xref: /dragonfly/sys/bus/u4b/net/if_axe.c (revision 65cc0652)
1 /*-
2  * Copyright (c) 1997, 1998, 1999, 2000-2003
3  *	Bill Paul <wpaul@windriver.com>.  All rights reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  * 1. Redistributions of source code must retain the above copyright
9  *    notice, this list of conditions and the following disclaimer.
10  * 2. Redistributions in binary form must reproduce the above copyright
11  *    notice, this list of conditions and the following disclaimer in the
12  *    documentation and/or other materials provided with the distribution.
13  * 3. All advertising materials mentioning features or use of this software
14  *    must display the following acknowledgement:
15  *	This product includes software developed by Bill Paul.
16  * 4. Neither the name of the author nor the names of any co-contributors
17  *    may be used to endorse or promote products derived from this software
18  *    without specific prior written permission.
19  *
20  * THIS SOFTWARE IS PROVIDED BY Bill Paul AND CONTRIBUTORS ``AS IS'' AND
21  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23  * ARE DISCLAIMED.  IN NO EVENT SHALL Bill Paul OR THE VOICES IN HIS HEAD
24  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
25  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
26  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
27  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
28  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
29  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
30  * THE POSSIBILITY OF SUCH DAMAGE.
31  */
32 
33 /*
34  * ASIX Electronics AX88172/AX88178/AX88778 USB 2.0 ethernet driver.
35  * Used in the LinkSys USB200M and various other adapters.
36  *
37  * Manuals available from:
38  * http://www.asix.com.tw/datasheet/mac/Ax88172.PDF
39  * Note: you need the manual for the AX88170 chip (USB 1.x ethernet
40  * controller) to find the definitions for the RX control register.
41  * http://www.asix.com.tw/datasheet/mac/Ax88170.PDF
42  *
43  * Written by Bill Paul <wpaul@windriver.com>
44  * Senior Engineer
45  * Wind River Systems
46  */
47 
48 /*
49  * The AX88172 provides USB ethernet supports at 10 and 100Mbps.
50  * It uses an external PHY (reference designs use a RealTek chip),
51  * and has a 64-bit multicast hash filter. There is some information
52  * missing from the manual which one needs to know in order to make
53  * the chip function:
54  *
55  * - You must set bit 7 in the RX control register, otherwise the
56  *   chip won't receive any packets.
57  * - You must initialize all 3 IPG registers, or you won't be able
58  *   to send any packets.
59  *
60  * Note that this device appears to only support loading the station
61  * address via autload from the EEPROM (i.e. there's no way to manaully
62  * set it).
63  *
64  * (Adam Weinberger wanted me to name this driver if_gir.c.)
65  */
66 
67 /*
68  * Ax88178 and Ax88772 support backported from the OpenBSD driver.
69  * 2007/02/12, J.R. Oldroyd, fbsd@opal.com
70  *
71  * Manual here:
72  * http://www.asix.com.tw/FrootAttach/datasheet/AX88178_datasheet_Rev10.pdf
73  * http://www.asix.com.tw/FrootAttach/datasheet/AX88772_datasheet_Rev10.pdf
74  */
75 
76 #include <sys/param.h>
77 #include <sys/systm.h>
78 #include <sys/bus.h>
79 #include <sys/condvar.h>
80 #include <sys/endian.h>
81 #include <sys/kernel.h>
82 #include <sys/lock.h>
83 #include <sys/malloc.h>
84 #include <sys/mbuf.h>
85 #include <sys/module.h>
86 #include <sys/socket.h>
87 #include <sys/sockio.h>
88 #include <sys/sysctl.h>
89 
90 #include <net/if.h>
91 #include <net/ethernet.h>
92 #include <net/if_types.h>
93 #include <net/if_media.h>
94 #include <net/vlan/if_vlan_var.h>
95 #include <net/ifq_var.h>
96 
97 #include <dev/netif/mii_layer/mii.h>
98 #include <dev/netif/mii_layer/miivar.h>
99 
100 #include <bus/u4b/usb.h>
101 #include <bus/u4b/usbdi.h>
102 #include <bus/u4b/usbdi_util.h>
103 #include "usbdevs.h"
104 
105 #define	USB_DEBUG_VAR axe_debug
106 #include <bus/u4b/usb_debug.h>
107 #include <bus/u4b/usb_process.h>
108 
109 #include <bus/u4b/net/usb_ethernet.h>
110 #include <bus/u4b/net/if_axereg.h>
111 
112 /*
113  * AXE_178_MAX_FRAME_BURST
114  * max frame burst size for Ax88178 and Ax88772
115  *	0	2048 bytes
116  *	1	4096 bytes
117  *	2	8192 bytes
118  *	3	16384 bytes
119  * use the largest your system can handle without USB stalling.
120  *
121  * NB: 88772 parts appear to generate lots of input errors with
122  * a 2K rx buffer and 8K is only slightly faster than 4K on an
123  * EHCI port on a T42 so change at your own risk.
124  */
125 #define AXE_178_MAX_FRAME_BURST	1
126 
127 #define	AXE_CSUM_FEATURES	(CSUM_IP | CSUM_TCP | CSUM_UDP)
128 
129 #ifdef USB_DEBUG
130 static int axe_debug = 0;
131 
132 static SYSCTL_NODE(_hw_usb, OID_AUTO, axe, CTLFLAG_RW, 0, "USB axe");
133 SYSCTL_INT(_hw_usb_axe, OID_AUTO, debug, CTLFLAG_RW, &axe_debug, 0,
134     "Debug level");
135 #endif
136 
137 /*
138  * Various supported device vendors/products.
139  */
140 static const STRUCT_USB_HOST_ID axe_devs[] = {
141 #define	AXE_DEV(v,p,i) { USB_VPI(USB_VENDOR_##v, USB_PRODUCT_##v##_##p, i) }
142 	AXE_DEV(ABOCOM, UF200, 0),
143 	AXE_DEV(ACERCM, EP1427X2, 0),
144 	AXE_DEV(APPLE, ETHERNET, AXE_FLAG_772),
145 	AXE_DEV(ASIX, AX88172, 0),
146 	AXE_DEV(ASIX, AX88178, AXE_FLAG_178),
147 	AXE_DEV(ASIX, AX88772, AXE_FLAG_772),
148 	AXE_DEV(ASIX, AX88772A, AXE_FLAG_772A),
149 	AXE_DEV(ASIX, AX88772B, AXE_FLAG_772B),
150 	AXE_DEV(ASIX, AX88772B_1, AXE_FLAG_772B),
151 	AXE_DEV(ATEN, UC210T, 0),
152 	AXE_DEV(BELKIN, F5D5055, AXE_FLAG_178),
153 	AXE_DEV(BILLIONTON, USB2AR, 0),
154 	AXE_DEV(CISCOLINKSYS, USB200MV2, AXE_FLAG_772A),
155 	AXE_DEV(COREGA, FETHER_USB2_TX, 0),
156 	AXE_DEV(DLINK, DUBE100, 0),
157 	AXE_DEV(DLINK, DUBE100B1, AXE_FLAG_772),
158 	AXE_DEV(DLINK, DUBE100C1, AXE_FLAG_772B),
159 	AXE_DEV(GOODWAY, GWUSB2E, 0),
160 	AXE_DEV(IODATA, ETGUS2, AXE_FLAG_178),
161 	AXE_DEV(JVC, MP_PRX1, 0),
162 	AXE_DEV(LENOVO, ETHERNET, AXE_FLAG_772B),
163 	AXE_DEV(LINKSYS2, USB200M, 0),
164 	AXE_DEV(LINKSYS4, USB1000, AXE_FLAG_178),
165 	AXE_DEV(LOGITEC, LAN_GTJU2A, AXE_FLAG_178),
166 	AXE_DEV(MELCO, LUAU2KTX, 0),
167 	AXE_DEV(MELCO, LUA3U2AGT, AXE_FLAG_178),
168 	AXE_DEV(NETGEAR, FA120, 0),
169 	AXE_DEV(OQO, ETHER01PLUS, AXE_FLAG_772),
170 	AXE_DEV(PLANEX3, GU1000T, AXE_FLAG_178),
171 	AXE_DEV(SITECOM, LN029, 0),
172 	AXE_DEV(SITECOMEU, LN028, AXE_FLAG_178),
173 	AXE_DEV(SYSTEMTALKS, SGCX2UL, 0),
174 #undef AXE_DEV
175 };
176 
177 static device_probe_t axe_probe;
178 static device_attach_t axe_attach;
179 static device_detach_t axe_detach;
180 
181 static usb_callback_t axe_bulk_read_callback;
182 static usb_callback_t axe_bulk_write_callback;
183 
184 static miibus_readreg_t axe_miibus_readreg;
185 static miibus_writereg_t axe_miibus_writereg;
186 static miibus_statchg_t axe_miibus_statchg;
187 
188 static uether_fn_t axe_attach_post;
189 static uether_fn_t axe_init;
190 static uether_fn_t axe_stop;
191 static uether_fn_t axe_start;
192 static uether_fn_t axe_tick;
193 static uether_fn_t axe_setmulti;
194 static uether_fn_t axe_setpromisc;
195 
196 static int	axe_attach_post_sub(struct usb_ether *);
197 static int	axe_ifmedia_upd(struct ifnet *);
198 static void	axe_ifmedia_sts(struct ifnet *, struct ifmediareq *);
199 static int	axe_cmd(struct axe_softc *, int, int, int, void *);
200 static void	axe_ax88178_init(struct axe_softc *);
201 static void	axe_ax88772_init(struct axe_softc *);
202 static void	axe_ax88772_phywake(struct axe_softc *);
203 static void	axe_ax88772a_init(struct axe_softc *);
204 static void	axe_ax88772b_init(struct axe_softc *);
205 static int	axe_get_phyno(struct axe_softc *, int);
206 static int	axe_ioctl(struct ifnet *, u_long, caddr_t, struct ucred *);
207 static int	axe_rx_frame(struct usb_ether *, struct usb_page_cache *, int);
208 static int	axe_rxeof(struct usb_ether *, struct usb_page_cache *,
209 		    unsigned int offset, unsigned int, struct axe_csum_hdr *);
210 static void	axe_csum_cfg(struct usb_ether *);
211 
212 static const struct usb_config axe_config[AXE_N_TRANSFER] = {
213 
214 	[AXE_BULK_DT_WR] = {
215 		.type = UE_BULK,
216 		.endpoint = UE_ADDR_ANY,
217 		.direction = UE_DIR_OUT,
218 		.frames = 16,
219 		.bufsize = 16 * MCLBYTES,
220 		.flags = {.pipe_bof = 1,.force_short_xfer = 1,},
221 		.callback = axe_bulk_write_callback,
222 		.timeout = 10000,	/* 10 seconds */
223 	},
224 
225 	[AXE_BULK_DT_RD] = {
226 		.type = UE_BULK,
227 		.endpoint = UE_ADDR_ANY,
228 		.direction = UE_DIR_IN,
229 		.bufsize = 16384,	/* bytes */
230 		.flags = {.pipe_bof = 1,.short_xfer_ok = 1,},
231 		.callback = axe_bulk_read_callback,
232 		.timeout = 0,	/* no timeout */
233 	},
234 };
235 
236 static const struct ax88772b_mfb ax88772b_mfb_table[] = {
237 	{ 0x8000, 0x8001, 2048 },
238 	{ 0x8100, 0x8147, 4096},
239 	{ 0x8200, 0x81EB, 6144},
240 	{ 0x8300, 0x83D7, 8192},
241 	{ 0x8400, 0x851E, 16384},
242 	{ 0x8500, 0x8666, 20480},
243 	{ 0x8600, 0x87AE, 24576},
244 	{ 0x8700, 0x8A3D, 32768}
245 };
246 
247 static device_method_t axe_methods[] = {
248 	/* Device interface */
249 	DEVMETHOD(device_probe, axe_probe),
250 	DEVMETHOD(device_attach, axe_attach),
251 	DEVMETHOD(device_detach, axe_detach),
252 
253 	/* MII interface */
254 	DEVMETHOD(miibus_readreg, axe_miibus_readreg),
255 	DEVMETHOD(miibus_writereg, axe_miibus_writereg),
256 	DEVMETHOD(miibus_statchg, axe_miibus_statchg),
257 
258 	DEVMETHOD_END
259 };
260 
261 static driver_t axe_driver = {
262 	.name = "axe",
263 	.methods = axe_methods,
264 	.size = sizeof(struct axe_softc),
265 };
266 
267 static devclass_t axe_devclass;
268 
269 DRIVER_MODULE(axe, uhub, axe_driver, axe_devclass, NULL, NULL);
270 DRIVER_MODULE(miibus, axe, miibus_driver, miibus_devclass, NULL, NULL);
271 MODULE_DEPEND(axe, uether, 1, 1, 1);
272 MODULE_DEPEND(axe, usb, 1, 1, 1);
273 MODULE_DEPEND(axe, ether, 1, 1, 1);
274 MODULE_DEPEND(axe, miibus, 1, 1, 1);
275 MODULE_VERSION(axe, 1);
276 
277 static const struct usb_ether_methods axe_ue_methods = {
278 	.ue_attach_post = axe_attach_post,
279 	.ue_attach_post_sub = axe_attach_post_sub,
280 	.ue_start = axe_start,
281 	.ue_init = axe_init,
282 	.ue_stop = axe_stop,
283 	.ue_tick = axe_tick,
284 	.ue_setmulti = axe_setmulti,
285 	.ue_setpromisc = axe_setpromisc,
286 	.ue_mii_upd = axe_ifmedia_upd,
287 	.ue_mii_sts = axe_ifmedia_sts,
288 };
289 
290 static int
291 axe_cmd(struct axe_softc *sc, int cmd, int index, int val, void *buf)
292 {
293 	struct usb_device_request req;
294 	usb_error_t err;
295 
296 	AXE_LOCK_ASSERT(sc);
297 
298 	req.bmRequestType = (AXE_CMD_IS_WRITE(cmd) ?
299 	    UT_WRITE_VENDOR_DEVICE :
300 	    UT_READ_VENDOR_DEVICE);
301 	req.bRequest = AXE_CMD_CMD(cmd);
302 	USETW(req.wValue, val);
303 	USETW(req.wIndex, index);
304 	USETW(req.wLength, AXE_CMD_LEN(cmd));
305 
306 	err = uether_do_request(&sc->sc_ue, &req, buf, 1000);
307 
308 	return (err);
309 }
310 
311 static int
312 axe_miibus_readreg(device_t dev, int phy, int reg)
313 {
314 	struct axe_softc *sc = device_get_softc(dev);
315 	uint16_t val;
316 	int locked;
317 
318 	locked = lockowned(&sc->sc_lock);
319 	if(!locked)
320 		AXE_LOCK(sc);
321 
322 	if(phy != sc->sc_phyno){
323 		if(!locked)
324 			AXE_UNLOCK(sc);
325 		return(0);
326 	}
327 
328 	axe_cmd(sc, AXE_CMD_MII_OPMODE_SW, 0, 0, NULL);
329 	axe_cmd(sc, AXE_CMD_MII_READ_REG, reg, phy, &val);
330 	axe_cmd(sc, AXE_CMD_MII_OPMODE_HW, 0, 0, NULL);
331 
332 	val = le16toh(val);
333 	if (AXE_IS_772(sc) && reg == MII_BMSR) {
334 		/*
335 		 * BMSR of AX88772 indicates that it supports extended
336 		 * capability but the extended status register is
337 		 * revered for embedded ethernet PHY. So clear the
338 		 * extended capability bit of BMSR.
339 		 */
340 		val &= ~BMSR_EXTCAP;
341 	}
342 
343 	if (!locked)
344 		AXE_UNLOCK(sc);
345 	return (val);
346 }
347 
348 static int
349 axe_miibus_writereg(device_t dev, int phy, int reg, int val)
350 {
351 	struct axe_softc *sc = device_get_softc(dev);
352 	int locked;
353 
354 	val = htole32(val);
355 	locked = lockowned(&sc->sc_lock);
356 	if (!locked)
357 		AXE_LOCK(sc);
358 
359 	axe_cmd(sc, AXE_CMD_MII_OPMODE_SW, 0, 0, NULL);
360 	axe_cmd(sc, AXE_CMD_MII_WRITE_REG, reg, phy, &val);
361 	axe_cmd(sc, AXE_CMD_MII_OPMODE_HW, 0, 0, NULL);
362 
363 	if (!locked)
364 		AXE_UNLOCK(sc);
365 	return (0);
366 }
367 
368 static void
369 axe_miibus_statchg(device_t dev)
370 {
371 	struct axe_softc *sc = device_get_softc(dev);
372 	struct mii_data *mii = GET_MII(sc);
373 	struct ifnet *ifp;
374 	uint16_t val;
375 	int err, locked;
376 
377 	locked = lockowned(&sc->sc_lock);
378 	if (!locked)
379 		AXE_LOCK(sc);
380 
381 	ifp = uether_getifp(&sc->sc_ue);
382 	if (mii == NULL || ifp == NULL ||
383 	    (ifp->if_flags & IFF_RUNNING) == 0)
384 		goto done;
385 
386 	sc->sc_flags &= ~AXE_FLAG_LINK;
387 	if ((mii->mii_media_status & (IFM_ACTIVE | IFM_AVALID)) ==
388 	    (IFM_ACTIVE | IFM_AVALID)) {
389 		switch (IFM_SUBTYPE(mii->mii_media_active)) {
390 		case IFM_10_T:
391 		case IFM_100_TX:
392 			sc->sc_flags |= AXE_FLAG_LINK;
393 			break;
394 		case IFM_1000_T:
395 			if ((sc->sc_flags & AXE_FLAG_178) == 0)
396 				break;
397 			sc->sc_flags |= AXE_FLAG_LINK;
398 			DPRINTFN(11, "miibus_statchg: link should be up\n");
399 			break;
400 		default:
401 			break;
402 		}
403 	} else {
404 		DPRINTFN(11, "miibus_statchg: not active or not valid: %x\n", mii->mii_media_status);
405 	}
406 
407 	/* Lost link, do nothing. */
408 	if ((sc->sc_flags & AXE_FLAG_LINK) == 0) {
409 		goto done;
410 	}
411 
412 	val = 0;
413 	if ((IFM_OPTIONS(mii->mii_media_active) & IFM_FDX) != 0) {
414 		val |= AXE_MEDIA_FULL_DUPLEX;
415 		if (AXE_IS_178_FAMILY(sc)) {
416 			if ((IFM_OPTIONS(mii->mii_media_active) &
417 			    IFM_ETH_TXPAUSE) != 0)
418 				val |= AXE_178_MEDIA_TXFLOW_CONTROL_EN;
419 			if ((IFM_OPTIONS(mii->mii_media_active) &
420 			    IFM_ETH_RXPAUSE) != 0)
421 				val |= AXE_178_MEDIA_RXFLOW_CONTROL_EN;
422 		}
423 	}
424 	if (AXE_IS_178_FAMILY(sc)) {
425 		val |= AXE_178_MEDIA_RX_EN | AXE_178_MEDIA_MAGIC;
426 		if ((sc->sc_flags & AXE_FLAG_178) != 0)
427 			val |= AXE_178_MEDIA_ENCK;
428 		switch (IFM_SUBTYPE(mii->mii_media_active)) {
429 		case IFM_1000_T:
430 			val |= AXE_178_MEDIA_GMII | AXE_178_MEDIA_ENCK;
431 			break;
432 		case IFM_100_TX:
433 			val |= AXE_178_MEDIA_100TX;
434 			break;
435 		case IFM_10_T:
436 			/* doesn't need to be handled */
437 			break;
438 		}
439 	}
440 	err = axe_cmd(sc, AXE_CMD_WRITE_MEDIA, 0, val, NULL);
441 	if (err)
442 		device_printf(dev, "media change failed, error %d\n", err);
443 done:
444 	if (!locked)
445 		AXE_UNLOCK(sc);
446 }
447 
448 /*
449  * Set media options.
450  */
451 static int
452 axe_ifmedia_upd(struct ifnet *ifp)
453 {
454 	struct axe_softc *sc = ifp->if_softc;
455 	struct mii_data *mii = GET_MII(sc);
456 	struct mii_softc *miisc;
457 	int error;
458 
459 	AXE_LOCK_ASSERT(sc);
460 
461 	LIST_FOREACH(miisc, &mii->mii_phys, mii_list)
462 		mii_phy_reset(miisc);
463 	error = mii_mediachg(mii);
464 	return (error);
465 }
466 
467 /*
468  * Report current media status.
469  */
470 static void
471 axe_ifmedia_sts(struct ifnet *ifp, struct ifmediareq *ifmr)
472 {
473 	struct axe_softc *sc = ifp->if_softc;
474 	struct mii_data *mii = GET_MII(sc);
475 
476 	AXE_LOCK(sc);
477 	mii_pollstat(mii);
478 	ifmr->ifm_active = mii->mii_media_active;
479 	ifmr->ifm_status = mii->mii_media_status;
480 	AXE_UNLOCK(sc);
481 }
482 
483 static void
484 axe_setmulti(struct usb_ether *ue)
485 {
486 	struct axe_softc *sc = uether_getsc(ue);
487 	struct ifnet *ifp = uether_getifp(ue);
488 	struct ifmultiaddr *ifma;
489 	uint32_t h = 0;
490 	uint16_t rxmode;
491 	uint8_t hashtbl[8] = { 0, 0, 0, 0, 0, 0, 0, 0 };
492 
493 	AXE_LOCK_ASSERT(sc);
494 
495 	axe_cmd(sc, AXE_CMD_RXCTL_READ, 0, 0, &rxmode);
496 	rxmode = le16toh(rxmode);
497 
498 	if (ifp->if_flags & (IFF_ALLMULTI | IFF_PROMISC)) {
499 		rxmode |= AXE_RXCMD_ALLMULTI;
500 		axe_cmd(sc, AXE_CMD_RXCTL_WRITE, 0, rxmode, NULL);
501 		return;
502 	}
503 	rxmode &= ~AXE_RXCMD_ALLMULTI;
504 
505 	TAILQ_FOREACH(ifma, &ifp->if_multiaddrs, ifma_link)
506 	{
507 		if (ifma->ifma_addr->sa_family != AF_LINK)
508 			continue;
509 		h = ether_crc32_be(LLADDR((struct sockaddr_dl *)
510 		    ifma->ifma_addr), ETHER_ADDR_LEN) >> 26;
511 		hashtbl[h / 8] |= 1 << (h % 8);
512 	}
513 
514 	axe_cmd(sc, AXE_CMD_WRITE_MCAST, 0, 0, (void *)&hashtbl);
515 	axe_cmd(sc, AXE_CMD_RXCTL_WRITE, 0, rxmode, NULL);
516 }
517 
518 static int
519 axe_get_phyno(struct axe_softc *sc, int sel)
520 {
521 	int phyno;
522 
523 	switch (AXE_PHY_TYPE(sc->sc_phyaddrs[sel])) {
524 	case PHY_TYPE_100_HOME:
525 	case PHY_TYPE_GIG:
526 		phyno = AXE_PHY_NO(sc->sc_phyaddrs[sel]);
527 		break;
528 	case PHY_TYPE_SPECIAL:
529 		/* FALLTHROUGH */
530 	case PHY_TYPE_RSVD:
531 		/* FALLTHROUGH */
532 	case PHY_TYPE_NON_SUP:
533 		/* FALLTHROUGH */
534 	default:
535 		phyno = -1;
536 		break;
537 	}
538 
539 	return (phyno);
540 }
541 
542 #define	AXE_GPIO_WRITE(x, y)	do {				\
543 	axe_cmd(sc, AXE_CMD_WRITE_GPIO, 0, (x), NULL);		\
544 	uether_pause(ue, (y));					\
545 } while (0)
546 
547 static void
548 axe_ax88178_init(struct axe_softc *sc)
549 {
550 	struct usb_ether *ue;
551 	int gpio0, ledmode, phymode;
552 	uint16_t eeprom, val;
553 
554 	ue = &sc->sc_ue;
555 	axe_cmd(sc, AXE_CMD_SROM_WR_ENABLE, 0, 0, NULL);
556 	/* XXX magic */
557 	axe_cmd(sc, AXE_CMD_SROM_READ, 0, 0x0017, &eeprom);
558 	eeprom = le16toh(eeprom);
559 	axe_cmd(sc, AXE_CMD_SROM_WR_DISABLE, 0, 0, NULL);
560 
561 	/* if EEPROM is invalid we have to use to GPIO0 */
562 	if (eeprom == 0xffff) {
563 		phymode = AXE_PHY_MODE_MARVELL;
564 		gpio0 = 1;
565 		ledmode = 0;
566 	} else {
567 		phymode = eeprom & 0x7f;
568 		gpio0 = (eeprom & 0x80) ? 0 : 1;
569 		ledmode = eeprom >> 8;
570 	}
571 
572 	if (bootverbose)
573 		device_printf(sc->sc_ue.ue_dev,
574 		    "EEPROM data : 0x%04x, phymode : 0x%02x\n", eeprom,
575 		    phymode);
576 	/* Program GPIOs depending on PHY hardware. */
577 	switch (phymode) {
578 	case AXE_PHY_MODE_MARVELL:
579 		if (gpio0 == 1) {
580 			AXE_GPIO_WRITE(AXE_GPIO_RELOAD_EEPROM | AXE_GPIO0_EN,
581 			    hz / 32);
582 			AXE_GPIO_WRITE(AXE_GPIO0_EN | AXE_GPIO2 | AXE_GPIO2_EN,
583 			    hz / 32);
584 			AXE_GPIO_WRITE(AXE_GPIO0_EN | AXE_GPIO2_EN, hz / 4);
585 			AXE_GPIO_WRITE(AXE_GPIO0_EN | AXE_GPIO2 | AXE_GPIO2_EN,
586 			    hz / 32);
587 		} else {
588 			AXE_GPIO_WRITE(AXE_GPIO_RELOAD_EEPROM | AXE_GPIO1 |
589 			    AXE_GPIO1_EN, hz / 3);
590 			if (ledmode == 1) {
591 				AXE_GPIO_WRITE(AXE_GPIO1_EN, hz / 3);
592 				AXE_GPIO_WRITE(AXE_GPIO1 | AXE_GPIO1_EN,
593 				    hz / 3);
594 			} else {
595 				AXE_GPIO_WRITE(AXE_GPIO1 | AXE_GPIO1_EN |
596 				    AXE_GPIO2 | AXE_GPIO2_EN, hz / 32);
597 				AXE_GPIO_WRITE(AXE_GPIO1 | AXE_GPIO1_EN |
598 				    AXE_GPIO2_EN, hz / 4);
599 				AXE_GPIO_WRITE(AXE_GPIO1 | AXE_GPIO1_EN |
600 				    AXE_GPIO2 | AXE_GPIO2_EN, hz / 32);
601 			}
602 		}
603 		break;
604 	case AXE_PHY_MODE_CICADA:
605 	case AXE_PHY_MODE_CICADA_V2:
606 	case AXE_PHY_MODE_CICADA_V2_ASIX:
607 		if (gpio0 == 1)
608 			AXE_GPIO_WRITE(AXE_GPIO_RELOAD_EEPROM | AXE_GPIO0 |
609 			    AXE_GPIO0_EN, hz / 32);
610 		else
611 			AXE_GPIO_WRITE(AXE_GPIO_RELOAD_EEPROM | AXE_GPIO1 |
612 			    AXE_GPIO1_EN, hz / 32);
613 		break;
614 	case AXE_PHY_MODE_AGERE:
615 		AXE_GPIO_WRITE(AXE_GPIO_RELOAD_EEPROM | AXE_GPIO1 |
616 		    AXE_GPIO1_EN, hz / 32);
617 		AXE_GPIO_WRITE(AXE_GPIO1 | AXE_GPIO1_EN | AXE_GPIO2 |
618 		    AXE_GPIO2_EN, hz / 32);
619 		AXE_GPIO_WRITE(AXE_GPIO1 | AXE_GPIO1_EN | AXE_GPIO2_EN, hz / 4);
620 		AXE_GPIO_WRITE(AXE_GPIO1 | AXE_GPIO1_EN | AXE_GPIO2 |
621 		    AXE_GPIO2_EN, hz / 32);
622 		break;
623 	case AXE_PHY_MODE_REALTEK_8211CL:
624 	case AXE_PHY_MODE_REALTEK_8211BN:
625 	case AXE_PHY_MODE_REALTEK_8251CL:
626 		val = gpio0 == 1 ? AXE_GPIO0 | AXE_GPIO0_EN :
627 		    AXE_GPIO1 | AXE_GPIO1_EN;
628 		AXE_GPIO_WRITE(val, hz / 32);
629 		AXE_GPIO_WRITE(val | AXE_GPIO2 | AXE_GPIO2_EN, hz / 32);
630 		AXE_GPIO_WRITE(val | AXE_GPIO2_EN, hz / 4);
631 		AXE_GPIO_WRITE(val | AXE_GPIO2 | AXE_GPIO2_EN, hz / 32);
632 		if (phymode == AXE_PHY_MODE_REALTEK_8211CL) {
633 			axe_miibus_writereg(ue->ue_dev, sc->sc_phyno,
634 			    0x1F, 0x0005);
635 			axe_miibus_writereg(ue->ue_dev, sc->sc_phyno,
636 			    0x0C, 0x0000);
637 			val = axe_miibus_readreg(ue->ue_dev, sc->sc_phyno,
638 			    0x0001);
639 			axe_miibus_writereg(ue->ue_dev, sc->sc_phyno,
640 			    0x01, val | 0x0080);
641 			axe_miibus_writereg(ue->ue_dev, sc->sc_phyno,
642 			    0x1F, 0x0000);
643 		}
644 		break;
645 	default:
646 		/* Unknown PHY model or no need to program GPIOs. */
647 		break;
648 	}
649 
650 	/* soft reset */
651 	axe_cmd(sc, AXE_CMD_SW_RESET_REG, 0, AXE_SW_RESET_CLEAR, NULL);
652 	uether_pause(ue, hz / 4);
653 
654 	axe_cmd(sc, AXE_CMD_SW_RESET_REG, 0,
655 	    AXE_SW_RESET_PRL | AXE_178_RESET_MAGIC, NULL);
656 	uether_pause(ue, hz / 4);
657 	/* Enable MII/GMII/RGMII interface to work with external PHY. */
658 	axe_cmd(sc, AXE_CMD_SW_PHY_SELECT, 0, 0, NULL);
659 	uether_pause(ue, hz / 4);
660 
661 	axe_cmd(sc, AXE_CMD_RXCTL_WRITE, 0, 0, NULL);
662 }
663 
664 static void
665 axe_ax88772_init(struct axe_softc *sc)
666 {
667 	axe_cmd(sc, AXE_CMD_WRITE_GPIO, 0, 0x00b0, NULL);
668 	uether_pause(&sc->sc_ue, hz / 16);
669 
670 	if (sc->sc_phyno == AXE_772_PHY_NO_EPHY) {
671 		/* ask for the embedded PHY */
672 		axe_cmd(sc, AXE_CMD_SW_PHY_SELECT, 0, 0x01, NULL);
673 		uether_pause(&sc->sc_ue, hz / 64);
674 
675 		/* power down and reset state, pin reset state */
676 		axe_cmd(sc, AXE_CMD_SW_RESET_REG, 0,
677 		    AXE_SW_RESET_CLEAR, NULL);
678 		uether_pause(&sc->sc_ue, hz / 16);
679 
680 		/* power down/reset state, pin operating state */
681 		axe_cmd(sc, AXE_CMD_SW_RESET_REG, 0,
682 		    AXE_SW_RESET_IPPD | AXE_SW_RESET_PRL, NULL);
683 		uether_pause(&sc->sc_ue, hz / 4);
684 
685 		/* power up, reset */
686 		axe_cmd(sc, AXE_CMD_SW_RESET_REG, 0, AXE_SW_RESET_PRL, NULL);
687 
688 		/* power up, operating */
689 		axe_cmd(sc, AXE_CMD_SW_RESET_REG, 0,
690 		    AXE_SW_RESET_IPRL | AXE_SW_RESET_PRL, NULL);
691 	} else {
692 		/* ask for external PHY */
693 		axe_cmd(sc, AXE_CMD_SW_PHY_SELECT, 0, 0x00, NULL);
694 		uether_pause(&sc->sc_ue, hz / 64);
695 
696 		/* power down internal PHY */
697 		axe_cmd(sc, AXE_CMD_SW_RESET_REG, 0,
698 		    AXE_SW_RESET_IPPD | AXE_SW_RESET_PRL, NULL);
699 	}
700 
701 	uether_pause(&sc->sc_ue, hz / 4);
702 	axe_cmd(sc, AXE_CMD_RXCTL_WRITE, 0, 0, NULL);
703 }
704 
705 static void
706 axe_ax88772_phywake(struct axe_softc *sc)
707 {
708 	struct usb_ether *ue;
709 
710 	ue = &sc->sc_ue;
711 	if (sc->sc_phyno == AXE_772_PHY_NO_EPHY) {
712 		/* Manually select internal(embedded) PHY - MAC mode. */
713 		axe_cmd(sc, AXE_CMD_SW_PHY_SELECT, 0, AXE_SW_PHY_SELECT_SS_ENB |
714 		    AXE_SW_PHY_SELECT_EMBEDDED | AXE_SW_PHY_SELECT_SS_MII,
715 		    NULL);
716 		uether_pause(&sc->sc_ue, hz / 32);
717 	} else {
718 		/*
719 		 * Manually select external PHY - MAC mode.
720 		 * Reverse MII/RMII is for AX88772A PHY mode.
721 		 */
722 		axe_cmd(sc, AXE_CMD_SW_PHY_SELECT, 0, AXE_SW_PHY_SELECT_SS_ENB |
723 		    AXE_SW_PHY_SELECT_EXT | AXE_SW_PHY_SELECT_SS_MII, NULL);
724 		uether_pause(&sc->sc_ue, hz / 32);
725 	}
726 	/* Take PHY out of power down. */
727 	axe_cmd(sc, AXE_CMD_SW_RESET_REG, 0, AXE_SW_RESET_IPPD |
728 	    AXE_SW_RESET_IPRL, NULL);
729 	uether_pause(&sc->sc_ue, hz / 4);
730 	axe_cmd(sc, AXE_CMD_SW_RESET_REG, 0, AXE_SW_RESET_IPRL, NULL);
731 	uether_pause(&sc->sc_ue, hz);
732 	axe_cmd(sc, AXE_CMD_SW_RESET_REG, 0, AXE_SW_RESET_CLEAR, NULL);
733 	uether_pause(&sc->sc_ue, hz / 32);
734 	axe_cmd(sc, AXE_CMD_SW_RESET_REG, 0, AXE_SW_RESET_IPRL, NULL);
735 	uether_pause(&sc->sc_ue, hz / 32);
736 }
737 
738 static void
739 axe_ax88772a_init(struct axe_softc *sc)
740 {
741 	struct usb_ether *ue;
742 
743 	ue = &sc->sc_ue;
744 	/* Reload EEPROM. */
745 	AXE_GPIO_WRITE(AXE_GPIO_RELOAD_EEPROM, hz / 32);
746 	axe_ax88772_phywake(sc);
747 	/* Stop MAC. */
748 	axe_cmd(sc, AXE_CMD_RXCTL_WRITE, 0, 0, NULL);
749 }
750 
751 static void
752 axe_ax88772b_init(struct axe_softc *sc)
753 {
754 	struct usb_ether *ue;
755 	uint16_t eeprom;
756 	uint8_t *eaddr;
757 	int i;
758 
759 	ue = &sc->sc_ue;
760 	/* Reload EEPROM. */
761 	AXE_GPIO_WRITE(AXE_GPIO_RELOAD_EEPROM, hz / 32);
762 	/*
763 	 * Save PHY power saving configuration(high byte) and
764 	 * clear EEPROM checksum value(low byte).
765 	 */
766 	axe_cmd(sc, AXE_CMD_SROM_READ, 0, AXE_EEPROM_772B_PHY_PWRCFG, &eeprom);
767 	sc->sc_pwrcfg = le16toh(eeprom) & 0xFF00;
768 
769 	/*
770 	 * Auto-loaded default station address from internal ROM is
771 	 * 00:00:00:00:00:00 such that an explicit access to EEPROM
772 	 * is required to get real station address.
773 	 */
774 	eaddr = ue->ue_eaddr;
775 	for (i = 0; i < ETHER_ADDR_LEN / 2; i++) {
776 		axe_cmd(sc, AXE_CMD_SROM_READ, 0, AXE_EEPROM_772B_NODE_ID + i,
777 		    &eeprom);
778 		eeprom = le16toh(eeprom);
779 		*eaddr++ = (uint8_t)(eeprom & 0xFF);
780 		*eaddr++ = (uint8_t)((eeprom >> 8) & 0xFF);
781 	}
782 	/* Wakeup PHY. */
783 	axe_ax88772_phywake(sc);
784 	/* Stop MAC. */
785 	axe_cmd(sc, AXE_CMD_RXCTL_WRITE, 0, 0, NULL);
786 }
787 
788 #undef	AXE_GPIO_WRITE
789 
790 static void
791 axe_reset(struct axe_softc *sc)
792 {
793 	struct usb_config_descriptor *cd;
794 	usb_error_t err;
795 
796 	cd = usbd_get_config_descriptor(sc->sc_ue.ue_udev);
797 
798 	err = usbd_req_set_config(sc->sc_ue.ue_udev, &sc->sc_lock,
799 	    cd->bConfigurationValue);
800 	if (err)
801 		DPRINTF("reset failed (ignored)\n");
802 
803 	/* Wait a little while for the chip to get its brains in order. */
804 	uether_pause(&sc->sc_ue, hz / 100);
805 
806 	/* Reinitialize controller to achieve full reset. */
807 	if (sc->sc_flags & AXE_FLAG_178)
808 		axe_ax88178_init(sc);
809 	else if (sc->sc_flags & AXE_FLAG_772)
810 		axe_ax88772_init(sc);
811 	else if (sc->sc_flags & AXE_FLAG_772A)
812 		axe_ax88772a_init(sc);
813 	else if (sc->sc_flags & AXE_FLAG_772B)
814 		axe_ax88772b_init(sc);
815 }
816 
817 static void
818 axe_attach_post(struct usb_ether *ue)
819 {
820 	struct axe_softc *sc = uether_getsc(ue);
821 
822 	/*
823 	 * Load PHY indexes first. Needed by axe_xxx_init().
824 	 */
825 	axe_cmd(sc, AXE_CMD_READ_PHYID, 0, 0, sc->sc_phyaddrs);
826 	if (bootverbose)
827 		device_printf(sc->sc_ue.ue_dev, "PHYADDR 0x%02x:0x%02x\n",
828 		    sc->sc_phyaddrs[0], sc->sc_phyaddrs[1]);
829 	sc->sc_phyno = axe_get_phyno(sc, AXE_PHY_SEL_PRI);
830 	if (sc->sc_phyno == -1)
831 		sc->sc_phyno = axe_get_phyno(sc, AXE_PHY_SEL_SEC);
832 	if (sc->sc_phyno == -1) {
833 		device_printf(sc->sc_ue.ue_dev,
834 		    "no valid PHY address found, assuming PHY address 0\n");
835 		sc->sc_phyno = 0;
836 	}
837 
838 	/* Initialize controller and get station address. */
839 	if (sc->sc_flags & AXE_FLAG_178) {
840 		axe_ax88178_init(sc);
841 		axe_cmd(sc, AXE_178_CMD_READ_NODEID, 0, 0, ue->ue_eaddr);
842 	} else if (sc->sc_flags & AXE_FLAG_772) {
843 		axe_ax88772_init(sc);
844 		axe_cmd(sc, AXE_178_CMD_READ_NODEID, 0, 0, ue->ue_eaddr);
845 	} else if (sc->sc_flags & AXE_FLAG_772A) {
846 		axe_ax88772a_init(sc);
847 		axe_cmd(sc, AXE_178_CMD_READ_NODEID, 0, 0, ue->ue_eaddr);
848 	} else if (sc->sc_flags & AXE_FLAG_772B) {
849 		axe_ax88772b_init(sc);
850 	} else
851 		axe_cmd(sc, AXE_172_CMD_READ_NODEID, 0, 0, ue->ue_eaddr);
852 
853 	/*
854 	 * Fetch IPG values.
855 	 */
856 	if (sc->sc_flags & (AXE_FLAG_772A | AXE_FLAG_772B)) {
857 		/* Set IPG values. */
858 		sc->sc_ipgs[0] = 0x15;
859 		sc->sc_ipgs[1] = 0x16;
860 		sc->sc_ipgs[2] = 0x1A;
861 	} else {
862 		axe_cmd(sc, AXE_CMD_READ_IPG012, 0, 0, sc->sc_ipgs);
863 	}
864 }
865 
866 static int
867 axe_attach_post_sub(struct usb_ether *ue)
868 {
869 	struct axe_softc *sc;
870 	struct ifnet *ifp;
871 	u_int adv_pause;
872 	int error;
873 
874 	sc = uether_getsc(ue);
875 	ifp = uether_getifp(ue);
876 	ifp->if_flags = IFF_BROADCAST | IFF_SIMPLEX | IFF_MULTICAST;
877 	ifp->if_start = uether_start;
878 	ifp->if_ioctl = axe_ioctl;
879 	ifp->if_init = uether_init;
880 	ifq_set_maxlen(&ifp->if_snd, ifqmaxlen);
881 	ifq_set_ready(&ifp->if_snd);
882 
883 	if (AXE_IS_178_FAMILY(sc))
884 		ifp->if_capabilities |= IFCAP_VLAN_MTU;
885 	if (sc->sc_flags & AXE_FLAG_772B) {
886 		ifp->if_capabilities |= IFCAP_TXCSUM | IFCAP_RXCSUM;
887 		ifp->if_hwassist = AXE_CSUM_FEATURES;
888 		/*
889 		 * Checksum offloading of AX88772B also works with VLAN
890 		 * tagged frames but there is no way to take advantage
891 		 * of the feature because vlan(4) assumes
892 		 * IFCAP_VLAN_HWTAGGING is prerequisite condition to
893 		 * support checksum offloading with VLAN. VLAN hardware
894 		 * tagging support of AX88772B is very limited so it's
895 		 * not possible to announce IFCAP_VLAN_HWTAGGING.
896 		 */
897 	}
898 	ifp->if_capenable = ifp->if_capabilities;
899 	if (sc->sc_flags & (AXE_FLAG_772A | AXE_FLAG_772B | AXE_FLAG_178))
900 		adv_pause = MIIF_DOPAUSE;
901 	else
902 		adv_pause = 0;
903 
904 	/* Careful, miibus assumes that the first member of the softc
905            of it's parent is an arpcom structure --mpf */
906 	error = mii_phy_probe(ue->ue_dev, &ue->ue_miibus,
907 		uether_ifmedia_upd, ue->ue_methods->ue_mii_sts);
908 
909 	return (error);
910 }
911 
912 /*
913  * Probe for a AX88172 chip.
914  */
915 static int
916 axe_probe(device_t dev)
917 {
918 	struct usb_attach_arg *uaa = device_get_ivars(dev);
919 
920 	if (uaa->usb_mode != USB_MODE_HOST)
921 		return (ENXIO);
922 	if (uaa->info.bConfigIndex != AXE_CONFIG_IDX)
923 		return (ENXIO);
924 	if (uaa->info.bIfaceIndex != AXE_IFACE_IDX)
925 		return (ENXIO);
926 
927 	return (usbd_lookup_id_by_uaa(axe_devs, sizeof(axe_devs), uaa));
928 }
929 
930 /*
931  * Attach the interface. Allocate softc structures, do ifmedia
932  * setup and ethernet/BPF attach.
933  */
934 static int
935 axe_attach(device_t dev)
936 {
937 	struct usb_attach_arg *uaa = device_get_ivars(dev);
938 	struct axe_softc *sc = device_get_softc(dev);
939 	struct usb_ether *ue = &sc->sc_ue;
940 	uint8_t iface_index;
941 	int error;
942 
943 	sc->sc_flags = USB_GET_DRIVER_INFO(uaa);
944 
945 	device_set_usb_desc(dev);
946 
947 	lockinit(&sc->sc_lock, device_get_nameunit(dev), 0, 0);
948 
949 	iface_index = AXE_IFACE_IDX;
950 	error = usbd_transfer_setup(uaa->device, &iface_index, sc->sc_xfer,
951 	    axe_config, AXE_N_TRANSFER, sc, &sc->sc_lock);
952 	if (error) {
953 		device_printf(dev, "allocating USB transfers failed\n");
954 		goto detach;
955 	}
956 
957 	ue->ue_sc = sc;
958 	ue->ue_dev = dev;
959 	ue->ue_udev = uaa->device;
960 	ue->ue_lock = &sc->sc_lock;
961 	ue->ue_methods = &axe_ue_methods;
962 
963 	error = uether_ifattach(ue);
964 	if (error) {
965 		device_printf(dev, "could not attach interface\n");
966 		goto detach;
967 	}
968 	return (0);			/* success */
969 
970 detach:
971 	axe_detach(dev);
972 	return (ENXIO);			/* failure */
973 }
974 
975 static int
976 axe_detach(device_t dev)
977 {
978 	struct axe_softc *sc = device_get_softc(dev);
979 	struct usb_ether *ue = &sc->sc_ue;
980 
981 	usbd_transfer_unsetup(sc->sc_xfer, AXE_N_TRANSFER);
982 	uether_ifdetach(ue);
983 	lockuninit(&sc->sc_lock);
984 
985 	return (0);
986 }
987 
988 #if (AXE_BULK_BUF_SIZE >= 0x10000)
989 #error "Please update axe_bulk_read_callback()!"
990 #endif
991 
992 static void
993 axe_bulk_read_callback(struct usb_xfer *xfer, usb_error_t error)
994 {
995 	struct axe_softc *sc = usbd_xfer_softc(xfer);
996 	struct usb_ether *ue = &sc->sc_ue;
997 	struct usb_page_cache *pc;
998 	int actlen;
999 
1000 	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1001 
1002 	switch (USB_GET_STATE(xfer)) {
1003 	case USB_ST_TRANSFERRED:
1004 		pc = usbd_xfer_get_frame(xfer, 0);
1005 		axe_rx_frame(ue, pc, actlen);
1006 
1007 		/* FALLTHROUGH */
1008 	case USB_ST_SETUP:
1009 tr_setup:
1010 		usbd_xfer_set_frame_len(xfer, 0, usbd_xfer_max_len(xfer));
1011 		usbd_transfer_submit(xfer);
1012 		uether_rxflush(ue);
1013 		return;
1014 
1015 	default:			/* Error */
1016 		DPRINTF("bulk read error, %s\n", usbd_errstr(error));
1017 
1018 		if (error != USB_ERR_CANCELLED) {
1019 			/* try to clear stall first */
1020 			usbd_xfer_set_stall(xfer);
1021 			goto tr_setup;
1022 		}
1023 		return;
1024 
1025 	}
1026 }
1027 
1028 static int
1029 axe_rx_frame(struct usb_ether *ue, struct usb_page_cache *pc, int actlen)
1030 {
1031 	struct axe_softc *sc;
1032 	struct axe_sframe_hdr hdr;
1033 	struct axe_csum_hdr csum_hdr;
1034 	int error, len, pos;
1035 
1036 	sc = uether_getsc(ue);
1037 	pos = 0;
1038 	len = 0;
1039 	error = 0;
1040 	if ((sc->sc_flags & AXE_FLAG_STD_FRAME) != 0) {
1041 		while (pos < actlen) {
1042 			if ((int)(pos + sizeof(hdr)) > actlen) {
1043 				/* too little data */
1044 				error = EINVAL;
1045 				break;
1046 			}
1047 			usbd_copy_out(pc, pos, &hdr, sizeof(hdr));
1048 
1049 			if ((hdr.len ^ hdr.ilen) != sc->sc_lenmask) {
1050 				/* we lost sync */
1051 				error = EINVAL;
1052 				break;
1053 			}
1054 			pos += sizeof(hdr);
1055 			len = le16toh(hdr.len);
1056 			if (pos + len > actlen) {
1057 				/* invalid length */
1058 				error = EINVAL;
1059 				break;
1060 			}
1061 			axe_rxeof(ue, pc, pos, len, NULL);
1062 			pos += len + (len % 2);
1063 		}
1064 	} else if ((sc->sc_flags & AXE_FLAG_CSUM_FRAME) != 0) {
1065 		while (pos < actlen) {
1066 			if ((int)(pos + sizeof(csum_hdr)) > actlen) {
1067 				/* too little data */
1068 				error = EINVAL;
1069 				break;
1070 			}
1071 			usbd_copy_out(pc, pos, &csum_hdr, sizeof(csum_hdr));
1072 
1073 			csum_hdr.len = le16toh(csum_hdr.len);
1074 			csum_hdr.ilen = le16toh(csum_hdr.ilen);
1075 			csum_hdr.cstatus = le16toh(csum_hdr.cstatus);
1076 			if ((AXE_CSUM_RXBYTES(csum_hdr.len) ^
1077 			    AXE_CSUM_RXBYTES(csum_hdr.ilen)) !=
1078 			    sc->sc_lenmask) {
1079 				/* we lost sync */
1080 				error = EINVAL;
1081 				break;
1082 			}
1083 			/*
1084 			 * Get total transferred frame length including
1085 			 * checksum header.  The length should be multiple
1086 			 * of 4.
1087 			 */
1088 			len = sizeof(csum_hdr) + AXE_CSUM_RXBYTES(csum_hdr.len);
1089 			len = (len + 3) & ~3;
1090 			if (pos + len > actlen) {
1091 				/* invalid length */
1092 				error = EINVAL;
1093 				break;
1094 			}
1095 			axe_rxeof(ue, pc, pos + sizeof(csum_hdr),
1096 			    AXE_CSUM_RXBYTES(csum_hdr.len), &csum_hdr);
1097 			pos += len;
1098 		}
1099 	} else
1100 		axe_rxeof(ue, pc, 0, actlen, NULL);
1101 
1102 	if (error != 0)
1103 		IFNET_STAT_INC(uether_getifp(ue), ierrors, 1);
1104 	return (error);
1105 }
1106 
1107 static int
1108 axe_rxeof(struct usb_ether *ue, struct usb_page_cache *pc, unsigned int offset,
1109     unsigned int len, struct axe_csum_hdr *csum_hdr)
1110 {
1111 	struct ifnet *ifp = uether_getifp(ue);
1112 	struct mbuf *m;
1113 
1114 	if (len < ETHER_HDR_LEN || len > MCLBYTES - ETHER_ALIGN) {
1115 		IFNET_STAT_INC(ifp, ierrors, 1);
1116 		return (EINVAL);
1117 	}
1118 
1119 	m = m_getcl(M_NOWAIT, MT_DATA, M_PKTHDR);
1120 	if (m == NULL) {
1121 		IFNET_STAT_INC(ifp, iqdrops, 1);
1122 		return (ENOMEM);
1123 	}
1124 	m->m_len = m->m_pkthdr.len = MCLBYTES;
1125 	m_adj(m, ETHER_ALIGN);
1126 
1127 	usbd_copy_out(pc, offset, mtod(m, uint8_t *), len);
1128 
1129 	IFNET_STAT_INC(ifp, ipackets, 1);
1130 	m->m_pkthdr.rcvif = ifp;
1131 	m->m_pkthdr.len = m->m_len = len;
1132 
1133 	if (csum_hdr != NULL && csum_hdr->cstatus & AXE_CSUM_HDR_L3_TYPE_IPV4) {
1134 		if ((csum_hdr->cstatus & (AXE_CSUM_HDR_L4_CSUM_ERR |
1135 		    AXE_CSUM_HDR_L3_CSUM_ERR)) == 0) {
1136 			m->m_pkthdr.csum_flags |= CSUM_IP_CHECKED |
1137 			    CSUM_IP_VALID;
1138 			if ((csum_hdr->cstatus & AXE_CSUM_HDR_L4_TYPE_MASK) ==
1139 			    AXE_CSUM_HDR_L4_TYPE_TCP ||
1140 			    (csum_hdr->cstatus & AXE_CSUM_HDR_L4_TYPE_MASK) ==
1141 			    AXE_CSUM_HDR_L4_TYPE_UDP) {
1142 				m->m_pkthdr.csum_flags |=
1143 				    CSUM_DATA_VALID | CSUM_PSEUDO_HDR;
1144 				m->m_pkthdr.csum_data = 0xffff;
1145 			}
1146 		}
1147 	}
1148 
1149 	IF_ENQUEUE(&ue->ue_rxq, m);
1150 	return (0);
1151 }
1152 
1153 #if ((AXE_BULK_BUF_SIZE >= 0x10000) || (AXE_BULK_BUF_SIZE < (MCLBYTES+4)))
1154 #error "Please update axe_bulk_write_callback()!"
1155 #endif
1156 
1157 static void
1158 axe_bulk_write_callback(struct usb_xfer *xfer, usb_error_t error)
1159 {
1160 	struct axe_softc *sc = usbd_xfer_softc(xfer);
1161 	struct axe_sframe_hdr hdr;
1162 	struct ifnet *ifp = uether_getifp(&sc->sc_ue);
1163 	struct usb_page_cache *pc;
1164 	struct mbuf *m;
1165 	int nframes, pos;
1166 
1167 	DPRINTFN(11, "starting transfer\n");
1168 
1169 	switch (USB_GET_STATE(xfer)) {
1170 	case USB_ST_TRANSFERRED:
1171 		DPRINTFN(11, "transfer complete\n");
1172 		ifq_clr_oactive(&ifp->if_snd);
1173 		/* FALLTHROUGH */
1174 	case USB_ST_SETUP:
1175 tr_setup:
1176 		if ((sc->sc_flags & AXE_FLAG_LINK) == 0 ||
1177 		    ifq_is_oactive(&ifp->if_snd)) {
1178 			/*
1179 			 * Don't send anything if there is no link or
1180 			 * controller is busy.
1181 			 */
1182 			DPRINTFN(11, "controller busy:  sc_flags: %x if_flags %x\n",sc->sc_flags, ifp->if_flags);
1183 			return;
1184 		}
1185 
1186 		DPRINTFN(11, "copying frames, 16 at a time\n");
1187 		for (nframes = 0; nframes < 16 &&
1188 		    !ifq_is_empty(&ifp->if_snd); nframes++) {
1189 			m = ifq_dequeue(&ifp->if_snd);
1190 			if (m == NULL)
1191 				break;
1192 			usbd_xfer_set_frame_offset(xfer, nframes * MCLBYTES,
1193 			    nframes);
1194 			pos = 0;
1195 			pc = usbd_xfer_get_frame(xfer, nframes);
1196 			if (AXE_IS_178_FAMILY(sc)) {
1197 				hdr.len = htole16(m->m_pkthdr.len);
1198 				hdr.ilen = ~hdr.len;
1199 				/*
1200 				 * If upper stack computed checksum, driver
1201 				 * should tell controller not to insert
1202 				 * computed checksum for checksum offloading
1203 				 * enabled controller.
1204 				 */
1205 				if (ifp->if_capabilities & IFCAP_TXCSUM) {
1206 					if ((m->m_pkthdr.csum_flags &
1207 					    AXE_CSUM_FEATURES) != 0)
1208 						hdr.len |= htole16(
1209 						    AXE_TX_CSUM_PSEUDO_HDR);
1210 					else
1211 						hdr.len |= htole16(
1212 						    AXE_TX_CSUM_DIS);
1213 				}
1214 				DPRINTFN(11, "usbd copy in\n");
1215 				usbd_copy_in(pc, pos, &hdr, sizeof(hdr));
1216 				pos += sizeof(hdr);
1217 				usbd_m_copy_in(pc, pos, m, 0, m->m_pkthdr.len);
1218 				pos += m->m_pkthdr.len;
1219 				if ((pos % 512) == 0) {
1220 					hdr.len = 0;
1221 					hdr.ilen = 0xffff;
1222 					usbd_copy_in(pc, pos, &hdr,
1223 					    sizeof(hdr));
1224 					pos += sizeof(hdr);
1225 				}
1226 			} else {
1227 				usbd_m_copy_in(pc, pos, m, 0, m->m_pkthdr.len);
1228 				pos += m->m_pkthdr.len;
1229 			}
1230 
1231 			/*
1232 			 * XXX
1233 			 * Update TX packet counter here. This is not
1234 			 * correct way but it seems that there is no way
1235 			 * to know how many packets are sent at the end
1236 			 * of transfer because controller combines
1237 			 * multiple writes into single one if there is
1238 			 * room in TX buffer of controller.
1239 			 */
1240 			IFNET_STAT_INC(ifp, opackets, 1);
1241 
1242 			/*
1243 			 * if there's a BPF listener, bounce a copy
1244 			 * of this frame to him:
1245 			 */
1246 			BPF_MTAP(ifp, m);
1247 
1248 			m_freem(m);
1249 
1250 			/* Set frame length. */
1251 			usbd_xfer_set_frame_len(xfer, nframes, pos);
1252 		}
1253 		if (nframes != 0) {
1254 			usbd_xfer_set_frames(xfer, nframes);
1255 			DPRINTFN(5, "submitting transfer\n");
1256 			usbd_transfer_submit(xfer);
1257 			ifq_set_oactive(&ifp->if_snd);
1258 		}
1259 		return;
1260 		/* NOTREACHED */
1261 	default:			/* Error */
1262 		DPRINTFN(11, "transfer error, %s\n",
1263 		    usbd_errstr(error));
1264 
1265 		IFNET_STAT_INC(ifp, oerrors, 1);
1266 		ifq_clr_oactive(&ifp->if_snd);
1267 		if (error != USB_ERR_CANCELLED) {
1268 			/* try to clear stall first */
1269 			usbd_xfer_set_stall(xfer);
1270 			goto tr_setup;
1271 		}
1272 		return;
1273 
1274 	}
1275 }
1276 
1277 static void
1278 axe_tick(struct usb_ether *ue)
1279 {
1280 	struct axe_softc *sc = uether_getsc(ue);
1281 	struct mii_data *mii = GET_MII(sc);
1282 
1283 	AXE_LOCK_ASSERT(sc);
1284 
1285 	mii_tick(mii);
1286 	if ((sc->sc_flags & AXE_FLAG_LINK) == 0) {
1287 		axe_miibus_statchg(ue->ue_dev);
1288 		if ((sc->sc_flags & AXE_FLAG_LINK) != 0)
1289 			axe_start(ue);
1290 	}
1291 }
1292 
1293 static void
1294 axe_start(struct usb_ether *ue)
1295 {
1296 	struct axe_softc *sc = uether_getsc(ue);
1297 
1298 	/*
1299 	 * start the USB transfers, if not already started:
1300 	 */
1301 	usbd_transfer_start(sc->sc_xfer[AXE_BULK_DT_RD]);
1302 	usbd_transfer_start(sc->sc_xfer[AXE_BULK_DT_WR]);
1303 }
1304 
1305 static void
1306 axe_csum_cfg(struct usb_ether *ue)
1307 {
1308 	struct axe_softc *sc;
1309 	struct ifnet *ifp;
1310 	uint16_t csum1, csum2;
1311 
1312 	sc = uether_getsc(ue);
1313 	AXE_LOCK_ASSERT(sc);
1314 
1315 	if ((sc->sc_flags & AXE_FLAG_772B) != 0) {
1316 		ifp = uether_getifp(ue);
1317 		csum1 = 0;
1318 		csum2 = 0;
1319 		if ((ifp->if_capenable & IFCAP_TXCSUM) != 0)
1320 			csum1 |= AXE_TXCSUM_IP | AXE_TXCSUM_TCP |
1321 			    AXE_TXCSUM_UDP;
1322 		axe_cmd(sc, AXE_772B_CMD_WRITE_TXCSUM, csum2, csum1, NULL);
1323 		csum1 = 0;
1324 		csum2 = 0;
1325 		if ((ifp->if_capenable & IFCAP_RXCSUM) != 0)
1326 			csum1 |= AXE_RXCSUM_IP | AXE_RXCSUM_IPVE |
1327 			    AXE_RXCSUM_TCP | AXE_RXCSUM_UDP | AXE_RXCSUM_ICMP |
1328 			    AXE_RXCSUM_IGMP;
1329 		axe_cmd(sc, AXE_772B_CMD_WRITE_RXCSUM, csum2, csum1, NULL);
1330 	}
1331 }
1332 
1333 static void
1334 axe_init(struct usb_ether *ue)
1335 {
1336 	struct axe_softc *sc = uether_getsc(ue);
1337 	struct ifnet *ifp = uether_getifp(ue);
1338 	int rxmode;
1339 
1340 	AXE_LOCK_ASSERT(sc);
1341 
1342 	if ((ifp->if_flags & IFF_RUNNING) != 0)
1343 		return;
1344 
1345 	/* Cancel pending I/O */
1346 	axe_stop(ue);
1347 
1348 	axe_reset(sc);
1349 
1350 	/* Set MAC address and transmitter IPG values. */
1351 	if (AXE_IS_178_FAMILY(sc)) {
1352 		axe_cmd(sc, AXE_178_CMD_WRITE_NODEID, 0, 0, IF_LLADDR(ifp));
1353 		axe_cmd(sc, AXE_178_CMD_WRITE_IPG012, sc->sc_ipgs[2],
1354 		    (sc->sc_ipgs[1] << 8) | (sc->sc_ipgs[0]), NULL);
1355 	} else {
1356 		axe_cmd(sc, AXE_172_CMD_WRITE_NODEID, 0, 0, IF_LLADDR(ifp));
1357 		axe_cmd(sc, AXE_172_CMD_WRITE_IPG0, 0, sc->sc_ipgs[0], NULL);
1358 		axe_cmd(sc, AXE_172_CMD_WRITE_IPG1, 0, sc->sc_ipgs[1], NULL);
1359 		axe_cmd(sc, AXE_172_CMD_WRITE_IPG2, 0, sc->sc_ipgs[2], NULL);
1360 	}
1361 
1362 	if (AXE_IS_178_FAMILY(sc)) {
1363 		sc->sc_flags &= ~(AXE_FLAG_STD_FRAME | AXE_FLAG_CSUM_FRAME);
1364 		if ((sc->sc_flags & AXE_FLAG_772B) != 0) {
1365 			sc->sc_lenmask = AXE_CSUM_HDR_LEN_MASK;
1366 			sc->sc_flags |= AXE_FLAG_CSUM_FRAME;
1367 		} else {
1368 			sc->sc_lenmask = AXE_HDR_LEN_MASK;
1369 			sc->sc_flags |= AXE_FLAG_STD_FRAME;
1370 		}
1371 	}
1372 
1373 	/* Configure TX/RX checksum offloading. */
1374 	axe_csum_cfg(ue);
1375 
1376 	if (sc->sc_flags & AXE_FLAG_772B) {
1377 		/* AX88772B uses different maximum frame burst configuration. */
1378 		axe_cmd(sc, AXE_772B_CMD_RXCTL_WRITE_CFG,
1379 		    ax88772b_mfb_table[AX88772B_MFB_16K].threshold,
1380 		    ax88772b_mfb_table[AX88772B_MFB_16K].byte_cnt, NULL);
1381 	}
1382 
1383 	/* Enable receiver, set RX mode. */
1384 	rxmode = (AXE_RXCMD_MULTICAST | AXE_RXCMD_ENABLE);
1385 	if (AXE_IS_178_FAMILY(sc)) {
1386 		if (sc->sc_flags & AXE_FLAG_772B) {
1387 			/*
1388 			 * Select RX header format type 1.  Aligning IP
1389 			 * header on 4 byte boundary is not needed when
1390 			 * checksum offloading feature is not used
1391 			 * because we always copy the received frame in
1392 			 * RX handler.  When RX checksum offloading is
1393 			 * active, aligning IP header is required to
1394 			 * reflect actual frame length including RX
1395 			 * header size.
1396 			 */
1397 			rxmode |= AXE_772B_RXCMD_HDR_TYPE_1;
1398 			if ((ifp->if_capenable & IFCAP_RXCSUM) != 0)
1399 				rxmode |= AXE_772B_RXCMD_IPHDR_ALIGN;
1400 		} else {
1401 			/*
1402 			 * Default Rx buffer size is too small to get
1403 			 * maximum performance.
1404 			 */
1405 			rxmode |= AXE_178_RXCMD_MFB_16384;
1406 		}
1407 	} else {
1408 		rxmode |= AXE_172_RXCMD_UNICAST;
1409 	}
1410 
1411 	/* If we want promiscuous mode, set the allframes bit. */
1412 	if (ifp->if_flags & IFF_PROMISC)
1413 		rxmode |= AXE_RXCMD_PROMISC;
1414 
1415 	if (ifp->if_flags & IFF_BROADCAST)
1416 		rxmode |= AXE_RXCMD_BROADCAST;
1417 
1418 	axe_cmd(sc, AXE_CMD_RXCTL_WRITE, 0, rxmode, NULL);
1419 
1420 	/* Load the multicast filter. */
1421 	axe_setmulti(ue);
1422 
1423 	usbd_xfer_set_stall(sc->sc_xfer[AXE_BULK_DT_WR]);
1424 
1425 	ifp->if_flags |= IFF_RUNNING;
1426 	/* Switch to selected media. */
1427 	axe_ifmedia_upd(ifp);
1428 }
1429 
1430 static void
1431 axe_setpromisc(struct usb_ether *ue)
1432 {
1433 	struct axe_softc *sc = uether_getsc(ue);
1434 	struct ifnet *ifp = uether_getifp(ue);
1435 	uint16_t rxmode;
1436 
1437 	axe_cmd(sc, AXE_CMD_RXCTL_READ, 0, 0, &rxmode);
1438 
1439 	rxmode = le16toh(rxmode);
1440 
1441 	if (ifp->if_flags & IFF_PROMISC) {
1442 		rxmode |= AXE_RXCMD_PROMISC;
1443 	} else {
1444 		rxmode &= ~AXE_RXCMD_PROMISC;
1445 	}
1446 
1447 	axe_cmd(sc, AXE_CMD_RXCTL_WRITE, 0, rxmode, NULL);
1448 
1449 	axe_setmulti(ue);
1450 }
1451 
1452 static void
1453 axe_stop(struct usb_ether *ue)
1454 {
1455 	struct axe_softc *sc = uether_getsc(ue);
1456 	struct ifnet *ifp = uether_getifp(ue);
1457 
1458 	AXE_LOCK_ASSERT(sc);
1459 
1460 	ifp->if_flags &= ~IFF_RUNNING;
1461 	ifq_clr_oactive(&ifp->if_snd);
1462 	sc->sc_flags &= ~AXE_FLAG_LINK;
1463 
1464 	/*
1465 	 * stop all the transfers, if not already stopped:
1466 	 */
1467 	usbd_transfer_stop(sc->sc_xfer[AXE_BULK_DT_WR]);
1468 	usbd_transfer_stop(sc->sc_xfer[AXE_BULK_DT_RD]);
1469 }
1470 
1471 static int
1472 axe_ioctl(struct ifnet *ifp, u_long cmd, caddr_t data, struct ucred *uc)
1473 {
1474 	struct usb_ether *ue = ifp->if_softc;
1475 	struct axe_softc *sc;
1476 	struct ifreq *ifr;
1477 	int error, mask, reinit;
1478 
1479 	sc = uether_getsc(ue);
1480 	ifr = (struct ifreq *)data;
1481 	error = 0;
1482 	reinit = 0;
1483 	if (cmd == SIOCSIFCAP) {
1484 		AXE_LOCK(sc);
1485 		mask = ifr->ifr_reqcap ^ ifp->if_capenable;
1486 		if ((mask & IFCAP_TXCSUM) != 0 &&
1487 		    (ifp->if_capabilities & IFCAP_TXCSUM) != 0) {
1488 			ifp->if_capenable ^= IFCAP_TXCSUM;
1489 			if ((ifp->if_capenable & IFCAP_TXCSUM) != 0)
1490 				ifp->if_hwassist |= AXE_CSUM_FEATURES;
1491 			else
1492 				ifp->if_hwassist &= ~AXE_CSUM_FEATURES;
1493 			reinit++;
1494 		}
1495 		if ((mask & IFCAP_RXCSUM) != 0 &&
1496 		    (ifp->if_capabilities & IFCAP_RXCSUM) != 0) {
1497 			ifp->if_capenable ^= IFCAP_RXCSUM;
1498 			reinit++;
1499 		}
1500 		if (reinit > 0 && ifp->if_flags & IFF_RUNNING)
1501 			ifp->if_flags &= ~IFF_RUNNING;
1502 		else
1503 			reinit = 0;
1504 		AXE_UNLOCK(sc);
1505 		if (reinit > 0)
1506 			uether_init(ue);
1507 	} else
1508 		error = uether_ioctl(ifp, cmd, data, uc);
1509 
1510 	return (error);
1511 }
1512