Blame docs/api/html/NetworkManager.conf.html

Packit 5756e2
Packit 5756e2
<html>
Packit 5756e2
<head>
Packit 5756e2
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
Packit 5756e2
<title>NetworkManager.conf: NetworkManager Reference Manual</title>
Packit 5756e2
<meta name="generator" content="DocBook XSL Stylesheets Vsnapshot">
Packit 5756e2
<link rel="home" href="index.html" title="NetworkManager Reference Manual">
Packit 5756e2
<link rel="up" href="manpages.html" title="Part I. Manual Pages">
Packit 5756e2
<link rel="prev" href="NetworkManager.html" title="NetworkManager">
Packit 5756e2
<link rel="next" href="nmcli.html" title="nmcli">
Packit Service a1bd4f
<meta name="generator" content="GTK-Doc V1.33.0 (XML mode)">
Packit 5756e2
<link rel="stylesheet" href="style.css" type="text/css">
Packit 5756e2
</head>
Packit 5756e2
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
Packit 5756e2
Packit 5756e2
Packit 5756e2
Home
Packit 5756e2
Up
Packit 5756e2
Prev
Packit 5756e2
Next
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

NetworkManager.conf

Packit 5756e2

NetworkManager.conf — NetworkManager configuration file

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

Synopsis

Packit 5756e2

/etc/NetworkManager/NetworkManager.conf,

Packit 5756e2
    /etc/NetworkManager/conf.d/name.conf,
Packit 5756e2
    /run/NetworkManager/conf.d/name.conf,
Packit 5756e2
    /usr/lib/NetworkManager/conf.d/name.conf,
Packit 5756e2
    /var/lib/NetworkManager/NetworkManager-intern.conf
Packit 5756e2
    

Packit 5756e2
Packit 5756e2
Packit 5756e2

Description

Packit 5756e2

NetworkManager.conf is the configuration file for NetworkManager. It is used

Packit 5756e2
    to set up various aspects of NetworkManager's behavior. The
Packit 5756e2
    location of the main file and configuration directories may be changed
Packit 5756e2
    through use of the --config, --config-dir,
Packit 5756e2
    --system-config-dir, and --intern-config
Packit 5756e2
    argument for NetworkManager, respectively.
Packit 5756e2
    

Packit 5756e2

If a default NetworkManager.conf is

Packit 5756e2
    provided by your distribution's packages, you should not modify
Packit 5756e2
    it, since your changes may get overwritten by package
Packit 5756e2
    updates. Instead, you can add additional .conf
Packit 5756e2
    files to the /etc/NetworkManager/conf.d directory.
Packit 5756e2
    These will be read in order, with later files overriding earlier ones.
Packit 5756e2
    Packages might install further configuration snippets to /usr/lib/NetworkManager/conf.d.
Packit 5756e2
    This directory is parsed first, even before NetworkManager.conf.
Packit 5756e2
    Scripts can also put per-boot configuration into /run/NetworkManager/conf.d.
Packit 5756e2
    This directory is parsed second, also before NetworkManager.conf.
Packit 5756e2
    The loading of a file /run/NetworkManager/conf.d/name.conf
Packit 5756e2
    can be prevented by adding a file /etc/NetworkManager/conf.d/name.conf.
Packit 5756e2
    Likewise, a file /usr/lib/NetworkManager/conf.d/name.conf
Packit 5756e2
    can be shadowed by putting a file of the same name to either /etc/NetworkManager/conf.d
Packit 5756e2
    or /run/NetworkManager/conf.d.
Packit 5756e2
    

Packit 5756e2

Packit 5756e2
    NetworkManager can overwrite certain user configuration options via D-Bus or other internal
Packit 5756e2
    operations. In this case it writes those changes to /var/lib/NetworkManager/NetworkManager-intern.conf.
Packit 5756e2
    This file is not intended to be modified by the user, but it is read last and can shadow
Packit 5756e2
    user configuration from NetworkManager.conf.
Packit 5756e2
    

Packit 5756e2

Packit 5756e2
    Certain settings from the configuration can be reloaded at runtime either by sending SIGHUP signal or via
Packit 5756e2
    D-Bus' Reload call.
Packit 5756e2
    

Packit 5756e2
Packit 5756e2
Packit 5756e2

File Format

Packit 5756e2

Packit 5756e2
      The configuration file format is so-called key file (sort of
Packit 5756e2
      ini-style format).  It consists of sections (groups) of
Packit 5756e2
      key-value pairs. Lines beginning with a '#' and blank lines are
Packit 5756e2
      considered comments. Sections are started by a header line
Packit 5756e2
      containing the section enclosed in '[' and ']', and ended
Packit 5756e2
      implicitly by the start of the next section or the end of the
Packit 5756e2
      file. Each key-value pair must be contained in a section.
Packit 5756e2
    

Packit 5756e2

Packit 5756e2
      For keys that take a list of devices as their value, you can
Packit 5756e2
      specify devices by their MAC addresses or interface names, or
Packit 5756e2
      "*" to specify all devices. See the section called “Device List Format”
Packit 5756e2
      below.
Packit 5756e2
    

Packit 5756e2

Packit 5756e2
      Minimal system settings configuration file looks like this:
Packit 5756e2
      

Packit 5756e2
Packit 5756e2
[main]
Packit 5756e2
plugins=keyfile
Packit 5756e2
Packit 5756e2

Packit 5756e2
    

Packit 5756e2

Packit 5756e2
      As an extension to the normal keyfile format, you can also
Packit 5756e2
      append a value to a previously-set list-valued key by doing:
Packit 5756e2
      

Packit 5756e2
Packit 5756e2
plugins+=another-plugin
Packit 5756e2
plugins-=remove-me
Packit 5756e2
Packit 5756e2

Packit 5756e2
    

Packit 5756e2
Packit 5756e2
Packit 5756e2

Packit 5756e2
main section
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

plugins

Packit 5756e2
Packit 5756e2

Packit 5756e2
            Lists system settings plugin names separated by ','. These
Packit 5756e2
            plugins are used to read and write system-wide
Packit 5756e2
            connection profiles. When multiple plugins are specified, the
Packit 5756e2
            connections are read from all listed plugins. When writing
Packit 5756e2
            connections, the plugins will be asked to save the
Packit 5756e2
            connection in the order listed here; if the first plugin
Packit 5756e2
            cannot write out that connection type (or can't write out
Packit 5756e2
            any connections) the next plugin is tried, etc. If none of
Packit 5756e2
            the plugins can save the connection, an error is returned
Packit 5756e2
            to the user.
Packit 5756e2
          

Packit 5756e2

Packit 5756e2
            The default value and the number of available plugins is
Packit 5756e2
            distro-specific. See the section called “Plugins”
Packit 5756e2
            below for the available plugins.
Packit 5756e2
            Note that NetworkManager's native keyfile
Packit 5756e2
            plugin is always appended to the end of this list (if it doesn't
Packit 5756e2
            already appear earlier in the list).
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

monitor-connection-files

Packit 5756e2

This setting is deprecated and has no effect. Profiles

Packit 5756e2
        from disk are never automatically reloaded. Use for example nmcli connection (re)load
Packit 5756e2
        for that.

Packit 5756e2
Packit 5756e2
Packit 5756e2

auth-polkit

Packit 5756e2

Whether the system uses PolicyKit for authorization.

Packit 5756e2
        If true, non-root requests are authorized using PolicyKit.
Packit 5756e2
        Requests from root (user ID zero) are always granted without asking PolicyKit.
Packit 5756e2
        If false, all requests will be allowed and PolicyKit is
Packit 5756e2
        not used. If set to root-only PolicyKit is not used and
Packit 5756e2
        all requests except root are denied.
Packit 5756e2
        The default value is true.
Packit 5756e2
        

Packit 5756e2
Packit 5756e2
Packit 5756e2

dhcp

Packit 5756e2
Packit 5756e2

This key sets up what DHCP client

Packit 5756e2
        NetworkManager will use. Allowed values are
Packit 5756e2
        dhclient, dhcpcd, and
Packit 5756e2
        internal. The dhclient
Packit 5756e2
        and dhcpcd options require the indicated
Packit 5756e2
        clients to be installed. The internal
Packit 5756e2
        option uses a built-in DHCP client which is not currently as
Packit 5756e2
        featureful as the external clients.

Packit 5756e2

If this key is missing, it defaults to internal.

Packit 5756e2
        If the chosen plugin is not available, clients are looked for
Packit 5756e2
        in this order: dhclient, dhcpcd,
Packit 5756e2
        internal.

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

no-auto-default

Packit 5756e2
Packit 5756e2

Specify devices for which

Packit 5756e2
        NetworkManager shouldn't create default wired connection
Packit 5756e2
        (Auto eth0).  By default, NetworkManager creates a temporary
Packit 5756e2
        wired connection for any Ethernet device that is managed and
Packit 5756e2
        doesn't have a connection configured. List a device in this
Packit 5756e2
        option to inhibit creating the default connection for the
Packit 5756e2
        device. May have the special value * to
Packit 5756e2
        apply to all devices.

Packit 5756e2

When the default wired connection is deleted or saved

Packit 5756e2
        to a new persistent connection by a plugin, the device is
Packit 5756e2
        added to a list in the file
Packit 5756e2
        /var/lib/NetworkManager/no-auto-default.state
Packit 5756e2
        to prevent creating the default connection for that device
Packit 5756e2
        again.

Packit 5756e2

See the section called “Device List Format” for the syntax how to

Packit 5756e2
        specify a device.
Packit 5756e2
        

Packit 5756e2

Packit 5756e2
          Example:
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
no-auto-default=00:22:68:5c:5d:c4,00:1e:65:ff:aa:ee
Packit 5756e2
no-auto-default=eth0,eth1
Packit 5756e2
no-auto-default=*
Packit 5756e2
Packit 5756e2

Packit 5756e2
        

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

ignore-carrier

Packit 5756e2

Packit 5756e2
            This setting is deprecated for the per-device setting
Packit 5756e2
            ignore-carrier which overwrites this setting
Packit 5756e2
            if specified (See ignore-carrier).
Packit 5756e2
            Otherwise, it is a list of matches to specify for which device
Packit 5756e2
            carrier should be ignored. See the section called “Device List Format” for the
Packit 5756e2
            syntax how to specify a device. Note that master types like
Packit 5756e2
            bond, bridge, and team ignore carrier by default. You can however
Packit 5756e2
            revert that default using the "except:" specifier (or better,
Packit 5756e2
            use the per-device setting instead of the deprecated setting).
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2

assume-ipv6ll-only

Packit 5756e2
Packit 5756e2

Packit 5756e2
            Specify devices for which NetworkManager will try to
Packit 5756e2
            generate a connection based on initial configuration when
Packit 5756e2
            the device only has an IPv6 link-local address.
Packit 5756e2
          

Packit 5756e2

See the section called “Device List Format” for the syntax how to

Packit 5756e2
           specify a device.
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

configure-and-quit

Packit 5756e2

Packit 5756e2
            When set to 'true', NetworkManager quits after
Packit 5756e2
            performing initial network configuration but spawns small helpers
Packit 5756e2
            to preserve DHCP leases and IPv6 addresses.  This is useful in
Packit 5756e2
            environments where network setup is more or less static or it is
Packit 5756e2
            desirable to save process time but still handle some dynamic
Packit 5756e2
            configurations.  When this option is true,
Packit 5756e2
            network configuration for Wi-Fi, WWAN, Bluetooth, ADSL, and PPPoE
Packit 5756e2
            interfaces cannot be preserved due to their use of external
Packit 5756e2
            services, and these devices will be deconfigured when NetworkManager
Packit 5756e2
            quits even though other interface's configuration may be preserved.
Packit 5756e2
            Also, to preserve DHCP addresses the 'dhcp' option
Packit 5756e2
            must be set to 'internal'. The default value of
Packit 5756e2
            the 'configure-and-quit' option is
Packit 5756e2
            'false', meaning that NetworkManager will continue
Packit 5756e2
            running after initial network configuration and continue responding
Packit 5756e2
            to system and hardware events, D-Bus requests, and user commands.
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2

hostname-mode

Packit 5756e2
Packit 5756e2

Packit 5756e2
            Set the management mode of the hostname. This parameter will
Packit 5756e2
            affect only the transient hostname. If a valid static hostname is set,
Packit 5756e2
            NetworkManager will skip the update of the hostname despite the value of
Packit 5756e2
            this option. An hostname empty or equal to 'localhost', 'localhost6',
Packit 5756e2
            'localhost.localdomain' or 'localhost6.localdomain' is considered invalid.
Packit 5756e2
          

Packit Service a1bd4f

default: NetworkManager will update the

Packit Service a1bd4f
          hostname with the one provided via DHCP or reverse DNS lookup of the
Packit Service a1bd4f
          IP address on the connection with the default route or on any
Packit Service a1bd4f
          connection with the property hostname.only-from-default set to
Packit Service a1bd4f
          'false'. Connections are considered in order of
Packit Service a1bd4f
          increasing value of the hostname.priority
Packit Service a1bd4f
          property. In case multiple connections have the same priority,
Packit Service a1bd4f
          connections activated earlier are considered first. If no hostname can
Packit Service a1bd4f
          be determined in such way, the hostname will be updated to the last
Packit Service a1bd4f
          one set outside NetworkManager or to 'localhost.localdomain'.
Packit 5756e2
          

Packit Service a1bd4f

dhcp: this is similar to

Packit Service a1bd4f
          'default', with the difference that after trying to
Packit Service a1bd4f
          get the DHCP hostname, reverse DNS lookup is not done. Note that
Packit Service a1bd4f
          selecting this option is equivalent to setting the property
Packit Service a1bd4f
          'hostname.from-dns-lookup' to
Packit Service a1bd4f
          'false' globally for all connections in
Packit Service a1bd4f
          NetworkManager.conf.
Packit 5756e2
          

Packit 5756e2

none: NetworkManager will not manage the transient

Packit 5756e2
          hostname and will never set it.
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

dns

Packit 5756e2
Packit 5756e2

Set the DNS processing mode.

Packit 5756e2

If the key is unspecified, default is used,

Packit 5756e2
        unless /etc/resolv.conf is a symlink to
Packit 5756e2
        /run/systemd/resolve/stub-resolv.conf,
Packit 5756e2
        /run/systemd/resolve/resolv.conf,
Packit 5756e2
        /lib/systemd/resolv.conf or
Packit 5756e2
        /usr/lib/systemd/resolv.conf.
Packit 5756e2
        In that case, systemd-resolved is chosen automatically.
Packit 5756e2
        

Packit 5756e2

default: NetworkManager will update

Packit 5756e2
        /etc/resolv.conf to reflect the nameservers
Packit 5756e2
        provided by currently active connections. The rc-manager
Packit 5756e2
        setting (below) controls how this is done.

Packit 5756e2

dnsmasq: NetworkManager will run

Packit 5756e2
        dnsmasq as a local caching nameserver, using "Conditional Forwarding"
Packit 5756e2
        if you are connected to a VPN, and then update
Packit 5756e2
        resolv.conf to point to the local
Packit 5756e2
        nameserver. It is possible to pass custom options to the
Packit 5756e2
        dnsmasq instance by adding them to files in the
Packit 5756e2
        "/etc/NetworkManager/dnsmasq.d/"
Packit 5756e2
        directory. Note that when multiple upstream servers are
Packit 5756e2
        available, dnsmasq will initially contact them in parallel and
Packit 5756e2
        then use the fastest to respond, probing again other servers
Packit 5756e2
        after some time. This behavior can be modified passing the
Packit 5756e2
        'all-servers' or 'strict-order' options to dnsmasq (see the
Packit 5756e2
        manual page for more details).

Packit 5756e2

systemd-resolved: NetworkManager will

Packit 5756e2
        push the DNS configuration to systemd-resolved

Packit 5756e2

unbound: NetworkManager will talk

Packit 5756e2
        to unbound and dnssec-triggerd, using "Conditional Forwarding"
Packit 5756e2
        with DNSSEC support. /etc/resolv.conf
Packit 5756e2
        will be managed by dnssec-trigger daemon.

Packit 5756e2

none: NetworkManager will not

Packit 5756e2
        modify resolv.conf. This implies
Packit 5756e2
        rc-manager unmanaged

Packit 5756e2

Note that the plugins dnsmasq, systemd-resolved

Packit 5756e2
        and unbound are caching local nameservers.
Packit 5756e2
        Hence, when NetworkManager writes /run/NetworkManager/resolv.conf
Packit 5756e2
        and /etc/resolv.conf (according to rc-manager
Packit 5756e2
        setting below), the name server there will be localhost only.
Packit 5756e2
        NetworkManager also writes a file /run/NetworkManager/no-stub-resolv.conf
Packit 5756e2
        that contains the original name servers pushed to the DNS plugin.

Packit 5756e2

When using dnsmasq and systemd-resolved

Packit 5756e2
        per-connection added dns servers will always be queried using
Packit 5756e2
        the device the connection has been activated on.

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

rc-manager

Packit 5756e2
Packit 5756e2

Set the resolv.conf

Packit 5756e2
          management mode. This option is about how NetworkManager writes to
Packit 5756e2
          /etc/resolv.conf, if at all.
Packit 5756e2
          The default value depends on NetworkManager build
Packit 5756e2
          options, and this version of NetworkManager was build with a default of
Packit 5756e2
          "auto".
Packit 5756e2
          Regardless of this setting, NetworkManager will
Packit 5756e2
          always write its version of resolv.conf to its runtime state directory
Packit 5756e2
          as /run/NetworkManager/resolv.conf.
Packit 5756e2
        

Packit 5756e2

If you configure dns=none or make /etc/resolv.conf

Packit 5756e2
          immutable with chattr +i, NetworkManager will ignore this setting and
Packit 5756e2
          always choose unmanaged (below).
Packit 5756e2
        

Packit 5756e2

auto: if systemd-resolved plugin is configured via

Packit 5756e2
          the dns setting or if it gets detected as main DNS plugin,
Packit 5756e2
          NetworkManager will update systemd-resolved without touching /etc/resolv.conf.
Packit 5756e2
          Alternatively, if resolvconf or netconfig are enabled
Packit 5756e2
          at compile time and the respective binary is found, NetworkManager will automatically use it.
Packit 5756e2
          Note that if you install or uninstall these binaries, you need to reload the
Packit 5756e2
          rc-manager setting with SIGHUP or
Packit 5756e2
          systemctl reload NetworkManager. As last fallback
Packit 5756e2
          it uses the symlink option (see next).
Packit 5756e2
        

Packit 5756e2

symlink: If /etc/resolv.conf is

Packit 5756e2
          a regular file or does not exist, NetworkManager will write the file directly.
Packit 5756e2
          If /etc/resolv.conf is instead a symlink, NetworkManager
Packit 5756e2
          will leave it alone. Unless the symlink points to the internal file
Packit 5756e2
          /run/NetworkManager/resolv.conf,
Packit 5756e2
          in which case the symlink will be updated to emit an inotify notification.
Packit 5756e2
          This allows the user to conveniently instruct NetworkManager not
Packit 5756e2
          to manage /etc/resolv.conf by replacing it with
Packit 5756e2
          a symlink.
Packit 5756e2
        

Packit 5756e2

file: NetworkManager will write

Packit 5756e2
            /etc/resolv.conf as regular file. If it finds
Packit 5756e2
            a symlink to an existing target, it will follow the symlink and
Packit 5756e2
            update the target instead. In no case will an existing symlink
Packit 5756e2
            be replaced by a file. Note that older versions of NetworkManager
Packit 5756e2
            behaved differently and would replace dangling symlinks with a
Packit 5756e2
            plain file.
Packit 5756e2
        

Packit 5756e2

resolvconf: NetworkManager will run

Packit 5756e2
          resolvconf to update the DNS configuration.

Packit 5756e2

netconfig: NetworkManager will run

Packit 5756e2
          netconfig to update the DNS configuration.

Packit 5756e2

unmanaged: don't touch

Packit 5756e2
          /etc/resolv.conf.

Packit 5756e2

none: deprecated alias for

Packit 5756e2
          symlink.

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

systemd-resolved

Packit 5756e2
Packit 5756e2

Send the connection DNS configuration to

Packit 5756e2
        systemd-resolved. Defaults to "true".
Packit 5756e2
        

Packit 5756e2

Note that this setting is complementary to the

Packit 5756e2
        dns setting. You can keep this enabled while using
Packit 5756e2
        dns set to another DNS plugin alongside
Packit 5756e2
        systemd-resolved, or dns set to
Packit 5756e2
        systemd-resolved to configure the system resolver to use
Packit 5756e2
        systemd-resolved.

Packit 5756e2

If systemd-resolved is enabled, the connectivity check resolves the

Packit 5756e2
        hostname per-device.

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

debug

Packit 5756e2
Packit 5756e2

Comma separated list of options to aid

Packit 5756e2
        debugging. This value will be combined with the environment
Packit 5756e2
        variable NM_DEBUG. Currently, the following
Packit 5756e2
        values are supported:

Packit 5756e2

Packit 5756e2
          RLIMIT_CORE: set ulimit -c unlimited
Packit 5756e2
          to write out core dumps. Beware, that a core dump can contain
Packit 5756e2
          sensitive information such as passwords or configuration settings.
Packit 5756e2
        

Packit 5756e2

Packit 5756e2
          fatal-warnings: set g_log_set_always_fatal()
Packit 5756e2
          to core dump on warning messages from glib. This is equivalent
Packit 5756e2
          to the --g-fatal-warnings command line option.
Packit 5756e2
        

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

autoconnect-retries-default

Packit 5756e2

Packit 5756e2
            The number of times a connection activation should be
Packit 5756e2
            automatically tried before switching to another one. This
Packit 5756e2
            value applies only to connections that can auto-connect
Packit 5756e2
            and have a
Packit 5756e2
            connection.autoconnect-retries property
Packit 5756e2
            set to -1. If not specified, connections will be tried 4
Packit 5756e2
            times. Setting this value to 1 means to try activation once,
Packit 5756e2
            without retry.
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2

slaves-order

Packit 5756e2

Packit 5756e2
            This key specifies in which order slave connections are
Packit 5756e2
            auto-activated on boot or when the master activates
Packit 5756e2
            them. Allowed values are name (order
Packit 5756e2
            connection by interface name, the default), or
Packit 5756e2
            index (order slaves by their kernel
Packit 5756e2
            index).
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

Packit 5756e2
keyfile section
Packit 5756e2

This section contains keyfile-plugin-specific options, and

Packit 5756e2
    is normally only used when you are not using any other
Packit 5756e2
    distro-specific plugin.

Packit 5756e2

Packit 5756e2
      

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

hostname

Packit 5756e2

This key is deprecated and has no effect

Packit 5756e2
          since the hostname is now stored in /etc/hostname
Packit 5756e2
          or other system configuration files according to build options.
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2

path

Packit 5756e2

The location where keyfiles are read and stored.

Packit 5756e2
            This defaults to "/etc/NetworkManager/system-connections".
Packit 5756e2
            

Packit 5756e2
Packit 5756e2
Packit 5756e2

unmanaged-devices

Packit 5756e2
Packit 5756e2

Set devices that should be ignored by

Packit 5756e2
           NetworkManager.
Packit 5756e2
          

Packit 5756e2

See the section called “Device List Format” for the syntax on how to

Packit 5756e2
           specify a device.
Packit 5756e2
          

Packit 5756e2

Packit 5756e2
            Example:
Packit 5756e2
            

Packit 5756e2
Packit 5756e2
unmanaged-devices=interface-name:em4
Packit 5756e2
unmanaged-devices=mac:00:22:68:1c:59:b1;mac:00:1E:65:30:D1:C4;interface-name:eth2
Packit 5756e2
Packit 5756e2

Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

Packit 5756e2
    

Packit 5756e2
Packit 5756e2
Packit 5756e2

Packit 5756e2
ifupdown section
Packit 5756e2

This section contains ifupdown-specific options and thus only

Packit 5756e2
    has effect when using the ifupdown plugin.

Packit 5756e2

Packit 5756e2
      

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

managed

Packit 5756e2
Packit 5756e2

If set to true, then

Packit 5756e2
          interfaces listed in
Packit 5756e2
          /etc/network/interfaces are managed by
Packit 5756e2
          NetworkManager.  If set to false, then
Packit 5756e2
          any interface listed in
Packit 5756e2
          /etc/network/interfaces will be ignored
Packit 5756e2
          by NetworkManager. Remember that NetworkManager controls the
Packit 5756e2
          default route, so because the interface is ignored,
Packit 5756e2
          NetworkManager may assign the default route to some other
Packit 5756e2
          interface.

Packit 5756e2

Packit 5756e2
            The default value is false.
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

Packit 5756e2
    

Packit 5756e2
Packit 5756e2
Packit 5756e2

Packit 5756e2
logging section
Packit 5756e2

This section controls NetworkManager's logging. Any

Packit 5756e2
    settings here are overridden by the --log-level
Packit 5756e2
    and --log-domains command-line options.

Packit 5756e2

Packit 5756e2
      

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

level

Packit 5756e2

The default logging verbosity level.

Packit 5756e2
          One of OFF, ERR,
Packit 5756e2
          WARN, INFO,
Packit 5756e2
          DEBUG, TRACE.  The ERR
Packit 5756e2
          level logs only critical errors.  WARN logs warnings that may
Packit 5756e2
          reflect operation. INFO logs various informational messages that
Packit 5756e2
          are useful for tracking state and operations.  DEBUG enables
Packit 5756e2
          verbose logging for debugging purposes. TRACE enables even more
Packit 5756e2
          verbose logging then DEBUG level.  Subsequent levels also log
Packit 5756e2
          all messages from earlier levels; thus setting the log level
Packit 5756e2
          to INFO also logs error and warning messages.

Packit 5756e2
Packit 5756e2
Packit 5756e2

domains

Packit 5756e2
Packit 5756e2

The following log domains are available:

Packit 5756e2
          PLATFORM, RFKILL, ETHER, WIFI, BT, MB, DHCP4, DHCP6, PPP,
Packit 5756e2
          WIFI_SCAN, IP4, IP6, AUTOIP4, DNS, VPN, SHARING, SUPPLICANT,
Packit 5756e2
          AGENTS, SETTINGS, SUSPEND, CORE, DEVICE, OLPC, WIMAX,
Packit 5756e2
          INFINIBAND, FIREWALL, ADSL, BOND, VLAN, BRIDGE, DBUS_PROPS,
Packit 5756e2
          TEAM, CONCHECK, DCB, DISPATCH, AUDIT, SYSTEMD, VPN_PLUGIN,
Packit 5756e2
          PROXY.

Packit 5756e2

In addition, these special domains can be used: NONE,

Packit 5756e2
          ALL, DEFAULT, DHCP, IP.

Packit 5756e2

You can specify per-domain log level overrides by

Packit 5756e2
          adding a colon and a log level to any domain. E.g.,
Packit 5756e2
          "WIFI:DEBUG,WIFI_SCAN:OFF".

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

backend

Packit 5756e2

The logging backend. Supported values

Packit 5756e2
          are "syslog" and "journal".
Packit 5756e2
          When NetworkManager is started with "--debug"
Packit 5756e2
          in addition all messages will be printed to stderr.
Packit Service 0d74ec
          If unspecified, the default is "syslog".
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2

audit

Packit 5756e2

Whether the audit records are delivered to

Packit 5756e2
          auditd, the audit daemon.  If false, audit
Packit 5756e2
          records will be sent only to the NetworkManager logging
Packit 5756e2
          system. If set to true, they will be also
Packit 5756e2
          sent to auditd.  The default value is false.
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

Packit 5756e2
    

Packit 5756e2
Packit 5756e2
Packit 5756e2

Packit 5756e2
connection section
Packit 5756e2

Specify default values for connections.

Packit 5756e2
    

Packit 5756e2

Packit Service 8f75d2
      Such default values are only consulted if the corresponding per-connection property
Packit Service 8f75d2
      explicitly allows for that. That means, all these properties correspond to
Packit Service 8f75d2
      a property of the connection profile (for example connection.mud-url).
Packit Service 8f75d2
      Only if the per-profile property is set to a special value that indicates to use the
Packit Service 8f75d2
      default, the default value from NetworkManager.conf is consulted. It depends on the
Packit Service 8f75d2
      property, which is the special value that indicates fallback to the default, but it
Packit Service 8f75d2
      usually is something like empty, unset values or special numeric values like 0 or -1.
Packit Service 8f75d2
      That means the effectively used value can first always be configured for each profile,
Packit Service 8f75d2
      and these default values only matter if the per-profile values explicitly indicates
Packit Service 8f75d2
      to use the default from NetworkManager.conf.
Packit Service 8f75d2
    

Packit Service 8f75d2

Packit 5756e2
      Example:
Packit 5756e2

Packit 5756e2
Packit 5756e2
[connection]
Packit 5756e2
ipv6.ip6-privacy=0
Packit 5756e2
Packit 5756e2

Packit 5756e2
    

Packit 5756e2
Packit Service 8f75d2

Supported Properties

Packit 5756e2

Packit 5756e2
      Not all properties can be overwritten, only the following
Packit 5756e2
      properties are supported to have their default values configured
Packit 5756e2
      (see nm-settings(5) for details).
Packit Service 8f75d2
    

Packit Service 8f75d2

Packit 5756e2
      
Packit 5756e2
      
Packit 5756e2
      

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

802-1x.auth-timeout

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

cdma.mtu

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

connection.auth-retries

Packit 5756e2

If left unspecified, the default value is 3 tries before failing the connection.

Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2

connection.autoconnect-slaves

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

connection.mud-url

Packit 5756e2

If unspecified, MUD URL defaults to "none".

Packit 5756e2
Packit 5756e2
Packit 5756e2

connection.lldp

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

connection.llmnr

Packit 5756e2

If unspecified, the ultimate default values depends on the DNS plugin. With systemd-resolved the default currently is "yes" (2) and for all other plugins "no" (0).

Packit 5756e2
Packit 5756e2
Packit 5756e2

connection.mdns

Packit 5756e2

If unspecified, the ultimate default values depends on the DNS plugin. With systemd-resolved the default currently is "no" (0) and for all other plugins also "no" (0).

Packit 5756e2
Packit 5756e2
Packit 5756e2

connection.stable-id

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

ethernet.cloned-mac-address

Packit 5756e2

If left unspecified, it defaults to "preserve".

Packit 5756e2
Packit 5756e2
Packit 5756e2

ethernet.generate-mac-address-mask

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

ethernet.mtu

Packit 5756e2

If configured explicitly to 0, the MTU is not reconfigured during device activation unless it is required due to IPv6 constraints. If left unspecified, a DHCP/IPv6 SLAAC provided value is used or the MTU is not reconfigured during activation.

Packit 5756e2
Packit 5756e2
Packit 5756e2

ethernet.wake-on-lan

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

gsm.mtu

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit Service a1bd4f

hostname.from-dhcp

Packit Service a1bd4f
Packit Service a1bd4f
Packit Service a1bd4f
Packit Service a1bd4f

hostname.from-dns-lookup

Packit Service a1bd4f
Packit Service a1bd4f
Packit Service a1bd4f
Packit Service a1bd4f

hostname.only-from-default

Packit Service a1bd4f
Packit Service a1bd4f
Packit Service a1bd4f
Packit Service a1bd4f

hostname.priority

Packit Service a1bd4f
Packit Service a1bd4f
Packit Service a1bd4f
Packit 5756e2

infiniband.mtu

Packit 5756e2

If configured explicitly to 0, the MTU is not reconfigured during device activation unless it is required due to IPv6 constraints. If left unspecified, a DHCP/IPv6 SLAAC provided value is used or the MTU is left unspecified on activation.

Packit 5756e2
Packit 5756e2
Packit 5756e2

ip-tunnel.mtu

Packit 5756e2

If configured explicitly to 0, the MTU is not reconfigured during device activation unless it is required due to IPv6 constraints. If left unspecified, a DHCP/IPv6 SLAAC provided value is used or a default of 1500.

Packit 5756e2
Packit 5756e2
Packit 5756e2

ipv4.dad-timeout

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

ipv4.dhcp-client-id

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

ipv4.dhcp-iaid

Packit 5756e2

If left unspecified, it defaults to "ifname".

Packit 5756e2
Packit 5756e2
Packit 5756e2

ipv4.dhcp-hostname-flags

Packit 5756e2

If left unspecified, the value 3 (fqdn-encoded,fqdn-serv-update) is used.

Packit 5756e2
Packit 5756e2
Packit 5756e2

ipv4.dhcp-timeout

Packit 5756e2

If left unspecified, the default value for

Packit 5756e2
           the interface type is used.

Packit 5756e2
Packit 5756e2
Packit 5756e2

ipv4.dhcp-vendor-class-identifier

Packit 5756e2

If left unspecified, the default is to not send the DHCP option to the server.

Packit 5756e2
Packit 5756e2
Packit 5756e2

ipv4.dns-priority

Packit 5756e2

If unspecified or zero, use 50 for VPN profiles

Packit 5756e2
           and 100 for other profiles.

Packit 5756e2
Packit 5756e2
Packit 5756e2

ipv4.route-metric

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

ipv4.route-table

Packit 5756e2

If left unspecified, routes are only added to the main table. Note that this

Packit 5756e2
            is different from explicitly selecting the main table 254, because of how NetworkManager
Packit 5756e2
            removes extraneous routes from the tables.
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2

ipv6.ra-timeout

Packit 5756e2

If left unspecified, the default value depends on the sysctl solicitation settings.

Packit 5756e2
Packit 5756e2
Packit 5756e2

ipv6.dhcp-duid

Packit 5756e2

If left unspecified, it defaults to "lease".

Packit 5756e2
Packit 5756e2
Packit 5756e2

ipv6.dhcp-iaid

Packit 5756e2

If left unspecified, it defaults to "ifname".

Packit 5756e2
Packit 5756e2
Packit 5756e2

ipv6.dhcp-hostname-flags

Packit 5756e2

If left unspecified, the value 1 (fqdn-serv-update) is used.

Packit 5756e2
Packit 5756e2
Packit 5756e2

ipv6.dhcp-timeout

Packit 5756e2

If left unspecified, the default value for

Packit 5756e2
           the interface type is used.

Packit 5756e2
Packit 5756e2
Packit 5756e2

ipv6.dns-priority

Packit 5756e2

If unspecified or zero, use 50 for VPN profiles

Packit 5756e2
           and 100 for other profiles.

Packit 5756e2
Packit 5756e2
Packit 5756e2

ipv6.ip6-privacy

Packit 5756e2

If ipv6.ip6-privacy is unset, use the content of

Packit 5756e2
            "/proc/sys/net/ipv6/conf/default/use_tempaddr" as last fallback.
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2

ipv6.route-metric

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

ipv6.route-table

Packit 5756e2

If left unspecified, routes are only added to the main table. Note that this

Packit 5756e2
            is different from explicitly selecting the main table 254, because of how NetworkManager
Packit 5756e2
            removes extraneous routes from the tables.
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2

sriov.autoprobe-drivers

Packit 5756e2

If left unspecified, drivers are autoprobed when the SR-IOV VF gets created.

Packit 5756e2
Packit 5756e2
Packit 5756e2

vpn.timeout

Packit 5756e2

If left unspecified, default value of 60 seconds is used.

Packit 5756e2
Packit 5756e2
Packit 5756e2

wifi.ap-isolation

Packit 5756e2

If left unspecified, AP isolation is disabled.

Packit 5756e2
Packit 5756e2
Packit 5756e2

wifi.cloned-mac-address

Packit 5756e2

If left unspecified, it defaults to "preserve".

Packit 5756e2
Packit 5756e2
Packit 5756e2

wifi.generate-mac-address-mask

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

wifi.mac-address-randomization

Packit 5756e2

If left unspecified, MAC address randomization is disabled.

Packit 5756e2
            This setting is deprecated for wifi.cloned-mac-address.
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2

wifi.mtu

Packit 5756e2

If configured explicitly to 0, the MTU is not reconfigured during device activation unless it is required due to IPv6 constraints. If left unspecified, a DHCP/IPv6 SLAAC provided value is used or a default of 1500.

Packit 5756e2
Packit 5756e2
Packit 5756e2

wifi.powersave

Packit 5756e2

If left unspecified, the default value

Packit 5756e2
          "ignore" will be used.

Packit 5756e2
Packit 5756e2
Packit 5756e2

wifi-sec.pmf

Packit 5756e2

If left unspecified, the default value

Packit 5756e2
          "optional" will be used.

Packit 5756e2
Packit 5756e2
Packit 5756e2

wifi-sec.fils

Packit 5756e2

If left unspecified, the default value

Packit 5756e2
          "optional" will be used.

Packit 5756e2
Packit 5756e2
Packit 5756e2

wifi.wake-on-wlan

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

wireguard.mtu

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

Packit 5756e2
      
Packit 5756e2
      
Packit 5756e2
    

Packit 5756e2
Packit 5756e2

Packit 5756e2
Packit 5756e2

Sections

Packit 5756e2

Packit 5756e2
        You can configure multiple connection
Packit 5756e2
        sections, by having different sections with a name that all start
Packit 5756e2
        with "connection".
Packit 5756e2
        Example:
Packit 5756e2

Packit 5756e2
Packit 5756e2
[connection]
Packit 5756e2
ipv6.ip6-privacy=0
Packit 5756e2
connection.autoconnect-slaves=1
Packit 5756e2
vpn.timeout=120
Packit 5756e2
Packit 5756e2
[connection-wifi-wlan0]
Packit 5756e2
match-device=interface-name:wlan0
Packit 5756e2
ipv4.route-metric=50
Packit 5756e2
Packit 5756e2
[connection-wifi-other]
Packit 5756e2
match-device=type:wifi
Packit 5756e2
ipv4.route-metric=55
Packit 5756e2
ipv6.ip6-privacy=1
Packit 5756e2
Packit 5756e2

Packit 5756e2
    

Packit 5756e2

Packit 5756e2
        The sections within one file are considered in order of appearance, with the
Packit 5756e2
        exception that the [connection] section is always
Packit 5756e2
        considered last. In the example above, this order is [connection-wifi-wlan0],
Packit 5756e2
        [connection-wlan-other], and [connection].
Packit 5756e2
        When checking for a default configuration value, the sections are searched until
Packit 5756e2
        the requested value is found.
Packit 5756e2
        In the example above, "ipv4.route-metric" for wlan0 interface is set to 50,
Packit 5756e2
        and for all other Wi-Fi typed interfaces to 55. Also, Wi-Fi devices would have
Packit 5756e2
        IPv6 private addresses enabled by default, but other devices would have it disabled.
Packit 5756e2
        Note that also "wlan0" gets "ipv6.ip6-privacy=1", because although the section
Packit 5756e2
        "[connection-wifi-wlan0]" matches the device, it does not contain that property
Packit 5756e2
        and the search continues.
Packit 5756e2
    

Packit 5756e2

Packit 5756e2
        When having different sections in multiple files, sections from files that are read
Packit 5756e2
        later have higher priority. So within one file the priority of the sections is
Packit 5756e2
        top-to-bottom. Across multiple files later definitions take precedence.
Packit 5756e2
    

Packit 5756e2

Packit 5756e2
      The following properties further control how a connection section applies.
Packit 5756e2
      

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

match-device

Packit 5756e2

An optional device spec that restricts

Packit 5756e2
          when the section applies. See the section called “Device List Format”
Packit 5756e2
          for the possible values.
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2

stop-match

Packit 5756e2

An optional boolean value which defaults to

Packit 5756e2
          no. If the section matches (based on
Packit 5756e2
          match-device), further sections will not be
Packit 5756e2
          considered even if the property in question is not present. In
Packit 5756e2
          the example above, if [connection-wifi-wlan0] would
Packit 5756e2
          have stop-match set to yes,
Packit 5756e2
          the device wlan0 would have ipv6.ip6-privacy
Packit 5756e2
          property unspecified. That is, the search for the property would not continue
Packit 5756e2
          in the connection sections [connection-wifi-other]
Packit 5756e2
          or [connection].
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

Packit 5756e2
    

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

Packit 5756e2
device section
Packit 5756e2

Contains per-device persistent configuration.

Packit 5756e2
    

Packit 5756e2

Packit 5756e2
      Example:
Packit 5756e2

Packit 5756e2
Packit 5756e2
[device]
Packit 5756e2
match-device=interface-name:eth3
Packit 5756e2
managed=1
Packit 5756e2
Packit 5756e2

Packit 5756e2
    

Packit 5756e2
Packit 5756e2

Supported Properties

Packit 5756e2

Packit 5756e2
      The following properties can be configured per-device.
Packit 5756e2
      

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

managed

Packit 5756e2

Packit 5756e2
              Whether the device is managed or not. A device can be
Packit 5756e2
              marked as managed via udev rules (ENV{NM_UNMANAGED}),
Packit 5756e2
              or via setting plugins (keyfile.unmanaged-devices).
Packit 5756e2
              This is yet another way. Note that this configuration
Packit 5756e2
              can be overruled at runtime via D-Bus. Also, it has
Packit 5756e2
              higher priority then udev rules.
Packit 5756e2
            

Packit 5756e2
Packit 5756e2
Packit 5756e2

carrier-wait-timeout

Packit 5756e2

Packit 5756e2
              Specify the timeout for waiting for carrier in milliseconds.
Packit 5756e2
              When the device loses carrier, NetworkManager does not react
Packit 5756e2
              immediately. Instead, it waits for this timeout before considering
Packit 5756e2
              the link lost. Also, on startup, NetworkManager considers the
Packit 5756e2
              device as busy for this time, as long as the device has no carrier.
Packit 5756e2
              This delays startup-complete signal and NetworkManager-wait-online.
Packit 5756e2
              Configuring this too high means to block NetworkManager-wait-online
Packit 5756e2
              longer then necessary. Configuring it too low, means that NetworkManager
Packit 5756e2
              will declare startup-complete, although carrier is about to come
Packit 5756e2
              and auto-activation to kick in.
Packit 5756e2
              The default is 5000 milliseconds.
Packit 5756e2
            

Packit 5756e2
Packit 5756e2
Packit 5756e2

ignore-carrier

Packit 5756e2
Packit 5756e2

Packit 5756e2
              Specify devices for which NetworkManager will (partially)
Packit 5756e2
              ignore the carrier state. Normally, for
Packit 5756e2
              device types that support carrier-detect, such as Ethernet
Packit 5756e2
              and InfiniBand, NetworkManager will only allow a
Packit 5756e2
              connection to be activated on the device if carrier is
Packit 5756e2
              present (ie, a cable is plugged in), and it will
Packit 5756e2
              deactivate the device if carrier drops for more than a few
Packit 5756e2
              seconds.
Packit 5756e2
            

Packit 5756e2

Packit 5756e2
              A device with carrier ignored will allow activating connections on
Packit 5756e2
              that device even when it does not have carrier, provided
Packit 5756e2
              that the connection uses only statically-configured IP
Packit 5756e2
              addresses. Additionally, it will allow any active
Packit 5756e2
              connection (whether static or dynamic) to remain active on
Packit 5756e2
              the device when carrier is lost.
Packit 5756e2
            

Packit 5756e2

Packit 5756e2
              Note that the "carrier" property of NMDevices and device D-Bus
Packit 5756e2
              interfaces will still reflect the actual device state; it's just
Packit 5756e2
              that NetworkManager will not make use of that information.
Packit 5756e2
            

Packit 5756e2

Packit 5756e2
              Master types like bond, bridge and team ignore carrier by default,
Packit 5756e2
              while other device types react on carrier changes by default.
Packit 5756e2
            

Packit 5756e2

Packit 5756e2
              This setting overwrites the deprecated main.ignore-carrier
Packit 5756e2
              setting above.
Packit 5756e2
            

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

wifi.scan-rand-mac-address

Packit 5756e2

Packit 5756e2
              Configures MAC address randomization of a Wi-Fi device during
Packit 5756e2
              scanning. This defaults to yes in which case
Packit 5756e2
              a random, locally-administered MAC address will be used.
Packit 5756e2
              The setting wifi.scan-generate-mac-address-mask
Packit 5756e2
              allows to influence the generated MAC address to use certain vendor
Packit 5756e2
              OUIs.
Packit 5756e2
              If disabled, the MAC address during scanning is left unchanged to
Packit 5756e2
              whatever is configured.
Packit 5756e2
              For the configured MAC address while the device is associated, see instead
Packit 5756e2
              the per-connection setting wifi.cloned-mac-address.
Packit 5756e2
            

Packit 5756e2
Packit 5756e2
Packit 5756e2

wifi.backend

Packit 5756e2

Packit 5756e2
              Specify the Wi-Fi backend used for the device. Currently, supported
Packit 5756e2
              are wpa_supplicant and iwd (experimental).
Packit 5756e2
            

Packit 5756e2
Packit 5756e2
Packit 5756e2

wifi.scan-generate-mac-address-mask

Packit 5756e2

Packit 5756e2
              Like the per-connection settings ethernet.generate-mac-address-mask
Packit 5756e2
              and wifi.generate-mac-address-mask, this allows to configure the
Packit 5756e2
              generated MAC addresses during scanning. See nm-settings(5)
Packit 5756e2
              for details.
Packit 5756e2
            

Packit 5756e2
Packit 5756e2
Packit Service a1bd4f

wifi.iwd.autoconnect

Packit Service a1bd4f

Packit Service a1bd4f
              If wifi.backend is iwd, setting this to
Packit Service a1bd4f
              false forces IWD's autoconnect mechanism to be disabled for
Packit Service a1bd4f
              this device and connections will only be initiated by NetworkManager whether
Packit Service a1bd4f
              commaned by a client or automatically.  Leaving it true (default)
Packit Service a1bd4f
              stops NetworkManager from automatically initiating connections and allows
Packit Service a1bd4f
              IWD to use its network ranking and scanning logic to decide the best networks
Packit Service a1bd4f
              to autoconnect to next.  Connections' autoconnect-priority,
Packit Service a1bd4f
              autoconnect-retries settings will be ignored.  Other settings
Packit Service a1bd4f
              like permissions or multi-connect may interfere
Packit Service a1bd4f
              with IWD connection attempts.
Packit Service a1bd4f
            

Packit Service a1bd4f
Packit Service a1bd4f
Packit 5756e2

sriov-num-vfs

Packit 5756e2

Packit 5756e2
              Specify the number of virtual functions (VF) to enable
Packit 5756e2
              for a PCI physical device that supports single-root I/O
Packit 5756e2
              virtualization (SR-IOV).
Packit 5756e2
            

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

Packit 5756e2
    

Packit 5756e2
Packit 5756e2

Packit 5756e2
Packit 5756e2

Sections

Packit 5756e2

Packit 5756e2
        The [device] section works the same as the [connection] section.
Packit 5756e2
        That is, multiple sections that all start with the prefix "device" can be specified.
Packit 5756e2
        The settings "match-device" and "stop-match" are available to match a device section
Packit 5756e2
        on a device. The order of multiple sections is also top-down within the file and
Packit 5756e2
        later files overwrite previous settings. See “Sections” under the section called “CONNECTION SECTION”
Packit 5756e2
        for details.
Packit 5756e2
    

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

Packit 5756e2
connectivity section
Packit 5756e2

This section controls NetworkManager's optional connectivity

Packit 5756e2
    checking functionality.  This allows NetworkManager to detect
Packit 5756e2
    whether or not the system can actually access the internet or
Packit 5756e2
    whether it is behind a captive portal.

Packit 5756e2

Connectivity checking serves two purposes. For one, it exposes

Packit 5756e2
    a connectivity state on D-Bus, which other applications may use. For example,
Packit 5756e2
    Gnome's portal helper uses this as signal to show a captive portal login
Packit 5756e2
    page.
Packit 5756e2
    The other use is that default-route of devices without global connectivity
Packit 5756e2
    get a penalty of +20000 to the route-metric. This has the purpose to give a
Packit 5756e2
    better default-route to devices that have global connectivity. For example,
Packit 5756e2
    when being connected to WWAN and to a Wi-Fi network which is behind a captive
Packit 5756e2
    portal, WWAN still gets preferred until login.

Packit 5756e2

Note that your distribution might set /proc/sys/net/ipv4/conf/*/rp_filter to

Packit 5756e2
    strict filtering. That works badly with per-device connectivity checking,
Packit 5756e2
    which uses SO_BINDDEVICE to send requests on all devices. A strict rp_filter
Packit 5756e2
    setting will reject any response and the connectivity check on all but the
Packit 5756e2
    best route will fail.

Packit 5756e2

Packit 5756e2
      

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

enabled

Packit 5756e2

Whether connectivity check is enabled.

Packit 5756e2
          Note that to enable connectivity check, a valid uri must
Packit 5756e2
          also be configured. The value defaults to true, but since
Packit 5756e2
          the uri is unset by default, connectivity check may be disabled.
Packit 5756e2
          The main purpose of this option is to have a single flag
Packit 5756e2
          to disable connectivity check. Note that this setting can
Packit 5756e2
          also be set via D-Bus API at runtime. In that case, the value gets
Packit 5756e2
          stored in /var/lib/NetworkManager/NetworkManager-intern.conf
Packit 5756e2
          file.
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2

uri

Packit 5756e2

The URI of a web page to periodically

Packit 5756e2
          request when connectivity is being checked.  This page
Packit 5756e2
          should return the header "X-NetworkManager-Status" with a
Packit 5756e2
          value of "online".  Alternatively, its body content should
Packit 5756e2
          be set to "NetworkManager is online".  The body content
Packit 5756e2
          check can be controlled by the response
Packit 5756e2
          option.  If this option is blank or missing, connectivity
Packit 5756e2
          checking is disabled.
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2

interval

Packit 5756e2

Specified in seconds; controls how often

Packit 5756e2
          connectivity is checked when a network connection exists. If
Packit 5756e2
          set to 0 connectivity checking is disabled.  If missing, the
Packit 5756e2
          default is 300 seconds.

Packit 5756e2
Packit 5756e2
Packit 5756e2

response

Packit 5756e2

If set, controls what body content

Packit 5756e2
          NetworkManager checks for when requesting the URI for
Packit 5756e2
          connectivity checking.  Note that this only compares
Packit 5756e2
          that the HTTP response starts with the specifid text,
Packit 5756e2
          it does not compare the exact string. This behavior
Packit 5756e2
          might change in the future, so avoid relying on it.
Packit 5756e2
          If missing, the response defaults to "NetworkManager is online".
Packit 5756e2
          If set to empty, the HTTP server is expected to answer with
Packit 5756e2
          status code 204 or send no data.

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

Packit 5756e2
    

Packit 5756e2
Packit 5756e2
Packit 5756e2

Packit 5756e2
global-dns section
Packit 5756e2

This section specifies global DNS settings that override

Packit 5756e2
    connection-specific configuration.

Packit 5756e2

Packit 5756e2
      

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

searches

Packit 5756e2

Packit 5756e2
             A list of search domains to be used during hostname lookup.
Packit 5756e2
           

Packit 5756e2
Packit 5756e2
Packit 5756e2

options

Packit 5756e2

Packit 5756e2
             A list of options to be passed to the hostname resolver.
Packit 5756e2
           

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

Packit 5756e2
    

Packit 5756e2
Packit 5756e2
Packit 5756e2

Packit 5756e2
global-dns-domain sections
Packit 5756e2

Sections with a name starting with the "global-dns-domain-"

Packit 5756e2
    prefix allow to define global DNS configuration for specific
Packit 5756e2
    domains.  The part of section name after "global-dns-domain-"
Packit 5756e2
    specifies the domain name a section applies to.  More specific
Packit 5756e2
    domains have the precedence over less specific ones and the
Packit 5756e2
    default domain is represented by the wildcard "*".  A default
Packit 5756e2
    domain section is mandatory.
Packit 5756e2
    

Packit 5756e2

Packit 5756e2
      

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

servers

Packit 5756e2

Packit 5756e2
             A list of addresses of DNS servers to be used for the given domain.
Packit 5756e2
           

Packit 5756e2
Packit 5756e2
Packit 5756e2

options

Packit 5756e2

Packit 5756e2
             A list of domain-specific DNS options. Not used at the moment.
Packit 5756e2
           

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

Packit 5756e2
    

Packit 5756e2
Packit 5756e2
Packit 5756e2

Packit 5756e2
.config sections
Packit 5756e2

This is a special section that contains options which apply

Packit 5756e2
      to the configuration file that contains the option.
Packit 5756e2
    

Packit 5756e2

Packit 5756e2
      

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

enable

Packit 5756e2
Packit 5756e2

Packit 5756e2
              Defaults to "true". If "false",
Packit 5756e2
              the configuration file will be skipped during loading.
Packit 5756e2
              Note that the main configuration file NetworkManager.conf
Packit 5756e2
              cannot be disabled.
Packit 5756e2

Packit 5756e2
Packit 5756e2
# always skip loading the config file
Packit 5756e2
[.config]
Packit 5756e2
enable=false
Packit 5756e2
Packit 5756e2

Packit 5756e2
            

Packit 5756e2

Packit 5756e2
              You can also match against the version of NetworkManager. For example
Packit 5756e2
              the following are valid configurations:
Packit 5756e2

Packit 5756e2
Packit 5756e2
# only load on version 1.0.6
Packit 5756e2
[.config]
Packit 5756e2
enable=nm-version:1.0.6
Packit 5756e2
Packit 5756e2
# load on all versions 1.0.x, but not 1.2.x
Packit 5756e2
[.config]
Packit 5756e2
enable=nm-version:1.0
Packit 5756e2
Packit 5756e2
# only load on versions >= 1.1.6. This does not match
Packit 5756e2
# with version 1.2.0 or 1.4.4. Only the last digit is considered.
Packit 5756e2
[.config]
Packit 5756e2
enable=nm-version-min:1.1.6
Packit 5756e2
Packit 5756e2
# only load on versions >= 1.2. Contrary to the previous
Packit 5756e2
# example, this also matches with 1.2.0, 1.2.10, 1.4.4, etc.
Packit 5756e2
[.config]
Packit 5756e2
enable=nm-version-min:1.2
Packit 5756e2
Packit 5756e2
# Match against the maximum allowed version. The example matches
Packit 5756e2
# versions 1.2.0, 1.2.2, 1.2.4. Again, only the last version digit
Packit 5756e2
# is allowed to be smaller. So this would not match on 1.1.10.
Packit 5756e2
[.config]
Packit 5756e2
enable=nm-version-max:1.2.6
Packit 5756e2
Packit 5756e2

Packit 5756e2
            

Packit 5756e2

Packit 5756e2
              You can also match against the value of the environment variable
Packit 5756e2
              NM_CONFIG_ENABLE_TAG, like:
Packit 5756e2

Packit 5756e2
Packit 5756e2
# always skip loading the file when running NetworkManager with
Packit 5756e2
# environment variable "NM_CONFIG_ENABLE_TAG=TAG1"
Packit 5756e2
[.config]
Packit 5756e2
enable=env:TAG1
Packit 5756e2
Packit 5756e2

Packit 5756e2
            

Packit 5756e2

Packit 5756e2
              More then one match can be specified. The configuration will be
Packit 5756e2
              enabled if one of the predicates matches ("or"). The special prefix "except:" can
Packit 5756e2
              be used to negate the match. Note that if one except-predicate
Packit 5756e2
              matches, the entire configuration will be disabled.
Packit 5756e2
              In other words, a except predicate always wins over other predicates.
Packit 5756e2
              If the setting only consists of "except:" matches and none of the
Packit 5756e2
              negative conditions are satisfied, the configuration is still enabled.
Packit 5756e2

Packit 5756e2
Packit 5756e2
# enable the configuration either when the environment variable
Packit 5756e2
# is present or the version is at least 1.2.0.
Packit 5756e2
[.config]
Packit 5756e2
enable=env:TAG2,nm-version-min:1.2
Packit 5756e2
Packit 5756e2
# enable the configuration for version >= 1.2.0, but disable
Packit 5756e2
# it when the environment variable is set to "TAG3"
Packit 5756e2
[.config]
Packit 5756e2
enable=except:env:TAG3,nm-version-min:1.2
Packit 5756e2
Packit 5756e2
# enable the configuration on >= 1.3, >= 1.2.6, and >= 1.0.16.
Packit 5756e2
# Useful if a certain feature is only present since those releases.
Packit 5756e2
[.config]
Packit 5756e2
enable=nm-version-min:1.3,nm-version-min:1.2.6,nm-version-min:1.0.16
Packit 5756e2
Packit 5756e2

Packit 5756e2
            

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

Packit 5756e2
    

Packit 5756e2
Packit 5756e2
Packit 5756e2

Plugins

Packit 5756e2

Packit 5756e2
      Settings plugins for reading and writing connection profiles. The number of
Packit 5756e2
      available plugins is distribution specific.
Packit 5756e2
    

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

keyfile

Packit 5756e2
Packit 5756e2

Packit 5756e2
            The keyfile plugin is the generic
Packit 5756e2
            plugin that supports all the connection types and
Packit 5756e2
            capabilities that NetworkManager has. It writes files out
Packit 5756e2
            in an .ini-style format in
Packit 5756e2
            /etc/NetworkManager/system-connections.
Packit 5756e2
            See nm-settings-keyfile(5)
Packit 5756e2
            for details about the file format.
Packit 5756e2
          

Packit 5756e2

Packit 5756e2
            The stored connection file may contain passwords, secrets and
Packit 5756e2
            private keys in plain text, so it will be made readable only to
Packit 5756e2
            root, and the plugin will ignore files that are readable or
Packit 5756e2
            writable by any user or group other than root. See "Secret flag types"
Packit 5756e2
            in nm-settings(5)
Packit 5756e2
            for how to avoid storing passwords in plain text.
Packit 5756e2
          

Packit 5756e2

Packit 5756e2
            This plugin is always active, and will automatically be
Packit 5756e2
            used to store any connections that aren't supported by any
Packit 5756e2
            other active plugin.
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

ifcfg-rh

Packit 5756e2

Packit 5756e2
            This plugin is used on the Fedora and Red Hat Enterprise
Packit 5756e2
            Linux distributions to read and write configuration from
Packit 5756e2
            the standard
Packit 5756e2
            /etc/sysconfig/network-scripts/ifcfg-*
Packit 5756e2
            files. It currently supports reading Ethernet, Wi-Fi,
Packit 5756e2
            InfiniBand, VLAN, Bond, Bridge, and Team connections.
Packit 5756e2
            Enabling ifcfg-rh implicitly enables
Packit 5756e2
            ibft plugin, if it is available.
Packit 5756e2
            This can be disabled by adding no-ibft.
Packit 5756e2
            See /usr/share/doc/initscripts/sysconfig.txt
Packit 5756e2
            and nm-settings-ifcfg-rh(5)
Packit 5756e2
            for more information about the ifcfg file format.
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2

ifupdown

Packit 5756e2
Packit 5756e2

Packit 5756e2
            This plugin is used on the Debian and Ubuntu
Packit 5756e2
            distributions, and reads Ethernet and Wi-Fi connections
Packit 5756e2
            from /etc/network/interfaces.
Packit 5756e2
          

Packit 5756e2

Packit 5756e2
            This plugin is read-only; any connections (of any type)
Packit 5756e2
            added from within NetworkManager when you are using this
Packit 5756e2
            plugin will be saved using the keyfile
Packit 5756e2
            plugin instead.
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

ibft, no-ibft

Packit 5756e2

Packit 5756e2
            These plugins are deprecated and their selection has no effect.
Packit 5756e2
            This is now handled by nm-initrd-generator.
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2

ifcfg-suse, ifnet

Packit 5756e2

Packit 5756e2
            These plugins are deprecated and their selection has no effect.
Packit 5756e2
            The keyfile plugin should be used
Packit 5756e2
            instead.
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

Appendix

Packit 5756e2
Packit 5756e2

Device List Format

Packit 5756e2

Packit 5756e2
          The configuration options main.no-auto-default, main.ignore-carrier,
Packit 5756e2
          keyfile.unmanaged-devices, connection*.match-device and
Packit 5756e2
          device*.match-device select devices based on a list of matchings.
Packit 5756e2
          Devices can be specified using the following format:
Packit 5756e2
      

Packit 5756e2

Packit 5756e2
      

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

*

Packit 5756e2

Matches every device.

Packit 5756e2
Packit 5756e2
Packit 5756e2

IFNAME

Packit 5756e2

Case sensitive match of interface name of the device. Globbing is not supported.

Packit 5756e2
Packit 5756e2
Packit 5756e2

HWADDR

Packit 5756e2

Match the permanent MAC address of the device. Globbing is not supported

Packit 5756e2
Packit 5756e2
Packit 5756e2

interface-name:IFNAME, interface-name:~IFNAME

Packit 5756e2

Case sensitive match of interface name of the device. Simple globbing is supported with

Packit 5756e2
             * and ?. Ranges and escaping is not supported.

Packit 5756e2
Packit 5756e2
Packit 5756e2

interface-name:=IFNAME

Packit 5756e2

Case sensitive match of interface name of the device. Globbing is disabled and IFNAME

Packit 5756e2
             is taken literally.

Packit 5756e2
Packit 5756e2
Packit 5756e2

mac:HWADDR

Packit 5756e2

Match the permanent MAC address of the device. Globbing is not supported

Packit 5756e2
Packit 5756e2
Packit 5756e2

s390-subchannels:HWADDR

Packit 5756e2

Match the device based on the subchannel address. Globbing is not supported

Packit 5756e2
Packit 5756e2
Packit 5756e2

type:TYPE

Packit 5756e2

Match the device type. Valid type names are as reported by "nmcli -f GENERAL.TYPE device show".

Packit 5756e2
          Globbing is not supported.

Packit 5756e2
Packit 5756e2
Packit 5756e2

driver:DRIVER

Packit 5756e2

Match the device driver as reported by "nmcli -f GENERAL.DRIVER,GENERAL.DRIVER-VERSION device show".

Packit 5756e2
          "DRIVER" must match the driver name exactly and does not support globbing.
Packit 5756e2
          Optionally, a driver version may be specified separated by '/'. Globbing is supported for the version.
Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2

dhcp-plugin:DHCP

Packit 5756e2

Match the configured DHCP plugin "main.dhcp".

Packit 5756e2
          

Packit 5756e2
Packit 5756e2
Packit 5756e2

except:SPEC

Packit 5756e2
Packit 5756e2

Negative match of a device. SPEC must be explicitly qualified with

Packit 5756e2
             a prefix such as interface-name:. A negative match has higher priority then the positive
Packit 5756e2
             matches above.

Packit 5756e2

If there is a list consisting only of negative matches, the behavior is the same as if there

Packit 5756e2
             is also match-all. That means, if none of all the negative matches is satisfied, the overall result is
Packit 5756e2
             still a positive match. That means, "except:interface-name:eth0" is the same as
Packit 5756e2
             "*,except:interface-name:eth0".

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

SPEC[,;]SPEC

Packit 5756e2
Packit 5756e2

Multiple specs can be concatenated with commas or semicolons. The order does not matter as

Packit 5756e2
            matches are either inclusive or negative (except:), with negative matches having higher
Packit 5756e2
            priority.
Packit 5756e2
            

Packit 5756e2

Backslash is supported to escape the separators ';' and ',', and to express special

Packit 5756e2
            characters such as newline ('\n'), tabulator ('\t'), whitespace ('\s') and backslash ('\\'). The globbing of
Packit 5756e2
            interface names cannot be escaped. Whitespace is not a separator but will be trimmed between
Packit 5756e2
            two specs (unless escaped as '\s').
Packit 5756e2
            

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

Packit 5756e2
      

Packit 5756e2

Packit 5756e2
        Example:
Packit 5756e2
        

Packit 5756e2
Packit 5756e2
interface-name:em4
Packit 5756e2
mac:00:22:68:1c:59:b1;mac:00:1E:65:30:D1:C4;interface-name:eth2
Packit 5756e2
interface-name:vboxnet*,except:interface-name:vboxnet2
Packit 5756e2
*,except:mac:00:22:68:1c:59:b1
Packit 5756e2
Packit 5756e2

Packit 5756e2
      

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit 5756e2

See Also

Packit 5756e2

Packit 5756e2
      NetworkManager(8),
Packit 5756e2
      nmcli(1),
Packit 5756e2
      nmcli-examples(7),
Packit 5756e2
      nm-online(1),
Packit 5756e2
      nm-settings(5),
Packit 5756e2
      nm-applet(1),
Packit 5756e2
      nm-connection-editor(1)
Packit 5756e2
    

Packit 5756e2
Packit 5756e2
Packit 5756e2
Packit Service a1bd4f

Generated by GTK-Doc V1.33.0
Packit 5756e2
</body>
Packit 5756e2
</html>