iwd.network(5) Linux Connectivity iwd.network(5) (NAME) iwd.network - iwd (SYNOPSIS) .open .psk .8021x (DESCRIPTION) iwd . $STATE_DIRECTORY systemd . $LIBDIR/iwd /var/lib/iwd . . iwd . iwd D-Bus . (FILE FORMAT) keyfile (GNOME) ( Desktop Entry : http://freedesktop.org/Standards/desktop-entry-spec). . () . . l_settings ell . (newline) . . () # . - . . - . UTF-8 . true false 0 1 . . : \t \r \n . . \s . . . [ ] . [ ] . [ ] . @ (parser extension) ( ) . @ @ . @ . . (payload) . ( ) . pem PEM RFC7468 PEM . -----BEGIN -----END RFC . PEM . . (NAMING) SSID : (Open) PSK 802.1x. SSID .open .psk .8021x . SSID - . . (SETTINGS) . . . (General Settings) [Settings] . +------------------------+--------------------------------------+ |AutoConnect | : true false | | | | | | | | | | | | | | | | | | . | +------------------------+--------------------------------------+ |Hidden | : true false | | | | | | | | | | | | | | | SSID | | | | | | | | | | | | . | +------------------------+--------------------------------------+ |AlwaysRandomizeAddress | : true false | | | | | | MAC | | | | | | | | | | | | . | | | | | | | | | | | | [General].AddressRandomization | | | 'network' | | | . | | | iwd.config | | | . | | | | | | | | | [Settings].AddressOverride | | | | | | | | | | | | AddressOverride | | | . | +------------------------+--------------------------------------+ |AddressOverride | MAC | | | | | | MAC | | | | | | | | | . | | | | | | | | | | | | | | | [General].AddressRandomization | | | 'network' | | | . | | | iwd.config | | | . | | | | | | | | | [Settings].AlwaysRandomizeAddress | | | | | | | | | | | | AddressOverride | | | . | +------------------------+--------------------------------------+ |TransitionDisable | : true false | | | | | | | | | | | | | | | TKIP | | | | | | | | | | | | (Management | | | Frame Protection) | | | | | | . | | | | | | | | | | | | | | | | | | . | | | | | | | | | | | | | | | [Settings].DisabledTransitionModes | | | . | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | (Transition Disable) | | | | | | | | | . | | | | | | | | | | | | | | | | | | . | +------------------------+--------------------------------------+ |DisabledTransitionModes | | | | | | | | | | | | | : | | | 0.0 o 2 personal o 2 enterprise o 2 | | | open 0u | | | 'personal' | | | | | | | | | WPA2-Personal | | | | | | | | | | | | | | | | | | | | | | | | WPA3-Personal | | | | | | . | | | 'enterprise' | | | | | | | | | | | | WPA2-Enterprise | | | | | | | | | | | | . | | | 'open' | | | | | | | | | OWE | | | | | | | | | . | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | (Transition Disable) | | | | | | | | | . | | | | | | | | | | | | | | | | | | . | +------------------------+--------------------------------------+ |UseDefaultEccGroup | : true false | | | | | | true | | | | | | | | | ECC ( ) | | | | | | | | | ECC | | | ( WPA3 OWE) | | | | | | . | | | | | | IWD | | | | | | | | | | | | | | | | | | | | | | | | | | | . | +------------------------+--------------------------------------+ (Network Authentication Settings) [Security] Wi-Fi . SystemdEncrypt iwd.config . ( EncryptedSalt/EncryptedSecurity ) . . +-------------------------------+--------------------------------------------------+ |Passphrase | | | | | | | | | | | | | WPA-Personal. | | | | | | WPA3-Personal (SAE) | | | . | | | PreSharedKey | | | | | | . | | | | | | | | | | | | | | | (agent) | | | . | +-------------------------------+--------------------------------------------------+ |PasswordIdentifier | | | | | | | | | | . | | | WPA3-Personal (SAE) | | | | | | | | | | | | | | | | | | . | +-------------------------------+--------------------------------------------------+ |PreSharedKey | | | | | | | | | | | | | | | | | | | | | | | | | . | | | Passphrase | | | . | +-------------------------------+--------------------------------------------------+ |EAP-Method | | | | : AKA AKA' MSCHAPV2 PEAP | | | PWD SIM TLS TTLS. | | | | | | TTLS/PEAP | | | : GTC MD5. | +-------------------------------+--------------------------------------------------+ |EAP-Identity | | | | | | | . | | | EAP | | | | | | | | | . GTC | | | MD5 MSCHAPV2 PWD | | | | | | | | | | | | | | | . | | | TLS | | | ( PEAP TLS TTLS) | | | | | | RADIUS | | | | | | EAP-Identity . | +-------------------------------+--------------------------------------------------+ |EAP-Password | | | | | | | WPA-Enterprise | | | . | | | | | | | | | | | | . | | | : GTC MD5 MSCHAPV2 PWD. | +-------------------------------+--------------------------------------------------+ |EAP-Password-Hash | | | | EAP | | | | | | | | | . | | | MSCHAPV2 | | | MD4 | | | . | +-------------------------------+--------------------------------------------------+ |EAP-TLS-CACert, | | |EAP-TTLS-CACert, | pem | |EAP-PEAP-CACert | | | | X.509 | | | PEM | | | | | | | | | (authenticator). | | | | | | | | | | | | | | | | | | CA | | | . | | | | | | | | | | | | | | | ( ). | +-------------------------------+--------------------------------------------------+ |EAP-TLS-ClientCert | | | | pem | | | X.509 | | | | | | | | | . | +-------------------------------+--------------------------------------------------+ |EAP-TLS-ClientKey | | | | pem | | | | | | | | | | | | EAP-TLS-ClientCert. | | | PKCS#8 PEM | | | . | +-------------------------------+--------------------------------------------------+ |EAP-TLS-ClientKeyBundle | | | | | | | EAP-TLS-ClientCert | | | EAP-TLS-ClientKey IWD | | | | | | | | | (container) | | | | | | . | | | | | | | | | PKCS#12 . | +-------------------------------+--------------------------------------------------+ |EAP-TLS- ClientKeyPassphrase | | | | | | | | | | . | | | | | | | | | | | | | | | | | | . | | | | | | | | | | | | . | +-------------------------------+--------------------------------------------------+ |EAP-TLS-ServerDomainMask, | | |EAP-TTLS-ServerDomainMask, | | |EAP-PEAP-ServerDomainMask | | | | . | | | | | | DNS | | | Name Subject | | | Alternative Name | | | Common Name | | | | | | | | | | | | | | | . | | | | | | (semicolon) | | | . | | | | | | | | | . | | | | | | | | | | | | . | | | | | | | | | . | | | | | | | | | | | | | | | . | +-------------------------------+--------------------------------------------------+ |EAP-TLS-FastReauthentication, | : true false | |EAP-TTLS-FastReauthentication, | | |EAP-PEAP-FastReauthentication, | TLS | | | EAP-TLS EAP-TTLS EAP-PEAP | | | | | | . | | | | | | | | | | | | EAP-Enterprise | | | . | | | | | | | | | | | | | | | | | | TLS | | | | | | | | | | | | | | | (timeout) EAP . | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | . | | | | | | | | | | | | . | +-------------------------------+--------------------------------------------------+ |EAP-TTLS-Phase2-Method | | | | : +2 Tunneled-CHAP, | | | Tunneled-MSCHAP, Tunneled-MSCHAPv2, Tunneled-PAP | | | or | | | EAP ( EAP-Method) -2 | | | | | | EAP-TTLS. | | | | | | EAP TTLS ( | | | Tunneled-*) | | | EAP | | | | | | . | | | | | | | | | | | | EAP . | +-------------------------------+--------------------------------------------------+ |EAP-TTLS-Phase2-Identity | | | | / | | | | | | EAP TTLS. | | | iwd | | | | | | | | | . | +-------------------------------+--------------------------------------------------+ |EAP-TTLS-Phase2-Password | | | | EAP | | | TTLS. | | | IWD | | | | | | | | | . | +-------------------------------+--------------------------------------------------+ |EAP-TTLS-Phase2-* | | | | | | | EAP | | | | | | | | | TTLS | | | EAP-TTLS-Phase2-Method | | | . | | | EAP-TTLS-Phase2- | | | EAP- | | | | | | | | | | | | . | | | | | | | | | | | | | | | . | +-------------------------------+--------------------------------------------------+ |EAP-PEAP-Phase2-* | | | | | | | EAP EAP-PEAP | | | | | | . | | | EAP-PEAP-Phase2- | | | EAP- | | | | | | | | | | | | . | | | | | | | | | | | | | | | . | +-------------------------------+--------------------------------------------------+ (Network Configuration Settings) [Network] iwd . +-------------+--------------------------------+ |MulticastDNS | : true | | | false resolve | | | DNS | | | | | | (Multicast DNS) | | | | | | | | | | | | . | | | | | | | | | | | | | | | systemd-resolved | | | | | | | | | . | | | man | | | 5 systemd.network | | | | | | . | | | | | | | | | | | | NameResolvingService=systemd | | | . | +-------------+--------------------------------+ [IPv4] (IPv4) . +-------------+-----------------------------------+ |Address | IPv4 | | | IPv4 | | | . | | | | | | | | | | | | | | | . | +-------------+-----------------------------------+ |Gateway | IPv4 | | | IPv4 | | | (). | | | | | | | | | | | | . | +-------------+-----------------------------------+ |DNS | | | | | | | IPv4 | | | | | | | | | () IPv4 | | | | | | | | | (DNS). | | | | | | . | | | DNS | | | | | | | | | | | | DNS | | | | | | DHCP | | | . | +-------------+-----------------------------------+ |Netmask | IPv4 | | | IPv4 | | | (subnet). | | | | | | . | | | 255.255.255.0 | | | Netmask | | | | | | | | | . | +-------------+-----------------------------------+ |Broadcast | IPv4 | | | IPv4 | | | | | | | | | (broadcast). | | | | | | . | +-------------+-----------------------------------+ |DomainName | | | | DomainName | | | | | | . | | | | | | . | | | DomainName | | | | | | | | | | | | DomainName | | | | | | DHCP | | | . | +-------------+-----------------------------------+ |SendHostname | : true false | | | DHCP | | | | | | | | | | | | | | | | | | . | | | | | | | | | | | | . | +-------------+-----------------------------------+ [IPv6] (IPv6) . +-----------+-----------------------------------+ |Enabled | (Boolean) | | | | | | IPv6 | | | | | | | | | . | | | | | | | | | | | | | | | | | | | | | | | | [Network].EnableIPv6 | | | | | | . | | | | | | | | | IPv6 | | | 'disable_ipv6' | | | sysfs | | | | | | | | | IPv6 | | | | | | | | | . | +-----------+-----------------------------------+ |Address | IPv6 | | | IPv6 | | | . | | | | | | | | | | | | | | | . | | | | | | | | | inet_pton | | | '/' | | | | | | . | | | | | | | | | | | | . | +-----------+-----------------------------------+ |Gateway | IPv6 | | | IPv6 | | | (). | | | | | | | | | | | | . | +-----------+-----------------------------------+ |DNS | | | | | | | IPv6 | | | | | | | | | () IPv6 | | | | | | | | | (DNS). | | | | | | . | | | DNS | | | | | | | | | | | | DNS | | | | | | DHCPv6 | | | | | | | | | (Router | | | Advertisements) | | | . | +-----------+-----------------------------------+ |DomainName | | | | DomainName | | | | | | . | | | | | | . | | | DomainName | | | | | | | | | | | | DomainName | | | | | | DHCPv6 | | | | | | | | | | | | . | +-----------+-----------------------------------+ PEM (Embedded PEMs) PEM ( ) PEM . IEEE 802.1x . PEM ( PEM 'my_ca_cert' ): [@pem@my_ca_cert] ----- BEGIN CERTIFICATE ----- ----- END CERTIFICATE ----- PEM BEGIN/END . 'embed:' 'my_ca_cert' : EAP-TLS-CACert=embed:my_ca_cert CA ( ) . (EXAMPLES) : () - Open Network (Hidden) [Settings] Hidden=true - Pre-Shared Key (PSK) [Security] Passphrase=secret123 PWD [Security] EAP-Method=PWD EAP-Identity=user@domain.com EAP-Password=secret123 TLS [Security] EAP-Method=TLS EAP-TLS-ClientCert=/certs/client-cert.pem EAP-TLS-ClientKey=/certs/client-key.pem EAP-TLS-CACert=/certs/ca-cert.pem EAP-TLS-ServerDomainMask=*.domain.com TTLS + PAP [Security] EAP-Method=TTLS EAP-Identity=open@identity.com EAP-TTLS-CACert=/certs/ca-cert.pem EAP-TTLS-Phase2-Method=Tunneled-PAP EAP-TTLS-Phase2-Identity=username EAP-TTLS-Phase2-Password=password EAP-TTLS-ServerDomainMask=*.domain.com PEAP + MSCHAPv2 [Security] EAP-Method=PEAP EAP-Identity=open@identity.com EAP-PEAP-CACert=/certs/ca-cert.pem EAP-PEAP-Phase2-Method=MSCHAPV2 EAP-PEAP-Phase2-Identity=username EAP-PEAP-Phase2-Password=password EAP-PEAP-ServerDomainMask=*.domain.com (SEE ALSO) iwd(8), iwd.config(5) (AUTHOR) Marcel Holtmann , Denis Kenzior , Andrew Zaborowski , Tim Kourt , James Prestwood (COPYRIGHT) 2013-2019 Intel Corporation iwd 22 September 2019 iwd.network(5)