about summary refs log tree commit diff
path: root/docs/api/html/NetworkManager.conf.html
diff options
context:
space:
mode:
authorMichael Biebl <biebl@debian.org>2024-12-25 20:36:29 +0100
committerMichael Biebl <biebl@debian.org>2024-12-25 20:36:29 +0100
commite465722b908aa870bdc293b9a417d3c15294aa6d (patch)
tree7c959d3b73f427d6c40522a7464eaa4531ef2f05 /docs/api/html/NetworkManager.conf.html
parent56928734cbcf1d3a02fae4f152a541df1b04e04a (diff)
New upstream version 1.50.1 upstream/1.50.1
Diffstat (limited to 'docs/api/html/NetworkManager.conf.html')
-rw-r--r--docs/api/html/NetworkManager.conf.html1947
1 files changed, 0 insertions, 1947 deletions
diff --git a/docs/api/html/NetworkManager.conf.html b/docs/api/html/NetworkManager.conf.html
deleted file mode 100644
index 174f6ecc..00000000
--- a/docs/api/html/NetworkManager.conf.html
+++ /dev/null
@@ -1,1947 +0,0 @@
-<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
-<html>
-<head>
-<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
-<title>NetworkManager.conf: NetworkManager Reference Manual</title>
-<meta name="generator" content="DocBook XSL Stylesheets Vsnapshot">
-<link rel="home" href="index.html" title="NetworkManager Reference Manual">
-<link rel="up" href="manpages.html" title="Part I. Manual Pages">
-<link rel="prev" href="NetworkManager.html" title="NetworkManager">
-<link rel="next" href="NetworkManager-dispatcher.html" title="NetworkManager-dispatcher">
-<meta name="generator" content="GTK-Doc V1.34.0 (XML mode)">
-<link rel="stylesheet" href="style.css" type="text/css">
-</head>
-<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
-<table class="navigation" id="top" width="100%" summary="Navigation header" cellpadding="2" cellspacing="5"><tr valign="middle">
-<td width="100%" align="left" class="shortcuts"></td>
-<td><a accesskey="h" href="index.html"><img src="home.png" width="16" height="16" border="0" alt="Home"></a></td>
-<td><a accesskey="u" href="manpages.html"><img src="up.png" width="16" height="16" border="0" alt="Up"></a></td>
-<td><a accesskey="p" href="NetworkManager.html"><img src="left.png" width="16" height="16" border="0" alt="Prev"></a></td>
-<td><a accesskey="n" href="NetworkManager-dispatcher.html"><img src="right.png" width="16" height="16" border="0" alt="Next"></a></td>
-</tr></table>
-<div class="refentry">
-<a name="NetworkManager.conf"></a><div class="titlepage"></div>
-<div class="refnamediv"><table width="100%"><tr>
-<td valign="top">
-<h2><span class="refentrytitle">NetworkManager.conf</span></h2>
-<p>NetworkManager.conf — NetworkManager configuration file</p>
-</td>
-<td class="gallery_image" valign="top" align="right"></td>
-</tr></table></div>
-<div class="refsynopsisdiv">
-<h2>Synopsis</h2>
-<p><code class="filename">/etc/NetworkManager/NetworkManager.conf</code>,
-    <code class="filename">/etc/NetworkManager/conf.d/<em class="replaceable"><code>name</code></em>.conf</code>,
-    <code class="filename">/run/NetworkManager/conf.d/<em class="replaceable"><code>name</code></em>.conf</code>,
-    <code class="filename">/usr/lib/NetworkManager/conf.d/<em class="replaceable"><code>name</code></em>.conf</code>,
-    <code class="filename">/var/lib/NetworkManager/NetworkManager-intern.conf</code>
-    </p>
-</div>
-<div class="refsect1">
-<a name="id-1.2.3.5"></a><h2>Description</h2>
-<p><code class="literal">NetworkManager.conf</code> is the configuration file for NetworkManager. It is used
-    to set up various aspects of NetworkManager's behavior. The
-    location of the main file and configuration directories may be changed
-    through use of the <code class="option">--config</code>, <code class="option">--config-dir</code>,
-    <code class="option">--system-config-dir</code>, and <code class="option">--intern-config</code>
-    argument for NetworkManager, respectively.
-    </p>
-<p>If a default <code class="literal">NetworkManager.conf</code> is
-    provided by your distribution's packages, you should not modify
-    it, since your changes may get overwritten by package
-    updates. Instead, you can add additional <code class="literal">.conf</code>
-    files to the <code class="literal">/etc/NetworkManager/conf.d</code> directory.
-    These will be read in order, with later files overriding earlier ones.
-    Packages might install further configuration snippets to <code class="literal">/usr/lib/NetworkManager/conf.d</code>.
-    This directory is parsed first, even before <code class="literal">NetworkManager.conf</code>.
-    Scripts can also put per-boot configuration into <code class="literal">/run/NetworkManager/conf.d</code>.
-    This directory is parsed second, also before <code class="literal">NetworkManager.conf</code>.
-    The loading of a file <code class="literal">/run/NetworkManager/conf.d/<em class="replaceable"><code>name</code></em>.conf</code>
-    can be prevented by adding a file <code class="literal">/etc/NetworkManager/conf.d/<em class="replaceable"><code>name</code></em>.conf</code>.
-    Likewise, a file <code class="literal">/usr/lib/NetworkManager/conf.d/<em class="replaceable"><code>name</code></em>.conf</code>
-    can be shadowed by putting a file of the same name to either <code class="literal">/etc/NetworkManager/conf.d</code>
-    or <code class="literal">/run/NetworkManager/conf.d</code>.
-    </p>
-<p>
-    NetworkManager can overwrite certain user configuration options via D-Bus or other internal
-    operations. In this case it writes those changes to <code class="literal">/var/lib/NetworkManager/NetworkManager-intern.conf</code>.
-    This file is not intended to be modified by the user, but it is read last and can shadow
-    user configuration from <code class="literal">NetworkManager.conf</code>.
-    </p>
-<p>
-    Certain settings from the configuration can be reloaded at runtime either by sending SIGHUP signal or via
-    D-Bus' Reload call.
-    </p>
-<p>
-    NetworkManager does not require any configuration in <code class="literal">NetworkManager.conf</code>. Depending
-    on your use case, you may remove all files to restore the default configuration (factory reset). But
-    note that your distribution or other packages may drop configuration snippets for NetworkManager, such
-    that they are part of the factory default.
-    </p>
-</div>
-<div class="refsect1">
-<a name="id-1.2.3.6"></a><h2>File Format</h2>
-<p>
-      The configuration file format is so-called key file (sort of
-      ini-style format).  It consists of sections (groups) of
-      key-value pairs. Lines beginning with a '#' and blank lines are
-      considered comments. Sections are started by a header line
-      containing the section enclosed in '[' and ']', and ended
-      implicitly by the start of the next section or the end of the
-      file. Each key-value pair must be contained in a section.
-    </p>
-<p>
-      For keys that take a list of devices as their value, you can
-      specify devices by their MAC addresses or interface names, or
-      "*" to specify all devices. See <a class="xref" href="NetworkManager.conf.html#device-spec" title="Device List Format">the section called “Device List Format”</a>
-      below.
-    </p>
-<p>
-      A simple configuration file looks like this:
-      </p>
-<pre class="programlisting">
-[main]
-plugins=keyfile
-</pre>
-<p>
-    </p>
-<p>
-      As an extension to the normal keyfile format, you can also
-      append a value to a previously-set list-valued key by doing:
-      </p>
-<pre class="programlisting">
-plugins+=another-plugin
-plugins-=remove-me
-</pre>
-<p>
-    </p>
-</div>
-<div class="refsect1">
-<a name="id-1.2.3.7"></a><h2>
-<code class="literal">main</code> section</h2>
-<div class="variablelist"><table border="0" class="variablelist">
-<colgroup>
-<col align="left" valign="top">
-<col>
-</colgroup>
-<tbody>
-<tr>
-<td><p><span class="term"><code class="varname">plugins</code></span></p></td>
-<td>
-<p>
-            Lists system settings plugin names separated by ','. These
-            plugins are used to read and write system-wide
-            connection profiles. When multiple plugins are specified, the
-            connections are read from all listed plugins. When writing
-            connections, the plugins will be asked to save the
-            connection in the order listed here; if the first plugin
-            cannot write out that connection type (or can't write out
-            any connections) the next plugin is tried, etc. If none of
-            the plugins can save the connection, an error is returned
-            to the user.
-          </p>
-<p>
-            The default value and the number of available plugins is
-            distro-specific. See <a class="xref" href="NetworkManager.conf.html#settings-plugins" title="Plugins">the section called “Plugins”</a>
-            below for the available plugins.
-            Note that NetworkManager's native <code class="literal">keyfile</code>
-            plugin is always appended to the end of this list (if it doesn't
-            already appear earlier in the list).
-          </p>
-</td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">monitor-connection-files</code></span></p></td>
-<td><p>This setting is deprecated and has no effect. Profiles
-        from disk are never automatically reloaded. Use for example <code class="literal">nmcli connection (re)load</code>
-        for that.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">auth-polkit</code></span></p></td>
-<td><p>Whether the system uses PolicyKit for authorization.
-        If <code class="literal">true</code>, non-root requests are authorized using PolicyKit.
-        Requests from root (user ID zero) are always granted without asking PolicyKit.
-        If <code class="literal">false</code>, all requests will be allowed and PolicyKit is
-        not used. If set to <code class="literal">root-only</code> PolicyKit is not used and
-        all requests except root are denied.
-        The default value is <code class="literal">true</code>.
-        </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">dhcp</code></span></p></td>
-<td>
-<p>This key sets up what DHCP client
-        NetworkManager will use. Allowed values depend on build configuration and
-        typically include <code class="literal">internal</code> and <code class="literal">dhcpcd</code>.
-        Support for unmaintained <code class="literal">dhclient</code> client has been deprecated
-        and disabled by default.</p>
-<p>The <code class="literal">internal</code> client is built-in, while other options
-        may require an external DHCP client to be installed.</p>
-<p>If this key is missing, <code class="literal">internal</code>
-        is used with a fallback to other suppored clients in this order:
-        <code class="literal">internal</code>, <code class="literal">dhcpcd</code>,
-        <code class="literal">dhclient</code>.</p>
-</td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">no-auto-default</code></span></p></td>
-<td>
-<p>Specify devices for which
-        NetworkManager shouldn't create default wired connection
-        (Auto eth0).  By default, NetworkManager creates a temporary
-        wired connection for any Ethernet device that is managed and
-        doesn't have a connection configured. List a device in this
-        option to inhibit creating the default connection for the
-        device. May have the special value <code class="literal">*</code> to
-        apply to all devices.</p>
-<p>When the default wired connection is deleted or saved
-        to a new persistent connection by a plugin, the device is
-        added to a list in the file
-        <code class="filename">/var/lib/NetworkManager/no-auto-default.state</code>
-        to prevent creating the default connection for that device
-        again.</p>
-<p>See <a class="xref" href="NetworkManager.conf.html#device-spec" title="Device List Format">the section called “Device List Format”</a> for the syntax how to
-        specify a device.
-        </p>
-<p>
-          Example:
-          </p>
-<pre class="programlisting">
-no-auto-default=00:22:68:5c:5d:c4,00:1e:65:ff:aa:ee
-no-auto-default=eth0,eth1
-no-auto-default=*
-</pre>
-<p>
-        </p>
-</td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ignore-carrier</code></span></p></td>
-<td><p>
-            This setting is deprecated for the per-device setting
-            <code class="literal">ignore-carrier</code> which overwrites this setting
-            if specified (See <a class="xref" href="NetworkManager.conf.html#ignore-carrier"><code class="varname">ignore-carrier</code></a>).
-            Otherwise, it is a list of matches to specify for which device
-            carrier should be ignored. See <a class="xref" href="NetworkManager.conf.html#device-spec" title="Device List Format">the section called “Device List Format”</a> for the
-            syntax how to specify a device. Note that controller types like
-            bond, bridge, and team ignore carrier by default. You can however
-            revert that default using the "except:" specifier (or better,
-            use the per-device setting instead of the deprecated setting).
-          </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">assume-ipv6ll-only</code></span></p></td>
-<td>
-<p>
-            Specify devices for which NetworkManager will try to
-            generate a connection based on initial configuration when
-            the device only has an IPv6 link-local address.
-          </p>
-<p>See <a class="xref" href="NetworkManager.conf.html#device-spec" title="Device List Format">the section called “Device List Format”</a> for the syntax how to
-           specify a device.
-          </p>
-</td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">configure-and-quit</code></span></p></td>
-<td>
-<p>
-            This option is no longer useful to configure in NetworkManager.conf file.
-            It can however also be configured on the command line with the same
-            values, where it has some use.
-          </p>
-<p>
-            When set to '<code class="literal">initrd</code>', NetworkManager does not connect
-            to D-Bus and quits after configuring the network. This is an implementation
-            detail how the NetworkManager module of dracut can run NetworkManager.
-            An alternative to this is having NetworkManager as a systemd service
-            with D-Bus in initrd.
-          </p>
-<p>
-            The value '<code class="literal">true</code>' is unsupported since version 1.36.
-            Previously this was a mode where NetworkManager would quit after configuring
-            the network and run helper processes for DHCP and SLAAC.
-          </p>
-<p>
-            Otherwise, NetworkManager runs a system service with D-Bus and does not
-            quit during normal operation.
-          </p>
-</td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">hostname-mode</code></span></p></td>
-<td>
-<p>
-            Set the management mode of the hostname. This parameter will
-            affect only the transient hostname. If a valid static hostname is set,
-            NetworkManager will skip the update of the hostname despite the value of
-            this option. An hostname empty or equal to 'localhost', 'localhost6',
-            'localhost.localdomain' or 'localhost6.localdomain' is considered invalid.
-          </p>
-<p><code class="literal">default</code>: NetworkManager will update the
-          hostname with the one provided via DHCP or reverse DNS lookup of the
-          IP address on the connection with the default route or on any
-          connection with the property hostname.only-from-default set to
-          '<code class="literal">false</code>'. Connections are considered in order of
-          increasing value of the <code class="literal">hostname.priority</code>
-          property. In case multiple connections have the same priority,
-          connections activated earlier are considered first. If no hostname can
-          be determined in such way, the hostname will be updated to the last
-          one set outside NetworkManager or to 'localhost.localdomain'.
-          </p>
-<p><code class="literal">dhcp</code>: this is similar to
-          '<code class="literal">default</code>', with the difference that after trying to
-          get the DHCP hostname, reverse DNS lookup is not done. Note that
-          selecting this option is equivalent to setting the property
-          '<code class="literal">hostname.from-dns-lookup</code>' to
-          '<code class="literal">false</code>' globally for all connections in
-          NetworkManager.conf.
-          </p>
-<p><code class="literal">none</code>: NetworkManager will not manage the transient
-          hostname and will never set it.
-          </p>
-</td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">dns</code></span></p></td>
-<td>
-<p>Set the DNS processing mode.</p>
-<p>If the key is unspecified, <code class="literal">default</code> is used,
-        unless <code class="filename">/etc/resolv.conf</code> is a symlink to
-        <code class="filename">/run/systemd/resolve/stub-resolv.conf</code>,
-        <code class="filename">/run/systemd/resolve/resolv.conf</code>,
-        <code class="filename">/lib/systemd/resolv.conf</code> or
-        <code class="filename">/usr/lib/systemd/resolv.conf</code>.
-        In that case, <code class="literal">systemd-resolved</code> is chosen automatically.
-        </p>
-<p><code class="literal">default</code>: NetworkManager will update
-        <code class="filename">/etc/resolv.conf</code> to reflect the nameservers
-        provided by currently active connections. The <code class="literal">rc-manager</code>
-        setting (below) controls how this is done.</p>
-<p><code class="literal">dnsmasq</code>: NetworkManager will run
-        dnsmasq as a local caching nameserver, using "Conditional Forwarding"
-        if you are connected to a VPN, and then update
-        <code class="filename">resolv.conf</code> to point to the local
-        nameserver. It is possible to pass custom options to the
-        dnsmasq instance by adding them to files in the
-        "<code class="filename">/etc/NetworkManager/dnsmasq.d/</code>"
-        directory. Note that when multiple upstream servers are
-        available, dnsmasq will initially contact them in parallel and
-        then use the fastest to respond, probing again other servers
-        after some time. This behavior can be modified passing the
-        'all-servers' or 'strict-order' options to dnsmasq (see the
-        manual page for more details).</p>
-<p><code class="literal">systemd-resolved</code>: NetworkManager will
-        push the DNS configuration to systemd-resolved</p>
-<p><code class="literal">none</code>: NetworkManager will not
-        modify resolv.conf. This implies
-        <code class="literal">rc-manager</code> <code class="literal">unmanaged</code></p>
-<p>Note that the plugins <code class="literal">dnsmasq</code> and <code class="literal">systemd-resolved</code>
-        are caching local nameservers.
-        Hence, when NetworkManager writes <code class="filename">/run/NetworkManager/resolv.conf</code>
-        and <code class="filename">/etc/resolv.conf</code> (according to <code class="literal">rc-manager</code>
-        setting below), the name server there will be localhost only.
-        NetworkManager also writes a file <code class="filename">/run/NetworkManager/no-stub-resolv.conf</code>
-        that contains the original name servers pushed to the DNS plugin.</p>
-<p>When using <code class="literal">dnsmasq</code> and <code class="literal">systemd-resolved</code>,
-        per-connection added dns servers will always be queried using
-        the device the connection has been activated on.</p>
-</td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">rc-manager</code></span></p></td>
-<td>
-<p>Set the <code class="filename">resolv.conf</code>
-          management mode. This option is about how NetworkManager writes to
-          <code class="filename">/etc/resolv.conf</code>, if at all.
-          The default value depends on NetworkManager build
-          options, and this version of NetworkManager was build with a default of
-          "<code class="literal">auto</code>".
-          Regardless of this setting, NetworkManager will
-          always write its version of resolv.conf to its runtime state directory
-          as <code class="filename">/run/NetworkManager/resolv.conf</code>.
-        </p>
-<p>If you configure <code class="literal">dns=none</code> or make <code class="filename">/etc/resolv.conf</code>
-          immutable with <code class="literal">chattr +i</code>, NetworkManager will ignore this setting and
-          always choose <code class="literal">unmanaged</code> (below).
-        </p>
-<p><code class="literal">auto</code>: if systemd-resolved plugin is configured via
-          the <code class="literal">dns</code> setting or if it gets detected as main DNS plugin,
-          NetworkManager will update systemd-resolved without touching <code class="filename">/etc/resolv.conf</code>.
-          Alternatively, if <code class="literal">resolvconf</code> or <code class="literal">netconfig</code> are enabled
-          at compile time and the respective binary is found, NetworkManager will automatically use it.
-          Note that if you install or uninstall these binaries, you need to reload the
-          <code class="literal">rc-manager</code> setting with SIGHUP or
-          <code class="literal">systemctl reload NetworkManager</code>. As last fallback
-          it uses the <code class="literal">symlink</code> option (see next).
-        </p>
-<p><code class="literal">symlink</code>: If <code class="filename">/etc/resolv.conf</code> is
-          a regular file or does not exist, NetworkManager will write the file directly.
-          If <code class="filename">/etc/resolv.conf</code> is instead a symlink, NetworkManager
-          will leave it alone. Unless the symlink points to the internal file
-          <code class="filename">/run/NetworkManager/resolv.conf</code>,
-          in which case the symlink will be updated to emit an inotify notification.
-          This allows the user to conveniently instruct NetworkManager not
-          to manage <code class="filename">/etc/resolv.conf</code> by replacing it with
-          a symlink.
-        </p>
-<p><code class="literal">file</code>: NetworkManager will write
-            <code class="filename">/etc/resolv.conf</code> as regular file. If it finds
-            a symlink to an existing target, it will follow the symlink and
-            update the target instead. In no case will an existing symlink
-            be replaced by a file. Note that older versions of NetworkManager
-            behaved differently and would replace dangling symlinks with a
-            plain file.
-        </p>
-<p><code class="literal">resolvconf</code>: NetworkManager will run
-          resolvconf to update the DNS configuration.</p>
-<p><code class="literal">netconfig</code>: NetworkManager will run
-          netconfig to update the DNS configuration.</p>
-<p><code class="literal">unmanaged</code>: don't touch
-          <code class="filename">/etc/resolv.conf</code>.</p>
-<p><code class="literal">none</code>: deprecated alias for
-          <code class="literal">symlink</code>.</p>
-</td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">systemd-resolved</code></span></p></td>
-<td>
-<p>Additionally, send the connection DNS configuration to
-        <code class="literal">systemd-resolved</code>. Defaults to "<code class="literal">true</code>".
-        </p>
-<p>Note that this setting has no effect if the main <code class="varname">dns</code>
-        plugin is already <code class="literal">systemd-resolved</code>. It is complementary to the
-        <code class="varname">dns</code> setting to configure systemd-resolved alongside the
-        main plugin.</p>
-<p>If systemd-resolved is enabled, either via this setting or the main
-        DNS plugin, the connectivity check resolves the
-        hostname per-device.</p>
-</td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">debug</code></span></p></td>
-<td>
-<p>Comma separated list of options to aid
-        debugging. This value will be combined with the environment
-        variable <code class="literal">NM_DEBUG</code>. Currently, the following
-        values are supported:</p>
-<p>
-          <code class="literal">RLIMIT_CORE</code>: set ulimit -c unlimited
-          to write out core dumps. Beware, that a core dump can contain
-          sensitive information such as passwords or configuration settings.
-        </p>
-<p>
-          <code class="literal">fatal-warnings</code>: set g_log_set_always_fatal()
-          to core dump on warning messages from glib. This is equivalent
-          to the --g-fatal-warnings command line option.
-        </p>
-</td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">autoconnect-retries-default</code></span></p></td>
-<td><p>
-            The number of times a connection activation should be
-            automatically tried before switching to another one. This
-            value applies only to connections that can auto-connect
-            and have a
-            <code class="literal">connection.autoconnect-retries</code> property
-            set to -1. If not specified, connections will be tried 4
-            times. Setting this value to 1 means to try activation once,
-            without retry.
-          </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">firewall-backend</code></span></p></td>
-<td><p>
-            The firewall backend for configuring masquerading
-            with shared mode.
-            Set to either <code class="literal">iptables</code>, <code class="literal">nftables</code>
-            or <code class="literal">none</code>.
-            <code class="literal">iptables</code> and <code class="literal">nftables</code>
-            require <code class="literal">iptables</code> and <code class="literal">nft</code>
-            application, respectively.
-            <code class="literal">none</code> means to skip firewall configuration if
-            the users wish to manage firewall themselves.
-            If unspecified, it will be auto detected.
-          </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">iwd-config-path</code></span></p></td>
-<td>
-<p>
-            If the value is "auto" (the default), IWD is queried for its
-            current state directory when it appears on D-Bus -- the
-            directory where IWD keeps its network configuration files --
-            usually /var/lib/iwd.  NetworkManager will then attempt to
-            write copies of new or modified Wi-Fi connection profiles,
-            converted into the IWD format, into this directory thus making
-            IWD connection properties editable.  NM will overwrite existing
-            files without preserving their contents.
-          </p>
-<p>
-            The path can also be overridden by pointing to a specific
-            existing and writable directory.  On the other hand setting
-            this to an empty string or any other value disables the
-            profile conversion mechanism.
-          </p>
-<p>
-            This mechanism allows editing connection profile settings such
-            as the 802.1x configuration using NetworkManager clients.
-            Without it such changes have no effect in IWD.
-          </p>
-</td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">migrate-ifcfg-rh</code></span></p></td>
-<td><p>Whether NetworkManager tries to automatically convert
-        any connection profile stored in ifcfg-rh format to the keyfile format.
-        Support for ifcfg-rh is deprecated and will be eventually removed. If
-        enabled, the migration is performed at every startup of the daemon.
-        The default value is <code class="literal">false</code>.
-        </p></td>
-</tr>
-</tbody>
-</table></div>
-</div>
-<div class="refsect1">
-<a name="id-1.2.3.8"></a><h2>
-<code class="literal">keyfile</code> section</h2>
-<p>This section contains keyfile-plugin-specific options, and
-    is normally only used when you are not using any other
-    distro-specific plugin.</p>
-<p>
-      </p>
-<div class="variablelist"><table border="0" class="variablelist">
-<colgroup>
-<col align="left" valign="top">
-<col>
-</colgroup>
-<tbody>
-<tr>
-<td><p><span class="term"><code class="varname">hostname</code></span></p></td>
-<td><p>This key is deprecated and has no effect
-          since the hostname is now stored in <code class="filename">/etc/hostname</code>
-          or other system configuration files according to build options.
-          </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">path</code></span></p></td>
-<td><p>The location where keyfiles are read and stored.
-            This defaults to "<code class="filename">/etc/NetworkManager/system-connections</code>".
-            </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">rename</code></span></p></td>
-<td><p>
-                NetworkManager automatically chooses a filename when storing
-                a new profile to disk. That name depends on the profile's name
-                (connection.id). When updating a profile's name, the file is
-                not renamed to not break scripts that rely on the filename
-                for the profile.
-                By setting this option to "true", NetworkManager renames
-                the keyfile on update of the profile, to follow the profile's
-                name. This defaults to "false".
-            </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">unmanaged-devices</code></span></p></td>
-<td>
-<p>Set devices that should be ignored by NetworkManager.
-            </p>
-<p>
-              A device unmanaged due to this option is strictly
-              unmanaged and cannot be overruled by using the API like
-              <span class="command"><strong>nmcli device set $IFNAME managed yes</strong></span>.
-              Also, a device that is unmanaged for other reasons, like
-              an udev rule, cannot be made managed with this option (e.g. by
-              using an <code class="literal">except:</code> specifier).
-              These two points make it different from the <code class="literal">device*.managed</code>
-              option which for that reason may be a better choice.
-            </p>
-<p>See <a class="xref" href="NetworkManager.conf.html#device-spec" title="Device List Format">the section called “Device List Format”</a> for the syntax on how to
-              specify a device.
-            </p>
-<p>
-              Example:
-              </p>
-<pre class="programlisting">
-unmanaged-devices=interface-name:em4
-unmanaged-devices=mac:00:22:68:1c:59:b1;mac:00:1E:65:30:D1:C4;interface-name:eth2
-</pre>
-<p>
-            </p>
-</td>
-</tr>
-</tbody>
-</table></div>
-<p>
-    </p>
-</div>
-<div class="refsect1">
-<a name="id-1.2.3.9"></a><h2>
-<code class="literal">ifupdown</code> section</h2>
-<p>This section contains ifupdown-specific options and thus only
-    has effect when using the <code class="literal">ifupdown</code> plugin.</p>
-<p>
-      </p>
-<div class="variablelist"><table border="0" class="variablelist">
-<colgroup>
-<col align="left" valign="top">
-<col>
-</colgroup>
-<tbody><tr>
-<td><p><span class="term"><code class="varname">managed</code></span></p></td>
-<td>
-<p>If set to <code class="literal">true</code>, then
-          interfaces listed in
-          <code class="filename">/etc/network/interfaces</code> are managed by
-          NetworkManager.  If set to <code class="literal">false</code>, then
-          any interface listed in
-          <code class="filename">/etc/network/interfaces</code> will be ignored
-          by NetworkManager. Remember that NetworkManager controls the
-          default route, so because the interface is ignored,
-          NetworkManager may assign the default route to some other
-          interface.</p>
-<p>
-            The default value is <code class="literal">false</code>.
-          </p>
-</td>
-</tr></tbody>
-</table></div>
-<p>
-    </p>
-</div>
-<div class="refsect1">
-<a name="id-1.2.3.10"></a><h2>
-<code class="literal">logging</code> section</h2>
-<p>
-    This section controls NetworkManager's logging.
-    Logging is very important to understand what NetworkManager is doing.
-    When you report a bug, do not unnecessarily filter or limit the log file.
-    Just enable <code class="literal">level=TRACE</code> and <code class="literal">domains=ALL</code>
-    to collect everything.
-    </p>
-<p>
-    The recommended way for enabling logging is with a file <code class="filename">/etc/NetworkManager/conf.d/95-logging.conf</code>
-    that contains
-</p>
-<pre class="programlisting">
-[logging]
-level=TRACE
-domains=ALL
-</pre>
-<p>
-    and restart the daemon with <span class="command"><strong>systemctl restart NetworkManager</strong></span>. Then
-    reproduce the problem. You can find the logs in syslog (for example
-    <span class="command"><strong>journalctl</strong></span>, or <span class="command"><strong>journalctl -u NetworkManager</strong></span>
-    to show only logs from NetworkManager).
-    </p>
-<p>
-    Any settings here are overridden by the <code class="option">--log-level</code>
-    and <code class="option">--log-domains</code> command-line options.
-    Logging can also be reconfigured at runtime with
-    <span class="command"><strong>nmcli general logging level "$LEVEL" domains "$DOMAINS"</strong></span>.
-    However, often it is interesting to get a complete log from the
-    start. Especially, when debugging an issue, enable debug logging
-    in NetworkManager.conf and restart the service to enable verbose logging
-    early on.
-    </p>
-<p>
-    By setting <code class="option">nm.debug</code> on the kernel command line (either from
-    <code class="filename">/run/NetworkManager/proc-cmdline</code> or <code class="filename">/proc/cmdline</code>),
-    debug logging is enabled. This overrides both the command-line options and the settings
-    from NetworkManager.conf.
-    </p>
-<p>
-    NetworkManager's logging aims not to contain private sensitive data
-    and you should be fine sharing the debug logs. Still, there will
-    be IP addresses and your network setup, if you consider that private
-    then review the log before sharing. However, try not to mangle the logfile
-    in a way that distorts the meaning too much.
-    </p>
-<p>
-    NetworkManager uses syslog or systemd-journald, depending on configuration.
-    In any case, debug logs are verbose and might be rate limited
-    or filtered by the logging daemon. For systemd-journald, see
-    <code class="literal">RateLimitIntervalSec</code> and <code class="literal">RateLimitBurst</code>
-    in <code class="literal">journald.conf</code> manual for how to disable that.
-    </p>
-<p>
-      </p>
-<div class="variablelist"><table border="0" class="variablelist">
-<colgroup>
-<col align="left" valign="top">
-<col>
-</colgroup>
-<tbody>
-<tr>
-<td><p><span class="term"><code class="varname">level</code></span></p></td>
-<td>
-<p>The default logging verbosity level.
-          One of <code class="literal">OFF</code>, <code class="literal">ERR</code>,
-          <code class="literal">WARN</code>, <code class="literal">INFO</code>,
-          <code class="literal">DEBUG</code>, <code class="literal">TRACE</code>,
-          in order of verbosity.
-          </p>
-<p>
-          <code class="literal">OFF</code> disables all logging. <code class="literal">INFO</code>
-          is the default verbosity for regular operation. <code class="literal">TRACE</code>
-          is for debugging.
-          </p>
-<p>
-          The other levels are in most cases not useful. For example, <code class="literal">DEBUG</code>
-          is between <code class="literal">TRACE</code> and <code class="literal">INFO</code>, but it's too
-          verbose for regular operation and lacks possibly interesting messages for debugging.
-          Almost always, when debugging an issue or reporting a bug, collect full
-          level <code class="literal">TRACE</code> logs to get the full picture.
-          </p>
-</td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">domains</code></span></p></td>
-<td>
-<p>Filter the messages by their topic. When debugging
-          an issue, it's better to collect all logs (<code class="literal">ALL</code> domain)
-          upfront. The unnecessary parts can always be ignored
-          later.
-          </p>
-<p>In the uncommon case to tune out certain topics, the following log
-          domains are available:
-          PLATFORM, RFKILL, ETHER, WIFI, BT, MB, DHCP4, DHCP6, PPP,
-          WIFI_SCAN, IP4, IP6, AUTOIP4, DNS, VPN, SHARING, SUPPLICANT,
-          AGENTS, SETTINGS, SUSPEND, CORE, DEVICE, OLPC, WIMAX,
-          INFINIBAND, FIREWALL, ADSL, BOND, VLAN, BRIDGE, DBUS_PROPS,
-          TEAM, CONCHECK, DCB, DISPATCH, AUDIT, SYSTEMD, VPN_PLUGIN,
-          PROXY.</p>
-<p>In addition, these special domains can be used: NONE,
-          ALL, DEFAULT, DHCP, IP.</p>
-<p>You can specify per-domain log level overrides by
-          adding a colon and a log level to any domain. E.g.,
-          "<code class="literal">WIFI:DEBUG,WIFI_SCAN:OFF</code>".
-          Another example is <code class="literal">ALL,VPN_PLUGIN:TRACE</code>
-          to enable all the logging there is (see about <code class="literal">VPN_PLUGIN</code>
-          below).
-          </p>
-</td>
-</tr>
-<tr>
-<td><p></p></td>
-<td></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">backend</code></span></p></td>
-<td><p>The logging backend. Supported values
-          are "<code class="literal">syslog</code>" and "<code class="literal">journal</code>".
-          When NetworkManager is started with "<code class="literal">--debug</code>"
-          in addition all messages will be printed to stderr.
-          If unspecified, the default is "<code class="literal">syslog</code>".
-          </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">audit</code></span></p></td>
-<td><p>Whether the audit records are delivered to
-          auditd, the audit daemon.  If <code class="literal">false</code>, audit
-          records will be sent only to the NetworkManager logging
-          system. If set to <code class="literal">true</code>, they will be also
-          sent to auditd.  The default value is <code class="literal">false</code>.
-          </p></td>
-</tr>
-</tbody>
-</table></div>
-<p>
-    </p>
-</div>
-<div class="refsect1">
-<a name="id-1.2.3.11"></a><h2>
-<code class="literal">connection</code> section</h2>
-<p>Specify default values for connections.
-    </p>
-<p>
-      Such default values are only consulted if the corresponding per-connection property
-      explicitly allows for that. That means, all these properties correspond to
-      a property of the connection profile (for example <code class="literal">connection.mud-url</code>).
-      Only if the per-profile property is set to a special value that indicates to use the
-      default, the default value from NetworkManager.conf is consulted. It depends on the
-      property, which is the special value that indicates fallback to the default, but it
-      usually is something like empty, unset values or special numeric values like 0 or -1.
-      That means the effectively used value can first always be configured for each profile,
-      and these default values only matter if the per-profile values explicitly indicates
-      to use the default from <code class="literal">NetworkManager.conf</code>.
-    </p>
-<p>
-      Note that while nmcli supports various aliases and convenience features for configuring
-      properties, the settings in this section do not. For example, enum values usually only
-      can be configured via their numeric magic number.
-    </p>
-<p>
-      Example:
-</p>
-<pre class="programlisting">
-[connection]
-ipv6.ip6-privacy=0
-</pre>
-<p>
-    </p>
-<div class="refsect2">
-<a name="id-1.2.3.11.6"></a><h3>Supported Properties</h3>
-<p>
-      Not all properties can be overwritten, only the following
-      properties are supported to have their default values configured
-      (see <a class="link" href="nm-settings-nmcli.html" title="nm-settings-nmcli"><span class="citerefentry"><span class="refentrytitle">nm-settings-nmcli</span>(5)</span></a> for details).
-    </p>
-<p>
-      
-      
-      </p>
-<div class="variablelist"><table border="0" class="variablelist">
-<colgroup>
-<col align="left" valign="top">
-<col>
-</colgroup>
-<tbody>
-<tr>
-<td><p><span class="term"><code class="varname">802-1x.auth-timeout</code></span></p></td>
-<td></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">cdma.mtu</code></span></p></td>
-<td></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">connection.auth-retries</code></span></p></td>
-<td><p>If left unspecified, the default value is 3 tries before failing the connection.
-          </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">connection.autoconnect-ports</code></span></p></td>
-<td></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">connection.autoconnect-slaves</code></span></p></td>
-<td><p>This is deprecated, please use "connection.autoconnect-ports" instead.
-          </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">connection.down-on-poweroff</code></span></p></td>
-<td><p>Whether the connection will be brought down before the system is powered off.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">connection.mud-url</code></span></p></td>
-<td><p>If unspecified, MUD URL defaults to <code class="literal">"none"</code>.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">connection.lldp</code></span></p></td>
-<td></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">connection.llmnr</code></span></p></td>
-<td><p>If unspecified, the ultimate default values depends on the DNS plugin. With systemd-resolved the default currently is "yes" (2) and for all other plugins "no" (0).</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">connection.mdns</code></span></p></td>
-<td><p>
-            Currently only the systemd-resolve DNS plugin supports this setting.
-            If the setting is unspecified both in the profile and in the global
-            default here, then the default is determined by systemd-resolved.
-            See <code class="literal">MulticastDNS=</code> in
-            <span class="citerefentry"><span class="refentrytitle">resolved.conf</span>(5)</span>.
-          </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">connection.mptcp-flags</code></span></p></td>
-<td><p>If unspecified, the fallback is 0x22 (<code class="literal">"enabled,subflow"</code>). Note that if sysctl <code class="literal">/proc/sys/net/mptcp/enabled</code> is disabled, NetworkManager will still not configure endpoints.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">connection.dns-over-tls</code></span></p></td>
-<td><p>If unspecified, the ultimate default values depends on the DNS plugin. With systemd-resolved the default currently is global setting and for all other plugins "no" (0).</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">connection.stable-id</code></span></p></td>
-<td></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ethernet.cloned-mac-address</code></span></p></td>
-<td><p>If left unspecified, it defaults to "preserve".</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ethernet.generate-mac-address-mask</code></span></p></td>
-<td></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ethernet.mtu</code></span></p></td>
-<td><p>If configured explicitly to 0, the MTU is not reconfigured during device activation unless it is required due to IPv6 constraints. If left unspecified, a DHCP/IPv6 SLAAC provided value is used or the MTU is not reconfigured during activation.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ethernet.wake-on-lan</code></span></p></td>
-<td></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">gsm.mtu</code></span></p></td>
-<td></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">hostname.from-dhcp</code></span></p></td>
-<td></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">hostname.from-dns-lookup</code></span></p></td>
-<td></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">hostname.only-from-default</code></span></p></td>
-<td></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">hostname.priority</code></span></p></td>
-<td></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">infiniband.mtu</code></span></p></td>
-<td><p>If configured explicitly to 0, the MTU is not reconfigured during device activation unless it is required due to IPv6 constraints. If left unspecified, a DHCP/IPv6 SLAAC provided value is used or the MTU is left unspecified on activation.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ip-tunnel.mtu</code></span></p></td>
-<td><p>If configured explicitly to 0, the MTU is not reconfigured during device activation unless it is required due to IPv6 constraints. If left unspecified, a DHCP/IPv6 SLAAC provided value is used or a default of 1500.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv4.dad-timeout</code></span></p></td>
-<td></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv4.dhcp-client-id</code></span></p></td>
-<td></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv4.dhcp-dscp</code></span></p></td>
-<td></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv4.dhcp-iaid</code></span></p></td>
-<td><p>If left unspecified, it defaults to "ifname".</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv4.dhcp-hostname-flags</code></span></p></td>
-<td><p>If left unspecified, the value 3 (fqdn-encoded,fqdn-serv-update) is used.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv4.dhcp-send-release</code></span></p></td>
-<td><p>Whether the DHCP client will send RELEASE message when bringing the connection down.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv4.dhcp-timeout</code></span></p></td>
-<td><p>If left unspecified, the default value for
-           the interface type is used.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv4.dhcp-vendor-class-identifier</code></span></p></td>
-<td><p>If left unspecified, the default is to not send the DHCP option to the server.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv4.dns-priority</code></span></p></td>
-<td><p>If unspecified or zero, use 50 for VPN profiles
-           and 100 for other profiles.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv4.required-timeout</code></span></p></td>
-<td></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv4.link-local</code></span></p></td>
-<td><p>If left unspecified, fallback to "auto" which makes it dependent on "ipv4.method" setting.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv4.route-metric</code></span></p></td>
-<td></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv4.route-table</code></span></p></td>
-<td><p>If left unspecified, routes are only added to the main table. Note that this
-            is different from explicitly selecting the main table 254, because of how NetworkManager
-            removes extraneous routes from the tables.
-          </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv6.addr-gen-mode</code></span></p></td>
-<td><p>If the per-profile setting is either "default" or "default-or-eui64", the
-            global default is used. If the default is unspecified, the fallback value is either "stable-privacy"
-            or "eui64", depending on whether the per-profile setting is "default" or "default-or-eui64, respectively.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv6.ra-timeout</code></span></p></td>
-<td><p>If left unspecified, the default value depends on the sysctl solicitation settings.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv6.dhcp-duid</code></span></p></td>
-<td><p>If left unspecified, it defaults to "lease".</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv6.dhcp-iaid</code></span></p></td>
-<td><p>If left unspecified, it defaults to "ifname".</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv6.dhcp-hostname-flags</code></span></p></td>
-<td><p>If left unspecified, the value 1 (fqdn-serv-update) is used.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv6.dhcp-send-release</code></span></p></td>
-<td><p>Whether the DHCP client will send RELEASE message when bringing the connection down.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv6.dhcp-timeout</code></span></p></td>
-<td><p>If left unspecified, the default value for
-           the interface type is used.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv6.dns-priority</code></span></p></td>
-<td><p>If unspecified or zero, use 50 for VPN profiles
-           and 100 for other profiles.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv6.ip6-privacy</code></span></p></td>
-<td><p>If <code class="literal">ipv6.ip6-privacy</code> is unset, use the content of
-            "/proc/sys/net/ipv6/conf/default/use_tempaddr" as last fallback.
-          </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv6.temp-valid-lifetime</code></span></p></td>
-<td><p>If <code class="literal">ipv6.temp-valid-lifetime</code> is unset, use the
-            content of "/proc/sys/net/ipv6/conf/default/temp_valid_lft" as last fallback.
-          </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv6.temp-preferred-lifetime</code></span></p></td>
-<td><p>If <code class="literal">ipv6.temp-preferred-lifetime</code> is unset, use
-            the content of "/proc/sys/net/ipv6/conf/default/temp_prefered_lft" as last fallback.
-          </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv6.required-timeout</code></span></p></td>
-<td></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv6.route-metric</code></span></p></td>
-<td></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ipv6.route-table</code></span></p></td>
-<td><p>If left unspecified, routes are only added to the main table. Note that this
-            is different from explicitly selecting the main table 254, because of how NetworkManager
-            removes extraneous routes from the tables.
-          </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">loopback.mtu</code></span></p></td>
-<td><p>If configured explicitly to 0, the MTU is not reconfigured during device activation unless it is required due to IPv6 constraints. If left unspecified, a DHCP/IPv6 SLAAC provided value is used or the MTU is left unspecified on activation.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">macsec.offload</code></span></p></td>
-<td></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">sriov.autoprobe-drivers</code></span></p></td>
-<td><p>If left unspecified, drivers are autoprobed when the SR-IOV VF gets created.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">vpn.timeout</code></span></p></td>
-<td><p>If left unspecified, default value of 60 seconds is used.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">wifi.ap-isolation</code></span></p></td>
-<td><p>If left unspecified, AP isolation is disabled.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">wifi.cloned-mac-address</code></span></p></td>
-<td><p>If left unspecified, it defaults to "preserve".</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">wifi.generate-mac-address-mask</code></span></p></td>
-<td></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">wifi.mac-address-randomization</code></span></p></td>
-<td><p>If left unspecified, MAC address randomization is disabled.
-            This setting is deprecated for <code class="literal">wifi.cloned-mac-address</code>.
-          </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">wifi.mtu</code></span></p></td>
-<td><p>If configured explicitly to 0, the MTU is not reconfigured during device activation unless it is required due to IPv6 constraints. If left unspecified, a DHCP/IPv6 SLAAC provided value is used or a default of 1500.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">wifi.powersave</code></span></p></td>
-<td><p>If left unspecified, the default value
-          "<code class="literal">ignore</code>" will be used.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">wifi-sec.pmf</code></span></p></td>
-<td><p>If left unspecified, the default value
-          "<code class="literal">optional</code>" will be used.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">wifi-sec.fils</code></span></p></td>
-<td><p>If left unspecified, the default value
-          "<code class="literal">optional</code>" will be used.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">wifi.wake-on-wlan</code></span></p></td>
-<td></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">wireguard.mtu</code></span></p></td>
-<td></td>
-</tr>
-</tbody>
-</table></div>
-<p>
-      
-      
-    </p>
-</div>
-<hr>
-<div class="refsect2">
-<a name="connection-sections"></a><h3>Sections</h3>
-<p>
-        You can configure multiple <code class="literal">connection</code>
-        sections, by having different sections with a name that all start
-        with "connection".
-        Example:
-</p>
-<pre class="programlisting">
-[connection]
-ipv6.ip6-privacy=0
-connection.autoconnect-ports=1
-vpn.timeout=120
-
-[connection-wifi-wlan0]
-match-device=interface-name:wlan0
-ipv4.route-metric=50
-
-[connection-wifi-other]
-match-device=type:wifi
-ipv4.route-metric=55
-ipv6.ip6-privacy=1
-</pre>
-<p>
-    </p>
-<p>
-        The sections within one file are considered in order of appearance, with the
-        exception that the <code class="literal">[connection]</code> section is always
-        considered last. In the example above, this order is <code class="literal">[connection-wifi-wlan0]</code>,
-        <code class="literal">[connection-wlan-other]</code>, and <code class="literal">[connection]</code>.
-        When checking for a default configuration value, the sections are searched until
-        the requested value is found.
-        In the example above, "ipv4.route-metric" for wlan0 interface is set to 50,
-        and for all other Wi-Fi typed interfaces to 55. Also, Wi-Fi devices would have
-        IPv6 private addresses enabled by default, but other devices would have it disabled.
-        Note that also "wlan0" gets "ipv6.ip6-privacy=1", because although the section
-        "[connection-wifi-wlan0]" matches the device, it does not contain that property
-        and the search continues.
-    </p>
-<p>
-        When having different sections in multiple files, sections from files that are read
-        later have higher priority. So within one file the priority of the sections is
-        top-to-bottom. Across multiple files later definitions take precedence.
-    </p>
-<p>
-      The following properties further control how a connection section applies.
-      </p>
-<div class="variablelist"><table border="0" class="variablelist">
-<colgroup>
-<col align="left" valign="top">
-<col>
-</colgroup>
-<tbody>
-<tr>
-<td><p><span class="term"><code class="varname">match-device</code></span></p></td>
-<td><p>An optional device spec that restricts
-          when the section applies. See <a class="xref" href="NetworkManager.conf.html#device-spec" title="Device List Format">the section called “Device List Format”</a>
-          for the possible values.
-          </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">stop-match</code></span></p></td>
-<td><p>An optional boolean value which defaults to
-          <code class="literal">no</code>. If the section matches (based on
-          <code class="literal">match-device</code>), further sections will not be
-          considered even if the property in question is not present. In
-          the example above, if <code class="literal">[connection-wifi-wlan0]</code> would
-          have <code class="literal">stop-match</code> set to <code class="literal">yes</code>,
-          the device <code class="literal">wlan0</code> would have <code class="literal">ipv6.ip6-privacy</code>
-          property unspecified. That is, the search for the property would not continue
-          in the connection sections <code class="literal">[connection-wifi-other]</code>
-          or <code class="literal">[connection]</code>.
-          </p></td>
-</tr>
-</tbody>
-</table></div>
-<p>
-    </p>
-</div>
-</div>
-<div class="refsect1">
-<a name="id-1.2.3.12"></a><h2>
-<code class="literal">device</code> section</h2>
-<p>Contains per-device persistent configuration.
-    </p>
-<p>
-      Example:
-</p>
-<pre class="programlisting">
-[device]
-match-device=interface-name:eth3
-managed=1
-</pre>
-<p>
-    </p>
-<div class="refsect2">
-<a name="id-1.2.3.12.4"></a><h3>Supported Properties</h3>
-<p>
-      The following properties can be configured per-device.
-      </p>
-<div class="variablelist"><table border="0" class="variablelist">
-<colgroup>
-<col align="left" valign="top">
-<col>
-</colgroup>
-<tbody>
-<tr>
-<td><p><a name="managed"></a><span class="term"><code class="varname">managed</code></span></p></td>
-<td><p>
-              Whether the device is managed or not. A device can be
-              marked as managed via udev rules (ENV{NM_UNMANAGED}),
-              or via setting plugins (keyfile.unmanaged-devices).
-              This is yet another way. Note that this configuration
-              can be overruled at runtime via D-Bus. Also, it has
-              higher priority then udev rules.
-            </p></td>
-</tr>
-<tr>
-<td><p><a name="carrier-wait-timeout"></a><span class="term"><code class="varname">carrier-wait-timeout</code></span></p></td>
-<td>
-<p>
-              Specify the timeout for waiting for carrier in milliseconds.
-              The default is 6000 milliseconds.
-              This setting exists because certain drivers/hardware can take
-              a long time to detect whether the cable is plugged in.
-            </p>
-<p>
-              When the device loses carrier, NetworkManager does not react
-              immediately. Instead, it waits for this timeout before considering
-              the link lost.
-            </p>
-<p>
-              Also, on startup, NetworkManager considers the
-              device as busy for this time, as long as the device has no carrier.
-              This delays startup-complete signal and NetworkManager-wait-online.
-              Configuring this too high means to block NetworkManager-wait-online
-              longer than necessary when booting with cable unplugged. Configuring
-              it too low, means that NetworkManager will declare startup-complete too
-              soon, although carrier is about to come and auto-activation to kick in.
-              Note that if a profile only has static IP configuration or Layer 3 configuration
-              disabled, then it can already autoconnect without carrier on the device.
-              Once such a profile reaches full activated state, startup-complete
-              is considered as reached even if the device has no carrier yet.
-            </p>
-</td>
-</tr>
-<tr>
-<td><p><a name="ignore-carrier"></a><span class="term"><code class="varname">ignore-carrier</code></span></p></td>
-<td>
-<p>
-              Specify devices for which NetworkManager will (partially)
-              ignore the carrier state. Normally, for
-              device types that support carrier-detect, such as Ethernet
-              and InfiniBand, NetworkManager will only allow a
-              connection to be activated on the device if carrier is
-              present (ie, a cable is plugged in), and it will
-              deactivate the device if carrier drops for more than a few
-              seconds.
-            </p>
-<p>
-              A device with carrier ignored will allow activating connections on
-              that device even when it does not have carrier, provided
-              that the connection uses only statically-configured IP
-              addresses. Additionally, it will allow any active
-              connection (whether static or dynamic) to remain active on
-              the device when carrier is lost.
-            </p>
-<p>
-              Note that the "carrier" property of NMDevices and device D-Bus
-              interfaces will still reflect the actual device state; it's just
-              that NetworkManager will not make use of that information.
-            </p>
-<p>
-              Master types like bond, bridge and team ignore carrier by default,
-              while other device types react on carrier changes by default.
-            </p>
-<p>
-              This setting overwrites the deprecated <code class="literal">main.ignore-carrier</code>
-              setting above.
-            </p>
-</td>
-</tr>
-<tr>
-<td><p><a name="keep-configuration"></a><span class="term"><code class="varname">keep-configuration</code></span></p></td>
-<td>
-<p>
-              On startup, NetworkManager tries to not interfere with
-              interfaces that are already configured. It does so by
-              generating a in-memory connection based on the interface
-              current configuration.
-            </p>
-<p>
-              If this generated connection matches one of the existing
-              persistent connections, the persistent connection gets
-              activated. If there is no match, the generated
-              connection gets activated as "external", which means
-              that the connection is considered as active, but
-              NetworkManager doesn't actually touch the interface.
-            </p>
-<p>
-              It is possible to disable this behavior by setting
-              <code class="literal">keep-configuration</code> to
-              <code class="literal">no</code>. In this way, on startup
-              NetworkManager always tries to activate the most
-              suitable persistent connection (the one with highest
-              autoconnect-priority or, in case of a tie, the one
-              activated most recently).
-            </p>
-<p>
-              Note that when NetworkManager gets restarted, it stores
-              the previous state in
-              <code class="filename">/run/NetworkManager</code>; in particular
-              it saves the UUID of the connection that was previously
-              active so that it can be activated again after the
-              restart. Therefore,
-              <code class="literal">keep-configuration</code> does not have
-              any effect on service restart.
-            </p>
-</td>
-</tr>
-<tr>
-<td><p><a name="allowed-connections"></a><span class="term"><code class="varname">allowed-connections</code></span></p></td>
-<td>
-<p>
-              A list of connections that can be activated on the
-              device. See <a class="xref" href="NetworkManager.conf.html#connection-spec" title="Connection List Format">the section called “Connection List Format”</a> for the
-              syntax to specify a connection. If this option is not
-              specified, all connections can be potentially activated
-              on the device, provided that the connection type and
-              other settings match.
-            </p>
-<p>
-              A notable use case for this is to filter which
-              connections can be activated based on how they were
-              created; see the <code class="literal">origin</code> keyword in
-              <a class="xref" href="NetworkManager.conf.html#connection-spec" title="Connection List Format">the section called “Connection List Format”</a>.
-            </p>
-</td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">wifi.scan-rand-mac-address</code></span></p></td>
-<td><p>
-              Configures MAC address randomization of a Wi-Fi device during
-              scanning. This defaults to <code class="literal">yes</code> in which case
-              a random, locally-administered MAC address will be used.
-              The setting <code class="literal">wifi.scan-generate-mac-address-mask</code>
-              allows to influence the generated MAC address to use certain vendor
-              OUIs.
-              If disabled, the MAC address during scanning is left unchanged to
-              whatever is configured.
-              For the configured MAC address while the device is associated, see instead
-              the per-connection setting <code class="literal">wifi.cloned-mac-address</code>.
-            </p></td>
-</tr>
-<tr>
-<td><p><a name="wifi.backend"></a><span class="term"><code class="varname">wifi.backend</code></span></p></td>
-<td><p>
-              Specify the Wi-Fi backend used for the device. Currently, supported
-              are <code class="literal">wpa_supplicant</code> and <code class="literal">iwd</code> (experimental).
-              If unspecified, the default is "<code class="literal">wpa_supplicant</code>".
-            </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">wifi.scan-generate-mac-address-mask</code></span></p></td>
-<td><p>
-              Like the per-connection settings <code class="literal">ethernet.generate-mac-address-mask</code>
-              and <code class="literal">wifi.generate-mac-address-mask</code>, this allows to configure the
-              generated MAC addresses during scanning. See <span class="citerefentry"><span class="refentrytitle">nm-settings-nmcli</span>(5)</span>
-              for details.
-            </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">wifi.iwd.autoconnect</code></span></p></td>
-<td><p>
-              If <code class="literal">wifi.backend</code> is <code class="literal">iwd</code>, setting this to
-              <code class="literal">false</code> forces IWD's autoconnect mechanism to be disabled for
-              this device and connections will only be initiated by NetworkManager whether
-              commanded by a client or automatically.  Leaving it <code class="literal">true</code> (default)
-              stops NetworkManager from automatically initiating connections and allows
-              IWD to use its network ranking and scanning logic to decide the best networks
-              to autoconnect to next.  Connections' <code class="literal">autoconnect-priority</code>,
-              <code class="literal">autoconnect-retries</code> settings will be ignored.  Other settings
-              like <code class="literal">permissions</code> or <code class="literal">multi-connect</code> may interfere
-              with IWD connection attempts.
-            </p></td>
-</tr>
-<tr>
-<td><p><a name="sriov-num-vfs"></a><span class="term"><code class="varname">sriov-num-vfs</code></span></p></td>
-<td><p>
-              Specify the number of virtual functions (VF) to enable
-              for a PCI physical device that supports single-root I/O
-              virtualization (SR-IOV).
-            </p></td>
-</tr>
-</tbody>
-</table></div>
-<p>
-    </p>
-</div>
-<hr>
-<div class="refsect2">
-<a name="id-1.2.3.12.5"></a><h3>Sections</h3>
-<p>
-        The <code class="literal">[device]</code> section works the same as the <code class="literal">[connection]</code> section.
-        That is, multiple sections that all start with the prefix "device" can be specified.
-        The settings "match-device" and "stop-match" are available to match a device section
-        on a device. The order of multiple sections is also top-down within the file and
-        later files overwrite previous settings. See <a class="xref" href="NetworkManager.conf.html#connection-sections" title="Sections">“Sections” under the section called “CONNECTION SECTION”</a>
-        for details.
-    </p>
-</div>
-</div>
-<div class="refsect1">
-<a name="id-1.2.3.13"></a><h2>
-<code class="literal">connectivity</code> section</h2>
-<p>This section controls NetworkManager's optional connectivity
-    checking functionality.  This allows NetworkManager to detect
-    whether or not the system can actually access the internet or
-    whether it is behind a captive portal.</p>
-<p>Connectivity checking serves two purposes. For one, it exposes
-    a connectivity state on D-Bus, which other applications may use. For example,
-    Gnome's portal helper uses this as signal to show a captive portal login
-    page.
-    The other use is that default-route of devices without global connectivity
-    get a penalty of +20000 to the route-metric. This has the purpose to give a
-    better default-route to devices that have global connectivity. For example,
-    when being connected to WWAN and to a Wi-Fi network which is behind a captive
-    portal, WWAN still gets preferred until login.</p>
-<p>Note that your distribution might set <code class="literal">/proc/sys/net/ipv4/conf/*/rp_filter</code> to
-    strict filtering. That works badly with per-device connectivity checking,
-    which uses SO_BINDDEVICE to send requests on all devices. A strict rp_filter
-    setting will reject any response and the connectivity check on all but the
-    best route will fail.</p>
-<p>
-      </p>
-<div class="variablelist"><table border="0" class="variablelist">
-<colgroup>
-<col align="left" valign="top">
-<col>
-</colgroup>
-<tbody>
-<tr>
-<td><p><span class="term"><code class="varname">enabled</code></span></p></td>
-<td><p>Whether connectivity check is enabled.
-          Note that to enable connectivity check, a valid uri must
-          also be configured. The value defaults to true, but since
-          the uri is unset by default, connectivity check may be disabled.
-          The main purpose of this option is to have a single flag
-          to disable connectivity check. Note that this setting can
-          also be set via D-Bus API at runtime. In that case, the value gets
-          stored in <code class="filename">/var/lib/NetworkManager/NetworkManager-intern.conf</code>
-          file.
-          </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">uri</code></span></p></td>
-<td><p>The URI of a web page to periodically
-          request when connectivity is being checked.  This page
-          should return the header "X-NetworkManager-Status" with a
-          value of "online".  Alternatively, its body content should
-          be set to "NetworkManager is online".  The body content
-          check can be controlled by the <code class="literal">response</code>
-          option.  If this option is blank or missing, connectivity
-          checking is disabled.
-          </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">interval</code></span></p></td>
-<td><p>Specified in seconds; controls how often
-          connectivity is checked when a network connection exists. If
-          set to 0 connectivity checking is disabled.  If missing, the
-          default is 300 seconds.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">timeout</code></span></p></td>
-<td><p>Specified in seconds; controls how long
-          to wait for a response before connectivity is marked as
-          limited.  If missing, the default is 20 seconds.</p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">response</code></span></p></td>
-<td><p>If set, controls what body content
-          NetworkManager checks for when requesting the URI for
-          connectivity checking.  Note that this only compares
-          that the HTTP response starts with the specifid text,
-          it does not compare the exact string. This behavior
-          might change in the future, so avoid relying on it.
-          If missing, the response defaults to "NetworkManager is online".
-          If set to empty, the HTTP server is expected to answer with
-          status code 204 or send no data.</p></td>
-</tr>
-</tbody>
-</table></div>
-<p>
-    </p>
-</div>
-<div class="refsect1">
-<a name="id-1.2.3.14"></a><h2>
-<code class="literal">global-dns</code> section</h2>
-<p>This section specifies DNS settings that are applied
-    globally, in addition to connection-specific ones.</p>
-<p>
-      </p>
-<div class="variablelist"><table border="0" class="variablelist">
-<colgroup>
-<col align="left" valign="top">
-<col>
-</colgroup>
-<tbody>
-<tr>
-<td><p><span class="term"><code class="varname">searches</code></span></p></td>
-<td><p>
-             A list of search domains to be used during hostname lookup.
-           </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">options</code></span></p></td>
-<td><p>
-             A list of options to be passed to the hostname resolver.
-           </p></td>
-</tr>
-</tbody>
-</table></div>
-<p>
-    </p>
-</div>
-<div class="refsect1">
-<a name="id-1.2.3.15"></a><h2>
-<code class="literal">global-dns-domain</code> sections</h2>
-<p>Sections with a name starting with the "global-dns-domain-"
-    prefix allow to define global DNS configuration for specific
-    domains.  The part of section name after "global-dns-domain-"
-    specifies the domain name a section applies to (for example, a
-    section could be named "global-dns-domain-foobar.com").  More
-    specific domains have the precedence over less specific ones and
-    the default domain is represented by the wildcard "*".
-
-    To be valid, global DNS domains must include a section for the
-    default domain "*". When the global DNS domains are valid, the
-    name servers and domains defined globally override the ones from
-    active connections.
-    </p>
-<p>
-      </p>
-<div class="variablelist"><table border="0" class="variablelist">
-<colgroup>
-<col align="left" valign="top">
-<col>
-</colgroup>
-<tbody>
-<tr>
-<td><p><span class="term"><code class="varname">servers</code></span></p></td>
-<td><p>
-             A list of addresses of DNS servers to be used for the given domain.
-           </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">options</code></span></p></td>
-<td><p>
-             A list of domain-specific DNS options. Not used at the moment.
-           </p></td>
-</tr>
-</tbody>
-</table></div>
-<p>
-    </p>
-</div>
-<div class="refsect1">
-<a name="id-1.2.3.16"></a><h2>
-<code class="literal">.config</code> sections</h2>
-<p>This is a special section that contains options which apply
-      to the configuration file that contains the option.
-    </p>
-<p>
-      </p>
-<div class="variablelist"><table border="0" class="variablelist">
-<colgroup>
-<col align="left" valign="top">
-<col>
-</colgroup>
-<tbody><tr>
-<td><p><span class="term"><code class="varname">enable</code></span></p></td>
-<td>
-<p>
-              Defaults to "<code class="literal">true</code>". If "<code class="literal">false</code>",
-              the configuration file will be skipped during loading.
-              Note that the main configuration file <code class="literal">NetworkManager.conf</code>
-              cannot be disabled.
-</p>
-<pre class="programlisting">
-# always skip loading the config file
-[.config]
-enable=false
-</pre>
-<p>
-            </p>
-<p>
-              You can also match against the version of NetworkManager. For example
-              the following are valid configurations:
-</p>
-<pre class="programlisting">
-# only load on version 1.0.6
-[.config]
-enable=nm-version:1.0.6
-
-# load on all versions 1.0.x, but not 1.2.x
-[.config]
-enable=nm-version:1.0
-
-# only load on versions &gt;= 1.1.6. This does not match
-# with version 1.2.0 or 1.4.4. Only the last digit is considered.
-[.config]
-enable=nm-version-min:1.1.6
-
-# only load on versions &gt;= 1.2. Contrary to the previous
-# example, this also matches with 1.2.0, 1.2.10, 1.4.4, etc.
-[.config]
-enable=nm-version-min:1.2
-
-# Match against the maximum allowed version. The example matches
-# versions 1.2.0, 1.2.2, 1.2.4. Again, only the last version digit
-# is allowed to be smaller. So this would not match on 1.1.10.
-[.config]
-enable=nm-version-max:1.2.6
-</pre>
-<p>
-            </p>
-<p>
-              You can also match against the value of the environment variable
-              <code class="literal">NM_CONFIG_ENABLE_TAG</code>, like:
-</p>
-<pre class="programlisting">
-# only load the file when running NetworkManager with
-# environment variable "NM_CONFIG_ENABLE_TAG=TAG1"
-[.config]
-enable=env:TAG1
-</pre>
-<p>
-            </p>
-<p>
-              More then one match can be specified. The configuration will be
-              enabled if one of the predicates matches ("or"). The special prefix "except:" can
-              be used to negate the match. Note that if one except-predicate
-              matches, the entire configuration will be disabled.
-              In other words, a except predicate always wins over other predicates.
-              If the setting only consists of "except:" matches and none of the
-              negative conditions are satisfied, the configuration is still enabled.
-</p>
-<pre class="programlisting">
-# enable the configuration either when the environment variable
-# is present or the version is at least 1.2.0.
-[.config]
-enable=env:TAG2,nm-version-min:1.2
-
-# enable the configuration for version &gt;= 1.2.0, but disable
-# it when the environment variable is set to "TAG3"
-[.config]
-enable=except:env:TAG3,nm-version-min:1.2
-
-# enable the configuration on &gt;= 1.3, &gt;= 1.2.6, and &gt;= 1.0.16.
-# Useful if a certain feature is only present since those releases.
-[.config]
-enable=nm-version-min:1.3,nm-version-min:1.2.6,nm-version-min:1.0.16
-</pre>
-<p>
-            </p>
-</td>
-</tr></tbody>
-</table></div>
-<p>
-    </p>
-</div>
-<div class="refsect1">
-<a name="settings-plugins"></a><h2>Plugins</h2>
-<p>
-      Settings plugins for reading and writing connection profiles. The number of
-      available plugins is distribution specific.
-    </p>
-<div class="variablelist"><table border="0" class="variablelist">
-<colgroup>
-<col align="left" valign="top">
-<col>
-</colgroup>
-<tbody>
-<tr>
-<td><p><span class="term"><code class="varname">keyfile</code></span></p></td>
-<td>
-<p>
-            The <code class="literal">keyfile</code> plugin is the generic
-            plugin that supports all the connection types and
-            capabilities that NetworkManager has. It writes files out
-            in an .ini-style format in
-            <code class="filename">/etc/NetworkManager/system-connections</code>.
-            See <a class="link" href="nm-settings-keyfile.html" title="nm-settings-keyfile"><span class="citerefentry"><span class="refentrytitle">nm-settings-keyfile</span>(5)</span></a>
-            for details about the file format.
-          </p>
-<p>
-            The stored connection file may contain passwords, secrets and
-            private keys in plain text, so it will be made readable only to
-            root, and the plugin will ignore files that are readable or
-            writable by any user or group other than root. See "Secret flag types"
-            in <a class="link" href="nm-settings-nmcli.html" title="nm-settings-nmcli"><span class="citerefentry"><span class="refentrytitle">nm-settings-nmcli</span>(5)</span></a>
-            for how to avoid storing passwords in plain text.
-          </p>
-<p>
-            This plugin is always active, and will automatically be
-            used to store any connections that aren't supported by any
-            other active plugin.
-          </p>
-</td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ifcfg-rh</code></span></p></td>
-<td><p>
-            This plugin is now deprecated; it can be used on the
-            Fedora and Red Hat Enterprise Linux distributions to read
-            and write configuration from the standard
-            <code class="filename">/etc/sysconfig/network-scripts/ifcfg-*</code>
-            files. It currently supports reading Ethernet, Wi-Fi,
-            InfiniBand, VLAN, Bond, Bridge, and Team connections.
-            Enabling <code class="literal">ifcfg-rh</code> implicitly enables
-            <code class="literal">ibft</code> plugin, if it is available.
-            This can be disabled by adding <code class="literal">no-ibft</code>.
-            See <code class="filename">/usr/share/doc/initscripts/sysconfig.txt</code>
-            and <a class="link" href="nm-settings-ifcfg-rh.html" title="nm-settings-ifcfg-rh"><span class="citerefentry"><span class="refentrytitle">nm-settings-ifcfg-rh</span>(5)</span></a>
-            for more information about the ifcfg file format.
-          </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ifupdown</code></span></p></td>
-<td>
-<p>
-            This plugin is used on the Debian and Ubuntu
-            distributions, and reads Ethernet and Wi-Fi connections
-            from <code class="filename">/etc/network/interfaces</code>.
-          </p>
-<p>
-            This plugin is read-only; any connections (of any type)
-            added from within NetworkManager when you are using this
-            plugin will be saved using the <code class="literal">keyfile</code>
-            plugin instead.
-          </p>
-</td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ibft</code>, <code class="varname">no-ibft</code></span></p></td>
-<td><p>
-            These plugins are deprecated and their selection has no effect.
-            This is now handled by nm-initrd-generator.
-          </p></td>
-</tr>
-<tr>
-<td><p><span class="term"><code class="varname">ifcfg-suse</code>, <code class="varname">ifnet</code></span></p></td>
-<td><p>
-            These plugins are deprecated and their selection has no effect.
-            The <code class="literal">keyfile</code> plugin should be used
-            instead.
-          </p></td>
-</tr>
-</tbody>
-</table></div>
-</div>
-<div class="refsect1">
-<a name="id-1.2.3.18"></a><h2>Appendix</h2>
-<div class="refsect2">
-<a name="device-spec"></a><h3>Device List Format</h3>
-<p>
-          The configuration options <code class="literal">main.no-auto-default</code>, <code class="literal">main.ignore-carrier</code>,
-          <code class="literal">keyfile.unmanaged-devices</code>, <code class="literal">connection*.match-device</code> and
-          <code class="literal">device*.match-device</code> select devices based on a list of matchings.
-          Devices can be specified using the following format:
-      </p>
-<p>
-      </p>
-<div class="variablelist"><table border="0" class="variablelist">
-<colgroup>
-<col align="left" valign="top">
-<col>
-</colgroup>
-<tbody>
-<tr>
-<td><p><span class="term">*</span></p></td>
-<td><p>Matches every device.</p></td>
-</tr>
-<tr>
-<td><p><span class="term">IFNAME</span></p></td>
-<td><p>Case sensitive match of interface name of the device. Globbing is not supported.</p></td>
-</tr>
-<tr>
-<td><p><span class="term">HWADDR</span></p></td>
-<td><p>Match the permanent MAC address of the device. Globbing is not supported</p></td>
-</tr>
-<tr>
-<td><p><span class="term">interface-name:IFNAME, </span><span class="term">interface-name:~IFNAME</span></p></td>
-<td><p>Case sensitive match of interface name of the device. Simple globbing is supported with
-             <code class="literal">*</code> and <code class="literal">?</code>. Ranges and escaping is not supported.</p></td>
-</tr>
-<tr>
-<td><p><span class="term">interface-name:=IFNAME</span></p></td>
-<td><p>Case sensitive match of interface name of the device. Globbing is disabled and <code class="literal">IFNAME</code>
-             is taken literally.</p></td>
-</tr>
-<tr>
-<td><p><span class="term">mac:HWADDR</span></p></td>
-<td><p>Match the permanent MAC address of the device. Globbing is not supported</p></td>
-</tr>
-<tr>
-<td><p><span class="term">s390-subchannels:HWADDR</span></p></td>
-<td><p>Match the device based on the subchannel address. Globbing is not supported</p></td>
-</tr>
-<tr>
-<td><p><span class="term">type:TYPE</span></p></td>
-<td><p>Match the device type. Valid type names are as reported by "<code class="literal">nmcli -f GENERAL.TYPE device show</code>".
-          Globbing is not supported.</p></td>
-</tr>
-<tr>
-<td><p><span class="term">driver:DRIVER</span></p></td>
-<td><p>Match the device driver as reported by "<code class="literal">nmcli -f GENERAL.DRIVER,GENERAL.DRIVER-VERSION device show</code>".
-          "<code class="literal">DRIVER</code>" must match the driver name exactly and does not support globbing.
-          Optionally, a driver version may be specified separated by '/'. Globbing is supported for the version.
-          </p></td>
-</tr>
-<tr>
-<td><p><span class="term">dhcp-plugin:DHCP</span></p></td>
-<td><p>Match the configured DHCP plugin "<code class="literal">main.dhcp</code>".
-          </p></td>
-</tr>
-<tr>
-<td><p><span class="term">except:SPEC</span></p></td>
-<td>
-<p>Negative match of a device. <code class="literal">SPEC</code> must be explicitly qualified with
-             a prefix such as <code class="literal">interface-name:</code>. A negative match has higher priority then the positive
-             matches above.</p>
-<p>If there is a list consisting only of negative matches, the behavior is the same as if there
-             is also match-all. That means, if none of all the negative matches is satisfied, the overall result is
-             still a positive match. That means, <code class="literal">"except:interface-name:eth0"</code> is the same as
-             <code class="literal">"*,except:interface-name:eth0"</code>.</p>
-</td>
-</tr>
-<tr>
-<td><p><span class="term">SPEC[,;]SPEC</span></p></td>
-<td>
-<p>Multiple specs can be concatenated with commas or semicolons. The order does not matter as
-            matches are either inclusive or negative (<code class="literal">except:</code>), with negative matches having higher
-            priority.
-            </p>
-<p>Backslash is supported to escape the separators ';' and ',', and to express special
-            characters such as newline ('\n'), tabulator ('\t'), whitespace ('\s') and backslash ('\\'). The globbing of
-            interface names cannot be escaped. Whitespace is not a separator but will be trimmed between
-            two specs (unless escaped as '\s').
-            </p>
-</td>
-</tr>
-</tbody>
-</table></div>
-<p>
-      </p>
-<p>
-        Example:
-        </p>
-<pre class="programlisting">
-interface-name:em4
-mac:00:22:68:1c:59:b1;mac:00:1E:65:30:D1:C4;interface-name:eth2
-interface-name:vboxnet*,except:interface-name:vboxnet2
-*,except:mac:00:22:68:1c:59:b1
-</pre>
-<p>
-      </p>
-</div>
-<hr>
-<div class="refsect2">
-<a name="connection-spec"></a><h3>Connection List Format</h3>
-<p>
-          Connections can be specified using the following format:
-      </p>
-<p>
-      </p>
-<div class="variablelist"><table border="0" class="variablelist">
-<colgroup>
-<col align="left" valign="top">
-<col>
-</colgroup>
-<tbody>
-<tr>
-<td><p><span class="term">*</span></p></td>
-<td><p>Matches every connection.</p></td>
-</tr>
-<tr>
-<td><p><span class="term">uuid:UUID</span></p></td>
-<td><p>Match the connection by UUID, for example
-          <code class="literal">"uuid:83037490-1d17-4986-a397-01f1db3a7fc2"</code></p></td>
-</tr>
-<tr>
-<td><p><span class="term">id=ID</span></p></td>
-<td><p>Match the connection by name.</p></td>
-</tr>
-<tr>
-<td><p><span class="term">origin:ORIGIN</span></p></td>
-<td><p>Match the connection by origin, stored in the
-          <code class="literal">org.freedesktop.NetworkManager.origin</code> tag of the user setting. For example, use
-          <code class="literal">"except:origin:nm-initrd-generator"</code> to forbid activation of connections created by the
-          initrd generator.</p></td>
-</tr>
-<tr>
-<td><p><span class="term">except:SPEC</span></p></td>
-<td>
-<p>Negative match of a connection. A negative match has higher priority then the positive
-          matches above.</p>
-<p>If there is a list consisting only of negative matches, the behavior is the same as if there is also
-          match-all. That means, if none of all the negative matches is satisfied, the overall result is still a
-          positive match.</p>
-</td>
-</tr>
-<tr>
-<td><p><span class="term">SPEC[,;]SPEC</span></p></td>
-<td>
-<p>Multiple specs can be concatenated with commas or semicolons. The order does not matter as
-          matches are either inclusive or negative (<code class="literal">except:</code>), with negative matches having higher
-          priority.</p>
-<p>Backslash is supported to escape the separators ';' and ',', and to express special characters such as
-          newline ('\n'), tabulator ('\t'), whitespace ('\s') and backslash ('\\'). Whitespace is not a separator but
-          will be trimmed between two specs (unless escaped as '\s').</p>
-</td>
-</tr>
-</tbody>
-</table></div>
-<p>
-      </p>
-</div>
-</div>
-<div class="refsect1">
-<a name="id-1.2.3.19"></a><h2>See Also</h2>
-<p>
-      <a class="link" href="NetworkManager.html" title="NetworkManager"><span class="citerefentry"><span class="refentrytitle">NetworkManager</span>(8)</span></a>,
-      <a class="link" href="nmcli.html" title="nmcli"><span class="citerefentry"><span class="refentrytitle">nmcli</span>(1)</span></a>,
-      <a class="link" href="nmcli-examples.html" title="nmcli-examples"><span class="citerefentry"><span class="refentrytitle">nmcli-examples</span>(7)</span></a>,
-      <a class="link" href="nm-online.html" title="nm-online"><span class="citerefentry"><span class="refentrytitle">nm-online</span>(1)</span></a>,
-      <a class="link" href="nm-settings-nmcli.html" title="nm-settings-nmcli"><span class="citerefentry"><span class="refentrytitle">nm-settings-nmcli</span>(5)</span></a>,
-      <span class="citerefentry"><span class="refentrytitle">nm-applet</span>(1)</span>,
-      <span class="citerefentry"><span class="refentrytitle">nm-connection-editor</span>(1)</span>
-    </p>
-</div>
-</div>
-<div class="footer">
-<hr>Generated by GTK-Doc V1.34.0</div>
-</body>
-</html>
\ No newline at end of file