Netplan (Introduction to Netplan)(5) File Formats Manual (NAME) netplan - YAML (SYNOPSIS) netplan [COMMAND|help] (COMMANDS) netplan help . (DESCRIPTION) () YAML . (early boot) << >> (network renderer) Netplan /{lib,etc,run}/netplan/*.yaml /run . o systemd-networkd (NetworkManager) . o . o initramfs ( ). o YAML . o (parser) libvirt lxd (virbr0 lxdbr0) NetworkManager . o / NetworkManager (ephemeral) . (General structure) Netplan YAML . /{lib,etc,run}/netplan/*.yaml . ( ) ( ) ( ) . /run/netplan /etc/netplan ( ) /lib/netplan . Netplan network: version: 2 ( YAML curtin MAAS ) ethernets: modems: wifis: bridges:. . ( << >> configuration IDs ) . (Device configuration IDs) ( ethernets:) <<>> (ID) . . (bridge) . ( 0.97) (bring up) . Netplan Netplan . / : (: ) ( hot plugging) . match: / MAC . ( MAC ) . . . match: (opaque) . (: veth bridge bond vrf) () . . match: set-name: . YAML (YAML configuration) (Top-level configuration structure) Netplan YAML . network: version: NUMBER renderer: STRING bonds: MAPPING bridges: MAPPING dummy-devices: MAPPING ethernets: MAPPING modems: MAPPING tunnels: MAPPING virtual-ethernets: MAPPING vlans: MAPPING vrfs: MAPPING wifis: MAPPING nm-devices: MAPPING o version () . 2 . 2 . o renderer () . networkd NetworkManager . networkd . o bonds () () . o bridges () (bridge) . o dummy-devices () - 0.107 . o ethernets () . o modems () . o tunnels () . o virtual-ethernets () - 0.107 (veth) . o vlans () VLAN . o vrfs () (VRF) . o wifis () client adhoc access point . o nm-devices () nm-devices Netplan . NetworkManager (passthrough) .nmconnection . . . (Properties for physical device types) . : networkd udev . : wakeonlan *-offload MAC . o match () . . . o name () . (Globs) match: (ID) ( ). (NetworkManager: v1.14.0 ) o macaddress () MAC XX:XX:XX:XX:XX:XX (IPoIB). (Globs) . MAC veth bridge bond vlan ... . o driver ( ) - 0.104 udev DRIVER. (globs) . networkd . : o PCI: network: ethernets: myinterface: match: name: enp2* o MAC : network: ethernets: interface0: match: macaddress: 11:22:33:AA:BB:FF o ixgbe: network: ethernets: nic0: match: driver: ixgbe name: en*s0 o bcmgenet smsc*: network: ethernets: nic0: match: driver: ["bcmgenet", "smsc*"] name: en* o set-name () MAC << >> . udev ifnames . ( dmesg ). o wakeonlan () Wake on LAN . () . o emit-lldp () - 0.99 ( networkd) LLDP . . o receive-checksum-offload () - 0.104 ( networkd) true (false) () . . o transmit-checksum-offload () - 0.104 ( networkd) true (false) () . . o tcp-segmentation-offload () - 0.104 ( networkd) true (false) TCP ( TSO) () . . o tcp6-segmentation-offload () - 0.104 ( networkd) true (false) TCP6 (tx-tcp6-segmentation) () . . o generic-segmentation-offload () - 0.104 ( networkd) true (false) (GSO) () . . o generic-receive-offload () - 0.104 ( networkd) true (false) (GRO) () . . o large-receive-offload () - 0.104 ( networkd) true (false) (LRO) () . . o openvswitch () - 0.100 openvswitch . Open vSwitch Netplan openvswitch . openvswitch ( bond/bridge openvswitch ) openvswitch . vlan Netplan VLAN openvswitch vlan . o external-ids () - 0.100 Open vSwitch . o other-config () - 0.100 Open vSwitch . o lacp () - 0.100 bond . active passive off () . o fail-mode () - 0.100 bridge . secure standalone () . o mcast-snooping () - 0.100 bridge . False . o protocols ( ) - 0.100 bridge network . . OpenFlow10 OpenFlow11 OpenFlow12 OpenFlow13 OpenFlow14 OpenFlow15 . o rstp () - 0.100 bridge . False . o controller () - 0.100 bridge . OpenFlow . o addresses ( ) . ovs-vsctl(8) . : addresses: [tcp:127.0.0.1:6653, "ssl:[fe80::1234%eth0]:6653"]. o connection-mode () . in-band out-of-band . in-band . o ports ( ) - 0.100 Open vSwitch. (bonds bridges) . : openvswitch: ports: - [patch0-1, patch1-0] o ssl () - 0.100 openvswitch . SSL . o ca-cert () CA . o certificate () . o private-key () . (Properties for all device types) o renderer () . networkd NetworkManager . network: ( ethernets:) . networkd . ( 0.99) renderer VLAN ( vlans:): sriov. VLAN sriov (Virtual Function) SR-IOV Netplan VLAN . VF . o dhcp4 () DHCP IPv4. . o dhcp6 () DHCP IPv6. . DHCP (stateless) - DHCP DNS IP - DHCP (stateful) . IPv6 (SLAAC RDNSS) . ( accept-ra .) (Router Advertisement) RA DHCP . RDNSS networkd rdnssd(8) . NetworkManager . o ipv6-mtu () - 0.98 > MTU IPv6 ( networkd ). > . > > : ipv6-mtu o ipv6-privacy () IPv6 (RFC 4941) . false - . . o link-local ( ) - (link-local) . ipv4 ipv6 - IPv4 IPv6 . - IPv6 . - IPv6 - IPv4 . - . networkd . NetworkManager DHCP - . : o - IPv4: link-local: [ ipv4 ] o -: link-local: [ ipv4, ipv6 ] o -: link-local: [ ] o ignore-carrier () - 0.104 ( networkd) (carrier) . o critical () << >> (critical to the system) IP . ( NetworkManager ) o dhcp-identifier () ( networkd) DHCP (v4) . mac MAC . duid networkd RFC4361 IAID DUID . o dhcp4-overrides () ( networkd) DHCP DHCP . o dhcp6-overrides () ( networkd) DHCP DHCP . o accept-ra () (Router Advertisement) IPv6 . . . . o ra-overrides () - 1.1 ( networkd) IPv6 (RA) IPv6 . o addresses ( ) DHCP RA. CIDR addr/prefixlen. addr IPv4 IPv6 inet_pton(3) prefixlen . ( VLAN) DHCP . . : o lifetime () - 0.100 : forever. forever 0 PreferredLifetime Address systemd-networkd . networkd . o label () - 0.100 IP ip address label. networkd . : o : addresses: [192.168.14.2/24, "2001:1::1/64"] o : network: ethernets: eth0: addresses: - "10.0.0.15/24": lifetime: 0 label: "maas" - "2001:1::1/64" o ipv6-address-generation () - 0.99 IPv6 RFC4862. eui64 stable-privacy . o ipv6-address-token () - 0.100 IPv6 IPv6. ipv6-address-generation . o gateway4 gateway6 () . (gateway) IPv4/6 . addresses . IP inet_pton(3) . IP . routing-policy . : o IPv4: gateway4: 172.16.0.1 o IPv6: gateway6: "2001:4::1" o nameservers () DNS . : addresses: IPv4 IPv6 gateway* search: . : network: ethernets: id0: [...] nameservers: search: [lab, home] addresses: [8.8.8.8, "FEDC::1"] o macaddress () MAC . MAC "XX:XX:XX:XX:XX:XX" . : permanent random. NetworkManager stable stable-ssid ( ) preserve . : networkd udev . MAC MAC . : network: ethernets: id0: match: macaddress: 52:54:00:6b:3c:58 [...] macaddress: 52:54:00:6b:3c:59 o mtu () (MTU) . 1500 . . : networkd udev . MTU MAC . o optional () (booting) . networkd . networkd . networkd false . : network: ethernets: eth7: # # - . dhcp4: true optional: true o optional-addresses ( ) . << >> . . : network: ethernets: eth7: dhcp4: true dhcp6: true optional-addresses: [ ipv4-ll, dhcp6 ] o activation-mode () - 0.103 . Netplan . activation-mode manual ( networkd) off (down) . activation-mode optional . networkd v248+ . : network: ethernets: eth1: # UP dhcp4: true activation-mode: manual o routes ( ) . o routing-policy ( ) (Policy Routing) . o neigh-suppress () - 0.105 . (Neighbour Suppression) ARP ND . . o hairpin () - 1.0 . . false . . o port-mac-learning () - 1.0 . MAC . . networkd . DHCP (DHCP Overrides) DHCP . networkd use-routes route-metric. dhcp4 dhcp6 true . dhcp4 dhcp6 true networkd dhcp4-overrides dhcp6-overrides . . NetworkManager dhcp4-overrides dhcp6-overrides Netplan YAML DHCP . o dhcp4-overrides dhcp6-overrides () dhcp4-overrides dhcp6-overrides DHCP . o use-dns () : true. true DNS DHCP . networkd . o use-ntp () : true. true NTP DHCP systemd-timesyncd . networkd . o send-hostname () : true. true (hostname) DHCP . networkd . o use-hostname () : true. true DHCP (transient hostname) . networkd . o use-mtu () : true. true MTU DHCP MTU . false MTU DHCP . networkd . o hostname () DHCP . networkd . o use-routes () : true. true DHCP . false DHCP : . DHCP . networkd NetworkManager . o route-metric () . . networkd NetworkManager . o use-domains () - 0.98 route . true DHCP DNS Domains=. route DHCP DNS Domains= ~ () . : dhcp-use-domains IPv6 (IPv6 Router Advertisement Overrides) (RA) IPv6 ( networkd ). o ra-overrides () - 1.1 ra-overrides IPv6 . o use-dns () : true. true DNS . networkd . o use-domains () route . true DNS . route IPv6 RA DNS . false . o table () IPv6 RA. . : {/etc,/usr/share}/iproute2/rt_tables . (Routing) Netplan . networkd . . (Default routes) . IP . : network: ethernets: eth0: [...] routes: - to: default # 0.0.0.0/0 via: 10.0.0.1 metric: 100 on-link: true advertised-mss: 1400 - to: default # ::/0 via: cf02:de:ad:be:ef::2 eth1: [...] routes: - to: default via: 172.134.67.1 metric: 100 on-link: true # # eth0 table: 76 o routes () routes . to . local nat host . unicast (via) broadcast multicast anycast link . global . from to via IPv4 IPv6 addr/prefixlen addr . o from () IP . (NetworkManager: v1.8.0 ) o to () . o via () (gateway) . o on-link () true . (NetworkManager: v1.12.0 IPv4 v1.18.0 IPv6) o metric () . . o type () . : unicast () anycast blackhole broadcast local multicast nat prohibit throw unreachable xresolve. o scope () (scope) . global link host . IPv4 . o table () . . table . . : /etc/iproute2/rt_tables . (NetworkManager: v1.10.0 ) o mtu () - 0.101 MTU . . o congestion-window () - 0.102 (congestion window) (segments) . . o advertised-receive-window () - 0.102 . . o advertised-mss () - 1.1 (MSS 'Maximal Segment Size') TCP . MTU (hop) . . o routing-policy () routing-policy IP . from to IPv4 IPv6 addr/prefixlen addr . o from () IP . o to () . o table () . . table . 1 . : /etc/iproute2/rt_tables . o priority () . : . NetworkManager . o mark () iptables . 1 . o type-of-service () (Type of Service) . (yaml-auth)= ## Netplan auth . o auth () ethernets: access-points: wifis: . auth : o key-management () : none ( ) psk (WPA ) psk-sha256 (WPA2 ) eap (WPA EAP ) eap-sha256 ( WPA3-Enterprise) eap-suite-b-192 ( WPA3-Enterprise) sae ( WPA3) 802.1x ( ). o password () EAP WPA-PSK. key-management eap 802.1x : o method () EAP . EAP : tls (TLS) peap (EAP ) leap (EAP ) pwd ( EAP) ttls (TLS ). o identity () (identity) EAP. o anonymous-identity () EAP . o ca-certificate () (CA) . o client-certificate () . o client-key () client-certificate. o client-key-password () client-key . o phase2-auth () - 0.99 (Phase 2). ethernets (Properties for device type ethernets) (Status): . (Purpose): ethernets . (Structure): . ethernet . ethernets . match . : network: ethernets: device-id: ... device-id . Netplan . . eth0 DHCP : network: ethernets: eth0: dhcp4: true device-id . match . isp-interface ( ) match MAC aa:bb:cc:00:11:22 : network: ethernets: isp-interface: match: macaddress: aa:bb:cc:00:11:22 dhcp4: true SR-IOV . o link () - 0.99 ( SR-IOV) link (Virtual Function) (Physical Function) Netplan . : network: ethernets: enp1: {...} enp1s16f1: link: enp1 o virtual-function-count () - 0.99 ( SR-IOV) VF Netplan . virtual-function-count . VF Netplan . . : sriov o embedded-switch-mode () - 0.104 ( SR-IOV) PCI SmartNIC ( Mellanox ConnectX-5). switchdev legacy . : eswitch-mode o delay-virtual-functions-rebind () - 0.104 ( SR-IOV) SR-IOV embedded-switch-mode . bonding/VF LAG . false . : eswitch-mode o infiniband-mode () - 0.105 ( InfiniBand) IPoIB. datagram connected . . : infiniband (yaml-modems)= ## modems (Status): . (Purpose): modems . GSM/CDMA NetworkManager . systemd-networkd . (Structure): . modem . : network: version: 2 renderer: NetworkManager modems: cdc-wdm1: mtu: 1600 apn: ISP.CINGULAR username: ISP@CINGULARGPRS.COM password: CINGULAR1 number: "*99#" network-id: 24005 device-id: da812de91eec16620b06cd0ca5cbc7ea25245222 pin: 2345 sim-id: 89148000000060671234 sim-operator-id: 310260 : modems o apn () - 0.99 APN ( ) . auto-config . o auto-config () - 0.99 . . o device-id () - 0.99 ( WWAN ) . mmcli . o network-id () - 0.99 ( GSM LAI). . o number () - 0.99 . ( GSM ) o password () - 0.99 . auto-config . o pin () - 0.99 (PIN) . o sim-id () - 0.99 ( WWAN ) . device-id . o sim-operator-id () - 0.99 MCC/MNC ( 310260 21601) . device-id sim-id . o username () - 0.99 . auto-config . wifis (Properties for device type wifis) (Status): . (Purpose): wifis . (Structure): . wifi . : network: version: 2 wifis: wlp0s1: access-points: "network_ssid_name": password: "**********" systemd-networkd networkd wpasupplicant . o access-points () NetworkManager . /SSID . SSID : o password () WPA/WPA2 (passphrase) . auth (open) . password: "S3kr1t" : auth: key-management: psk password: "S3kr1t" o mode () : infrastructure () ap ( ) adhoc ( ). ap NetworkManager . o bssid () - 0.99 . o band () - 0.99 5GHz ( 802.11a 5GHz) 2.4GHz ( 802.11 2.4GHz) () 802.11 . o channel () - 0.99 . band . o hidden () - 0.100 SSID true . false () SSID . o wakeonwlan ( ) - 0.99 WakeOnWLan . . any disconnect magic_pkt gtk_rekey_failure eap_identity_req four_way_handshake rfkill_release tcp ( NetworkManager) . default (). o regulatory-domain () - 0.105 << >> (world domain) . ISO/IEC 3166 ( GB) 00 << >> . wireless-regdb . : iw networkd (wpasupplicant) . bridges (Properties for device type bridges) (Status): . (Purpose): bridges (Bridge) . (Structure): . bridge . interfaces (enp5s0 enp5s1 ) Netplan . : network: bridges: br0: interfaces: - enp5s0 - enp5s1 dhcp4: true ... br0 . : o interfaces ( ) . . : network: ethernets: switchports: match: {name: "enp2*"} [...] bridges: br0: interfaces: [switchports] o parameters () . : . ( s ms ) . o ageing-time aging-time () MAC (FDB) . networkd AgeingTimeSec= . . o priority () . 0 65535 . . (root bridge) . o port-priority () . 0 63 . (designated port) . : network: ethernets: eth0: dhcp4: false eth1: dhcp4: false bridges: br0: interfaces: [eth0, eth1] parameters: port-priority: eth0: 10 eth1: 20 o forward-delay () (Forwarding) (Listening) (Learning) . networkd ForwardDelaySec= . . o hello-time () hello . Hello . networkd HelloTimeSec= . . o max-age () hello . hello . networkd MaxAgeSec= . . o path-cost () . . . : network: ethernets: eth0: dhcp4: false eth1: dhcp4: false bridges: br0: interfaces: [eth0, eth1] parameters: path-cost: eth0: 100 eth1: 200 o stp () (Spanning Tree Protocol) . true . dummy-devices (Properties for device type dummy-devices) (Status): . (Purpose): dummy-devices . (Structure): . (Dummy devices) . network: dummy-devices: dm0: addresses: - 192.168.0.123/24 ... dm0 . << >> . bonds (Properties for device type bonds) (Status): . (Purpose): bonds (Bond / Link Aggregation) . (Structure): Bond . bond . interfaces Netplan . : network: bonds: bond0: interfaces: - enp5s0 - enp5s1 - enp5s2 parameters: mode: active-backup ... bond bond0 . : o interfaces ( ) bond . : network: ethernets: switchports: match: {name: "enp2*"} [...] bonds: bond0: interfaces: [switchports] o parameters () . : . ( s ms ) . o mode () . balance-rr ( round robin) . : balance-rr active-backup balance-xor broadcast 802.3ad balance-tlb balance-alb. Open vSwitch active-backup balance-tcp balance-slb . o lacp-rate () LACPDU . 802.3ad . slow ( ) fast ( ) . o mii-monitor-interval () MII ( bond ) . 0 MII . MIIMonitorSec= networkd . . o min-links () bond bond (up) . o transmit-hash-policy () . balance-xor 802.3ad balance-tlb . : layer2 layer3+4 layer2+3 encap2+3 encap3+4. o ad-select () (Aggregation Selection) . : stable bandwidth count. 802.3ad . o all-members-active () - 0.106 bond false . true . false . : all-slaves-active o arp-interval () ARP . 0 ARP . networkd ARPIntervalSec= . . o arp-ip-targets ( ) IP ARP . arp-interval 0 . ARP IP . IPv4 . IP . . o arp-validate () ARP ARP . : none active backup all. o arp-all-targets () IP ARP . active-backup arp-validate . any all . o up-delay () . 0 . networkd UpDelaySec= . miimon . . o down-delay () . 0 . networkd DownDelaySec= . miimon . . o fail-over-mac-policy () bond MAC MAC . : none active follow. o gratuitous-arp () ARP (failover) . 1 . 1 1 255 . active-backup . gratuitious-arp . o packets-per-member () - 0.106 balance-rr . 0 . 0 65535 . 1 . balance-rr . : packets-per-slave o primary-reselect-policy () (primary port) . . : always better failure. o resend-igmp () balance-rr active-backup balance-tlb balance-alb (failover) IGMP . IGMP failover . 0 255 . 0 . failover 200 . o learn-packet-interval () . 1 0x7fffffff . 1 . balance-tlb balance-alb . networkd LearnPacketIntervalSec= . . o primary () bond ( ) . active-backup balance-alb balance-tlb . (yaml-tunnels)= ## tunnels (Status): . (Purpose): tunnels . (Structure): . tunnel ( mode ). : network: tunnels: tunnel0: mode: SCALAR ... tunnel0 . mode . . IPv6 ISP <<>> . Tunneling_protocol . : o mode () . sit gre ip6gre ipip ipip6 ip6ip6 vti vti6 wireguard vxlan gretap ip6gretap. NetworkManager isatap . o local () (local endpoint) . ( VXLAN) IP networkd . o remote () (remote endpoint) IP (multicast group) VXLAN . o ttl () - 0.103 (TTL) . 1..255 . o key ( ) . IPv4 (dotted quad) . wireguard base64 ( networkd v242+) ( 0.100). IP . vti vti6 networkd . ( ) input/output/private . o input () . o output () . o private () - 0.100 base64 WireGuard . systemd-networkd ( v242+) . o private-key-flags ( ) - 0.107 NetworkManager. : agent-owned not-saved not-required. agent-owned: . not-saved: . not-required: . : network: renderer: NetworkManager tunnels: wg0: mode: wireguard port: 5182 key: private-key-flags: - agent-owned peers: - keys: public: rlbInAj0qV69CysWPQY7KEBnKxpYCpaWqOs/dLevdWc= allowed-ips: [0.0.0.0/0, "2001:fe:ad:de:ad:be:ef:1/24"] keepalive: 23 endpoint: 1.2.3.4:5 o keys ( ) key. . : network: tunnels: tun0: mode: gre local: ... remote: ... keys: input: 1234 output: 5678 network: tunnels: tun0: mode: vti6 local: ... remote: ... key: 59568549 network: tunnels: wg0: mode: wireguard addresses: [...] peers: - keys: public: rlbInAj0qV69CysWPQY7KEBnKxpYCpaWqOs/dLevdWc= shared: /path/to/shared.key ... key: mNb7OIIXTdgW4khM7OFlzJ+UPs7lmcWHV7xjPgakMkQ= network: tunnels: wg0: mode: wireguard addresses: [...] peers: - keys: public: rlbInAj0qV69CysWPQY7KEBnKxpYCpaWqOs/dLevdWc= ... keys: private: /path/to/priv.key WireGuard: o mark () - 0.100 WireGuard . o port () - 0.100 UDP auto. auto . o peers ( ) - 0.100 (peers) . : network: tunnels: wg0: mode: wireguard key: /path/to/private.key mark: 42 port: 5182 peers: - keys: public: rlbInAj0qV69CysWPQY7KEBnKxpYCpaWqOs/dLevdWc= allowed-ips: [0.0.0.0/0, "2001:fe:ad:de:ad:be:ef:1/24"] keepalive: 23 endpoint: 1.2.3.4:5 - keys: public: M9nt4YujIOmNrRmpIRTmYSfMdrpvE7u6WkG8FY8WjG4= shared: /some/shared.key allowed-ips: [10.10.10.20/24] keepalive: 22 endpoint: 5.4.3.2:1 o endpoint () - 0.100 IPv4/IPv6 . o allowed-ips ( ) - 0.100 IP (v4 v6) CIDR . 0.0.0.0/0 IPv4 ::/0 IPv6 . o keepalive () - 0.100 (stateful) NAT . . o keys () - 0.100 WireGuard . public shared . o public () - 0.100 base64 WireGuard . o shared () - 0.100 base64. WireGuard . systemd-networkd ( v242+) . VXLAN: o id () - 0.105 VXLAN (VNI VXLAN). 1..16777215 . o link () - 0.105 Netplan VXLAN . o type-of-service () - 0.105 (Type Of Service) VXLAN. o mac-learning () - 0.105 . true MAC MAC . o ageing aging () - 0.105 (FDB) . o limit () - 0.105 FDB . o arp-proxy () - 0.105 . true VXLAN ARP Distributed Overlay Virtual Ethernet (DOVE) . false . o notifications ( ) - 0.105 l2-miss l3-miss (miss notifications) IP / netlink LLADDR . o short-circuit () - 0.105 . true (route short circuiting) . o checksums ( ) - 0.105 udp zero-udp6-tx zero-udp6-rx remote-tx remote-rx UDP VXLAN/IPv4 / VXLAN/IPv6 / VXLAN . o extensions ( ) - 0.105 group-policy generic-protocol VXLAN "Group Policy" / "Generic Protocol" . o port () - 0.105 UDP . . IANA 4789 . o port-range ( ) - 0.105 VXLAN . UDP (flow) (load balancing) . UDP . [LOWER, UPPER] . o flow-label () - 0.105 (flow label) . 0-1048575 . o do-not-fragment () - 0.105 << >> (Do not Fragment DF) IPv4 . . . virtual-ethernets (Properties for device type virtual-ethernets) (Status): . (Purpose): virtual-ethernets . (Structure): veth . veth peer () . veth peer . : network: virtual-ethernets: veth0: peer: veth1 veth1: peer: veth0 veth0 veth1 . . (network namespaces) . virtual-ethernets Netplan . virtual-ethernets : o peer () virtual-ethernet . virtual-ethernet . : network: version: 2 renderer: networkd virtual-ethernets: veth0-peer1: peer: veth0-peer2 veth0-peer2: peer: veth0-peer1 bridges: br0: interfaces: - veth0-peer1 br1: interfaces: - veth0-peer2 vlans (Properties for device type vlans) (Status): . (Purpose): vlans VLAN . (Structure): VLAN . link (enp5s0 ) Netplan . VLAN : network: vlans: vlan123: id: 123 link: enp5s0 dhcp4: yes VLAN : o id () VLAN 0 4094. o link () Netplan VLAN . : network: ethernets: eno1: {...} vlans: en-intra: id: 1 link: eno1 dhcp4: yes en-vpn: id: 2 link: eno1 addresses: [...] vrfs (Properties for device type vrfs) (Status): . (Purpose): vrfs (VRF) . (Structure): VRF . link (enp5s0 ) Netplan . VRF : network: renderer: networkd vrfs: vrf1: table: 1 interfaces: - enp5s0 routes: - to: default via: 10.10.10.4 routing-policy: - from: 10.10.10.42 o table () - 0.105 . . o interfaces ( ) - 0.105 VRF . VRF . o routes ( ) - 0.105 . table table VRF . o routing-policy ( ) - 0.105 . table table VRF . : network: vrfs: vrf20: table: 20 interfaces: [ br0 ] routes: - to: default via: 10.10.10.3 routing-policy: - from: 10.10.10.42 [...] bridges: br0: interfaces: [] nm-devices (Properties for device type nm-devices) (Status): . . (Purpose): nm-devices Netplan . NetworkManager . (Structure): NetworkManager . nm-devices . (fallback) passthrough . NM : network: version: 2 nm-devices: NM-db5f0f67-1f4c-4d59-8ab8-3d278389cf87: renderer: NetworkManager networkmanager: uuid: "db5f0f67-1f4c-4d59-8ab8-3d278389cf87" name: "myvpnconnection" passthrough: connection.type: "vpn" vpn.ca: "path to ca.crt" vpn.cert: "path to client.crt" vpn.cipher: "AES-256-GCM" vpn.connection-type: "tls" vpn.dev: "tun" vpn.key: "path to client.key" vpn.remote: "1.2.3.4:1194" vpn.service-type: "org.freedesktop.NetworkManager.openvpn" (Back end-specific configuration parameters) Netplan Netplan . NetworkManager . o networkmanager () - 0.99 NetworkManager . o name () - 0.99 . o uuid () - 0.99 UUID ( ) NetworkManager . o stable-id () - 0.99 (stable ID - ) NetworkManager . o device () - 0.99 . o passthrough () - 0.102 (fallback) key-file . (SEE ALSO) netplan-generate(8) netplan-apply(8) netplan-try(8) netplan-get(8) netplan-set(8) netplan-info(8) netplan-ip(8) netplan-rebind(8) netplan-status(8) netplan-dbus(8) systemd-networkd(8) NetworkManager(8) (AUTHORS) Mathieu Trudel-Lapierre () Martin Pitt () Lukas Mardian (). Netplan (Introduction to Netplan)(5)