From 9959fdb2e8ddd06f2161798ca0a39c77d67c652d Mon Sep 17 00:00:00 2001
From: Michael Biebl
General Connection Profile Settings.
Properties: @@ -91,7 +91,7 @@
Alias: autoconnect
-Whether or not the connection should be automatically connected by NetworkManager when the resources for the connection are available. TRUE to automatically activate the connection, FALSE to require manual intervention to activate the connection. Autoconnect happens when the circumstances are suitable. That means for example that the device is currently managed and not active. Autoconnect thus never replaces or competes with an already active profile. Note that autoconnect is not implemented for VPN profiles. See "secondaries" as an alternative to automatically connect VPN profiles.
+Whether or not the connection should be automatically connected by NetworkManager when the resources for the connection are available. TRUE to automatically activate the connection, FALSE to require manual intervention to activate the connection. Autoconnect happens when the circumstances are suitable. That means for example that the device is currently managed and not active. Autoconnect thus never replaces or competes with an already active profile. Note that autoconnect is not implemented for VPN profiles. See "secondaries" as an alternative to automatically connect VPN profiles. If multiple profiles are ready to autoconnect on the same device, the one with the better "connection.autoconnect-priority" is chosen. If the priorities are equal, then the most recently connected profile is activated. If the profiles were not connected earlier or their "connection.timestamp" is identical, the choice is undefined. Depending on "connection.multi-connect", a profile can (auto)connect only once at a time or multiple times.
Format: boolean
This represents the identity of the connection used for various purposes. It allows to configure multiple profiles to share the identity. Also, the stable-id can contain placeholders that are substituted dynamically and deterministically depending on the context. The stable-id is used for generating IPv6 stable private addresses with ipv6.addr-gen-mode=stable-privacy. It is also used to seed the generated cloned MAC address for ethernet.cloned-mac-address=stable and wifi.cloned-mac-address=stable. It is also used as DHCP client identifier with ipv4.dhcp-client-id=stable and to derive the DHCP DUID with ipv6.dhcp-duid=stable-[llt,ll,uuid]. Note that depending on the context where it is used, other parameters are also seeded into the generation algorithm. For example, a per-host key is commonly also included, so that different systems end up generating different IDs. Or with ipv6.addr-gen-mode=stable-privacy, also the device's name is included, so that different interfaces yield different addresses. The per-host key is the identity of your machine and stored in /var/lib/NetworkManager/secret-key. The '$' character is treated special to perform dynamic substitutions at runtime. Currently, supported are "${CONNECTION}", "${DEVICE}", "${MAC}", "${BOOT}", "${RANDOM}". These effectively create unique IDs per-connection, per-device, per-boot, or every time. Note that "${DEVICE}" corresponds to the interface name of the device and "${MAC}" is the permanent MAC address of the device. Any unrecognized patterns following '$' are treated verbatim, however are reserved for future use. You are thus advised to avoid '$' or escape it as "$$". For example, set it to "${CONNECTION}-${BOOT}-${DEVICE}" to create a unique id for this connection that changes with every reboot and differs depending on the interface where the profile activates. If the value is unset, a global connection default is consulted. If the value is still unset, the default is similar to "${CONNECTION}" and uses a unique, fixed ID for the connection.
+This represents the identity of the connection used for various purposes. It allows to configure multiple profiles to share the identity. Also, the stable-id can contain placeholders that are substituted dynamically and deterministically depending on the context. The stable-id is used for generating IPv6 stable private addresses with ipv6.addr-gen-mode=stable-privacy. It is also used to seed the generated cloned MAC address for ethernet.cloned-mac-address=stable and wifi.cloned-mac-address=stable. It is also used as DHCP client identifier with ipv4.dhcp-client-id=stable and to derive the DHCP DUID with ipv6.dhcp-duid=stable-[llt,ll,uuid]. Note that depending on the context where it is used, other parameters are also seeded into the generation algorithm. For example, a per-host key is commonly also included, so that different systems end up generating different IDs. Or with ipv6.addr-gen-mode=stable-privacy, also the device's name is included, so that different interfaces yield different addresses. The per-host key is the identity of your machine and stored in /var/lib/NetworkManager/secret_key. See NetworkManager(8) manual about the secret-key and the host identity. The '$' character is treated special to perform dynamic substitutions at runtime. Currently, supported are "${CONNECTION}", "${DEVICE}", "${MAC}", "${BOOT}", "${RANDOM}". These effectively create unique IDs per-connection, per-device, per-boot, or every time. Note that "${DEVICE}" corresponds to the interface name of the device and "${MAC}" is the permanent MAC address of the device. Any unrecognized patterns following '$' are treated verbatim, however are reserved for future use. You are thus advised to avoid '$' or escape it as "$$". For example, set it to "${CONNECTION}-${BOOT}-${DEVICE}" to create a unique id for this connection that changes with every reboot and differs depending on the interface where the profile activates. If the value is unset, a global connection default is consulted. If the value is still unset, the default is similar to "${CONNECTION}" and uses a unique, fixed ID for the connection.
Format: string
IEEE 802.1x Authentication Settings.
Properties: @@ -737,7 +737,7 @@
IPv4 Settings.
Properties: @@ -2182,7 +2182,8 @@ Various attributes are supported:
"table" - an unsigned 32 bit integer. The default depends on ipv4.route-table.
"tos" - an unsigned 8 bit integer. IPv4 only.
"type" - one of unicast, local, blackhole,
-unavailable, prohibit. The default is unicast.
unavailable, prohibit, throw.
+The default is unicast.
"window" - an unsigned 32 bit integer.
@@ -2215,7 +2216,7 @@ Example: priority 5 from 192.167.4.0/24 table 45
IPv6 Settings.
Properties:
@@ -2239,7 +2240,7 @@ Example: priority 5 from 192.167.4.0/24 table 45
Alias: ip6
-A list of IPv6 addresses and their prefix length. Multiple addresses can be separated by comma. For example "2001:db8:85a3::8a2e:370:7334/64, 2001:db8:85a3::5/64". The addresses are listed in increasing priority, meaning the last address will be the primary address.
+A list of IPv6 addresses and their prefix length. Multiple addresses can be separated by comma. For example "2001:db8:85a3::8a2e:370:7334/64, 2001:db8:85a3::5/64". The addresses are listed in decreasing priority, meaning the first address will be the primary address. This can make a difference with IPv6 source address selection (RFC 6724, section 5).
Format: a comma separated list of addresses
"src" - an IPv6 address.
"table" - an unsigned 32 bit integer. The default depends on ipv6.route-table.
"type" - one of unicast, local, blackhole,
-unavailable, prohibit. The default is unicast.
unavailable, prohibit, throw.
+The default is unicast.
"window" - an unsigned 32 bit integer.
@@ -2481,7 +2483,7 @@ Example: priority 5 from 1:2:3::5/128 table 45
IP Tunneling Settings.
Properties:
@@ -2609,7 +2611,7 @@ Example: priority 5 from 1:2:3::5/128 table 45
MACSec Settings.
Properties:
@@ -2711,7 +2713,7 @@ Example: priority 5 from 1:2:3::5/128 table 45
MAC VLAN Settings.
Properties:
@@ -2765,7 +2767,7 @@ Example: priority 5 from 1:2:3::5/128 table 45
Match settings.
Properties:
@@ -2813,7 +2815,7 @@ Example: priority 5 from 1:2:3::5/128 table 45
Alias: olpc-mesh
OLPC Wireless Mesh Settings.
@@ -2861,7 +2863,7 @@ Example:priority 5 from 1:2:3::5/128 table 45
OvsBridge Link Settings.
Properties:
@@ -2917,7 +2919,7 @@ Example: priority 5 from 1:2:3::5/128 table 45
OvsDpdk Link Settings.
Properties:
@@ -2949,7 +2951,7 @@ Example: priority 5 from 1:2:3::5/128 table 45
Open vSwitch Interface Settings.
Properties:
@@ -2971,7 +2973,7 @@ Example: priority 5 from 1:2:3::5/128 table 45
OvsPatch Link Settings.
Properties:
@@ -2993,7 +2995,7 @@ Example: priority 5 from 1:2:3::5/128 table 45
OvsPort Link Settings.
Properties:
@@ -3057,7 +3059,7 @@ Example: priority 5 from 1:2:3::5/128 table 45
Point-to-Point Protocol Settings.
Properties:
@@ -3217,7 +3219,7 @@ Example: priority 5 from 1:2:3::5/128 table 45
PPP-over-Ethernet Settings.
Properties:
@@ -3283,7 +3285,7 @@ Example: priority 5 from 1:2:3::5/128 table 45
WWW Proxy Settings.
Properties:
@@ -3319,7 +3321,7 @@ Example: priority 5 from 1:2:3::5/128 table 45
Alias: pac-script
-PAC script for the connection.
+The PAC script. In the profile this must be an UTF-8 encoded javascript code that defines a FindProxyForURL() function. When setting the property in nmcli, a filename is accepted too. In that case, nmcli will read the content of the file and set the script. The prefixes "file://" and "js://" are supported to explicitly differentiate between the two.
Format: string
priority 5 from 1:2:3::5/128 table 45
Serial Link Settings.
Properties:
@@ -3395,7 +3397,7 @@ Example: priority 5 from 1:2:3::5/128 table 45
SR-IOV settings.
Properties:
@@ -3435,7 +3437,7 @@ Example: priority 5 from 1:2:3::5/128 table 45
Linux Traffic Control Settings.
Properties: @@ -3812,7 +3814,7 @@ The actual string to print.
Teaming Settings.
Properties: @@ -3958,7 +3960,7 @@ The actual string to print.
Team Port Settings.
Properties: @@ -4032,7 +4034,7 @@ The actual string to print.
Tunnel Settings.
Properties: @@ -4108,7 +4110,7 @@ The actual string to print.
VLAN Settings.
Properties: @@ -4174,7 +4176,7 @@ The actual string to print.
VPN Settings.
Properties: @@ -4242,7 +4244,7 @@ The actual string to print.
VRF settings.
Properties: @@ -4266,7 +4268,7 @@ The actual string to print.
VXLAN Settings.
Properties: @@ -4424,7 +4426,7 @@ The actual string to print.
Wi-Fi P2P Settings.
Properties: @@ -4466,7 +4468,7 @@ The actual string to print.
WiMax Settings.
Properties: @@ -4502,7 +4504,7 @@ The actual string to print.
Alias: ethernet
Wired Ethernet Settings.
@@ -4646,7 +4648,7 @@ The actual string to print.WireGuard Settings.
Properties: @@ -4728,7 +4730,7 @@ The actual string to print.
Alias: wifi
Wi-Fi Settings.
@@ -4900,7 +4902,7 @@ The actual string to print.Alias: wifi-sec
Wi-Fi Security Settings.
@@ -5084,7 +5086,7 @@ The actual string to print.IEEE 802.15.4 (WPAN) MAC Settings.
Properties: @@ -5150,7 +5152,7 @@ The actual string to print.
Bond Port Settings.
Properties: @@ -5174,7 +5176,7 @@ The actual string to print.
Hostname settings.
Properties: @@ -5222,7 +5224,7 @@ The actual string to print.
Veth Settings.
Properties: @@ -5284,6 +5286,6 @@ The actual string to print.