diff options
Diffstat (limited to 'man/nm-settings.5')
| -rw-r--r-- | man/nm-settings.5 | 186 |
1 files changed, 127 insertions, 59 deletions
diff --git a/man/nm-settings.5 b/man/nm-settings.5 index 364be468..d3f90ade 100644 --- a/man/nm-settings.5 +++ b/man/nm-settings.5 @@ -2,12 +2,12 @@ .\" Title: nm-settings .\" Author: .\" Generator: DocBook XSL Stylesheets vsnapshot <http://docbook.sf.net/> -.\" Date: 04/21/2019 +.\" Date: 07/29/2019 .\" Manual: Configuration -.\" Source: NetworkManager 1.18.0 +.\" Source: NetworkManager 1.19.90 .\" Language: English .\" -.TH "NM\-SETTINGS" "5" "" "NetworkManager 1\&.18\&.0" "Configuration" +.TH "NM\-SETTINGS" "5" "" "NetworkManager 1\&.19\&.90" "Configuration" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -96,6 +96,7 @@ l l l l l l l l l l l l l l l l +l l l l l l l l. T{ auth\-retries @@ -228,7 +229,7 @@ permissions T}:T{ array of string T}:T{ -[] +\ \& T}:T{ An array of strings defining what access a given user has to this connection\&. If this is NULL or empty, all users are allowed to access this connection; otherwise users are allowed if and only if they are in this list\&. When this is not empty, the connection can be active only when one of the specified users is logged into an active session\&. Each entry is of the form "[type]:[id]:[reserved]"; for example, "user:dcbw:blah"\&. At this time only the "user" [type] is allowed\&. Any other values are ignored and reserved for future use\&. [id] is the username that this permission refers to, which may not contain the ":" character\&. Any [reserved] information present must be ignored and is reserved for future use\&. All of [type], [id], and [reserved] must be valid UTF\-8\&. T} @@ -246,7 +247,7 @@ secondaries T}:T{ array of string T}:T{ -[] +\ \& T}:T{ List of connection UUIDs that should be activated when the base connection itself is activated\&. Currently only VPN connections are supported\&. T} @@ -296,6 +297,15 @@ T}:T{ A universally unique identifier for the connection, for example generated with libuuid\&. It should be assigned when the connection is created, and never changed as long as the connection still applies to the same network\&. For example, it should not be changed when the "id" property or NMSettingIP4Config changes, but might need to be re\-created when the Wi\-Fi SSID, mobile broadband network provider, or "type" property changes\&. The UUID must be in the format "2815492f\-7e56\-435e\-b2e9\-246bd7cdc664" (ie, contains only hexadecimal characters and "\-")\&. T} T{ +wait\-device\-timeout +T}:T{ +int32 +T}:T{ +\-1 +T}:T{ +Timeout in milliseconds to wait for device at startup\&. During boot, devices may take a while to be detected by the driver\&. This property will cause to delay NetworkManager\-wait\-online\&.service and nm\-online to give the device a chance to appear\&. Note that this property only works together with NMSettingConnection:interface\-name to identify the device that will be waited for\&. The value 0 means no wait time\&. The default value is \-1, which currently has the same meaning as no wait time\&. +T} +T{ zone T}:T{ string @@ -399,7 +409,7 @@ altsubject\-matches T}:T{ array of string T}:T{ -[] +\ \& T}:T{ List of strings to be matched against the altSubjectName of the certificate presented by the authentication server\&. If the list is empty, no verification of the server certificate\*(Aqs altSubjectName is performed\&. T} @@ -498,7 +508,7 @@ eap T}:T{ array of string T}:T{ -[] +\ \& T}:T{ The allowed EAP method to be used when authenticating to the network with 802\&.1x\&. Valid methods are: "leap", "md5", "tls", "peap", "ttls", "pwd", and "fast"\&. Each method requires different configuration using the properties of this setting; refer to wpa_supplicant documentation for the allowed combinations\&. T} @@ -597,7 +607,7 @@ phase2\-altsubject\-matches T}:T{ array of string T}:T{ -[] +\ \& T}:T{ List of strings to be matched against the altSubjectName of the certificate presented by the authentication server during the inner "phase 2" authentication\&. If the list is empty, no verification of the server certificate\*(Aqs altSubjectName is performed\&. T} @@ -1098,7 +1108,7 @@ vlans T}:T{ array of vardict T}:T{ -[] +\ \& T}:T{ Array of bridge VLAN objects\&. In addition to the VLANs specified here, the bridge will also have the default\-pvid VLAN configured by the bridge\&.vlan\-default\-pvid property\&. In nmcli the VLAN list can be specified with the following syntax: $vid [pvid] [untagged] [, $vid [pvid] [untagged]]\&.\&.\&. where $vid is either a single id between 1 and 4094 or a range, represented as a couple of ids separated by a dash\&. T} @@ -1156,7 +1166,7 @@ vlans T}:T{ array of vardict T}:T{ -[] +\ \& T}:T{ Array of bridge VLAN objects\&. In addition to the VLANs specified here, the port will also have the default\-pvid VLAN configured on the bridge by the bridge\&.vlan\-default\-pvid property\&. In nmcli the VLAN list can be specified with the following syntax: $vid [pvid] [untagged] [, $vid [pvid] [untagged]]\&.\&.\&. where $vid is either a single id between 1 and 4094 or a range, represented as a couple of ids separated by a dash\&. T} @@ -1329,7 +1339,7 @@ priority\-bandwidth T}:T{ array of uint32 T}:T{ -[0, 0, 0, 0, 0, 0, 0, 0] +\ \& T}:T{ An array of 8 uint values, where the array index corresponds to the User Priority (0 \- 7) and the value indicates the percentage of bandwidth of the priority\*(Aqs assigned group that the priority may use\&. The sum of all percentages for priorities which belong to the same group must total 100 percents\&. T} @@ -1338,7 +1348,7 @@ priority\-flow\-control T}:T{ array of uint32 T}:T{ -[False, False, False, False, False, False, False, False] +\ \& T}:T{ An array of 8 boolean values, where the array index corresponds to the User Priority (0 \- 7) and the value indicates whether or not the corresponding priority should transmit priority pause\&. T} @@ -1356,7 +1366,7 @@ priority\-group\-bandwidth T}:T{ array of uint32 T}:T{ -[0, 0, 0, 0, 0, 0, 0, 0] +\ \& T}:T{ An array of 8 uint values, where the array index corresponds to the Priority Group ID (0 \- 7) and the value indicates the percentage of link bandwidth allocated to that group\&. Allowed values are 0 \- 100, and the sum of all values must total 100 percents\&. T} @@ -1374,7 +1384,7 @@ priority\-group\-id T}:T{ array of uint32 T}:T{ -[0, 0, 0, 0, 0, 0, 0, 0] +\ \& T}:T{ An array of 8 uint values, where the array index corresponds to the User Priority (0 \- 7) and the value indicates the Priority Group ID\&. Allowed Priority Group ID values are 0 \- 7 or 15 for the unrestricted group\&. T} @@ -1383,7 +1393,7 @@ priority\-strict\-bandwidth T}:T{ array of uint32 T}:T{ -[False, False, False, False, False, False, False, False] +\ \& T}:T{ An array of 8 boolean values, where the array index corresponds to the User Priority (0 \- 7) and the value indicates whether or not the priority may use all of the bandwidth allocated to its assigned group\&. T} @@ -1392,7 +1402,7 @@ priority\-traffic\-class T}:T{ array of uint32 T}:T{ -[0, 0, 0, 0, 0, 0, 0, 0] +\ \& T}:T{ An array of 8 uint values, where the array index corresponds to the User Priority (0 \- 7) and the value indicates the traffic class (0 \- 7) to which the priority is mapped\&. T} @@ -1723,7 +1733,7 @@ addresses T}:T{ array of array of uint32 T}:T{ -[] +\ \& T}:T{ Deprecated in favor of the \*(Aqaddress\-data\*(Aq and \*(Aqgateway\*(Aq properties, but this can be used for backward\-compatibility with older daemons\&. Note that if you send this property the daemon will ignore \*(Aqaddress\-data\*(Aq and \*(Aqgateway\*(Aq\&. Array of IPv4 address structures\&. Each IPv4 address structure is composed of 3 32\-bit values; the first being the IPv4 address (network byte order), the second the prefix (1 \- 32), and last the IPv4 gateway (network byte order)\&. The gateway may be left as 0 if no gateway exists for that subnet\&. T} @@ -1786,7 +1796,7 @@ dns T}:T{ array of uint32 T}:T{ -[] +\ \& T}:T{ Array of IP addresses of DNS servers (as network\-byte\-order integers) T} @@ -1795,7 +1805,7 @@ dns\-options T}:T{ array of string T}:T{ -[] +\ \& T}:T{ Array of DNS options as described in man 5 resolv\&.conf\&. NULL means that the options are unset and left at the default\&. In this case NetworkManager will use default options\&. This is distinct from an empty list of properties\&. T} @@ -1806,14 +1816,14 @@ int32 T}:T{ 0 T}:T{ -DNS servers priority\&. The relative priority for DNS servers specified by this setting\&. A lower value is better (higher priority)\&. Zero selects a globally configured default value\&. If the latter is missing or zero too, it defaults to 50 for VPNs and 100 for other connections\&. Note that the priority is to order DNS settings for multiple active connections\&. It does not disambiguate multiple DNS servers within the same connection profile\&. When using dns=default, servers with higher priority will be on top of resolv\&.conf\&. To prioritize a given server over another one within the same connection, just specify them in the desired order\&. When multiple devices have configurations with the same priority, the one with an active default route will be preferred\&. Negative values have the special effect of excluding other configurations with a greater priority value; so in presence of at least a negative priority, only DNS servers from connections with the lowest priority value will be used\&. When using a DNS resolver that supports split\-DNS as dns=dnsmasq or dns=systemd\-resolved, each connection is used to query domains in its search list\&. Queries for domains not present in any search list are routed through connections having the \*(Aq~\&.\*(Aq special wildcard domain, which is added automatically to connections with the default route (or can be added manually)\&. When multiple connections specify the same domain, the one with the highest priority (lowest numerical value) wins\&. If a connection specifies a domain which is subdomain of another domain with a negative DNS priority value, the subdomain is ignored\&. +DNS servers priority\&. The relative priority for DNS servers specified by this setting\&. A lower value is better (higher priority)\&. Zero selects a globally configured default value\&. If the latter is missing or zero too, it defaults to 50 for VPNs and 100 for other connections\&. Note that the priority is to order DNS settings for multiple active connections\&. It does not disambiguate multiple DNS servers within the same connection profile\&. When using dns=default, servers with higher priority will be on top of resolv\&.conf\&. To prioritize a given server over another one within the same connection, just specify them in the desired order\&. When multiple devices have configurations with the same priority, the one with an active default route will be preferred\&. Negative values have the special effect of excluding other configurations with a greater priority value; so in presence of at least a negative priority, only DNS servers from connections with the lowest priority value will be used\&. When using a DNS resolver that supports Conditional Forwarding as dns=dnsmasq or dns=systemd\-resolved, each connection is used to query domains in its search list\&. Queries for domains not present in any search list are routed through connections having the \*(Aq~\&.\*(Aq special wildcard domain, which is added automatically to connections with the default route (or can be added manually)\&. When multiple connections specify the same domain, the one with the highest priority (lowest numerical value) wins\&. If a connection specifies a domain which is subdomain of another domain with a negative DNS priority value, the subdomain is ignored\&. T} T{ dns\-search T}:T{ array of string T}:T{ -[] +\ \& T}:T{ Array of DNS search domains\&. Domains starting with a tilde (\*(Aq~\*(Aq) are considered \*(Aqrouting\*(Aq domains and are used only to decide the interface over which a query must be forwarded; they are not used to complete unqualified host names\&. T} @@ -1860,7 +1870,7 @@ string T}:T{ \ \& T}:T{ -IP configuration method\&. NMSettingIP4Config and NMSettingIP6Config both support "auto", "manual", and "link\-local"\&. See the subclass\-specific documentation for other values\&. In general, for the "auto" method, properties such as "dns" and "routes" specify information that is added on to the information returned from automatic configuration\&. The "ignore\-auto\-routes" and "ignore\-auto\-dns" properties modify this behavior\&. For methods that imply no upstream network, such as "shared" or "link\-local", these properties must be empty\&. For IPv4 method "shared", the IP subnet can be configured by adding one manual IPv4 address or otherwise 10\&.42\&.x\&.0/24 is chosen\&. Note that the shared method must be configured on the interface which shares the internet to a subnet, not on the uplink which is shared\&. +IP configuration method\&. NMSettingIP4Config and NMSettingIP6Config both support "disabled", "auto", "manual", and "link\-local"\&. See the subclass\-specific documentation for other values\&. In general, for the "auto" method, properties such as "dns" and "routes" specify information that is added on to the information returned from automatic configuration\&. The "ignore\-auto\-routes" and "ignore\-auto\-dns" properties modify this behavior\&. For methods that imply no upstream network, such as "shared" or "link\-local", these properties must be empty\&. For IPv4 method "shared", the IP subnet can be configured by adding one manual IPv4 address or otherwise 10\&.42\&.x\&.0/24 is chosen\&. Note that the shared method must be configured on the interface which shares the internet to a subnet, not on the uplink which is shared\&. T} T{ never\-default @@ -1903,7 +1913,7 @@ routes T}:T{ array of array of uint32 T}:T{ -[] +\ \& T}:T{ Deprecated in favor of the \*(Aqroute\-data\*(Aq property, but this can be used for backward\-compatibility with older daemons\&. Note that if you send this property the daemon will ignore \*(Aqroute\-data\*(Aq\&. Array of IPv4 route structures\&. Each IPv4 route structure is composed of 4 32\-bit values; the first being the destination IPv4 network or address (network byte order), the second the destination network or address prefix (1 \- 32), the third being the next\-hop (network byte order) if any, and the fourth being the route metric\&. If the metric is 0, NM will choose an appropriate default metric for the device\&. (There is no way to explicitly specify an actual metric of 0 with this property\&.) T} @@ -1972,7 +1982,7 @@ addresses T}:T{ array of legacy IPv6 address struct (a(ayuay)) T}:T{ -[] +\ \& T}:T{ Deprecated in favor of the \*(Aqaddress\-data\*(Aq and \*(Aqgateway\*(Aq properties, but this can be used for backward\-compatibility with older daemons\&. Note that if you send this property the daemon will ignore \*(Aqaddress\-data\*(Aq and \*(Aqgateway\*(Aq\&. Array of IPv6 address structures\&. Each IPv6 address structure is composed of an IPv6 address, a prefix length (1 \- 128), and an IPv6 gateway address\&. The gateway may be zeroed out if no gateway exists for that subnet\&. T} @@ -2026,7 +2036,7 @@ dns T}:T{ array of byte array T}:T{ -[] +\ \& T}:T{ Array of IP addresses of DNS servers (in network byte order) T} @@ -2035,7 +2045,7 @@ dns\-options T}:T{ array of string T}:T{ -[] +\ \& T}:T{ Array of DNS options as described in man 5 resolv\&.conf\&. NULL means that the options are unset and left at the default\&. In this case NetworkManager will use default options\&. This is distinct from an empty list of properties\&. T} @@ -2046,14 +2056,14 @@ int32 T}:T{ 0 T}:T{ -DNS servers priority\&. The relative priority for DNS servers specified by this setting\&. A lower value is better (higher priority)\&. Zero selects a globally configured default value\&. If the latter is missing or zero too, it defaults to 50 for VPNs and 100 for other connections\&. Note that the priority is to order DNS settings for multiple active connections\&. It does not disambiguate multiple DNS servers within the same connection profile\&. When using dns=default, servers with higher priority will be on top of resolv\&.conf\&. To prioritize a given server over another one within the same connection, just specify them in the desired order\&. When multiple devices have configurations with the same priority, the one with an active default route will be preferred\&. Negative values have the special effect of excluding other configurations with a greater priority value; so in presence of at least a negative priority, only DNS servers from connections with the lowest priority value will be used\&. When using a DNS resolver that supports split\-DNS as dns=dnsmasq or dns=systemd\-resolved, each connection is used to query domains in its search list\&. Queries for domains not present in any search list are routed through connections having the \*(Aq~\&.\*(Aq special wildcard domain, which is added automatically to connections with the default route (or can be added manually)\&. When multiple connections specify the same domain, the one with the highest priority (lowest numerical value) wins\&. If a connection specifies a domain which is subdomain of another domain with a negative DNS priority value, the subdomain is ignored\&. +DNS servers priority\&. The relative priority for DNS servers specified by this setting\&. A lower value is better (higher priority)\&. Zero selects a globally configured default value\&. If the latter is missing or zero too, it defaults to 50 for VPNs and 100 for other connections\&. Note that the priority is to order DNS settings for multiple active connections\&. It does not disambiguate multiple DNS servers within the same connection profile\&. When using dns=default, servers with higher priority will be on top of resolv\&.conf\&. To prioritize a given server over another one within the same connection, just specify them in the desired order\&. When multiple devices have configurations with the same priority, the one with an active default route will be preferred\&. Negative values have the special effect of excluding other configurations with a greater priority value; so in presence of at least a negative priority, only DNS servers from connections with the lowest priority value will be used\&. When using a DNS resolver that supports Conditional Forwarding as dns=dnsmasq or dns=systemd\-resolved, each connection is used to query domains in its search list\&. Queries for domains not present in any search list are routed through connections having the \*(Aq~\&.\*(Aq special wildcard domain, which is added automatically to connections with the default route (or can be added manually)\&. When multiple connections specify the same domain, the one with the highest priority (lowest numerical value) wins\&. If a connection specifies a domain which is subdomain of another domain with a negative DNS priority value, the subdomain is ignored\&. T} T{ dns\-search T}:T{ array of string T}:T{ -[] +\ \& T}:T{ Array of DNS search domains\&. Domains starting with a tilde (\*(Aq~\*(Aq) are considered \*(Aqrouting\*(Aq domains and are used only to decide the interface over which a query must be forwarded; they are not used to complete unqualified host names\&. T} @@ -2109,7 +2119,7 @@ string T}:T{ \ \& T}:T{ -IP configuration method\&. NMSettingIP4Config and NMSettingIP6Config both support "auto", "manual", and "link\-local"\&. See the subclass\-specific documentation for other values\&. In general, for the "auto" method, properties such as "dns" and "routes" specify information that is added on to the information returned from automatic configuration\&. The "ignore\-auto\-routes" and "ignore\-auto\-dns" properties modify this behavior\&. For methods that imply no upstream network, such as "shared" or "link\-local", these properties must be empty\&. For IPv4 method "shared", the IP subnet can be configured by adding one manual IPv4 address or otherwise 10\&.42\&.x\&.0/24 is chosen\&. Note that the shared method must be configured on the interface which shares the internet to a subnet, not on the uplink which is shared\&. +IP configuration method\&. NMSettingIP4Config and NMSettingIP6Config both support "disabled", "auto", "manual", and "link\-local"\&. See the subclass\-specific documentation for other values\&. In general, for the "auto" method, properties such as "dns" and "routes" specify information that is added on to the information returned from automatic configuration\&. The "ignore\-auto\-routes" and "ignore\-auto\-dns" properties modify this behavior\&. For methods that imply no upstream network, such as "shared" or "link\-local", these properties must be empty\&. For IPv4 method "shared", the IP subnet can be configured by adding one manual IPv4 address or otherwise 10\&.42\&.x\&.0/24 is chosen\&. Note that the shared method must be configured on the interface which shares the internet to a subnet, not on the uplink which is shared\&. T} T{ never\-default @@ -2152,7 +2162,7 @@ routes T}:T{ array of legacy IPv6 route struct (a(ayuayu)) T}:T{ -[] +\ \& T}:T{ Deprecated in favor of the \*(Aqroute\-data\*(Aq property, but this can be used for backward\-compatibility with older daemons\&. Note that if you send this property the daemon will ignore \*(Aqroute\-data\*(Aq\&. Array of IPv6 route structures\&. Each IPv6 route structure is composed of an IPv6 address, a prefix length (1 \- 128), an IPv6 next hop address (which may be zeroed out if there is no next hop), and a metric\&. If the metric is 0, NM will choose an appropriate default metric for the device\&. T} @@ -2503,7 +2513,7 @@ interface\-name T}:T{ array of string T}:T{ -[] +\ \& T}:T{ A list of interface names to match\&. Each element is a shell wildcard pattern\&. When an element is prefixed with exclamation mark (!) the condition is inverted\&. A candidate interface name is considered matching when both these conditions are satisfied: (a) any of the elements not prefixed with \*(Aq!\*(Aq matches or there aren\*(Aqt such elements; (b) none of the elements prefixed with \*(Aq!\*(Aq match\&. T} @@ -2576,8 +2586,18 @@ T} l l l l l l l l l l l l +l l l l l l l l. T{ +datapath\-type +T}:T{ +string +T}:T{ +\ \& +T}:T{ +The data path type\&. One of "system", "netdev" or empty\&. +T} +T{ fail\-mode T}:T{ string @@ -2615,6 +2635,34 @@ Enable or disable STP\&. T} .TE .sp 1 +.SS "ovs\-dpdk setting" +.PP +OvsDpdk Link Settings\&. +.TS +allbox tab(:); +lB lB lB lB. +T{ +Key Name +T}:T{ +Value Type +T}:T{ +Default Value +T}:T{ +Value Description +T} +.T& +l l l l. +T{ +devargs +T}:T{ +string +T}:T{ +\ \& +T}:T{ +Open vSwitch DPDK device arguments\&. +T} +.TE +.sp 1 .SS "ovs\-interface setting" .PP Open vSwitch Interface Settings\&. @@ -2639,7 +2687,7 @@ string T}:T{ \ \& T}:T{ -The interface type\&. Either "internal", or empty\&. +The interface type\&. Either "internal", "system", "patch", "dpdk", or empty\&. T} .TE .sp 1 @@ -3183,7 +3231,7 @@ vfs T}:T{ array of vardict T}:T{ -[] +\ \& T}:T{ Array of virtual function descriptors\&. Each VF descriptor is a dictionary mapping attribute names to GVariant values\&. The \*(Aqindex\*(Aq entry is mandatory for each VF\&. When represented as string a VF is in the form: "INDEX [ATTR=VALUE[ ATTR=VALUE]\&.\&.\&.]"\&. for example: "2 mac=00:11:22:33:44:55 spoof\-check=true"\&. Multiple VFs can be specified using a comma as separator\&. Currently the following attributes are supported: mac, spoof\-check, trust, min\-tx\-rate, max\-tx\-rate, vlans\&. The "vlans" attribute is represented as a semicolon\-separated list of VLAN descriptors, where each descriptor has the form "ID[\&.PRIORITY[\&.PROTO]]"\&. PROTO can be either \*(Aqq\*(Aq for 802\&.1Q (the default) or \*(Aqad\*(Aq for 802\&.1ad\&. T} @@ -3212,7 +3260,7 @@ qdiscs T}:T{ array of vardict T}:T{ -[] +\ \& T}:T{ Array of TC queueing disciplines\&. T} @@ -3221,7 +3269,7 @@ tfilters T}:T{ array of vardict T}:T{ -[] +\ \& T}:T{ Array of TC traffic filters\&. T} @@ -3283,7 +3331,7 @@ link\-watchers T}:T{ array of vardict T}:T{ -[] +\ \& T}:T{ Link watchers configuration for the connection: each link watcher is defined by a dictionary, whose keys depend upon the selected link watcher\&. Available link watchers are \*(Aqethtool\*(Aq, \*(Aqnsna_ping\*(Aq and \*(Aqarp_ping\*(Aq and it is specified in the dictionary with the key \*(Aqname\*(Aq\&. Available keys are: ethtool: \*(Aqdelay\-up\*(Aq, \*(Aqdelay\-down\*(Aq, \*(Aqinit\-wait\*(Aq; nsna_ping: \*(Aqinit\-wait\*(Aq, \*(Aqinterval\*(Aq, \*(Aqmissed\-max\*(Aq, \*(Aqtarget\-host\*(Aq; arp_ping: all the ones in nsna_ping and \*(Aqsource\-host\*(Aq, \*(Aqvalidate\-active\*(Aq, \*(Aqvalidate\-inactive\*(Aq, \*(Aqsend\-always\*(Aq\&. See teamd\&.conf man for more details\&. T} @@ -3292,7 +3340,7 @@ mcast\-rejoin\-count T}:T{ int32 T}:T{ -0 +\-1 T}:T{ Corresponds to the teamd mcast_rejoin\&.count\&. T} @@ -3301,7 +3349,7 @@ mcast\-rejoin\-interval T}:T{ int32 T}:T{ -0 +\-1 T}:T{ Corresponds to the teamd mcast_rejoin\&.interval\&. T} @@ -3310,7 +3358,7 @@ notify\-peers\-count T}:T{ int32 T}:T{ -0 +\-1 T}:T{ Corresponds to the teamd notify_peers\&.count\&. T} @@ -3319,7 +3367,7 @@ notify\-peers\-interval T}:T{ int32 T}:T{ -0 +\-1 T}:T{ Corresponds to the teamd notify_peers\&.interval\&. T} @@ -3328,16 +3376,16 @@ runner T}:T{ string T}:T{ -"roundrobin" +\ \& T}:T{ -Corresponds to the teamd runner\&.name\&. Permitted values are: "roundrobin", "broadcast", "activebackup", "loadbalance", "lacp", "random"\&. When setting the runner, all the properties specific to the runner will be reset to the default value; all the properties specific to other runners will be set to an empty value (or if not possible to a default value)\&. +Corresponds to the teamd runner\&.name\&. Permitted values are: "roundrobin", "broadcast", "activebackup", "loadbalance", "lacp", "random"\&. T} T{ runner\-active T}:T{ boolean T}:T{ -FALSE +TRUE T}:T{ Corresponds to the teamd runner\&.active\&. T} @@ -3409,7 +3457,7 @@ runner\-tx\-hash T}:T{ array of string T}:T{ -[] +\ \& T}:T{ Corresponds to the teamd runner\&.tx_hash\&. T} @@ -3452,7 +3500,7 @@ lacp\-key T}:T{ int32 T}:T{ -0 +\-1 T}:T{ Corresponds to the teamd ports\&.PORTIFNAME\&.lacp_key\&. T} @@ -3461,7 +3509,7 @@ lacp\-prio T}:T{ int32 T}:T{ -255 +\-1 T}:T{ Corresponds to the teamd ports\&.PORTIFNAME\&.lacp_prio\&. T} @@ -3470,7 +3518,7 @@ link\-watchers T}:T{ array of vardict T}:T{ -[] +\ \& T}:T{ Link watchers configuration for the connection: each link watcher is defined by a dictionary, whose keys depend upon the selected link watcher\&. Available link watchers are \*(Aqethtool\*(Aq, \*(Aqnsna_ping\*(Aq and \*(Aqarp_ping\*(Aq and it is specified in the dictionary with the key \*(Aqname\*(Aq\&. Available keys are: ethtool: \*(Aqdelay\-up\*(Aq, \*(Aqdelay\-down\*(Aq, \*(Aqinit\-wait\*(Aq; nsna_ping: \*(Aqinit\-wait\*(Aq, \*(Aqinterval\*(Aq, \*(Aqmissed\-max\*(Aq, \*(Aqtarget\-host\*(Aq; arp_ping: all the ones in nsna_ping and \*(Aqsource\-host\*(Aq, \*(Aqvalidate\-active\*(Aq, \*(Aqvalidate\-inactive\*(Aq, \*(Aqsend\-always\*(Aq\&. See teamd\&.conf man for more details\&. T} @@ -3636,7 +3684,7 @@ egress\-priority\-map T}:T{ array of string T}:T{ -[] +\ \& T}:T{ For outgoing packets, a list of mappings from Linux SKB priorities to 802\&.1p priorities\&. The mapping is given in the format "from:to" where both "from" and "to" are unsigned integers, ie "7:3"\&. T} @@ -3663,7 +3711,7 @@ ingress\-priority\-map T}:T{ array of string T}:T{ -[] +\ \& T}:T{ For incoming packets, a list of mappings from 802\&.1p priorities to Linux SKB priorities\&. The mapping is given in the format "from:to" where both "from" and "to" are unsigned integers, ie "7:3"\&. T} @@ -4119,7 +4167,7 @@ mac\-address\-blacklist T}:T{ array of string T}:T{ -[] +\ \& T}:T{ If specified, this connection will never apply to the Ethernet device whose permanent MAC address matches an address in the list\&. Each MAC address is in the standard hex\-digits\-and\-colons notation (00:11:22:33:44:55)\&. T} @@ -4164,7 +4212,7 @@ s390\-subchannels T}:T{ array of string T}:T{ -[] +\ \& T}:T{ Identifies specific subchannels that this network device uses for communication with z/VM or s390 host\&. Like the "mac\-address" property for non\-z/VM devices, this property can be used to ensure this connection only applies to the network device that uses these subchannels\&. The list should contain exactly 3 strings, and each string may only be composed of hexadecimal characters and the period (\&.) character\&. T} @@ -4199,7 +4247,7 @@ T} .sp 1 .SS "wireguard setting" .PP -WireGuard Ethernet Settings\&. +WireGuard Settings\&. .TS allbox tab(:); lB lB lB lB. @@ -4219,6 +4267,8 @@ l l l l l l l l l l l l l l l l +l l l l +l l l l l l l l. T{ fwmark @@ -4227,7 +4277,25 @@ uint32 T}:T{ 0 T}:T{ -The use of fwmark is optional and is by default off\&. Setting it to 0 disables it\&. Otherwise it is a 32\-bit fwmark for outgoing packets\&. +The use of fwmark is optional and is by default off\&. Setting it to 0 disables it\&. Otherwise it is a 32\-bit fwmark for outgoing packets\&. Note that "ip4\-auto\-default\-route" or "ip6\-auto\-default\-route" enabled, implies to automatically choose a fwmark\&. +T} +T{ +ip4\-auto\-default\-route +T}:T{ +NMTernary (int32) +T}:T{ +\ \& +T}:T{ +Whether to enable special handling of the IPv4 default route\&. If enabled, the IPv4 default route will be placed to a dedicated routing\-table and two policy routing rules will be added\&. The fwmark number is also used as routing\-table for the default\-route, and if fwmark is zero, a unused fwmark/table is chosen automatically\&. This corresponds to what wg\-quick does with Table=auto\&. Leaving this at the default will enable this option automatically if ipv4\&.never\-default is not set and there are any peers that use a default\-route as allowed\-ips\&. +T} +T{ +ip6\-auto\-default\-route +T}:T{ +NMTernary (int32) +T}:T{ +\ \& +T}:T{ +Like ip4\-auto\-default\-route, but for the IPv6 default route\&. T} T{ listen\-port @@ -4397,7 +4465,7 @@ mac\-address\-blacklist T}:T{ array of string T}:T{ -[] +\ \& T}:T{ A list of permanent MAC addresses of Wi\-Fi devices to which this connection should never apply\&. Each MAC address should be given in the standard hex\-digits\-and\-colons notation (eg "00:11:22:33:44:55")\&. T} @@ -4417,7 +4485,7 @@ string T}:T{ \ \& T}:T{ -Wi\-Fi network mode; one of "infrastructure", "adhoc" or "ap"\&. If blank, infrastructure is assumed\&. +Wi\-Fi network mode; one of "infrastructure", "mesh", "adhoc" or "ap"\&. If blank, infrastructure is assumed\&. T} T{ mtu @@ -4460,7 +4528,7 @@ seen\-bssids T}:T{ array of string T}:T{ -[] +\ \& T}:T{ A list of BSSIDs (each BSSID formatted as a MAC address like "00:11:22:33:44:55") that have been detected as part of the Wi\-Fi network\&. NetworkManager internally tracks previously seen BSSIDs\&. The property is only meant for reading and reflects the BSSID list of NetworkManager\&. The changes you make to this property will not be preserved\&. T} @@ -4552,7 +4620,7 @@ group T}:T{ array of string T}:T{ -[] +\ \& T}:T{ A list of group/broadcast encryption algorithms which prevents connections to Wi\-Fi networks that do not utilize one of the algorithms in the list\&. For maximum compatibility leave this property empty\&. Each list element may be one of "wep40", "wep104", "tkip", or "ccmp"\&. T} @@ -4597,7 +4665,7 @@ pairwise T}:T{ array of string T}:T{ -[] +\ \& T}:T{ A list of pairwise encryption algorithms which prevents connections to Wi\-Fi networks that do not utilize one of the algorithms in the list\&. For maximum compatibility leave this property empty\&. Each list element may be one of "tkip" or "ccmp"\&. T} @@ -4615,7 +4683,7 @@ proto T}:T{ array of string T}:T{ -[] +\ \& T}:T{ List of strings specifying the allowed WPA protocol versions to use\&. Each element may be one "wpa" (allow WPA) or "rsn" (allow WPA2/RSN)\&. If not specified, both WPA and RSN connections are allowed\&. T} |