diff options
Diffstat (limited to 'man/NetworkManager.conf.5')
| -rw-r--r-- | man/NetworkManager.conf.5 | 141 |
1 files changed, 121 insertions, 20 deletions
diff --git a/man/NetworkManager.conf.5 b/man/NetworkManager.conf.5 index ca316a03..f1d3d75f 100644 --- a/man/NetworkManager.conf.5 +++ b/man/NetworkManager.conf.5 @@ -2,12 +2,12 @@ .\" Title: NetworkManager.conf .\" Author: .\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/> -.\" Date: 08/03/2016 +.\" Date: 08/24/2016 .\" Manual: Configuration -.\" Source: NetworkManager 1.2.4 +.\" Source: NetworkManager 1.4.0 .\" Language: English .\" -.TH "NETWORKMANAGER\&.CON" "5" "" "NetworkManager 1\&.2\&.4" "Configuration" +.TH "NETWORKMANAGER\&.CON" "5" "" "NetworkManager 1\&.4\&.0" "Configuration" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -173,13 +173,10 @@ no\-auto\-default=* .PP \fIignore\-carrier\fR .RS 4 -Specify devices for which NetworkManager will (partially) ignore the carrier state\&. Normally, for device types that support carrier\-detect, such as Ethernet and InfiniBand, NetworkManager will only allow a connection to be activated on the device if carrier is present (ie, a cable is plugged in), and it will deactivate the device if carrier drops for more than a few seconds\&. -.sp -Listing a device here will allow activating connections on that device even when it does not have carrier, provided that the connection uses only statically\-configured IP addresses\&. Additionally, it will allow any active connection (whether static or dynamic) to remain active on the device when carrier is lost\&. -.sp -Note that the "carrier" property of NMDevices and device D\-Bus interfaces will still reflect the actual device state; it\*(Aqs just that NetworkManager will not make use of that information\&. -.sp -See +This setting is deprecated for the per\-device setting +ignore\-carrier +which overwrites this setting if specified (See +???)\&. Otherwise, it is a list of matches to specify for which device carrier should be ignored\&. See the section called \(lqDevice List Format\(rq for the syntax how to specify a device\&. .RE @@ -214,7 +211,7 @@ to point to the local nameserver\&. unbound: NetworkManager will talk to unbound and dnssec\-triggerd, providing a "split DNS" configuration with DNSSEC support\&. The /etc/resolv\&.conf will be managed by dnssec\-trigger daemon\&. .sp none: NetworkManager will not modify resolv\&.conf\&. This implies -\fIrc\-manager\fRunmanaged +rc\-manager\ \&unmanaged .RE .PP \fIrc\-manager\fR @@ -225,7 +222,11 @@ management mode\&. The default value depends on how NetworkManager was built, wh .sp symlink: NetworkManager will symlink /etc/resolv\&.conf -to its private resolv\&.conf file in the runtime state directory\&. +to its private resolv\&.conf file in the runtime state directory\&. If +/etc/resolv\&.conf +already is a symlink pointing to a different location, the file will not be modified\&. This allows the user to disable managing by pointing the link +/etc/resolv\&.conf +to somewhere else\&. .sp file: NetworkManager will write /etc/resolv\&.conf @@ -236,7 +237,7 @@ resolvconf: NetworkManager will run resolvconf to update the DNS configuration\& netconfig: NetworkManager will run netconfig to update the DNS configuration\&. .sp unmanaged: don\*(Aqt touch -resolv\&.conf\&. +/etc/resolv\&.conf\&. .sp none: deprecated alias for symlink\&. @@ -263,7 +264,7 @@ This key is deprecated and has no effect since the hostname is now stored in /et .PP \fIpath\fR .RS 4 -The location where keyfiles are read and stored\&. This defaults to "${prefix}/etc/NetworkManager/conf\&.d"\&. +The location where keyfiles are read and stored\&. This defaults to "/etc/NetworkManager/conf\&.d"\&. .RE .PP \fIunmanaged\-devices\fR @@ -330,7 +331,7 @@ TRACE\&. The ERR level logs only critical errors\&. WARN logs warnings that may .PP \fIdomains\fR .RS 4 -The following log domains are available: PLATFORM, RFKILL, ETHER, WIFI, BT, MB, DHCP4, DHCP6, PPP, WIFI_SCAN, IP4, IP6, AUTOIP4, DNS, VPN, SHARING, SUPPLICANT, AGENTS, SETTINGS, SUSPEND, CORE, DEVICE, OLPC, WIMAX, INFINIBAND, FIREWALL, ADSL, BOND, VLAN, BRIDGE, DBUS_PROPS, TEAM, CONCHECK, DCB, DISPATCH, AUDIT\&. +The following log domains are available: PLATFORM, RFKILL, ETHER, WIFI, BT, MB, DHCP4, DHCP6, PPP, WIFI_SCAN, IP4, IP6, AUTOIP4, DNS, VPN, SHARING, SUPPLICANT, AGENTS, SETTINGS, SUSPEND, CORE, DEVICE, OLPC, WIMAX, INFINIBAND, FIREWALL, ADSL, BOND, VLAN, BRIDGE, DBUS_PROPS, TEAM, CONCHECK, DCB, DISPATCH, AUDIT, SYSTEMD, VPN_PLUGIN\&. .sp In addition, these special domains can be used: NONE, ALL, DEFAULT, DHCP, IP\&. .sp @@ -449,6 +450,12 @@ DISPATCH : Dispatcher scripts AUDIT : Audit records .RE .RS 4 +SYSTEMD : Messages from internal libsystemd +.RE +.RS 4 +VPN_PLUGIN : logging messages from VPN plugins +.RE +.RS 4 .RE .RS 4 @@ -472,6 +479,15 @@ IP : shortcut for "IP4,IP6" .RS 4 HW : deprecated alias for "PLATFORM" .RE +.PP +In general, the logfile should not contain passwords or private data\&. However, you are always advised to check the file before posting it online or attaching to a bug report\&. +VPN_PLUGIN +is special as it might reveal private information of the VPN plugins with verbose levels\&. Therefore this domain will be excluded when setting +ALL +or +DEFAULT +to more verbose levels then +INFO\&. .RE .PP \fIbackend\fR @@ -517,6 +533,15 @@ for details)\&. A default value is only consulted if the corresponding per\-conn .RS 4 .RE .PP +\fIethernet\&.cloned\-mac\-address\fR +.RS 4 +If left unspecified, it defaults to "permanent"\&. +.RE +.PP +\fIethernet\&.generate\-mac\-address\-mask\fR +.RS 4 +.RE +.PP \fIethernet\&.wake\-on\-lan\fR .RS 4 .RE @@ -550,9 +575,19 @@ is unset, use the content of "/proc/sys/net/ipv6/conf/default/use_tempaddr" as l If left unspecified, default value of 60 seconds is used\&. .RE .PP +\fIwifi\&.cloned\-mac\-address\fR +.RS 4 +If left unspecified, it defaults to "permanent"\&. +.RE +.PP +\fIwifi\&.generate\-mac\-address\-mask\fR +.RS 4 +.RE +.PP \fIwifi\&.mac\-address\-randomization\fR .RS 4 -If left unspecified, MAC address randomization is disabled\&. +If left unspecified, MAC address randomization is disabled\&. This setting is deprecated for +wifi\&.cloned\-mac\-address\&. .RE .PP \fIwifi\&.powersave\fR @@ -623,6 +658,69 @@ property unspecified\&. That is, the search for the property would not continue or [connection]\&. .RE +.SH "DEVICE SECTION" +.PP +Contains per\-device persistent configuration\&. +.PP +Example: +.sp +.if n \{\ +.RS 4 +.\} +.nf +[device] +match\-device=interface\-name:eth3 +unmanaged=1 +.fi +.if n \{\ +.RE +.\} +.sp +.SS "Supported Properties" +.PP +The following properties can be configured per\-device\&. +.PP +\fIignore\-carrier\fR +.RS 4 +Specify devices for which NetworkManager will (partially) ignore the carrier state\&. Normally, for device types that support carrier\-detect, such as Ethernet and InfiniBand, NetworkManager will only allow a connection to be activated on the device if carrier is present (ie, a cable is plugged in), and it will deactivate the device if carrier drops for more than a few seconds\&. +.sp +A device with carrier ignored will allow activating connections on that device even when it does not have carrier, provided that the connection uses only statically\-configured IP addresses\&. Additionally, it will allow any active connection (whether static or dynamic) to remain active on the device when carrier is lost\&. +.sp +Note that the "carrier" property of NMDevices and device D\-Bus interfaces will still reflect the actual device state; it\*(Aqs just that NetworkManager will not make use of that information\&. +.sp +This setting overwrites the deprecated +main\&.ignore\-carrier +setting above\&. +.RE +.PP +\fIwifi\&.scan\-rand\-mac\-address\fR +.RS 4 +Configures MAC address randomization of a Wi\-Fi device during scanning\&. This defaults to +yes +in which case a random, locally\-administered MAC address will be used\&. The setting +wifi\&.scan\-generate\-mac\-address\-mask +allows to influence the generated MAC address to use certain vendor OUIs\&. If disabled, the MAC address during scanning is left unchanged to whatever is configured\&. For the configured MAC address while the device is associated, see instead the per\-connection setting +wifi\&.cloned\-mac\-address\&. +.RE +.PP +\fIwifi\&.scan\-generate\-mac\-address\-mask\fR +.RS 4 +Like the per\-connection settings +ethernet\&.generate\-mac\-address\-mask +and +wifi\&.generate\-mac\-address\-mask, this allows to configure the generated MAC addresses during scanning\&. See +\fBnm-settings\fR(5) +for details\&. +.RE +.SS "Sections" +.PP +The +[device] +section works the same as the +[connection] +section\&. That is, multiple sections that all start with the prefix "device" can be specified\&. The settings "match\-device" and "stop\-match" are available to match a device section on a device\&. The order of multiple sections is also top\-down within the file and later files overwrite previous settings\&. See +the section called \(lqSections\(rq +for details\&. .SH "CONNECTIVITY SECTION" .PP This section controls NetworkManager\*(Aqs optional connectivity checking functionality\&. This allows NetworkManager to detect whether or not the system can actually access the internet or whether it is behind a captive portal\&. @@ -828,8 +926,11 @@ or to change the plugin order\&. .PP The configuration options main\&.no\-auto\-default, -main\&.ignore\-carrier, and -keyfile\&.unmanaged\-devices +main\&.ignore\-carrier, +keyfile\&.unmanaged\-devices, +connection*\&.match\-device +and +device*\&.match\-device select devices based on a list of matchings\&. Devices can be specified using the following format: .PP .PP @@ -845,7 +946,7 @@ Case sensitive match of interface name of the device\&. Globbing is not supporte .PP HWADDR .RS 4 -Match the MAC address of the device\&. Globbing is not supported +Match the permanent MAC address of the device\&. Globbing is not supported .RE .PP interface\-name:IFNAME, interface\-name:~IFNAME @@ -865,7 +966,7 @@ is taken literally\&. .PP mac:HWADDR .RS 4 -Match the MAC address of the device\&. Globbing is not supported +Match the permanent MAC address of the device\&. Globbing is not supported .RE .PP s390\-subchannels:HWADDR |