NM-SETTINGS-NMCLI(5) NM-SETTINGS-NMCLI(5) (NAME) nm-settings-nmcli - NetworkManager nmcli (DESCRIPTION) NetworkManager (connection) . . NetworkManager . . . NetworkManager (API) . nmcli NetworkManager API . nmcli(1) . nmcli connection add nmcli connection modify nmcli connection show . (properties) . D-Bus nm- settings-dbus(5) nmcli . . . nmcli describe . setting () property () . . connection.interface-name ifname . (connection setting) . : connection.auth-retries . -1 . . (PSK) . : : -1 - 2147483647 connection.autoconnect : autoconnect NetworkManager . TRUE FALSE . . . . VPN . VPN "secondaries" . "connection.autoconnect-priority" . . "connection.timestamp" . "connection.multi-connect" ( ) . : : true/yes/on, false/no/off connection.autoconnect-ports NetworkManager . . "autoconnect" "autoconnect-priority" "autoconnect-retries" . : 0: 1: -1: . -1 () connection.autoconnect-ports . 0 . : (NMTernary) : default (-1), false (0), true (1) connection.autoconnect-priority -999 999. . . 0 . . . : : -999 - 999 connection.autoconnect-retries . -1 ( ). 1 . (timeout) NetworkManager . : : -1 - 2147483647 : default (-1), forever (0) connection.autoconnect-slaves NetworkManager . . "autoconnect" "autoconnect-priority" "autoconnect-retries" . : 0: 1: -1: . -1 () connection.autoconnect-slaves . 0 . 1.46. "autoconnect-ports" . : (NMSettingConnectionAutoconnectSlaves) : default (-1), no (0), yes (1) connection.controller : controller UUID . : connection.dns-over-tls DNS TLS DNSOverTls (dns-over-tls) . DNSOverTls TLS DNS . : "yes" (2) DNSOverTls (fallback) "opportunistic" (1) DNSOverTls "no" (0) DNSOverTls . "default" . systemd-resolved . DNSOverTls . . dns-systemd-resolved . : (NMSettingConnectionDnsOverTls) : default (-1), no (0), opportunistic (1), yes (2) connection.dnssec DNSSEC (dnssec) . : "yes" (2) DNSSEC (fallback) "allow-downgrade" (1) DNSSEC "no" (0) DNSSEC . "default" (-1) dns . systemd-resolved . DNSSEC . . systemd-resolved . : (NMSettingConnectionDnssec) : default (-1), no (0), allow-downgrade (1), yes (2) connection.down-on-poweroff (down) . "default" (-1) . NetworkManager "no" (0) . : (NMSettingConnectionDownOnPoweroff) : default (-1), no (0), yes (1) connection.gateway-ping-timeout IP (timeout) (gateway) . : : 0 - 600 connection.id : con-name "Work Wi-Fi" "T-Mobile 3G". : connection.interface-name : ifname (bound) . ( ). . ( USB) . . : connection.ip-ping-addresses IP . NetworkManager . connection.ip-ping-timeout . ip-ping-timeout IP ( ) IP . "ip-ping-addresses" network-online.target systemd . : IPv4 IPv6 connection.ip-ping-addresses-require-all "ip-ping-addresses" "ip-ping-addresses" . : (NMTernary) : default (-1), false/no (0), true/yes (1) connection.ip-ping-timeout IP ( ) IP . "ip-ping-addresses" . "gateway-ping-timeout" . : : 0 - 600 connection.lldp LLDP . : (NMSettingConnectionLldp) : default (-1), disable (0), enable-rx/enable (1) connection.llmnr - Link-Local Multicast Name Resolution (LLMNR) . LLMNR (DNS) IPv4 IPv6 . : "yes" (2) "no" (0) LLMNR "resolve" (1) LLMNR . "default" DNS ( systemd-resolved "yes" ). LLMNR . . dns-systemd-resolved . : (NMSettingConnectionLlmnr) : default (-1), no (0), resolve (1), yes (2) connection.master : master UUID . 1.46. "controller" . : connection.mdns mDNS . : "yes" (2) "no" (0) mDNS "resolve" (1) mDNS "default" (-1) NetworkManager.conf. "default" DNS . mDNS . . DNS systemd-resolved . systemd-resolved MulticastDNS= resolved.conf . : (NMSettingConnectionMdns) : default (-1), no (0), resolve (1), yes (2) connection.metered () . . : : true/yes/on, false/no/off, default/unknown connection.mptcp-flags MPTCP . MPTCP NetworkManager MPTCP . IPv4 (127.0.0.0/8) - IPv4 (169.254.0.0/16) IPv6 (::1) - IPv6 (fe80::/10) IPv6 (ULA fc00::/7) IPv6 (rfc3041 ipv6.ip6-privacy) . "disabled" (0x1) MPTCP . "enabled" (0x2) MPTCP . . MPTCP sysctl "/proc/sys/net/mptcp/enabled" . NetworkManager sysctl . sysctl "also-without-sysctl" (0x4) . NetworkManager sysctl . NetworkManager MPTCP (0.0.0.0/0 ::/0) . "also-without-default-route" (0x8) . MPTCP "signal" (0x10) "subflow" (0x20) "backup" (0x40) "fullmesh" (0x80) "laminar" (0x100) . ip-mptcp(8) . (0x0) NetworkManager.conf . "enabled,subflow" . MPTCP sysctl "/proc/sys/net/mptcp/enabled" . NetworkManager MPTCP MPTCP "/proc/sys/net/mptcp/enabled" . sysctl ip-mptcp . (rp_filter) MPTCP MPTCP IPv4 NetworkManager (1) (2) . : (NMMptcpFlags) : none/default (0x0), disabled (0x1), enabled (0x2), also-without-sysctl (0x4), also-without-default-route (0x8), signal (0x10), subflow (0x20), backup (0x40), fullmesh (0x80), laminar (0x100) connection.mud-url URL (MUD) (IoT) . DHCPv4 DHCPv6 . URL "https://" . "none" URL MUD . ( ) . "none" . : connection.multi-connect . NMConnectionMultiConnect . : (NMConnectionMultiConnect) : default (0), single (1), manual-multiple (2), multiple (3) connection.permissions . NULL . . "[type]:[id]:[reserved]" "user:dcbw:blah". [type] "user" . . [id] ":" . [reserved] . [type] [id] [reserved] UTF-8 . : connection.port-type : port-type ( "bond") NULL . : : bond, bridge, ovs-bridge, ovs-port, team, vrf connection.secondaries UUID . VPN . : connection.slave-type : slave-type ( "bond") NULL . 1.46. "port-type" . : : bond, bridge, ovs-bridge, ovs-port, team, vrf connection.stable-id . . stable-id . stable-id IPv6 ipv6.addr-gen-mode=stable-privacy . MAC ethernet.cloned-mac-address=stable wifi.cloned-mac-address=stable . DHCP ipv4.dhcp-client-id=stable DUID DHCPv6 ipv6.dhcp-duid=stable-[llt,ll,uuid] IAID DHCP ipv4.iaid=stable ipv6.iaid=stable . . (per-host key) . ipv6.addr-gen-mode=stable-privacy . /var/lib/NetworkManager/secret_key . secret-key NetworkManager(8) . '$' . "${CONNECTION}" "${DEVICE}" "${MAC}" "${NETWORK_SSID}" "${BOOT}" "${RANDOM}" . SSID (boot) . "${CONNECTION}" connection.uuid "${DEVICE}" "${MAC}" MAC . "${NETWORK_SSID}" SSID "${CONNECTION}" . '$' . '$' "$$" . "${CONNECTION}-${BOOT}-${DEVICE}" . . "default${CONNECTION}" . : connection.timestamp ( / Unix Epoch) __ . NetworkManager . ( ). : connection.type : type . ( "802-3-ethernet" "802-11-wireless" "bluetooth" ) VPN ( "vpn" "bridge" ). : : 6lowpan, 802-11-olpc-mesh, 802-11-wireless, 802-3-ethernet, adsl, bluetooth, bond, bridge, cdma, dummy, generic, geneve, gsm, hsr, infiniband, ip-tunnel, ipvlan, loopback, macsec, macvlan, ovs-bridge, ovs-interface, ovs-port, pppoe, team, tun, veth, vlan, vpn, vrf, vxlan, wifi-p2p, wimax, wireguard, wpan connection.uuid connection.uuid . . UUID `nmcli connection up uuid $UUID`. UUID (offline). "new" "generate" "" UUID . : (UUID) RFC4122. connection.wait-activation-delay ( ) . pre-up . 0 . -1 . : : -1 - 2147483647 connection.wait-device-timeout ( ) . (driver) . NetworkManager-wait-online.service nm-online . . 0 . -1 . : : -1 - 2147483647 connection.zone . ( "Home" "Work" "Public"). NULL . . : 6LoWPAN. : 6lowpan.parent : dev UUID 6LowPAN . : 802-1x (802-1x setting) IEEE 802.1x. : 802-1x.altsubject-matches altSubjectName . altSubjectName . : 802-1x.anonymous-identity EAP. EAP ( EAP-TTLS) . : 802-1x.auth-timeout . . : : 0 - 2147483647 802-1x.ca-cert CA EAP 802-1x.eap . EAP CA (man-in-the-middle) . 802-1x.system-ca-certs . : 802-1x.ca-cert-password CA "ca-cert". PKCS#11 . : 802-1x.ca-cert-password-flags "ca-cert-password" . : (NMSettingSecretFlags) : none (0x0), agent-owned (0x1), not-saved (0x2), not-required (0x4) 802-1x.ca-path UTF-8 PEM DER "ca-cert" . NMSetting8021x:system-ca-certs CA . : 802-1x.client-cert EAP 802-1x.eap . : 802-1x.client-cert-password "client-cert". PKCS#11 . : 802-1x.client-cert-password-flags "client-cert-password" . : (NMSettingSecretFlags) : none (0x0), agent-owned (0x1), not-saved (0x2), not-required (0x4) 802-1x.domain-match . FQDN () dNSName . dNSName . dNSName SubjectName CN . FQDN ";" . : 802-1x.domain-suffix-match . FQDN () dNSName . dNSName . dNSName SubjectName CN . 1.24 FQDN ";" . : 802-1x.eap EAP 802.1x. : "leap", "md5", "tls", "peap", "ttls", "pwd" "fast". wpa_supplicant . : : leap, md5, tls, peap, ttls, sim, fast, pwd 802-1x.identity EAP. . : 802-1x.openssl-ciphers openssl_ciphers wpa_supplicant. (ciphers) SECLEVEL wpa_supplicant ( ) . : 802-1x.optional 802.1X . TRUE . TRUE . FALSE . : : true/yes/on, false/no/off 802-1x.pac-file UTF-8 PAC EAP-FAST. : 802-1x.password UTF-8 EAP. "password" "password-raw" "password" . : 802-1x.password-flags "password" . : (NMSettingSecretFlags) : none (0x0), agent-owned (0x1), not-saved (0x2), not-required (0x4) 802-1x.password-raw EAP UTF-8 . "password" "password-raw" "password" . : 802-1x.password-raw-flags "password-raw" . : (NMSettingSecretFlags) : none (0x0), agent-owned (0x1), not-saved (0x2), not-required (0x4) 802-1x.phase1-auth-flags << >> NMSetting8021xAuthFlags . TLS . TLS . TLS (supplicant) . TLS tls_disable_tlsv1_x tls_disable_time_checks . wpa_supplicant . : (NMSetting8021xAuthFlags) : none (0x0), tls-1-0-disable (0x1), tls-1-1-disable (0x2), tls-1-2-disable (0x4), tls-disable-time-checks (0x8), tls-1-3-disable (0x10), tls-1-0-enable (0x20), tls-1-1-enable (0x40), tls-1-2-enable (0x80), tls-1-3-enable (0x100), all (0x1ff) 802-1x.phase1-fast-provisioning (in-line provisioning) EAP-FAST FAST EAP "eap" . "0" () "1" ( ) "2" ( ) "3" ( ). wpa_supplicant . : : 0, 1, 2, 3 802-1x.phase1-peaplabel PEAP . RADIUS PEAPv1 PEAP . PEAP "1" . wpa_supplicant . : : 0, 1 802-1x.phase1-peapver PEAP EAP "eap" PEAP . . RADIUS PEAP . "0" "1" PEAP . : : 0, 1 802-1x.phase2-altsubject-matches altSubjectName << >>. altSubjectName . : 802-1x.phase2-auth << >> EAP TLS "eap" . TTLS EAP : "pap", "chap", "mschap", "mschapv2" "phase2-autheap" EAP . PEAP EAP : "gtc", "otp", "md5" "tls". << >> wpa_supplicant . "phase2-auth" "phase2-autheap" . : : pap, chap, mschap, mschapv2, gtc, otp, md5, tls 802-1x.phase2-autheap EAP << >> TTLS "eap" . << >> EAP "md5", "mschapv2", "otp", "gtc" "tls". << >> wpa_supplicant . : : md5, mschapv2, otp, gtc, tls 802-1x.phase2-ca-cert CA << >> EAP 802-1x.phase2-auth 802-1x.phase2-autheap . EAP CA (man-in-the-middle) . 802-1x.system-ca-certs . : 802-1x.phase2-ca-cert-password CA << >> "phase2-ca-cert". PKCS#11 . : 802-1x.phase2-ca-cert-password-flags "phase2-ca-cert-password" . : (NMSettingSecretFlags) : none (0x0), agent-owned (0x1), not-saved (0x2), not-required (0x4) 802-1x.phase2-ca-path UTF-8 PEM DER "phase2-ca-cert" . NMSetting8021x:system-ca-certs CA . : 802-1x.phase2-client-cert << >> EAP 802-1x.phase2-auth 802-1x.phase2-autheap . : 802-1x.phase2-client-cert-password << >> "phase2-client-cert". PKCS#11 . : 802-1x.phase2-client-cert-password-flags "phase2-client-cert-password" . : (NMSettingSecretFlags) : none (0x0), agent-owned (0x1), not-saved (0x2), not-required (0x4) 802-1x.phase2-domain-match . FQDN () dNSName << >> . dNSName . dNSName SubjectName CN . FQDN ";" . : 802-1x.phase2-domain-suffix-match . FQDN () dNSName << >> . dNSName . dNSName SubjectName CN . 1.24 FQDN ";" . : 802-1x.phase2-private-key << >> 802-1x.phase2-auth 802-1x.phase2-autheap "tls" . : 802-1x.phase2-private-key-password << >> 802-1x.phase2-private-key. (secret agents) . : 802-1x.phase2-private-key-password-flags "phase2-private-key-password" . : (NMSettingSecretFlags) : none (0x0), agent-owned (0x1), not-saved (0x2), not-required (0x4) 802-1x.phase2-subject-match (subject) << >>. . ( ) . 1.2 . "phase2-domain-suffix-match" . : 802-1x.pin PIN EAP. : 802-1x.pin-flags "pin" . : (NMSettingSecretFlags) : none (0x0), agent-owned (0x1), not-saved (0x2), not-required (0x4) 802-1x.private-key 802-1.eap "tls" . : 802-1x.private-key-password 802-1x.private-key. (secret agents) . : 802-1x.private-key-password-flags "private-key-password" . : (NMSettingSecretFlags) : none (0x0), agent-owned (0x1), not-saved (0x2), not-required (0x4) 802-1x.subject-match (subject) . . ( ) . 1.2 . "phase2-domain-suffix-match" . : 802-1x.system-ca-certs TRUE "ca-path" "phase2-ca-path" CA --system-ca-path . "ca-cert" "phase2-ca-cert" . --system-ca-path ( CA ) "ca-cert" "phase2-ca-cert" ( ca_cert/ca_cert2 wpa_supplicant ). : : true/yes/on, false/no/off adsl (adsl setting) ADSL. : adsl.encapsulation : encapsulation ADSL. "vcmux" "llc" . : : vcmux, llc adsl.password : password ADSL. : adsl.password-flags "password" . : (NMSettingSecretFlags) : none (0x0), agent-owned (0x1), not-saved (0x2), not-required (0x4) adsl.protocol : protocol ADSL. "pppoa", "pppoe" "ipoatm" . : : pppoa, pppoe, ipoatm adsl.username : username ADSL. : adsl.vci VCI ADSL : : 0 - 65536 adsl.vpi VPI ADSL : : 0 - 65536 bluetooth (bluetooth setting) . : bluetooth.bdaddr : addr . : MAC bluetooth.type : bt-type "dun" Dial-Up Networking "panu" Personal Area Networking NAP . : : dun, panu, nap bond (bond setting) (Bonding). : bond.options / (bonding). . - ( [a-zA-Z0-9]). : / bridge (bridge setting) (Bridging). : bridge.ageing-time : ageing-time (aging time) MAC . : : 0 - 1000000 bridge.forward-delay : forward-delay (STP) . : : 0 - 30 bridge.group-address MAC STP . - (link-local) MAC 01:80:C2:00:00:0X X [0, 4..F] . 01:80:C2:00:00:00 . : MAC bridge.group-forward-mask : group-forward-mask . 01:80:C2:00:00:00 01:80:C2:00:00:0F . . 0 1 2 STP MAC LACP . : : 0 - 65535 bridge.hello-time : hello-time hello (STP) . : : 0 - 10 bridge.mac-address : mac MAC . MAC . "ethernet.cloned-mac-address" MAC . "ethernet.cloned-mac-address" MAC . 1.12 . "cloned-mac-address" . : MAC bridge.max-age : max-age (STP) . : : 0 - 40 bridge.multicast-hash-max (hash table) ( ). : : 1 - 4294967295 bridge.multicast-last-member-count "leave" . : : 0 - 4294967295 bridge.multicast-last-member-interval ( ) "leave". : : 0 - 18446744073709551615 bridge.multicast-membership-interval ( ) . : : 0 - 18446744073709551615 bridge.multicast-querier . . : : true/yes/on, false/no/off bridge.multicast-querier-interval ( ) . : : 0 - 18446744073709551615 bridge.multicast-query-interval ( ) . : : 0 - 18446744073709551615 bridge.multicast-query-response-interval / ( ) IGMP/MLD . : : 0 - 18446744073709551615 bridge.multicast-query-use-ifaddr IP IGMP 0.0.0.0 . : : true/yes/on, false/no/off bridge.multicast-router . (multicast-snooping) . : 'auto' 'disabled' 'enabled' 1 0 2 . 'auto' (1) . : : auto, disabled, enabled bridge.multicast-snooping : multicast-snooping IGMP (IGMP snooping) . (hash collision) . : : true/yes/on, false/no/off bridge.multicast-startup-query-count IGMP . : : 0 - 4294967295 bridge.multicast-startup-query-interval ( ) . : : 0 - 18446744073709551615 bridge.priority : priority (STP) . <<>> (root bridge) . : : 0 - 65535 bridge.stp : stp (STP) . : : true/yes/on, false/no/off bridge.vlan-default-pvid PVID VLAN (untagged) . : : 0 - 4094 bridge.vlan-filtering VLAN . : : true/yes/on, false/no/off bridge.vlan-protocol VLAN. : '802.1Q' '802.1ad'. '802.1Q' . : : 802.1Q, 802.1ad bridge.vlan-stats-enabled VLAN . : : true/yes/on, false/no/off bridge.vlans VLAN . VLAN VLAN (default-pvid) bridge.vlan-default-pvid . nmcli VLAN : $vid [pvid] [untagged] [, $vid [pvid] [untagged]]... vid$ 1 4094 . : bridge.vlans bridge-port (bridge-port setting) (Bridge Port). : bridge-port.hairpin-mode : hairpin << >> (hairpin mode) . : : true/yes/on, false/no/off bridge-port.path-cost : path-cost (STP) . : : 0 - 65535 bridge-port.priority : priority (STP) . : : 0 - 63 bridge-port.vlans VLAN . VLAN VLAN (default-pvid) bridge.vlan-default-pvid . nmcli VLAN : $vid [pvid] [untagged] [, $vid [pvid] [untagged]]... vid$ 1 4094 . : bridge-port.vlans cdma (cdma setting) CDMA. : cdma.mtu . : : auto cdma.number CDMA . (#777) . : cdma.password : password . . . : cdma.password-flags "password" . : (NMSettingSecretFlags) : none (0x0), agent-owned (0x1), not-saved (0x2), not-required (0x4) cdma.username : user . . . : dcb (dcb setting) (Data Center Bridging). : dcb.app-fcoe-flags NMSettingDcbFlags DCB FCoE . <> (0x1) <> (0x2) <> (0x4) . : (NMSettingDcbFlags) : none (0x0), enable (0x1), advertise (0x2), willing (0x4) dcb.app-fcoe-mode FCoE <> <>. . NULL <> . . NULL <> . : : fabric, vn2vn dcb.app-fcoe-priority ( - ) FCoE -1 . <> <> (0x1) . : : -1 - 7 : unset (-1) dcb.app-fip-flags NMSettingDcbFlags DCB FIP . <> (0x1) <> (0x2) <> (0x4) . : (NMSettingDcbFlags) : none (0x0), enable (0x1), advertise (0x2), willing (0x4) dcb.app-fip-priority ( - ) FIP -1 . <> <> (0x1) . : : -1 - 7 : unset (-1) dcb.app-iscsi-flags NMSettingDcbFlags DCB iSCSI . <> (0x1) <> (0x2) <> (0x4) . : (NMSettingDcbFlags) : none (0x0), enable (0x1), advertise (0x2), willing (0x4) dcb.app-iscsi-priority ( - ) iSCSI -1 . <> <> (0x1) . : : -1 - 7 : unset (-1) dcb.priority-bandwidth uint ( - ) . . : : 0 - 100 dcb.priority-flow-control ( - ) (priority pause) . : : true/yes/on, false/no/off dcb.priority-flow-control-flags NMSettingDcbFlags DCB (PFC) . <> (0x1) <> (0x2) <> (0x4) . : (NMSettingDcbFlags) : none (0x0), enable (0x1), advertise (0x2), willing (0x4) dcb.priority-group-bandwidth uint ( - ) . - . : : 0 - 100 dcb.priority-group-flags NMSettingDcbFlags DCB . <> (0x1) <> (0x2) <> (0x4) . : (NMSettingDcbFlags) : none (0x0), enable (0x1), advertise (0x2), willing (0x4) dcb.priority-group-id uint ( - ) . - . : : 0 - 7, 15 dcb.priority-strict-bandwidth ( - ) . : : true/yes/on, false/no/off dcb.priority-traffic-class uint ( - ) ( - ) . : : 0 - 7 ethtool (ethtool setting) Ethtool. : ethtool.channels-combined : : 0 - 4294967295 ethtool.channels-other : : 0 - 4294967295 ethtool.channels-rx : : 0 - 4294967295 ethtool.channels-tx : : 0 - 4294967295 ethtool.coalesce-adaptive-rx : : 0 - 4294967295 ethtool.coalesce-adaptive-tx : : 0 - 4294967295 ethtool.coalesce-pkt-rate-high : : 0 - 4294967295 ethtool.coalesce-pkt-rate-low : : 0 - 4294967295 ethtool.coalesce-rx-frames : : 0 - 4294967295 ethtool.coalesce-rx-frames-high : : 0 - 4294967295 ethtool.coalesce-rx-frames-irq : : 0 - 4294967295 ethtool.coalesce-rx-frames-low : : 0 - 4294967295 ethtool.coalesce-rx-usecs : : 0 - 4294967295 ethtool.coalesce-rx-usecs-high : : 0 - 4294967295 ethtool.coalesce-rx-usecs-irq : : 0 - 4294967295 ethtool.coalesce-rx-usecs-low : : 0 - 4294967295 ethtool.coalesce-sample-interval : : 0 - 4294967295 ethtool.coalesce-stats-block-usecs : : 0 - 4294967295 ethtool.coalesce-tx-frames : : 0 - 4294967295 ethtool.coalesce-tx-frames-high : : 0 - 4294967295 ethtool.coalesce-tx-frames-irq : : 0 - 4294967295 ethtool.coalesce-tx-frames-low : : 0 - 4294967295 ethtool.coalesce-tx-usecs : : 0 - 4294967295 ethtool.coalesce-tx-usecs-high : : 0 - 4294967295 ethtool.coalesce-tx-usecs-irq : : 0 - 4294967295 ethtool.coalesce-tx-usecs-low : : 0 - 4294967295 ethtool.eee-enabled : (ternary) : on, off, ignore ethtool.feature-esp-hw-offload : (ternary) : on, off, ignore ethtool.feature-esp-tx-csum-hw-offload : (ternary) : on, off, ignore ethtool.feature-fcoe-mtu : (ternary) : on, off, ignore ethtool.feature-gro : (ternary) : on, off, ignore ethtool.feature-gso : (ternary) : on, off, ignore ethtool.feature-highdma : (ternary) : on, off, ignore ethtool.feature-hw-tc-offload : (ternary) : on, off, ignore ethtool.feature-l2-fwd-offload : (ternary) : on, off, ignore ethtool.feature-loopback : (ternary) : on, off, ignore ethtool.feature-lro : (ternary) : on, off, ignore ethtool.feature-macsec-hw-offload : (ternary) : on, off, ignore ethtool.feature-ntuple : (ternary) : on, off, ignore ethtool.feature-rx : (ternary) : on, off, ignore ethtool.feature-rx-all : (ternary) : on, off, ignore ethtool.feature-rx-fcs : (ternary) : on, off, ignore ethtool.feature-rx-gro-hw : (ternary) : on, off, ignore ethtool.feature-rx-gro-list : (ternary) : on, off, ignore ethtool.feature-rx-udp-gro-forwarding : (ternary) : on, off, ignore ethtool.feature-rx-udp_tunnel-port-offload : (ternary) : on, off, ignore ethtool.feature-rx-vlan-filter : (ternary) : on, off, ignore ethtool.feature-rx-vlan-stag-filter : (ternary) : on, off, ignore ethtool.feature-rx-vlan-stag-hw-parse : (ternary) : on, off, ignore ethtool.feature-rxhash : (ternary) : on, off, ignore ethtool.feature-rxvlan : (ternary) : on, off, ignore ethtool.feature-sg : (ternary) : on, off, ignore ethtool.feature-tls-hw-record : (ternary) : on, off, ignore ethtool.feature-tls-hw-rx-offload : (ternary) : on, off, ignore ethtool.feature-tls-hw-tx-offload : (ternary) : on, off, ignore ethtool.feature-tso : (ternary) : on, off, ignore ethtool.feature-tx : (ternary) : on, off, ignore ethtool.feature-tx-checksum-fcoe-crc : (ternary) : on, off, ignore ethtool.feature-tx-checksum-ip-generic : (ternary) : on, off, ignore ethtool.feature-tx-checksum-ipv4 : (ternary) : on, off, ignore ethtool.feature-tx-checksum-ipv6 : (ternary) : on, off, ignore ethtool.feature-tx-checksum-sctp : (ternary) : on, off, ignore ethtool.feature-tx-esp-segmentation : (ternary) : on, off, ignore ethtool.feature-tx-fcoe-segmentation : (ternary) : on, off, ignore ethtool.feature-tx-gre-csum-segmentation : (ternary) : on, off, ignore ethtool.feature-tx-gre-segmentation : (ternary) : on, off, ignore ethtool.feature-tx-gso-list : (ternary) : on, off, ignore ethtool.feature-tx-gso-partial : (ternary) : on, off, ignore ethtool.feature-tx-gso-robust : (ternary) : on, off, ignore ethtool.feature-tx-ipxip4-segmentation : (ternary) : on, off, ignore ethtool.feature-tx-ipxip6-segmentation : (ternary) : on, off, ignore ethtool.feature-tx-nocache-copy : (ternary) : on, off, ignore ethtool.feature-tx-scatter-gather : (ternary) : on, off, ignore ethtool.feature-tx-scatter-gather-fraglist : (ternary) : on, off, ignore ethtool.feature-tx-sctp-segmentation : (ternary) : on, off, ignore ethtool.feature-tx-tcp-ecn-segmentation : (ternary) : on, off, ignore ethtool.feature-tx-tcp-mangleid-segmentation : (ternary) : on, off, ignore ethtool.feature-tx-tcp-segmentation : (ternary) : on, off, ignore ethtool.feature-tx-tcp6-segmentation : (ternary) : on, off, ignore ethtool.feature-tx-tunnel-remcsum-segmentation : (ternary) : on, off, ignore ethtool.feature-tx-udp-segmentation : (ternary) : on, off, ignore ethtool.feature-tx-udp_tnl-csum-segmentation : (ternary) : on, off, ignore ethtool.feature-tx-udp_tnl-segmentation : (ternary) : on, off, ignore ethtool.feature-tx-vlan-stag-hw-insert : (ternary) : on, off, ignore ethtool.feature-txvlan : (ternary) : on, off, ignore ethtool.fec-mode : (NMSettingEthtoolFecMode) : auto (0x2), off (0x4), rs (0x8), baser (0x10), llrs (0x20) ethtool.pause-autoneg : (ternary) : on, off, ignore ethtool.pause-rx : (ternary) : on, off, ignore ethtool.pause-tx : (ternary) : on, off, ignore ethtool.ring-rx : : 0 - 4294967295 ethtool.ring-rx-jumbo : : 0 - 4294967295 ethtool.ring-rx-mini : : 0 - 4294967295 ethtool.ring-tx : : 0 - 4294967295 generic (generic setting) (Generic Link). : generic.device-handler (device handler) . - ASCII '-' '_' '.' . '.' . NetworkManager-dispatcher(8) . <<>> device-handler . : gsm (gsm setting) GSM. : gsm.apn : apn GPRS (APN) GSM . APN (walled-garden) APN . . GSM 03.60 APN a-z 0-9 . - . APN ( ) <> . APN . : gsm.auto-config TRUE APN (Mobile Broadband Provider database) . : : true/yes/on, false/no/off gsm.device-id ( WWAN) . . : gsm.device-uid UID ( WWAN) . <> UDEV . <> -> <> ModemManager . . : gsm.home-only TRUE . . : : true/yes/on, false/no/off gsm.initial-eps-bearer-apn LTE APN EPS (initial EPS bearer) . TRUE initial-eps-bearer-configure . : gsm.initial-eps-bearer-configure LTE EPS . initial-eps-bearer-apn TRUE . : : true/yes/on, false/no/off gsm.initial-eps-bearer-noauth LTE NOAUTH EPS . TRUE . FALSE . TRUE . : : true/yes/on, false/no/off gsm.initial-eps-bearer-password LTE EPS . TRUE initial-eps-bearer-configure . : gsm.initial-eps-bearer-password-flags <> . : (NMSettingSecretFlags) : none (0x0), agent-owned (0x1), not-saved (0x2), not-required (0x4) gsm.initial-eps-bearer-refuse-chap LTE CHAP EPS . : : true/yes/on, false/no/off gsm.initial-eps-bearer-refuse-eap LTE EAP EPS . : : true/yes/on, false/no/off gsm.initial-eps-bearer-refuse-mschap LTE MSCHAP EPS . : : true/yes/on, false/no/off gsm.initial-eps-bearer-refuse-mschapv2 LTE MSCHAPV2 EPS . : : true/yes/on, false/no/off gsm.initial-eps-bearer-refuse-pap LTE PAP EPS . : : true/yes/on, false/no/off gsm.initial-eps-bearer-username LTE EPS . TRUE initial-eps-bearer-configure . : gsm.mtu . : : auto gsm.network-id ( GSM LAI MCC-MNC) . NetworkManager . . : gsm.number PPP GSM . . . . : gsm.password : password . . . : gsm.password-flags <> . : (NMSettingSecretFlags) : none (0x0), agent-owned (0x1), not-saved (0x2), not-required (0x4) gsm.pin PIN . PIN . : gsm.pin-flags <> . : (NMSettingSecretFlags) : none (0x0), agent-owned (0x1), not-saved (0x2), not-required (0x4) gsm.sim-id ( WWAN) . <> . : gsm.sim-operator-id MCC/MNC <<310260>> <<21601>> . <> <> . : gsm.username : user . . . : hsr (hsr setting) HSR/PRP. : hsr.interlink (interlink) HSR. : hsr.multicast-spec : multicast-spec (supervision address). : : 0 - 255 hsr.port1 : port1 (port1) HSR. . : hsr.port2 : port2 (port2) HSR. . : hsr.protocol-version HSR/PRP . <> (-1) . <> (0) HSRv0 (IEC 62439-3:2010) . <> (1) HSRv1 (IEC 62439-3:2012) . : (NMSettingHsrProtocolVersion) : default (-1), hsr-2010 (0), hsr-2012 (1) hsr.prp PRP HSR. : : true/yes/on, false/no/off infiniband (infiniband setting) (Infiniband). : infiniband.mac-address : mac IPoIB MAC . MAC ( MAC ). : MAC (Infiniband MAC address) infiniband.mtu : mtu . : : auto infiniband.p-key : p-key p-key . -1 p-key ( < >>). (0x8000) p-key << >> (full membership) . 0 0x8000 . p-key <<$parent.$p_key>> . <> . . p-key 0x8000 . : : -1 - 65535 : default (-1) infiniband.parent : parent (parent) . NULL <> <> . : infiniband.transport-mode : transport-mode IP-over-InfiniBand <> <>. : : datagram, connected ipv4 (ipv4 setting) IPv4. : ipv4.addresses : ip4 IPv4 (prefix length) . . "192.168.1.5/24, 10.1.0.5/24". . : ipv4.auto-route-ext-gw VPN FALSE . TRUE . : (ternary) : true/yes/on, false/no/off, default/unknown ipv4.clat CLAT ( Customer-side translator) . CLAT 464XLAT ( RFC 6877) IPv4 -IPv6 . CLAT NetworkManager NAT64 IPv6 ( Router Advertisements) NAT64 NetworkManager BPF (stateless) IPv4 IPv6 . "no" (0) CLAT . "auto" (1) CLAT IPv4 'auto' (gateway) IPv4 . "force" (2) IPv4 'auto' IPv4 CLAT . "default" (-1) "no" (0) . (fallback) "auto" (1) . : (NMSettingIp4ConfigClat) : default (-1), no (0), auto (1), force (2) ipv4.dad-timeout IP . . IPv4 . -1 ( NetworkManager.conf ). . RFC 5227 . : : -1 - 30000 : default (-1), off (0) ipv4.dhcp-client-id DHCP DHCP (lease) DHCP . ('aa:bb:cc') . RFC 2132 'type' ( '01:xx:xx:xx:xx:xx:xx' 1 ARP MAC ). 'type' 0 . "mac" "perm-mac" MAC (01) . . "ipv6-duid" DUID "ipv6.dhcp-duid" RFC 4361 . IAID "ipv4.dhcp-iaid" "ipv6.dhcp-iaid" . "duid" RFC 4361 "ipv4.dhcp-iaid" DUID /etc/machine-id . "stable" 0 stable-id ( connection.stable-id ) . stable-id "${DEVICE}" "${MAC}" . "none" . . NetworkManager.conf . dhcp "mac" . : : mac, perm-mac, duid, ipv6-duid, stable, none ipv4.dhcp-dscp DSCP ( traffic class) IP . "CS0" . : "CS0" "CS4" "CS6". IPv4 DHCP "" (internal) . : : CS0, CS4, CS6 ipv4.dhcp-fqdn "dhcp-send-hostname" TRUE (lease) FQDN DHCP . "dhcp-hostname" . : ipv4.dhcp-hostname "dhcp-send-hostname" TRUE DHCP . "dhcp-fqdn" . : ipv4.dhcp-hostname-flags (hostname) FQDN DHCP. FQDN DHCP FQDN . FQDN "fqdn-serv-update" (0x1) "fqdn-encoded" (0x2) "fqdn-no-update" (0x4). FQDN "fqdn-clear-flags" (0x8) DHCP FQDN . FQDN "fqdn-clear-flags" (0x8) FQDN : "fqdn-serv-update" (0x1) "fqdn-encoded" (0x2) IPv4 "fqdn-serv-update" (0x1) IPv6. "none" (0x0) NetworkManager . "none" (0x0) FQDN DHCP . : (NMDhcpHostnameFlags) : none (0x0), fqdn-serv-update (0x1), fqdn-encoded (0x2), fqdn-no-update (0x4), fqdn-clear-flags (0x8) ipv4.dhcp-iaid << >> (Identity Association Identifier IAID) DHCP . ( ). "mac" "perm-mac" "ifname" "stable" . "mac" ( "perm-mac") MAC ( ) IAID . "ifname" IAID . "stable" IAID stable-id ( connection.stable-id ) . IAID "ifname" . DHCPv4 IAID "duid" "ipv6-duid" "ipv4.dhcp-client-id" client-id . DHCPv6 "" DHCPv6 . DHCPv6 IAID (lease) . : ipv4.dhcp-ipv6-only-preferred DHCPv4 << -IPv6>> (IPv6-Only Preferred - RFC 8925) . "yes" (1) (parameter request list) DHCP DHCP . -IPv6 -IPv6 CLAT (464XLAT) . "auto" (2) IPv6 "auto" ipv4.clat "yes" "auto" . -IPv6 DHCPv4 . "default" (-1) "auto" (2) . IPv6 "disabled" "IPv6-Only Preferred" . : (NMSettingIP4DhcpIpv6OnlyPreferred) : default (-1), no (0), yes (1), auto (2) ipv4.dhcp-reject-servers DHCP ( DHCP offers) . (rogue) . DHCPv4 IPv4 ( "192.168.122.0/24"). DHCPv6 . : IPv4 ipv4.dhcp-send-hostname-deprecated . (fallback) dhcp-send-hostname 'default' . . . dhcp-send-hostname . : : true/yes/on, false/no/off ipv4.dhcp-send-hostname TRUE (hostname) DHCP . DHCP DNS . dhcp-hostname NULL TRUE . default (-1) . NetworkManager . dhcp-send-hostname-deprecated TRUE . TRUE . : (NMTernary) : default (-1), false/no (0), true/yes (1) ipv4.dhcp-send-release DHCP RELEASE . "default" (-1) . NetworkManager FALSE . : (ternary) : true/yes/on, false/no/off, default/unknown ipv4.dhcp-timeout DHCP . () . ( ). 2147483647 (MAXINT32) . : : 0 - 2147483647 : default (0), infinity (2147483647) ipv4.dhcp-vendor-class-identifier Vendor Class Identifier DHCP ( ). C (nul) . () . DHCP . : ipv4.dns DNS. IP ( "#" SNI DNS TLS ) URI . URI : dns+udp://ADDRESS[:PORT] dns+tls://ADDRESS[:PORT][SERVERNAME]. URI IPv6 ('[', ']') . : IPv4 ipv4.dns-options DNS /etc/resolv.conf resolv.conf(5) . : "attempts" "debug" "edns0" "ndots" "no-aaaa" "no-check-names" "no-reload" "no-tld-query" "rotate" "single-request" "single-request-reopen" "timeout" "trust-ad" "use-vc". resolv.conf(5) . () . nmcli "" . " " . . . "trust-ad" resolv.conf "trust-ad" . DNS ( dnsmasq systemd-resolved NetworkManager.conf) "edns0" "trust-ad" . "ipv4.dns-options" "ipv6.dns-options" . : DNS ipv4.dns-priority DNS. DNS . ( ). DNS . DNS ( DNS leak) . . VPN ( WireGuard) . DNS . DNS . VPN ( ) . dns=default resolv.conf . . /etc/resolv.conf . "rotate" dns-options . DNS . DNS Split DNS ( dns=dnsmasq dns=systemd-resolved) . DNS . (wildcard) '~.' ( ). ( ) . (shadowed) . Split DNS DNS DNS . : : -2147483648 - 2147483647 ipv4.dns-search DNS. ('~') <<>> (unqualified) . DNS Split DNS . /etc/resolv.conf . dns-priority . DHCP DNS ( DHCPv4 DHCPv6) . "ignore-auto-dns" . DNS DHCP ( ) . : ipv4.forwarding sysctl . (forward) . "default" (-1) "auto" (2) . "forwarding" "method" "shared" . : "default" (-1): . "no" (0): . "yes" (1): . "auto" (2): . : (NMSettingIPConfigForwarding) : default (-1), no (0), yes (1), auto (2) ipv4.gateway : gw4 (gateway) . . NetworkManager (next hop) . "never-default" . /0 . NetworkManager WireGuard . "ip4-auto-default-route" . : IPv4 ipv4.ignore-auto-dns "method" "auto" TRUE "dns" "dns-search" ( ) . : : true/yes/on, false/no/off ipv4.ignore-auto-routes "method" "auto" TRUE "routes" ( ) . : : true/yes/on, false/no/off ipv4.link-local (link-local) IPv4 ipv4.method . DHCP link-local (169.254.x.y/16) . "auto" "ipv4.method" . "default" "auto" . "ipv4.method" "disabled" . "default" . . "fallback" IPv4 link-local . : (NMSettingIP4LinkLocal) : default (0), auto (1), disabled (2), enabled (3), fallback (4) ipv4.may-fail TRUE . IP . -IPv6 TRUE NMSettingIP4Config IPv4 IPv6 . : : true/yes/on, false/no/off ipv4.method IPv4 . : o "auto" - IPv4 DHCP PPP . o "manual" - IPv4 . IP "ipv4.addresses" . o "disabled" - IPv4 . o "shared" - . IP "ipv4.addresses" NetworkManager 10.42.x.1/24 . NetworkManager DHCP DNS . IP NetworkManager NAT . NetworkManager dnsmasq DHCP/DNS . /etc/NetworkManager/dnsmasq-shared.d/ dnsmasq . NetworkManager . o "link-local" - (link-local) RFC 3927 . NetworkManager link-local 169.254.0.0/16 . : : auto, link-local, manual, shared, disabled ipv4.never-default TRUE IP NetworkManager . : : true/yes/on, false/no/off ipv4.replace-local-rule 0 TRUE . : (ternary) : true/yes/on, false/no/off, default/unknown ipv4.required-timeout IP . IPv4 IPv6 . IPv4 IPv6 IPv4 NetworkManager IPv4 . "may-fail" FALSE NetworkManager DHCP . -1 ( ipvx.required-timeout ). : : -1 - 2147483647 : default (-1), infinity (2147483647) ipv4.route-metric . -1 . () . IPv6 (0) 1024 ( ) . 1024 . IPv4 . : : -1 - 4294967295 ipv4.route-table ( policy routing) . IPv4LL DHCP SLAAC . . . . NetworkManager (main) ( ). NetworkManager . NetworkManager . : : 0 - 4294967295 : unspec (0), main (254) ipv4.routed-dns DNS . NetworkManager DNS ( ) ( DHCP) . DNS . "default" (-1) . : (NMSettingIPConfigRoutedDns) : default (-1), no (0), yes (1) ipv4.routes IPv4 (next hop) IPv4 . : "ip[/prefix] [next-hop] [metric] [attribute=val]...[,ip[/prefix]...]". "192.0.2.0/24 10.1.1.1 77, 198.51.100.0/24". : o "advmss" - . o "cwnd" - . o "initcwnd" - . o "initrwnd" - . o "lock-advmss" - . o "lock-cwnd" - . o "lock-initcwnd" - . o "lock-initrwnd" - . o "lock-mtu" - . o "lock-window" - . o "mtu" - . o "onlink" - . onlink IPv4 . "weight" ECMP onlink . o "quickack" - . o "rto_min" - . . o "scope" - . IPv4. o "src" - IPv4. o "table" - . ipv4.route-table . o "tos" - . IPv4. o "type" - unicast, local, blackhole, unreachable, prohibit, throw. unicast . o "weight" - 0 256. IPv4 ECMP IPv4 . NetworkManager ECMP . . . NetworkManager ECMP "onlink" . o "window" - . `man ip-route` . : ipv4.routing-rules (policy routing). ip rule add . NetworkManager . "lookup" "table" . : priority 5 from 192.167.4.0/24 table 45 : ipv4.shared-dhcp-lease-time DHCP (shared) . 120 31536000 ( ) . 3600 ( ) . 0 2147483647 (MAXINT32) . : : 0 - 2147483647 : default (0), infinity (2147483647) ipv4.shared-dhcp-range DHCP (shared) . `,` . ipv4.address (broadcast) . DHCP . . . : ipv6 (ipv6 setting) IPv6. : ipv6.addr-gen-mode IPv6 IPv6 RFC4862 (Link Local). : "eui64" (0) "stable-privacy" (1) "default" (3) "default-or-eui64" (2). "eui64" . . . . "ipv6.token" MAC . "stable-privacy" RFC7217 . ( ) ( NetworkManager(8) ) "connection.stable-id" . . "default" "default-or-eui64" NetworkManager.conf(5) . "stable-privacy" "eui64" . "default" . (Privacy Extensions) "ip6-privacy" . : "eui64" (0) "stable-privacy" (1) "default" (3) "default-or-eui64" (2) : eui64 (0), stable-privacy (1), default-or-eui64 (2), default (3) ipv6.addresses : ip6 IPv6 . . "2001:db8:85a3::8a2e:370:7334/64, 2001:db8:85a3::5/64". . IPv6 (RFC 6724 5). : ipv6.auto-route-ext-gw VPN FALSE . TRUE . : (ternary) : true/yes/on, false/no/off, default/unknown ipv6.dhcp-duid DHCPv6 ( DUID) DHCP DHCPv6 (RFC 3315). DUID Client Identifier . ('aa:bb:cc') DUID (opaque) Client Identifier . "lease" DUID (lease) . DUID DUID-UUID (RFC 6355) machine-id . "llt" "ll" DUID LLT LL ( RFC 3315 ) MAC . DUID-LLT ( ) . "stable-llt" "stable-ll" "stable-uuid" DUID stable-id . "${DEVICE}" "${MAC}" stable-id . "stable-ll" "stable-llt" stable id . DUID-LLT "stable-llt" ( "llt" ). "ipv6.dhcp-duid" . "lease" . : ipv6.dhcp-hostname "dhcp-send-hostname" TRUE (lease) DHCP . "dhcp-fqdn" . : ipv6.dhcp-hostname-flags DHCP FQDN. FQDN DHCP FQDN . FQDN "fqdn-serv-update" (0x1) "fqdn-encoded" (0x2) "fqdn-no-update" (0x4). FQDN "fqdn-clear-flags" (0x8) DHCP FQDN . FQDN "fqdn-clear-flags" (0x8) FQDN : "fqdn-serv-update" (0x1) "fqdn-encoded" (0x2) IPv4 "fqdn-serv-update" (0x1) IPv6. "none" (0x0) NetworkManager . "none" (0x0) FQDN DHCP . : (NMDhcpHostnameFlags) : none (0x0), fqdn-serv-update (0x1), fqdn-encoded (0x2), fqdn-no-update (0x4), fqdn-clear-flags (0x8) ipv6.dhcp-iaid " " (IAID) DHCP . ( ). "mac" "perm-mac" "ifname" "stable" . "mac" ( "perm-mac") MAC ( ) IAID . "ifname" IAID () . "stable" IAID stable-id ( connection.stable-id ) . IAID "ifname" . DHCPv4 IAID "duid" "ipv6-duid" "ipv4.dhcp-client-id" client-id . DHCPv6 DHCPv6 "internal" . DHCPv6 IAID (lease) . : ipv6.dhcp-pd-hint IPv6 . (hint) DHCPv6 (IA_PD) . ( "::/60"). : ipv6.dhcp-send-hostname-deprecated 1.52 dhcp-send-hostname 'default' . . 1.52 . dhcp-send-hostname . : : true/yes/on, false/no/off ipv6.dhcp-send-hostname TRUE (lease) DHCP . DHCP DNS . dhcp-hostname NULL TRUE . default (-1) . NetworkManager . dhcp-send-hostname-deprecated TRUE . TRUE . : (NMTernary) : default (-1), false/no (0), true/yes (1) ipv6.dhcp-send-release DHCP RELEASE . "default" (-1) . NetworkManager FALSE . : (ternary) : true/yes/on, false/no/off, default/unknown ipv6.dhcp-timeout DHCP . () . ( ). 2147483647 (MAXINT32) . : : 0 - 2147483647 : default (0), infinity (2147483647) ipv6.dns DNS. IP ( "#" SNI DNS TLS ) URI . URI : dns+udp://ADDRESS[:PORT], dns+tls://ADDRESS[:PORT][SERVERNAME] . URI IPv6 ('[', ']') . : IPv6 ipv6.dns-options DNS /etc/resolv.conf resolv.conf(5) . "attempts", "debug", "edns0", "ndots", "no-aaaa", "no-check-names", "no-reload", "no-tld-query", "rotate", "single-request", "single-request-reopen", "timeout", "trust-ad", "use-vc" "inet6", "ip6-bytestring", "ip6-dotint", "no-ip6-dotint". resolv.conf(5) . () . nmcli "" . " " . . . "trust-ad" resolv.conf "trust-ad" . DNS ( dnsmasq systemd-resolved NetworkManager.conf) "edns0" "trust-ad" . "ipv4.dns-options" "ipv6.dns-options" . : DNS ipv6.dns-priority DNS. DNS . ( ). DNS . DNS (DNS leak) . . VPN ( WireGuard) 50 100 . DNS . DNS . VPN ( ) . dns=default resolv.conf . . (resolver) /etc/resolv.conf . "rotate" dns-options . DNS . DNS (Conditional Forwarding) DNS (Split DNS) ( dns=dnsmasq dns=systemd-resolved) . DNS . '~.' ( ). ( ) . (shadowed) . Split DNS DNS DNS . : : -2147483648 - 2147483647 ipv6.dns-search DNS. ('~') <<>> (unqualified) . DNS DNS (Split DNS) . /etc/resolv.conf . dns-priority . DHCP DNS ( 119 DHCPv4 24 DHCPv6) . "ignore-auto-dns" . DNS DHCP ( 15) . : ipv6.gateway : gw6 (gateway) . . NetworkManager (next hop) . "never-default" . /0 . NetworkManager WireGuard . "ip4-auto-default-route" . : IPv6 ipv6.ignore-auto-dns "method" "auto" TRUE "dns" "dns-search" ( ) . : : true/yes/on, false/no/off ipv6.ignore-auto-routes "method" "auto" TRUE "routes" ( ) . : : true/yes/on, false/no/off ipv6.ip6-privacy IPv6 SLAAC RFC4941 . MAC EUI-64 IPv6 . . : -1: 0: 1: ( ) 2: ( ). "-1" () "ipv6.ip6-privacy" . "-1" "/proc/sys/net/ipv6/conf/default/use_tempaddr" . (Stable Privacy) "stable-privacy" "addr-gen-mode" IPv6 . : (NMSettingIP6ConfigPrivacy) : unknown/default (-1), disabled (0), prefer-public-addr (1), prefer-temp-addr (2) ipv6.may-fail TRUE (timeout) . IP . IPv6 TRUE NMSettingIP4Config IPv4 IPv6 . : : true/yes/on, false/no/off ipv6.method IPv6 . : o "auto" - IPv6 . NetworkManager (Router Advertisements) "managed" NetworkManager IPv6 DHCPv6 . o "dhcp" - IPv6 DHCPv6 . DHCPv6 . "dhcp" . o "manual" - IPv6 . IP "ipv6.addresses" . o "disabled" - IPv6 . o "ignore" - NetworkManager IPv6 . "accept_ra" . o "shared" - . NetworkManager DHCPv6 . o "link-local" - (link-local) fe80::/64 . "auto" "dhcp" "manual" "ignore" "shared" NetworkManager IPv6 . RFC 4291 . : : ignore, auto, dhcp, link-local, manual, shared, disabled ipv6.mtu (MTU) . () MTU MTU . MTU MTU IPv6 1280 . : : auto ipv6.never-default TRUE IP NetworkManager . : : true/yes/on, false/no/off ipv6.ra-timeout (Router Advertisements) . () . sysctl . 2147483647 (MAXINT32) . : : 0 - 2147483647 : default (0), infinity (2147483647) ipv6.replace-local-rule 0 TRUE . : (ternary) : true/yes/on, false/no/off, default/unknown ipv6.required-timeout IP . IPv4 IPv6 . IPv4 IPv6 IPv4 NetworkManager IPv4 . "may-fail" FALSE NetworkManager DHCP . -1 ( ipvx.required-timeout ). : : -1 - 2147483647 : default (-1), infinity (2147483647) ipv6.route-metric . -1 . () . IPv6 (0) 1024 ( ) . 1024 . IPv4 . : : -1 - 4294967295 ipv6.route-table ( ) . IPv4LL DHCP SLAAC . . . . NetworkManager (main) ( ). NetworkManager . NetworkManager . : : 0 - 4294967295 : unspec (0), main (254) ipv6.routed-dns DNS . NetworkManager DNS ( ) ( DHCP) . DNS . "default" (-1) . : (NMSettingIPConfigRoutedDns) : default (-1), no (0), yes (1) ipv6.routes IPv6 IPv6 . : "ip[/prefix] [next-hop] [metric] [attribute=val]...[,ip[/prefix]...]". : o "advmss" - . o "cwnd" - . o "from" - IPv6 . IPv6. o "initcwnd" - . o "initrwnd" - . o "lock-advmss" - . o "lock-cwnd" - . o "lock-initcwnd" - . o "lock-initrwnd" - . o "lock-mtu" - . o "lock-window" - . o "mtu" - . o "onlink" - . o "quickack" - . o "rto_min" - . . o "src" - IPv6. o "table" - . ipv6.route-table . o "type" - unicast, local, blackhole, unreachable, prohibit, throw. unicast . o "window" - . `man ip-route` . : ipv6.routing-rules . ip rule add . NetworkManager . : priority 5 from 1:2:3::5/128 table 45 : ipv6.temp-preferred-lifetime . "0" () "ipv6.temp-preferred-lifetime" . "0" "/proc/sys/net/ipv6/conf/default/temp_prefered_lft" . : : 0 - 2147483647 : default (0) ipv6.temp-valid-lifetime . "0" () "ipv6.temp-valid-lifetime" . "0" "/proc/sys/net/ipv6/conf/default/temp_valid_lft" . : : 0 - 2147483647 : default (0) ipv6.token IPv6 draft-chown-6man-tokenised-ipv6-identifiers-02. addr-gen-mode eui64 . IPv6 . (link local) IPv6. : ip-tunnel (ip-tunnel setting) IP. : ip-tunnel.encapsulation-limit . IPv6 . 0x1 (ip6-ign-encap-limit) ip-tunnel . : : 0 - 255 ip-tunnel.flags . : 0x1 (ip6-ign-encap-limit) 0x2 (ip6-use-orig-tclass) 0x4 (ip6-use-orig-flowlabel) 0x8 (ip6-mip6-dev) 0x10 (ip6-rcv-dscp-copy) 0x20 (ip6-use-orig-fwmark). IPv6 . : (NMIPTunnelFlags) : none (0x0), ip6-ign-encap-limit (0x1), ip6-use-orig-tclass (0x2), ip6-use-orig-flowlabel (0x4), ip6-mip6-dev (0x8), ip6-rcv-dscp-copy (0x10), ip6-use-orig-fwmark (0x20) ip-tunnel.flow-label (flow label) . IPv6 . : : 0 - 1048575 ip-tunnel.fwmark fwmark . VTI VTI6 . : : 0 - 4294967295 ip-tunnel.input-key (GRE, IP6GRE) . . : ip-tunnel.local : local (local endpoint) IPv4 IPv6 . : ip-tunnel.mode : mode . : ipip (1) gre (2) sit (3) isatap (4) vti (5) ip6ip6 (6) ipip6 (7) ip6gre (8) vti6 (9) gretap (10) ip6gretap (11) : (NMIPTunnelMode) : ipip (1), gre (2), sit (3), isatap (4), vti (5), ip6ip6 (6), ipip6 (7), ip6gre (8), vti6 (9), gretap (10), ip6gretap (11) ip-tunnel.mtu () . : : auto ip-tunnel.output-key (GRE, IP6GRE) . . : ip-tunnel.parent : dev UUID . : ip-tunnel.path-mtu-discovery MTU (Path MTU Discovery) . : : true/yes/on, false/no/off ip-tunnel.remote : remote (remote endpoint) IPv4 IPv6 . : ip-tunnel.tos (IPv4) (IPv6) . : : 0 - 255 ip-tunnel.ttl TTL . 0 TTL . : : 0 - 255 ipvlan (ipvlan setting) IPVLAN. : ipvlan.mode : mode IPVLAN. : l2 (1) l3 (2) l3s (3) : (NMSettingIpvlanMode) : l2 (1), l3 (2), l3s (3) ipvlan.parent : dev UUID IPVLAN . "802-3-ethernet" "mac-address" . : ipvlan.private (private) . : : true/yes/on, false/no/off ipvlan.vepa VEPA . : : true/yes/on, false/no/off macsec (macsec setting) MACSec. : macsec.encrypt : encrypt . : : true/yes/on, false/no/off macsec.mka-cak : cak CAK ( ) MACsec ( MKA). . : macsec.mka-cak-flags "mka-cak" . : (NMSettingSecretFlags) : none (0x0), agent-owned (0x1), not-saved (0x2), not-required (0x4) macsec.mka-ckn : ckn CKN ( ) MACsec. . : macsec.mode : mode CAK ( ) MKA ( MACsec) . : (NMSettingMacsecMode) : psk (0), eap (1) macsec.offload (offload) MACsec . "off" (0) MACsec . "phy" (1) "mac" (2) PHY MAC . "default" (-1) NetworkManager "off" (0) . : (NMSettingMacsecOffload) : default (-1), off (0), phy (1), mac (2) macsec.parent : dev UUID MACSEC . "802-3-ethernet" "mac-address" . : macsec.port : port SCI ( ) . : : 1 - 65534 macsec.send-sci SCI ( ) . : : true/yes/on, false/no/off macsec.validation . : (NMSettingMacsecValidation) : disable (0), check (1), strict (2) macvlan (macvlan setting) MAC VLAN. : macvlan.mode : mode macvlan macvlan . : (NMSettingMacvlanMode) : vepa (1), bridge (2), private (3), passthru (4), source (5) macvlan.parent : dev UUID MAC-VLAN . "802-3-ethernet" "mac-address" . : macvlan.promiscuous (promiscuous) ( true). : : true/yes/on, false/no/off macvlan.tap : tap MACVTAP . : : true/yes/on, false/no/off match (match setting) (Match). : match.driver . (wildcard) . '|' '&' '!' '\\' NMSettingMatch:interface-name . : match.interface-name . (wildcard) . (|) (&) . . (true) ( OR). ( AND). . "foo" "|foo" . (!) ( ) . "!foo" "&!foo" . ( ) "&\\!a" "!a" . : match.kernel-command-line (kernel command line) . ( ) . ( "=" ). . . (wildcard) . '|' '&' '!' '\\' NMSettingMatch:interface-name . : match.path udev ID_PATH . ID_PATH . ( pci usb platform ) . PCI "pci-$domain:$bus:$device.$function" "pci-0000:0a:00.0". "udevadm info /sys/class/net/$dev | grep ID_PATH=" "path" NetworkManager ( "nmcli -f general.path device show $dev") . (wildcard) . '|' '&' '!' '\\' NMSettingMatch:interface-name . : 802-11-olpc-mesh (802-11-olpc-mesh setting) : olpc-mesh OLPC. : 802-11-olpc-mesh.channel : channel . : : 0 - 4294967295 802-11-olpc-mesh.dhcp-anycast-address : dhcp-anycast Anycast DHCP MAC IP DHCP . anycast DHCP . DHCP dhclient . : MAC 802-11-olpc-mesh.ssid : ssid SSID . : ovs-bridge (ovs-bridge setting) OvsBridge. : ovs-bridge.datapath-type (data path). "system" "netdev" . : : system, netdev ovs-bridge.fail-mode (bridge failure mode). "secure" "standalone" . : : secure, standalone ovs-bridge.mcast-snooping-enable (multicast snooping). : : true/yes/on, false/no/off ovs-bridge.rstp-enable RSTP. : : true/yes/on, false/no/off ovs-bridge.stp-enable STP. : : true/yes/on, false/no/off ovs-dpdk (ovs-dpdk setting) OvsDpdk. : ovs-dpdk.devargs Open vSwitch DPDK. : ovs-dpdk.lsc-interrupt (LSC Link State Change) OVS DPDK . "ignore" (-1) NetworkManager Open vSwitch . "enabled" (1) (interrupts) . "disabled" (0) (poll mode) . : (NMSettingOvsDpdkLscInterrupt) : ignore (-1), disabled (0), enabled (1) ovs-dpdk.n-rxq (rx queues) Open vSwitch DPDK. OVS . : : 0 - 4294967295 ovs-dpdk.n-rxq-desc ( rx) DPDK. . OVS . : : 0 - 4096 ovs-dpdk.n-txq-desc ( tx) DPDK. . OVS . : : 0 - 4096 ovs-interface (ovs-interface setting) Open vSwitch. : ovs-interface.ofport-request openflow Open vSwitch. ovs . OpenFlow OpenFlow . OpenFlow OpenFlow . : : 0 - 65279 ovs-interface.type . "internal" "system" "patch" "dpdk" . : : internal, system, patch, dpdk ovs-patch (ovs-patch setting) OvsPatch. : ovs-patch.peer (patch) . peer . : ovs-port (ovs-port setting) OvsPort. : ovs-port.bond-downdelay (down) . : : 0 - 4294967295 ovs-port.bond-mode (Bonding mode). "active-backup" "balance-slb" "balance-tcp". : : active-backup, balance-slb, balance-tcp ovs-port.bond-updelay . : : 0 - 4294967295 ovs-port.lacp LACP. "active" "off" "passive". : : active, off, passive ovs-port.tag VLAN 0-4095. : : 0 - 4095 ovs-port.trunks VLAN . "trunk" "native-tagged" "native-untagged port" . VLAN . : ovs-port.trunks ovs-port.vlan-mode VLAN. "access" "native-tagged" "native-untagged" "trunk" "dot1q-tunnel" unset. : : access, native-tagged, native-untagged, trunk, dot1q-tunnel ppp (ppp setting) -- (Point-to-Point Protocol). : ppp.baud pppd (baudrate) . . : : 0 - 4294967295 ppp.crtscts TRUE pppd RTS CTS . FALSE . : : true/yes/on, false/no/off ppp.lcp-echo-failure pppd LCP echo-request . "lcp-echo-interval" . : : 0 - 4294967295 ppp.lcp-echo-interval pppd n ( n ) LCP echo-request . PPP echo . : : 0 - 4294967295 ppp.mppe-stateful TRUE MPPE (stateful) . MPPE pppd . : : true/yes/on, false/no/off ppp.mru pppd . MRU 128 16384 . : : 0 - 16384 ppp.mtu pppd . : : auto ppp.no-vj-comp TRUE TCP (Van Jacobsen) . : : true/yes/on, false/no/off ppp.noauth TRUE ( PPP) . FALSE . TRUE . : : true/yes/on, false/no/off ppp.nobsdcomp TRUE BSD . : : true/yes/on, false/no/off ppp.nodeflate TRUE "deflate" . : : true/yes/on, false/no/off ppp.refuse-chap TRUE CHAP . : : true/yes/on, false/no/off ppp.refuse-eap TRUE EAP . : : true/yes/on, false/no/off ppp.refuse-mschap TRUE MSCHAP . : : true/yes/on, false/no/off ppp.refuse-mschapv2 TRUE MSCHAPv2 . : : true/yes/on, false/no/off ppp.refuse-pap TRUE PAP . : : true/yes/on, false/no/off ppp.require-mppe TRUE -- (MPPE) PPP . MPPE . MPPE . : : true/yes/on, false/no/off ppp.require-mppe-128 TRUE MPPE ( -- ) PPP "require-mppe" TRUE . MPPE . : : true/yes/on, false/no/off pppoe (pppoe setting) PPP (PPP-over-Ethernet). : pppoe.parent : parent PPPoE . "interface-name" NMSettingConnection . : pppoe.password : password PPPoE. : pppoe.password-flags "password" . : (NMSettingSecretFlags) : none (0x0), agent-owned (0x1), not-saved (0x2), not-required (0x4) pppoe.service : service PPPoE . . . : pppoe.username : username PPPoE. : proxy (proxy setting) (WWW Proxy). : proxy.browser-only : browser-only . : : true/yes/on, false/no/off proxy.method : method "none" (0) . : (NMSettingProxyMethod) : none (0), auto (1) proxy.pac-script : pac-script PAC. UTF-8 FindProxyForURL() . nmcli . nmcli . "file://" "js://" . : proxy.pac-url : pac-url (PAC URL) PAC. : serial (serial setting) (Serial Link). : serial.baud . . : : 0 - 4294967295 serial.bits "8n1". : : 5 - 8 serial.parity () . : (NMSettingSerialParity) : none/N/n (0), even/E/e (1), odd/O/o (2) serial.send-delay . : : 0 - 18446744073709551615 serial.stopbits "8n1". : : 1 - 2 sriov (sriov setting) SR-IOV. : sriov.autoprobe-drivers (autoprobe) . "true" (1) VF VF . "false" (0) VF . "default" (-1) "true" (1) . : : true/yes/on, false/no/off, default/unknown sriov.eswitch-encap-mode eswitch . PCI PF eswitch PCI PF . "preserve" (-1) () encap-mode eswitch NetworkManager . : (NMSriovEswitchEncapMode) : preserve (-1), none (0), basic (1) sriov.eswitch-inline-mode inline-mode (eswitch) . VF TX e-switch . PCI PF eswitch PCI PF . "preserve" (-1) () inline-mode eswitch NetworkManager . : (NMSriovEswitchInlineMode) : preserve (-1), none (0), link (1), network (2), transport (3) sriov.eswitch-mode eswitch . PCI PF eswitch PCI PF . "preserve" (-1) () eswitch NetworkManager . : (NMSriovEswitchMode) : preserve (-1), legacy (0), switchdev (1) sriov.preserve-on-down NetworkManager SR-IOV . SR-IOV ( "sriov") VF eswitch . "no" (0) NetworkManager SR-IOV . "yes" (1) NetworkManager . "default" (-1) NetworkManager "no" (0) . : (NMSriovPreserveOnDown) : default (-1), no (0), yes (1) sriov.total-vfs . sriov NetworkManager ( ) . SR-IOV sriov . : : 0 - 4294967295 sriov.vfs . VF GVariant . 'index' VF . VF : "INDEX [ATTR=VALUE[ ATTR=VALUE]...]". : "2 mac=00:11:22:33:44:55 spoof-check=true". VF . : mac spoof-check trust min-tx-rate max-tx-rate vlans. "vlans" VLAN - : "ID[.PRIORITY[.PROTO]]". PROTO 'q' 802.1Q () 'ad' 802.1ad . : sriov.vfs tc (tc setting) (Linux Traffic Control). : tc.qdiscs (qdisc) (TC). qdisc . qdisc : handle HANDLE (handle) qdisc . qdisc 'handle' . '10:' . handle qdisc . parent HANDLE (handle) qdisc qdisc . root qdisc (root) . KIND qdisc . NetworkManager : fq_codel sfq tbf. qdisc . pfifo pfifo_fast prio NetworkManager NetworkManager . 'fq_codel': limit U32 (hard limit) . . 10240 . memory_limit U32 FQ-CoDel . limit . 32 MB . flows U32 . () . . . 1024 . target U32 /. . (us) . 5ms . interval U32 . .B interval. . (RTT) . 100ms . quantum U32 '' (deficit) . 1514 MTU . ecn BOOL . ecn . ce_threshold U32 ECN Congestion Experienced . DCTCP . 'sfq': divisor U32 2.6.39 . (divisor) 65536 . : 1024. limit U32 SFQ. 127 . depth U32 . 127 . perturb_period U32 . 0 . . : 60. . divisor . quantum U32 (round robin) . MTU . flows U32 127 . 'tbf': rate U64 . ( SI IEC ) . burst U32 buffer maxburst . (bucket) . . . 10mbit/s Intel 10kbyte ! . HZ . . burst . burst 6000/16 . . . limit U32 limit . latency U32 TBF . peakrate . latency limit ( ) . : GPtrArray(NMTCQdisc) tc.tfilters TC. . tfilters : handle HANDLE (handle) tfilters . qdisc (classful) . qdisc . handle qdiscs . parent HANDLE (handle) qdisc qdisc . root qdisc (root) . KIND tfilters . NetworkManager : mirred simple. . matchall basic u32 NetworkManager . 'mirred': egress bool . ingress bool . mirror bool () . redirect bool . 'simple': sdata char[32] . : GPtrArray(NMTCTfilter) team (team setting) (Teaming). : team.config : config JSON team. JSON teamd teamd . . man teamd.conf . : team.link-watchers (link watchers) : . 'ethtool' 'nsna_ping' 'arp_ping' 'name' . : ethtool: 'delay-up' 'delay-down' 'init-wait' nsna_ping: 'init-wait' 'interval' 'missed-max' 'target-host' arp_ping: nsna_ping 'source-host' 'validate-active' 'validate-inactive' 'send-always'. teamd.conf . : team.link-watchers team.mcast-rejoin-count mcast_rejoin.count teamd . : : -2147483648 - 2147483647 : unset (-1), disabled (0) team.mcast-rejoin-interval mcast_rejoin.interval teamd . : : -2147483648 - 2147483647 : unset (-1), default (0) team.notify-peers-count notify_peers.count teamd . : : -2147483648 - 2147483647 : unset (-1), disabled (0) team.notify-peers-interval notify_peers.interval teamd . : : -2147483648 - 2147483647 : unset (-1), default (0) team.runner runner.name teamd . : "roundrobin" "broadcast" "activebackup" "loadbalance" "lacp" "random". : : broadcast, roundrobin, random, activebackup, loadbalance, lacp team.runner-active runner.active teamd . : : true/yes/on, false/no/off team.runner-agg-select-policy runner.agg_select_policy teamd . : : lacp_prio, lacp_prio_stable, bandwidth, count, port_config team.runner-fast-rate runner.fast_rate teamd . : : true/yes/on, false/no/off team.runner-hwaddr-policy runner.hwaddr_policy teamd . : : same_all, by_active, only_active team.runner-min-ports runner.min_ports teamd . : : -2147483648 - 2147483647 : unset (-1), default (1) team.runner-sys-prio runner.sys_prio teamd . : : -2147483648 - 2147483647 : unset (-1), default (65535) team.runner-tx-balancer runner.tx_balancer.name teamd . : : basic team.runner-tx-balancer-interval runner.tx_balancer.interval teamd . : : -2147483648 - 2147483647 : unset (-1), default (50) team.runner-tx-hash runner.tx_hash teamd . : : eth, vlan, ipv4, ipv6, ip, l3, tcp, udp, sctp, l4 team-port (team-port setting) (Team Port). : team-port.config : config JSON team. JSON teamd teamd . . man teamd.conf . : team-port.lacp-key ports.PORTIFNAME.lacp_key teamd . : : -2147483648 - 2147483647 : unset (-1), default (0) team-port.lacp-prio ports.PORTIFNAME.lacp_prio teamd . : : -2147483648 - 2147483647 : unset (-1), default (255) team-port.link-watchers (link watchers) : . 'ethtool' 'nsna_ping' 'arp_ping' 'name' . : ethtool: 'delay-up' 'delay-down' 'init-wait' nsna_ping: 'init-wait' 'interval' 'missed-max' 'target-host' arp_ping: nsna_ping 'source-host' 'validate-active' 'validate-inactive' 'send-always'. teamd.conf . : team-port.link-watchers team-port.prio ports.PORTIFNAME.prio teamd . : : -2147483648 - 2147483647 : unset (0), default (0) team-port.queue-id ports.PORTIFNAME.queue_id teamd . -1 json . : : -2147483648 - 2147483647 : unset (-1), default (0) team-port.sticky ports.PORTIFNAME.sticky teamd . : : true/yes/on, false/no/off tun (tun setting) . : tun.group : group . NULL . : tun.mode : mode . "tun" (1) "tap" (2) . : (NMSettingTunMode) : tun (1), tap (2) tun.multi-queue : multi-queue TRUE () . . : : true/yes/on, false/no/off tun.owner : owner . NULL . : tun.pi : pi TRUE . : : true/yes/on, false/no/off tun.vnet-hdr : vnet-hdr TRUE (IFF_VNET_HDR) virtio . : : true/yes/on, false/no/off vlan (vlan setting) VLAN. : vlan.egress-priority-map : egress SKB 802.1p. "from:to" "from" "to" "7:3". : vlan.egress-priority-map vlan.flags : flags VLAN . "reorder-headers" (0x1) ( ) "gvrp" (0x2) ( GVRP) "loose-binding" (0x4) ( ) "mvrp" (0x8) ( MVRP) . NM_VLAN_FLAG_REORDER_HEADERS 0 . API D-Bus 0 D-Bus 0 . : (NMVlanFlags) : reorder-headers (0x1), gvrp (0x2), loose-binding (0x4), mvrp (0x8) vlan.id : id VLAN . 0 4094 4095 . : : 0 - 4095 vlan.ingress-priority-map : ingress 802.1p SKB . "from:to" "from" "to" "7:3". : vlan.ingress-priority-map vlan.parent : dev UUID VLAN . "802-3-ethernet" "mac-address" . : vlan.protocol VLAN . : '802.1Q' '802.1ad'. '802.1Q' . : : 802.1Q, 802.1ad vpn (vpn setting) VPN. : vpn.data / VPN. . : / vpn.persistent VPN (persistence) TRUE VPN . : : true/yes/on, false/no/off vpn.secrets / VPN . . : / vpn.service-type : vpn-type D-Bus VPN org.freedesktop.NetworkManager.vpnc vpnc. : vpn.timeout VPN . . 0 ( vpn.timeout ). . : : 0 - 4294967295 vpn.user-name : user VPN . VPN . NetworkManager VPN . : vrf (vrf setting) VRF. : vrf.table : table VRF. : : 0 - 4294967295 vxlan (vxlan setting) VXLAN. : vxlan.ageing FDB . : : 0 - 4294967295 vxlan.destination-port : destination-port UDP VXLAN . : : 0 - 65535 vxlan.id : id VXLAN ( VXLAN) . : : 0 - 16777215 vxlan.l2-miss (miss) (LL ADDR) . : : true/yes/on, false/no/off vxlan.l3-miss (miss) IP (IP ADDR) . : : true/yes/on, false/no/off vxlan.learning IP (FDB) VXLAN . : : true/yes/on, false/no/off vxlan.limit FDB . . : : 0 - 4294967295 vxlan.local : local IP . : vxlan.parent : dev UUID . : vxlan.proxy ARP . : : true/yes/on, false/no/off vxlan.remote : remote IP (unicast) VXLAN IP (multicast) . : vxlan.rsc (route short circuit) . : : true/yes/on, false/no/off vxlan.source-port-max : source-port-max UDP VXLAN . : : 0 - 65535 vxlan.source-port-min : source-port-min UDP VXLAN . : : 0 - 65535 vxlan.tos TOS . : : 0 - 255 vxlan.ttl (time-to-live TTL) . : : 0 - 255 wifi-p2p (wifi-p2p setting) Wi-Fi P2P. : wifi-p2p.peer : peer P2P . . : MAC wifi-p2p.wfd-ies (IEs) Wi-Fi Display (WFD) . Wi-Fi Display Wi-Fi . . Wi-Fi Display . : wifi-p2p.wps-method WPS . NetworkManager . : (NMSettingWirelessSecurityWpsMethod) : default (0x0), disabled (0x1), auto (0x2), pbc (0x4), pin (0x8) wimax (wimax setting) WiMAX. : wimax.mac-address : mac WiMAX MAC . MAC ( MAC MAC spoofing ). 1.2 . WiMAX . : wimax.network-name : nsp (NSP) WiMAX . 1.2 . WiMAX . : MAC 802-3-ethernet (802-3-ethernet setting) : ethernet (Wired Ethernet). : 802-3-ethernet.accept-all-mac-addresses TRUE MAC . IFF_PROMISC . FALSE MAC (broadcast) . : ternary : true/yes/on, false/no/off, default/unknown 802-3-ethernet.auto-negotiate TRUE (auto-negotiation) (duplex) . "speed" "duplex" : BASE-T 802.3 . FALSE "speed" "duplex" . : boolean : true/yes/on, false/no/off 802-3-ethernet.cloned-mac-address : cloned-mac MAC . MAC . MAC "preserve" "permanent" "random" "stable" . "preserve" MAC . "permanent" ( "preserve" ). "random" MAC . "stable" MAC connection.stable-id . NetworkManager.conf . "preserve" ( NetworkManager ). D-Bus "assigned-mac-address" "cloned-mac-address" . : MAC address : preserve, permanent, random, stable 802-3-ethernet.duplex ("half" "full") . "auto-negotiate" "yes" : BASE-T 802.3 . () ( "auto-negotiate" "no" ) ( "auto-negotiate" "yes" ) . "speed" . . : string : half, full 802-3-ethernet.generate-mac-address-mask "cloned-mac-address" "random" "stable" MAC MAC (unicast) (locally-administered) . . MAC MAC . NULL . NULL MAC . MAC . MAC . "FE:FF:FF:00:00:00" OUI MAC "random" "stable" . MAC MAC . "FE:FF:FF:00:00:00 68:F7:28:00:00:00" OUI MAC 68:F7:28 . "02:00:00:00:00:00 00:00:00:00:00:00" MAC . MAC . "02:00:00:00:00:00 00:00:00:00:00:00 02:00:00:00:00:00" MAC . : string 802-3-ethernet.mac-address : mac MAC . MAC ( MAC ). : MAC address 802-3-ethernet.mac-address-blacklist MAC . MAC (00:11:22:33:44:55). : list of MAC addresses 802-3-ethernet.mac-address-denylist MAC . MAC (00:11:22:33:44:55). : list of MAC addresses 802-3-ethernet.mtu : mtu . : integer : auto 802-3-ethernet.port . "tp" ( ) "aui" ( ) "bnc" ( ) "mii" ( ). . : read only 802-3-ethernet.s390-nettype s390 "qeth" "lcs" "ctc" s390 . : string : qeth, lcs, ctc 802-3-ethernet.s390-options / s390. . "portno" "layer2" "portname" "protocol" . ( [a-zA-Z0-9]). NetworkManager . s390utils udev . : list of key/value options 802-3-ethernet.s390-subchannels (subchannels) z/VM s390 . "mac-address" z/VM . (.) . : list of 802-3-ethernet.s390-subchannels objects 802-3-ethernet.speed 0 . "auto-negotiate" "yes" : BASE-T 802.3 . (0 ) ( "auto-negotiate" "no" ) ( "auto-negotiate" "yes" ) . (Mbit/s) 100 == 100Mbit/s. "duplex" . . : integer : 0 - 4294967295 802-3-ethernet.wake-on-lan NMSettingWiredWakeOnLan . . "phy" (0x2) "unicast" (0x4) "multicast" (0x8) "broadcast" (0x10) "arp" (0x20) "magic" (0x40) "default" (0x1) ( ) "ignore" (0x8000) ( Wake-on-LAN NetworkManager) . : flags (NMSettingWiredWakeOnLan) : phy (0x2), unicast (0x4), multicast (0x8), broadcast (0x10), arp (0x20), magic (0x40), default (0x1), ignore (0x8000) 802-3-ethernet.wake-on-lan-password Wake-on-LAN (magic packet) MAC . NULL . : MAC address wireguard (wireguard setting) WireGuard. : wireguard.fwmark fwmark . 0 . fwmark - . "ip4-auto-default-route" "ip6-auto-default-route" fwmark . : integer : 0 - 4294967295 wireguard.ip4-auto-default-route IPv4 . IPv4 wireguard.peer-routes (policy routing rules) . fwmark fwmark /fwmark . wg-quick Table=auto WireGuard "Improved Rule-based Routing" . ipv4.gateway . ipv4.never-default allowed-ips . allowed-ips /0 . . : ternary : true/yes/on, false/no/off, default/unknown wireguard.ip6-auto-default-route ip4-auto-default-route IPv6. : ternary : true/yes/on, false/no/off, default/unknown wireguard.listen-port (listen-port). . : integer : 0 - 65535 wireguard.mtu (fragment) . MTU . MTU wg-quick . : integer : auto wireguard.peer-routes AllowedIPs . TRUE () NetworkManager ipv4.route-table ipv6.route-table . . FALSE . ipv4.routes ipv6.routes . AllowedIPs "0.0.0.0/0" "::/0" ipv4.never-default ipv6.never-default . : boolean : true/yes/on, false/no/off wireguard.peers WireGuard. : public-key [attribute=value [attribute=value]...] base64 wg pubkey . : endpoint IP (endpoint) . allowed-ips IP ( ) CIDR persistent-keepalive NAT (stateful). preshared-key (preshared key) base64 "wg genpsk" . . preshared-key-flags preshared-key. : a comma-separated list of WireGuard peers wireguard.private-key base64. : string wireguard.private-key-flags "private-key" . : flags (NMSettingSecretFlags) : none (0x0), agent-owned (0x1), not-saved (0x2), not-required (0x4) 802-11-wireless (802-11-wireless setting) : wifi Wi-Fi. : 802-11-wireless.ap-isolation (AP isolation) AP . "default" (-1) AP . "true" (1) . . . "false" (0) . "default" (-1) "false" (0) . : ternary : true/yes/on, false/no/off, default/unknown 802-11-wireless.band 802.11 . "a" 5GHz "bg" 2.4GHz "6GHz". Wi-Fi "a" 2.4GHz (bg) 6GHz . . : string : a, bg, 6GHz 802-11-wireless.bssid . . : BSSID Ad-Hoc . BSSID . SSID . : MAC address 802-11-wireless.channel Wi-Fi. Wi-Fi ( Ad-Hoc ). "band" . : integer : 0 - 4294967295 802-11-wireless.channel-width (AP) . "auto" (0) () . () . "auto" (0) 'channel' . 2.4GHz 40MHz . "auto" (0) AP . : choice (NMSettingWirelessChannelWidth) : auto (0), 20mhz (20), 40mhz (40), 80mhz (80) 802-11-wireless.cloned-mac-address : cloned-mac MAC . MAC . MAC "preserve" "permanent" "random" "stable" "stable-ssid" . "preserve" MAC . "permanent" . "random" MAC . "stable" MAC connection.stable-id . "stable-ssid" MAC SSID stable-id "${NETWORK_SSID}". NetworkManager.conf . "preserve" ( NetworkManager ). D-Bus "assigned-mac-address" "cloned-mac-address" . : MAC address : preserve, permanent, random, stable, stable-ssid 802-11-wireless.generate-mac-address-mask "cloned-mac-address" "random" "stable" MAC MAC (unicast) (locally-administered) . . MAC MAC . NULL . NULL MAC . MAC . MAC . "FE:FF:FF:00:00:00" OUI MAC "random" "stable" . MAC MAC . "FE:FF:FF:00:00:00 68:F7:28:00:00:00" OUI MAC 68:F7:28 . "02:00:00:00:00:00 00:00:00:00:00:00" MAC . MAC . "02:00:00:00:00:00 00:00:00:00:00:00 02:00:00:00:00:00" MAC . : string 802-11-wireless.hidden TRUE (non-broadcasting) SSID . infrastructure AP . infrastructure (probe-scanning) SSID. SSID SSID . AP SSID . ( infrastructure) ( AP) . : boolean : true/yes/on, false/no/off 802-11-wireless.mac-address : mac Wi-Fi MAC . MAC ( MAC ). : MAC address 802-11-wireless.mac-address-blacklist MAC Wi-Fi . MAC ( "00:11:22:33:44:55"). : list of MAC addresses 802-11-wireless.mac-address-denylist MAC Wi-Fi . MAC ( "00:11:22:33:44:55"). : list of MAC addresses 802-11-wireless.mac-address-randomization "default" (0) ( supplicant ) "never" (1) ( MAC ) "always" (2) ( MAC ). 1.4 . "cloned-mac-address" . : choice (NMSettingMacRandomization) : default (0), never (1), always (2) 802-11-wireless.mode : mode Wi-Fi "infrastructure" "mesh" "adhoc" "ap". infrastructure . : string : infrastructure, adhoc, ap, mesh 802-11-wireless.mtu : mtu . : integer : auto 802-11-wireless.powersave "disable" (2) ( Wi-Fi) "enable" (3) ( Wi-Fi) "ignore" (1) ( ) "default" (0) ( ). . : choice (NMSettingWirelessPowersave) : default (0), ignore (1), disable (2), enable (3) 802-11-wireless.seen-bssids BSSID ( BSSID MAC "00:11:22:33:44:55" ) Wi-Fi . NetworkManager BSSID . BSSID NetworkManager . . . NetworkManager BSSID "/var/lib/NetworkManager/seen-bssids" . : read only 802-11-wireless.ssid : ssid SSID Wi-Fi. . : string 802-11-wireless.wake-on-wlan NMSettingWirelessWakeOnWLan . . "any" (0x2) "disconnect" (0x4) "magic" (0x8) "gtk-rekey-failure" (0x10) "eap-identity-request" (0x20) "4way-handshake" (0x40) "rfkill-release" (0x80) "tcp" (0x100) "default" (0x1) ( ) "ignore" (0x8000) ( Wake-on-LAN NetworkManager) . : flags (NMSettingWirelessWakeOnWLan) : any (0x2), disconnect (0x4), magic (0x8), gtk-rekey-failure (0x10), eap-identity-request (0x20), 4way-handshake (0x40), rfkill-release (0x80), tcp (0x100), all (0x1fe), default (0x1), ignore (0x8000) 802-11-wireless-security (802-11-wireless-security setting) : wifi-sec (Wi-Fi). : 802-11-wireless-security.auth-alg WEP ( key-mgmt = "none" "ieee8021x") 802.11 AP . "open" (Open System) "shared" (Shared Key) "leap" Cisco LEAP. Cisco LEAP ( key-mgmt = "ieee8021x" auth-alg = "leap") "leap-username" "leap-password" . : : open, shared, leap 802-11-wireless-security.fils Fast Initial Link Setup (802.11ai) . "default" (0) ( ) "disable" (1) ( FILS) "optional" (2) ( FILS (supplicant) (access point)) "required" (3) ( FILS ). "default" (0) FILS . : (NMSettingWirelessSecurityFils) : default (0), disable (1), optional (2), required (3) 802-11-wireless-security.group / (group/broadcast) . . "wep40" "wep104" "tkip" "ccmp" . : : wep40, wep104, tkip, ccmp 802-11-wireless-security.key-mgmt . "none" ( WEP ) "ieee8021x" ( WEP ) "owe" ( Opportunistic Wireless Encryption) "wpa-psk" ( WPA2 + WPA3) "sae" ( WPA3) "wpa-eap" ( WPA2 + WPA3) "wpa-eap-suite-b-192" ( WPA3). . : : none, ieee8021x, wpa-psk, wpa-eap, wpa-eap-suite-b-192, sae, owe 802-11-wireless-security.leap-password LEAP ( key-mgmt = "ieee8021x" auth-alg = "leap"). : 802-11-wireless-security.leap-password-flags "leap-password" . : (NMSettingSecretFlags) : none (0x0), agent-owned (0x1), not-saved (0x2), not-required (0x4) 802-11-wireless-security.leap-username LEAP ( key-mgmt = "ieee8021x" auth-alg = "leap"). : 802-11-wireless-security.pairwise (pairwise) . . "tkip" "ccmp" . : : tkip, ccmp 802-11-wireless-security.pmf Protected Management Frames (802.11w) . "default" (0) ( ) "disable" (1) ( PMF) "optional" (2) ( PMF ) "required" (3) ( PMF ). "default" (0) PMF . : (NMSettingWirelessSecurityPmf) : default (0), disable (1), optional (2), required (3) 802-11-wireless-security.proto WPA . "wpa" ( WPA) "rsn" ( WPA2/RSN) . WPA RSN . : : wpa, rsn 802-11-wireless-security.psk (Pre-Shared-Key) WPA. WPA-PSK (ASCII) ( 802.11i ) . WPA3-Personal SAE . : 802-11-wireless-security.psk-flags "psk" . : (NMSettingSecretFlags) : none (0x0), agent-owned (0x1), not-saved (0x2), not-required (0x4) 802-11-wireless-security.wep-key-flags "wep-key0" "wep-key1" "wep-key2" "wep-key3" . : (NMSettingSecretFlags) : none (0x0), agent-owned (0x1), not-saved (0x2), not-required (0x4) 802-11-wireless-security.wep-key-type WEP . "key" (1) "passphrase" (2) MD5 WEP . : (NMWepKeyType) : unknown (0), key (1), passphrase (2) 802-11-wireless-security.wep-key0 WEP 0. WEP . "wep-key-type" . : 802-11-wireless-security.wep-key1 WEP 1. WEP . "wep-key-type" . : 802-11-wireless-security.wep-key2 WEP 2. WEP . "wep-key-type" . : 802-11-wireless-security.wep-key3 WEP 3. WEP . "wep-key-type" . : 802-11-wireless-security.wep-tx-keyidx WEP ( key-mgmt = "none") WEP AP WEP . 0 ( ) 3 . ( Linksys WRT54G) . : : 0 - 3 802-11-wireless-security.wps-method WPS . NetworkManager WPS . WPS 1 . : (NMSettingWirelessSecurityWpsMethod) : default (0x0), disabled (0x1), auto (0x2), pbc (0x4), pin (0x8) wpan (wpan setting) MAC IEEE 802.15.4 (WPAN). : wpan.channel : channel IEEE 802.15.4. -1 " ". : : -32768 - 32767 : default (-1) wpan.mac-address : mac MAC IEEE 802.15.4 (WPAN) MAC . : MAC WPAN wpan.page : page IEEE 802.15.4. -1 " ". : : -32768 - 32767 : default (-1) wpan.pan-id : pan-id (PAN) IEEE 802.15.4. : : 0 - 65535 : unset (0xffff) wpan.short-address : short-addr IEEE 802.15.4 . : : 0 - 65535 : unset (0xffff) bond-port (bond-port setting) Bond. : bond-port.prio : prio bond (failover). . . active-backup balance-tlb balance-alb . : : -2147483648 - 2147483647 bond-port.queue-id : queue-id bond. (TX) . : : 0 - 65535 geneve (geneve setting) GENEVE. : geneve.destination-port : destination-port UDP GENEVE . : : 0 - 65535 geneve.df (Don't Fragment DF) IP GENEVE . "unset" (0) (0): DF . "set" (1) (1): DF . "inherit" (2) (2): DF IP . : (NMSettingGeneveDf) : unset (0), set (1), inherit (2) geneve.id : id GENEVE ( GENEVE) . : : 0 - 16777215 geneve.remote : remote IP (unicast) GENEVE . : geneve.tos TOS . "inherit" (1) . : : 0 - 255 : inherit (1) geneve.ttl (time-to-live TTL) . "inherit" (-1) 0 1-255 . : : -1 - 255 : inherit (-1) hostname (hostname setting) (Hostname). : hostname.from-dhcp DHCP . "default" (-1) . NetworkManager "true" (1) . : : true/yes/on, false/no/off, default/unknown hostname.from-dns-lookup DNS . "default" (-1) . NetworkManager "true" (1) . : : true/yes/on, false/no/off, default/unknown hostname.only-from-default "true" (1) NetworkManager DHCPv4/DHCPv6 DNS (IPv4/IPv6) . "false" (0) . "default" (-1) . NetworkManager "false" (0) . : : true/yes/on, false/no/off, default/unknown hostname.priority . ( ). . NetworkManager . 100 . . : : -2147483648 - 2147483647 link (link setting) (Link). : link.gro-max-size Generic Receive Offload . 0 4294967295 . -1 . : : -1 - 4294967295 : default (-1) link.gso-max-segments Generic Segment Offload . 0 4294967295 . -1 . : : -1 - 4294967295 : default (-1) link.gso-max-size Generic Segment Offload . 0 4294967295 . -1 . : : -1 - 4294967295 : default (-1) link.tx-queue-length . 0 4294967295 . -1 . : : -1 - 4294967295 : default (-1) loopback (loopback setting) (Loopback). : loopback.mtu : mtu . : : auto prefix-delegation (prefix-delegation setting) (prefix delegation) IPv6. : prefix-delegation.subnet-id (subnet ID) . 0 0xffffffff (2^32 - 1) -1 . : : -1 - 4294967295 veth (veth setting) veth. : veth.peer : peer (peer) veth . . : (Secret flag types:) flags . flags (bitfield) OR . o 0x0 (none) - . . ( ) . keyfile "PLUGINS" NetworkManager.conf(5) . o 0x1 (agent-owned) - (secret agent) . o 0x2 (not-saved) - . (One-Time-Pad) PIN . o 0x4 (not-required) - . . (FILES) /etc/NetworkManager/system-connections (SEE ALSO) nmcli(1), nmcli-examples(7), NetworkManager(8), nm-settings-dbus(5), nm-settings-keyfile(5), NetworkManager.conf(5) NetworkManager 1.58.1 NM-SETTINGS-NMCLI(5)