BAND_REGION_1_START 0 // 1,2,3,4,5,6,7,8,9,10,11,12,13
43 #define BG_BAND_REGION_1_SIZE 13
44 #define BG_BAND_REGION_2_START 9 // 10,11
45 #define BG_BAND_REGION_2_SIZE 2
46 #define BG_BAND_REGION_3_START 9 // 10,11,12,13
47 #define BG_BAND_REGION_3_SIZE 4
48 #define BG_BAND_REGION_4_START 13 // 14
49 #define BG_BAND_REGION_4_SIZE 1
50 #define BG_BAND_REGION_5_START 0 // 1,2,3,4,5,6,7,8,9,10,11,12,13,14
51 #define BG_BAND_REGION_5_SIZE 14
52 #define BG_BAND_REGION_6_START 2 // 3,4,5,6,7,8,9
53 #define BG_BAND_REGION_6_SIZE 7
54 #define BG_BAND_REGION_7_START 4 // 5,6,7,8,9,10,11,12,13
55 #define BG_BAND_REGION_7_SIZE 9
56 #define BG_BAND_REGION_31_START 0 // 1,2,3,4,5,6,7,8,9,10,11,12,13,14
57 #define BG_BAND_REGION_31_SIZE 14
59 // 5 Ghz channel plan index in the TxPower arrays.
60 UCHAR A_BAND_REGION_0_CHANNEL_LIST[]={36, 40, 44, 48, 52, 56, 60, 64, 149, 153, 157, 161, 165};
61 UCHAR A_BAND_REGION_1_CHANNEL_LIST[]={36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140};
62 UCHAR A_BAND_REGION_2_CHANNEL_LIST[]={36, 40, 44, 48, 52, 56, 60, 64};
63 UCHAR A_BAND_REGION_3_CHANNEL_LIST[]={52, 56, 60, 64, 149, 153, 157, 161};
64 UCHAR A_BAND_REGION_4_CHANNEL_LIST[]={149, 153, 157, 161, 165};
65 UCHAR A_BAND_REGION_5_CHANNEL_LIST[]={149, 153, 157, 161};
66 UCHAR A_BAND_REGION_6_CHANNEL_LIST[]={36, 40, 44, 48};
67 UCHAR A_BAND_REGION_7_CHANNEL_LIST[]={36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140, 149, 153, 157, 161, 165};
68 UCHAR A_BAND_REGION_8_CHANNEL_LIST[]={52, 56, 60, 64};
69 UCHAR A_BAND_REGION_9_CHANNEL_LIST[]={36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 132, 136, 140, 149, 153, 157, 161, 165};
70 UCHAR A_BAND_REGION_10_CHANNEL_LIST[]={36, 40, 44, 48, 149, 153, 157, 161, 165};
71 UCHAR A_BAND_REGION_11_CHANNEL_LIST[]={36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 149, 153, 157, 161};
73 //BaSizeArray follows the 802.11n definition as MaxRxFactor. 2^(13+factor) bytes. When factor =0, it's about Ba buffer size =8.
74 UCHAR BaSizeArray[4] = {8,16,32,64};
77 ==========================================================================
79 Update StaCfg->ChannelList[] according to 1) Country Region 2) RF IC type,
80 and 3) PHY-mode user selected.
81 The outcome is used by driver when doing site survey.
86 ==========================================================================
88 VOID BuildChannelList(
91 UCHAR i, j, index=0, num=0;
92 PUCHAR pChannelList = NULL;
94 NdisZeroMemory(pAd->ChannelList, MAX_NUM_OF_CHANNELS * sizeof(CHANNEL_TX_POWER));
96 // if not 11a-only mode, channel list starts from 2.4Ghz band
97 if ((pAd->CommonCfg.PhyMode != PHY_11A)
98 #ifdef DOT11_N_SUPPORT
99 && (pAd->CommonCfg.PhyMode != PHY_11AN_MIXED) && (pAd->CommonCfg.PhyMode != PHY_11N_5G)
100 #endif // DOT11_N_SUPPORT //
103 switch (pAd->CommonCfg.CountryRegion & 0x7f)
105 case REGION_0_BG_BAND: // 1 -11
106 NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_0_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_0_SIZE);
107 index += BG_BAND_REGION_0_SIZE;
109 case REGION_1_BG_BAND: // 1 - 13
110 NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_1_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_1_SIZE);
111 index += BG_BAND_REGION_1_SIZE;
113 case REGION_2_BG_BAND: // 10 - 11
114 NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_2_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_2_SIZE);
115 index += BG_BAND_REGION_2_SIZE;
117 case REGION_3_BG_BAND: // 10 - 13
118 NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_3_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_3_SIZE);
119 index += BG_BAND_REGION_3_SIZE;
121 case REGION_4_BG_BAND: // 14
122 NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_4_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_4_SIZE);
123 index += BG_BAND_REGION_4_SIZE;
125 case REGION_5_BG_BAND: // 1 - 14
126 NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_5_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_5_SIZE);
127 index += BG_BAND_REGION_5_SIZE;
129 case REGION_6_BG_BAND: // 3 - 9
130 NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_6_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_6_SIZE);
131 index += BG_BAND_REGION_6_SIZE;
133 case REGION_7_BG_BAND: // 5 - 13
134 NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_7_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_7_SIZE);
135 index += BG_BAND_REGION_7_SIZE;
137 case REGION_31_BG_BAND: // 1 - 14
138 NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_31_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_31_SIZE);
139 index += BG_BAND_REGION_31_SIZE;
141 default: // Error. should never happen
144 for (i=0; i<index; i++)
145 pAd->ChannelList[i].MaxTxPwr = 20;
148 if ((pAd->CommonCfg.PhyMode == PHY_11A) || (pAd->CommonCfg.PhyMode == PHY_11ABG_MIXED)
149 #ifdef DOT11_N_SUPPORT
150 || (pAd->CommonCfg.PhyMode == PHY_11ABGN_MIXED) || (pAd->CommonCfg.PhyMode == PHY_11AN_MIXED)
151 || (pAd->CommonCfg.PhyMode == PHY_11AGN_MIXED) || (pAd->CommonCfg.PhyMode == PHY_11N_5G)
152 #endif // DOT11_N_SUPPORT //
155 switch (pAd->CommonCfg.CountryRegionForABand & 0x7f)
157 case REGION_0_A_BAND:
158 num = sizeof(A_BAND_REGION_0_CHANNEL_LIST)/sizeof(UCHAR);
159 pChannelList = A_BAND_REGION_0_CHANNEL_LIST;
161 case REGION_1_A_BAND:
162 num = sizeof(A_BAND_REGION_1_CHANNEL_LIST)/sizeof(UCHAR);
163 pChannelList = A_BAND_REGION_1_CHANNEL_LIST;
165 case REGION_2_A_BAND:
166 num = sizeof(A_BAND_REGION_2_CHANNEL_LIST)/sizeof(UCHAR);
167 pChannelList = A_BAND_REGION_2_CHANNEL_LIST;
169 case REGION_3_A_BAND:
170 num = sizeof(A_BAND_REGION_3_CHANNEL_LIST)/sizeof(UCHAR);
171 pChannelList = A_BAND_REGION_3_CHANNEL_LIST;
173 case REGION_4_A_BAND:
174 num = sizeof(A_BAND_REGION_4_CHANNEL_LIST)/sizeof(UCHAR);
175 pChannelList = A_BAND_REGION_4_CHANNEL_LIST;
177 case REGION_5_A_BAND:
178 num = sizeof(A_BAND_REGION_5_CHANNEL_LIST)/sizeof(UCHAR);
179 pChannelList = A_BAND_REGION_5_CHANNEL_LIST;
181 case REGION_6_A_BAND:
182 num = sizeof(A_BAND_REGION_6_CHANNEL_LIST)/sizeof(UCHAR);
183 pChannelList = A_BAND_REGION_6_CHANNEL_LIST;
185 case REGION_7_A_BAND:
186 num = sizeof(A_BAND_REGION_7_CHANNEL_LIST)/sizeof(UCHAR);
187 pChannelList = A_BAND_REGION_7_CHANNEL_LIST;
189 case REGION_8_A_BAND:
190 num = sizeof(A_BAND_REGION_8_CHANNEL_LIST)/sizeof(UCHAR);
191 pChannelList = A_BAND_REGION_8_CHANNEL_LIST;
193 case REGION_9_A_BAND:
194 num = sizeof(A_BAND_REGION_9_CHANNEL_LIST)/sizeof(UCHAR);
195 pChannelList = A_BAND_REGION_9_CHANNEL_LIST;
198 case REGION_10_A_BAND:
199 num = sizeof(A_BAND_REGION_10_CHANNEL_LIST)/sizeof(UCHAR);
200 pChannelList = A_BAND_REGION_10_CHANNEL_LIST;
203 case REGION_11_A_BAND:
204 num = sizeof(A_BAND_REGION_11_CHANNEL_LIST)/sizeof(UCHAR);
205 pChannelList = A_BAND_REGION_11_CHANNEL_LIST;
208 default: // Error. should never happen
209 DBGPRINT(RT_DEBUG_WARN,("countryregion=%d not support", pAd->CommonCfg.CountryRegionForABand));
215 UCHAR RadarCh[15]={52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140};
216 for (i=0; i<num; i++)
218 for (j=0; j<MAX_NUM_OF_CHANNELS; j++)
220 if (pChannelList[i] == pAd->TxPower[j].Channel)
221 NdisMoveMemory(&pAd->ChannelList[index+i], &pAd->TxPower[j], sizeof(CHANNEL_TX_POWER));
225 if (pChannelList[i] == RadarCh[j])
226 pAd->ChannelList[index+i].DfsReq = TRUE;
228 pAd->ChannelList[index+i].MaxTxPwr = 20;
234 pAd->ChannelListNum = index;
235 DBGPRINT(RT_DEBUG_TRACE,("country code=%d/%d, RFIC=%d, PHY mode=%d, support %d channels\n",
236 pAd->CommonCfg.CountryRegion, pAd->CommonCfg.CountryRegionForABand, pAd->RfIcType, pAd->CommonCfg.PhyMode, pAd->ChannelListNum));
238 for (i=0;i<pAd->ChannelListNum;i++)
240 DBGPRINT_RAW(RT_DEBUG_TRACE,("BuildChannel # %d :: Pwr0 = %d, Pwr1 =%d, \n ", pAd->ChannelList[i].Channel, pAd->ChannelList[i].Power, pAd->ChannelList[i].Power2));
246 ==========================================================================
248 This routine return the first channel number according to the country
249 code selection and RF IC selection (signal band or dual band). It is called
250 whenever driver need to start a site survey of all supported channels.
252 ch - the first channel number of current country code setting
256 ==========================================================================
259 IN PRTMP_ADAPTER pAd)
261 return pAd->ChannelList[0].Channel;
265 ==========================================================================
267 This routine returns the next channel number. This routine is called
268 during driver need to start a site survey of all supported channels.
270 next_channel - the next channel number valid in current country code setting.
272 return 0 if no more next channel
273 ==========================================================================
276 IN PRTMP_ADAPTER pAd,
280 UCHAR next_channel = 0;
282 for (i = 0; i < (pAd->ChannelListNum - 1); i++)
283 if (channel == pAd->ChannelList[i].Channel)
285 next_channel = pAd->ChannelList[i+1].Channel;
292 ==========================================================================
294 This routine is for Cisco Compatible Extensions 2.X
295 Spec31. AP Control of Client Transmit Power
299 Required by Aironet dBm(mW)
300 0dBm(1mW), 1dBm(5mW), 13dBm(20mW), 15dBm(30mW),
301 17dBm(50mw), 20dBm(100mW)
304 3dBm(Lowest), 6dBm(10%), 9dBm(25%), 12dBm(50%),
305 14dBm(75%), 15dBm(100%)
307 The client station's actual transmit power shall be within +/- 5dB of
308 the minimum value or next lower value.
309 ==========================================================================
311 VOID ChangeToCellPowerLimit(
312 IN PRTMP_ADAPTER pAd,
313 IN UCHAR AironetCellPowerLimit)
315 //valud 0xFF means that hasn't found power limit information
316 //from the AP's Beacon/Probe response.
317 if (AironetCellPowerLimit == 0xFF)
320 if (AironetCellPowerLimit < 6) //Used Lowest Power Percentage.
321 pAd->CommonCfg.TxPowerPercentage = 6;
322 else if (AironetCellPowerLimit < 9)
323 pAd->CommonCfg.TxPowerPercentage = 10;
324 else if (AironetCellPowerLimit < 12)
325 pAd->CommonCfg.TxPowerPercentage = 25;
326 else if (AironetCellPowerLimit < 14)
327 pAd->CommonCfg.TxPowerPercentage = 50;
328 else if (AironetCellPowerLimit < 15)
329 pAd->CommonCfg.TxPowerPercentage = 75;
331 pAd->CommonCfg.TxPowerPercentage = 100; //else used maximum
333 if (pAd->CommonCfg.TxPowerPercentage > pAd->CommonCfg.TxPowerDefault)
334 pAd->CommonCfg.TxPowerPercentage = pAd->CommonCfg.TxPowerDefault;
339 IN PRTMP_ADAPTER pAd,
343 UCHAR RssiOffset, LNAGain;
345 // Rssi equals to zero should be an invalid value
349 LNAGain = GET_LNA_GAIN(pAd);
350 if (pAd->LatchRfRegs.Channel > 14)
353 RssiOffset = pAd->ARssiOffset0;
354 else if (RssiNumber == 1)
355 RssiOffset = pAd->ARssiOffset1;
357 RssiOffset = pAd->ARssiOffset2;
362 RssiOffset = pAd->BGRssiOffset0;
363 else if (RssiNumber == 1)
364 RssiOffset = pAd->BGRssiOffset1;
366 RssiOffset = pAd->BGRssiOffset2;
369 return (-12 - RssiOffset - LNAGain - Rssi);
373 ==========================================================================
376 ==========================================================================
378 VOID ScanNextChannel(
379 IN PRTMP_ADAPTER pAd)
381 HEADER_802_11 Hdr80211;
382 PUCHAR pOutBuffer = NULL;
385 UCHAR SsidLen = 0, ScanType = pAd->MlmeAux.ScanType, BBPValue = 0;
387 PHEADER_802_11 pHdr80211;
388 UINT ScanTimeIn5gChannel = SHORT_CHANNEL_TIME;
390 IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
396 if (pAd->MlmeAux.Channel == 0)
398 if ((pAd->CommonCfg.BBPCurrentBW == BW_40)
400 || (pAd->OpMode == OPMODE_AP))
403 AsicSwitchChannel(pAd, pAd->CommonCfg.CentralChannel, FALSE);
404 AsicLockChannel(pAd, pAd->CommonCfg.CentralChannel);
405 RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &BBPValue);
408 RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, BBPValue);
409 DBGPRINT(RT_DEBUG_TRACE, ("SYNC - End of SCAN, restore to 40MHz channel %d, Total BSS[%02d]\n",pAd->CommonCfg.CentralChannel, pAd->ScanTab.BssNr));
413 AsicSwitchChannel(pAd, pAd->CommonCfg.Channel, FALSE);
414 AsicLockChannel(pAd, pAd->CommonCfg.Channel);
415 DBGPRINT(RT_DEBUG_TRACE, ("SYNC - End of SCAN, restore to channel %d, Total BSS[%02d]\n",pAd->CommonCfg.Channel, pAd->ScanTab.BssNr));
418 IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
421 // To prevent data lost.
422 // Send an NULL data with turned PSM bit on to current associated AP before SCAN progress.
423 // Now, we need to send an NULL data with turned PSM bit off to AP, when scan progress done
425 if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED) && (INFRA_ON(pAd)))
427 NStatus = MlmeAllocateMemory(pAd, (PVOID)&pOutBuffer);
428 if (NStatus == NDIS_STATUS_SUCCESS)
430 pHdr80211 = (PHEADER_802_11) pOutBuffer;
431 MgtMacHeaderInit(pAd, pHdr80211, SUBTYPE_NULL_FUNC, 1, pAd->CommonCfg.Bssid, pAd->CommonCfg.Bssid);
432 pHdr80211->Duration = 0;
433 pHdr80211->FC.Type = BTYPE_DATA;
434 pHdr80211->FC.PwrMgmt = (pAd->StaCfg.Psm == PWR_SAVE);
436 // Send using priority queue
437 MiniportMMRequest(pAd, 0, pOutBuffer, sizeof(HEADER_802_11));
438 DBGPRINT(RT_DEBUG_TRACE, ("MlmeScanReqAction -- Send PSM Data frame\n"));
439 MlmeFreeMemory(pAd, pOutBuffer);
444 pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
445 Status = MLME_SUCCESS;
446 MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_SCAN_CONF, 2, &Status);
449 RTMP_CLEAR_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS);
453 IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
455 // BBP and RF are not accessible in PS mode, we has to wake them up first
456 if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_DOZE))
457 AsicForceWakeup(pAd, FROM_TX);
459 // leave PSM during scanning. otherwise we may lost ProbeRsp & BEACON
460 if (pAd->StaCfg.Psm == PWR_SAVE)
461 MlmeSetPsmBit(pAd, PWR_ACTIVE);
464 AsicSwitchChannel(pAd, pAd->MlmeAux.Channel, TRUE);
465 AsicLockChannel(pAd, pAd->MlmeAux.Channel);
467 IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
469 if (pAd->MlmeAux.Channel > 14)
471 if ((pAd->CommonCfg.bIEEE80211H == 1) && RadarChannelCheck(pAd, pAd->MlmeAux.Channel))
473 ScanType = SCAN_PASSIVE;
474 ScanTimeIn5gChannel = MIN_CHANNEL_TIME;
479 //Global country domain(ch1-11:active scan, ch12-14 passive scan)
480 if ((pAd->MlmeAux.Channel <= 14) && (pAd->MlmeAux.Channel >= 12) && ((pAd->CommonCfg.CountryRegion & 0x7f) == REGION_31_BG_BAND))
482 ScanType = SCAN_PASSIVE;
485 // We need to shorten active scan time in order for WZC connect issue
486 // Chnage the channel scan time for CISCO stuff based on its IAPP announcement
487 if (ScanType == FAST_SCAN_ACTIVE)
488 RTMPSetTimer(&pAd->MlmeAux.ScanTimer, FAST_ACTIVE_SCAN_TIME);
489 else if (((ScanType == SCAN_CISCO_ACTIVE) ||
490 (ScanType == SCAN_CISCO_PASSIVE) ||
491 (ScanType == SCAN_CISCO_CHANNEL_LOAD) ||
492 (ScanType == SCAN_CISCO_NOISE)) && (pAd->OpMode == OPMODE_STA))
494 if (pAd->StaCfg.CCXScanTime < 25)
495 RTMPSetTimer(&pAd->MlmeAux.ScanTimer, pAd->StaCfg.CCXScanTime * 2);
497 RTMPSetTimer(&pAd->MlmeAux.ScanTimer, pAd->StaCfg.CCXScanTime);
499 else // must be SCAN_PASSIVE or SCAN_ACTIVE
501 if ((pAd->CommonCfg.PhyMode == PHY_11ABG_MIXED)
502 #ifdef DOT11_N_SUPPORT
503 || (pAd->CommonCfg.PhyMode == PHY_11ABGN_MIXED) || (pAd->CommonCfg.PhyMode == PHY_11AGN_MIXED)
504 #endif // DOT11_N_SUPPORT //
507 if (pAd->MlmeAux.Channel > 14)
508 RTMPSetTimer(&pAd->MlmeAux.ScanTimer, ScanTimeIn5gChannel);
510 RTMPSetTimer(&pAd->MlmeAux.ScanTimer, MIN_CHANNEL_TIME);
513 RTMPSetTimer(&pAd->MlmeAux.ScanTimer, MAX_CHANNEL_TIME);
516 if ((ScanType == SCAN_ACTIVE) || (ScanType == FAST_SCAN_ACTIVE) ||
517 (ScanType == SCAN_CISCO_ACTIVE))
519 NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
520 if (NStatus != NDIS_STATUS_SUCCESS)
522 DBGPRINT(RT_DEBUG_TRACE, ("SYNC - ScanNextChannel() allocate memory fail\n"));
524 IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
526 pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
527 Status = MLME_FAIL_NO_RESOURCE;
528 MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_SCAN_CONF, 2, &Status);
534 // There is no need to send broadcast probe request if active scan is in effect.
535 if ((ScanType == SCAN_ACTIVE) || (ScanType == FAST_SCAN_ACTIVE)
537 SsidLen = pAd->MlmeAux.SsidLen;
541 MgtMacHeaderInit(pAd, &Hdr80211, SUBTYPE_PROBE_REQ, 0, BROADCAST_ADDR, BROADCAST_ADDR);
542 MakeOutgoingFrame(pOutBuffer, &FrameLen,
543 sizeof(HEADER_802_11), &Hdr80211,
546 SsidLen, pAd->MlmeAux.Ssid,
548 1, &pAd->CommonCfg.SupRateLen,
549 pAd->CommonCfg.SupRateLen, pAd->CommonCfg.SupRate,
552 if (pAd->CommonCfg.ExtRateLen)
555 MakeOutgoingFrame(pOutBuffer + FrameLen, &Tmp,
557 1, &pAd->CommonCfg.ExtRateLen,
558 pAd->CommonCfg.ExtRateLen, pAd->CommonCfg.ExtRate,
563 #ifdef DOT11_N_SUPPORT
564 if (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED)
568 UCHAR BROADCOM[4] = {0x0, 0x90, 0x4c, 0x33};
570 if (pAd->bBroadComHT == TRUE)
572 HtLen = pAd->MlmeAux.HtCapabilityLen + 4;
574 MakeOutgoingFrame(pOutBuffer + FrameLen, &Tmp,
578 pAd->MlmeAux.HtCapabilityLen, &pAd->MlmeAux.HtCapability,
583 HtLen = pAd->MlmeAux.HtCapabilityLen;
585 MakeOutgoingFrame(pOutBuffer + FrameLen, &Tmp,
588 HtLen, &pAd->CommonCfg.HtCapability,
593 #endif // DOT11_N_SUPPORT //
596 MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
597 MlmeFreeMemory(pAd, pOutBuffer);
600 // For SCAN_CISCO_PASSIVE, do nothing and silently wait for beacon or other probe reponse
602 IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
603 pAd->Mlme.SyncMachine.CurrState = SCAN_LISTEN;
607 VOID MgtProbReqMacHeaderInit(
608 IN PRTMP_ADAPTER pAd,
609 IN OUT PHEADER_802_11 pHdr80211,
615 NdisZeroMemory(pHdr80211, sizeof(HEADER_802_11));
617 pHdr80211->FC.Type = BTYPE_MGMT;
618 pHdr80211->FC.SubType = SubType;
619 if (SubType == SUBTYPE_ACK)
620 pHdr80211->FC.Type = BTYPE_CNTL;
621 pHdr80211->FC.ToDs = ToDs;
622 COPY_MAC_ADDR(pHdr80211->Addr1, pDA);
623 COPY_MAC_ADDR(pHdr80211->Addr2, pAd->CurrentAddress);
624 COPY_MAC_ADDR(pHdr80211->Addr3, pBssid);