#!/bin/sh

CRYPTO=$(nvram get wl0_crypto)
[ "${CRYPTO}" = "tkip" -o "${CRYPTO}" = "aes" -o "${CRYPTO}" = "aes+tkip" ] && {
	[ "${CRYPTO}" = "tkip" ] && CRYPTO_NUM=2
	[ "${CRYPTO}" = "aes" ] && CRYPTO_NUM=4
	[ "${CRYPTO}" = "aes+tkip" ] && CRYPTO_NUM=6
	REAL_IFNAME="eth1"
	WIFI_IFNAME=$(nvram get wifi_ifname)
	[ "${WIFI_IFNAME}" = "" ] && WIFI_IFNAME=$(nvram get lan_ifname)
	AUTH_MODE=$(nvram get wl0_auth_mode)
	SSID=$(nvram get wl0_ssid)
	GTK_REKEY=$(nvram get wl0_wpa_gtk_rekey)
	[ "${GTK_REKEY}" = "" ] && exit 1
	[ "${AUTH_MODE}" = "psk" ] && {
		PSK=$(nvram get wl0_wpa_psk)
		[ "${PSK}" = "" ] && exit 1
		echo /usr/sbin/nas -P /tmp/nas.lan.pid -l "${WIFI_IFNAME}" -H 34954 -i "${REAL_IFNAME}" -A -m 2 -k "${PSK}" -s "${SSID}" -w "${CRYPTO_NUM}" -g "${GTK_REKEY}" > /tmp/nas.lan.conf
		/usr/sbin/nas -P /tmp/nas.lan.pid -l "${WIFI_IFNAME}" -H 34954 -i "${REAL_IFNAME}" -A -m 2 -k "${PSK}" -s "${SSID}" -w "${CRYPTO_NUM}" -g "${GTK_REKEY}" &
		exit 0
	}
	[ "${AUTH_MODE}" = "radius" ] && {
		RADIUS_PSK=$(nvram get wl0_radius_psk)
		RADIUS_IP=$(nvram get wl0_radius_ipaddr)
		RADIUS_PORT=$(wl0_radius_port)
		[ "${RADIUS_PSK}" = "" ] && exit 1
		[ "${RADIUS_IP}" = "" ] && exit 1
		[ "${RADIUS_PORT}" = "" ] && exit 1
		echo /usr/sbin/nas -P /tmp/nas.lan.pid -l "${WIFI_IFNAME}" -H 34954 -i "${REAL_IFNAME}" -A -m 0 -h "${RADIUS_IP}" -p "${RADIUS_PORT}" -k "${RADIUS_PSK}" -s "${SSID}" -w "${CRYPTO_NUM}" -g "${GTK_REKEY}" > /tmp/nas.lan.conf
		/usr/sbin/nas -P /tmp/nas.lan.pid -l "${WIFI_IFNAME}" -H 34954 -i "${REAL_IFNAME}" -A -m 0 -h "${RADIUS_IP}" -p "${RADIUS_PORT}" -k "${RADIUS_PSK}" -s "${SSID}" -w "${CRYPTO_NUM}" -g "${GTK_REKEY}" &
	}
}