ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering<?xml version='1.0'?> <!--*- Mode: nxml; nxml-child-indent: 2; indent-tabs-mode: nil -*-->
eac684ef1c29684b1bcd27a89c38c202e568e469Tom Gundersen<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
12b42c76672a66c2d4ea7212c14f8f1b5a62b78dTom Gundersen "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd">
eac684ef1c29684b1bcd27a89c38c202e568e469Tom Gundersen This file is part of systemd.
eac684ef1c29684b1bcd27a89c38c202e568e469Tom Gundersen Copyright 2013 Tom Gundersen
eac684ef1c29684b1bcd27a89c38c202e568e469Tom Gundersen systemd is free software; you can redistribute it and/or modify it
eac684ef1c29684b1bcd27a89c38c202e568e469Tom Gundersen under the terms of the GNU Lesser General Public License as published by
eac684ef1c29684b1bcd27a89c38c202e568e469Tom Gundersen the Free Software Foundation; either version 2.1 of the License, or
eac684ef1c29684b1bcd27a89c38c202e568e469Tom Gundersen (at your option) any later version.
eac684ef1c29684b1bcd27a89c38c202e568e469Tom Gundersen systemd is distributed in the hope that it will be useful, but
eac684ef1c29684b1bcd27a89c38c202e568e469Tom Gundersen WITHOUT ANY WARRANTY; without even the implied warranty of
eac684ef1c29684b1bcd27a89c38c202e568e469Tom Gundersen MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
eac684ef1c29684b1bcd27a89c38c202e568e469Tom Gundersen Lesser General Public License for more details.
eac684ef1c29684b1bcd27a89c38c202e568e469Tom Gundersen You should have received a copy of the GNU Lesser General Public License
eac684ef1c29684b1bcd27a89c38c202e568e469Tom Gundersen along with systemd; If not, see <http://www.gnu.org/licenses/>.
eac684ef1c29684b1bcd27a89c38c202e568e469Tom Gundersen<refentry id="systemd.network" conditional='ENABLE_NETWORKD'>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <productname>systemd</productname>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <refentrytitle>systemd.network</refentrytitle>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <refname>systemd.network</refname>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <refpurpose>Network configuration</refpurpose>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <refsynopsisdiv>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para><filename><replaceable>network</replaceable>.network</filename></para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek </refsynopsisdiv>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>Network setup is performed by
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <citerefentry><refentrytitle>systemd-networkd</refentrytitle><manvolnum>8</manvolnum></citerefentry>.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>Network files must have the extension
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <filename>.network</filename>; other extensions are ignored.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek Networks are applied to links whenever the links appear.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>The <filename>.network</filename> files are read from the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek files located in the system network directory
12b42c76672a66c2d4ea7212c14f8f1b5a62b78dTom Gundersen <filename>/usr/lib/systemd/network</filename>, the volatile
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek runtime network directory
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <filename>/run/systemd/network</filename> and the local
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek administration network directory
12b42c76672a66c2d4ea7212c14f8f1b5a62b78dTom Gundersen <filename>/etc/systemd/network</filename>. All configuration files
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek are collectively sorted and processed in lexical order, regardless
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek of the directories in which they live. However, files with
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek identical filenames replace each other. Files in
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <filename>/etc</filename> have the highest priority, files in
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <filename>/run</filename> take precedence over files with the same
12b42c76672a66c2d4ea7212c14f8f1b5a62b78dTom Gundersen name in <filename>/usr/lib</filename>. This can be used to
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek override a system-supplied configuration file with a local file if
57e27ec0ada6775d85a5201cd25e989d92d0a1afZbigniew Jędrzejewski-Szmek needed. As a special case, an empty file (file size 0) or symlink
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt with the same name pointing to <filename>/dev/null</filename>
a8eaaee72a2f06e0fb64fb71de3b71ecba31dafbJan Engelhardt disables the configuration file entirely (it is "masked").</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <title>[Match] Section Options</title>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>The network file contains a <literal>[Match]</literal>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek section, which determines if a given network file may be applied
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek to a given device; and a <literal>[Network]</literal> section
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek specifying how the device should be configured. The first (in
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek lexical order) of the network files that matches a given device
a22e1850c36e52cb9d593b99be59b6ba7639d80aLennart Poettering is applied, all later files are ignored, even if they match as
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>A network file is said to match a device if each of the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek entries in the <literal>[Match]</literal> section matches, or if
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek the section is empty. The following keys are accepted:</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <variablelist class='network-directives'>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>MACAddress=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>The hardware address.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>Path=</varname></term>
5256e00e8b9015dd1a976d647fc71dc7efbd8cf8Tom Gundersen <para>A whitespace-separated list of shell-style globs
5256e00e8b9015dd1a976d647fc71dc7efbd8cf8Tom Gundersen matching the persistent path, as exposed by the udev
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>Driver=</varname></term>
5256e00e8b9015dd1a976d647fc71dc7efbd8cf8Tom Gundersen <para>A whitespace-separated list of shell-style globs
5256e00e8b9015dd1a976d647fc71dc7efbd8cf8Tom Gundersen matching the driver currently bound to the device, as
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek exposed by the udev property <literal>DRIVER</literal>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek of its parent device, or if that is not set the driver
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek as exposed by <literal>ethtool -i</literal> of the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek device itself.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>Type=</varname></term>
5256e00e8b9015dd1a976d647fc71dc7efbd8cf8Tom Gundersen <para>A whitespace-separated list of shell-style globs
5256e00e8b9015dd1a976d647fc71dc7efbd8cf8Tom Gundersen matching the device type, as exposed by the udev property
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <literal>DEVTYPE</literal>.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>Name=</varname></term>
5256e00e8b9015dd1a976d647fc71dc7efbd8cf8Tom Gundersen <para>A whitespace-separated list of shell-style globs
5256e00e8b9015dd1a976d647fc71dc7efbd8cf8Tom Gundersen matching the device name, as exposed by the udev property
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>Host=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>Matches against the hostname or machine ID of the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek host. See <literal>ConditionHost=</literal> in
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <citerefentry><refentrytitle>systemd.unit</refentrytitle><manvolnum>5</manvolnum></citerefentry>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>Virtualization=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>Checks whether the system is executed in a virtualized
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek environment and optionally test whether it is a specific
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek implementation. See <literal>ConditionVirtualization=</literal> in
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <citerefentry><refentrytitle>systemd.unit</refentrytitle><manvolnum>5</manvolnum></citerefentry>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>KernelCommandLine=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>Checks whether a specific kernel command line option is
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek set (or if prefixed with the exclamation mark unset). See
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <literal>ConditionKernelCommandLine=</literal> in
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <citerefentry><refentrytitle>systemd.unit</refentrytitle><manvolnum>5</manvolnum></citerefentry>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>Architecture=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>Checks whether the system is running on a specific
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek architecture. See <literal>ConditionArchitecture=</literal> in
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <citerefentry><refentrytitle>systemd.unit</refentrytitle><manvolnum>5</manvolnum></citerefentry>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <title>[Link] Section Options</title>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para> The <literal>[Link]</literal> section accepts the following keys:</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <variablelist class='network-directives'>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>MACAddress=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>The hardware address.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>MTUBytes=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>The maximum transmission unit in bytes to set for the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek device. The usual suffixes K, M, G, are supported and are
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek understood to the base of 1024.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <title>[Network] Section Options</title>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>The <literal>[Network]</literal> section accepts the following keys:</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <variablelist class='network-directives'>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>Description=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>A description of the device. This is only used for
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek presentation purposes.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>DHCP=</varname></term>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <para>Enables DHCPv4 and/or DHCPv6 client support. Accepts
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <literal>yes</literal>, <literal>no</literal>,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <literal>ipv4</literal>, or <literal>ipv6</literal>.</para>
f5a8c43f39937d97c9ed75e3fe8621945b42b0dbTom Gundersen <para>Note that DHCPv6 will by default be triggered by Router
7f3fdb7f19a109fa3d1be92926bfe4cea1817da5Jakub Wilk Advertisement, if that is enabled, regardless of this parameter.
f5a8c43f39937d97c9ed75e3fe8621945b42b0dbTom Gundersen By enabling DHCPv6 support explicitly, the DHCPv6 client will
f5a8c43f39937d97c9ed75e3fe8621945b42b0dbTom Gundersen be started regardless of the presence of routers on the link,
f5a8c43f39937d97c9ed75e3fe8621945b42b0dbTom Gundersen or what flags the routers pass. See
f5a8c43f39937d97c9ed75e3fe8621945b42b0dbTom Gundersen <literal>IPv6AcceptRouterAdvertisements=</literal>.</para>
f5a8c43f39937d97c9ed75e3fe8621945b42b0dbTom Gundersen <para>Furthermore, note that by default the domain name
e88d8021ba34be32ef5ace32e7243da798b0d1c5Zbigniew Jędrzejewski-Szmek specified through DHCP is not used for name resolution.
e88d8021ba34be32ef5ace32e7243da798b0d1c5Zbigniew Jędrzejewski-Szmek See option <option>UseDomains=</option> below.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>DHCPServer=</varname></term>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <para>A boolean. Enables DHCPv4 server support. Defaults
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering to <literal>no</literal>. Further settings for the DHCP
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering server may be set in the <literal>[DHCPServer]</literal>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering section described below.</para>
56fd6bf795926409b087bce406ea851ad89f9fe8Tom Gundersen <term><varname>LinkLocalAddressing=</varname></term>
d0d6a4cd70477970812bff0a37e70f66208d7c14Tom Gundersen <para>Enables link-local address autoconfiguration. Accepts
d0d6a4cd70477970812bff0a37e70f66208d7c14Tom Gundersen <literal>yes</literal>, <literal>no</literal>,
d0d6a4cd70477970812bff0a37e70f66208d7c14Tom Gundersen <literal>ipv4</literal>, or <literal>ipv6</literal>. Defaults to
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>IPv4LLRoute=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>A boolean. When true, sets up the route needed for
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek non-IPv4LL hosts to communicate with IPv4LL-only hosts. Defaults
113bfde15f9393fa8bc22cbd839c0bc64e733ee2Tom Gundersen <para>An IPv6 address with the top 64 bits unset. When set, indicates the
a8eaaee72a2f06e0fb64fb71de3b71ecba31dafbJan Engelhardt 64-bit interface part of SLAAC IPv6 addresses for this link. By default,
113bfde15f9393fa8bc22cbd839c0bc64e733ee2Tom Gundersen it is autogenerated.</para>
113bfde15f9393fa8bc22cbd839c0bc64e733ee2Tom Gundersen </varlistentry>
113bfde15f9393fa8bc22cbd839c0bc64e733ee2Tom Gundersen <varlistentry>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>LLMNR=</varname></term>
aaa297d4e5401fd4466632555432774863457f1dLennart Poettering <para>A boolean or <literal>resolve</literal>. When true,
aaa297d4e5401fd4466632555432774863457f1dLennart Poettering enables <ulink
aaa297d4e5401fd4466632555432774863457f1dLennart Poettering url="https://tools.ietf.org/html/rfc4795">Link-Local
aaa297d4e5401fd4466632555432774863457f1dLennart Poettering Multicast Name Resolution</ulink> on the link. When set to
aaa297d4e5401fd4466632555432774863457f1dLennart Poettering <literal>resolve</literal>, only resolution is enabled,
aaa297d4e5401fd4466632555432774863457f1dLennart Poettering but not host registration and announcement. Defaults to
aaa297d4e5401fd4466632555432774863457f1dLennart Poettering true. This setting is read by
aaa297d4e5401fd4466632555432774863457f1dLennart Poettering <citerefentry><refentrytitle>systemd-resolved.service</refentrytitle><manvolnum>8</manvolnum></citerefentry>.</para>
aaa297d4e5401fd4466632555432774863457f1dLennart Poettering </varlistentry>
aaa297d4e5401fd4466632555432774863457f1dLennart Poettering <varlistentry>
aaa297d4e5401fd4466632555432774863457f1dLennart Poettering <term><varname>MulticastDNS=</varname></term>
aaa297d4e5401fd4466632555432774863457f1dLennart Poettering <para>A boolean or <literal>resolve</literal>. When true,
aaa297d4e5401fd4466632555432774863457f1dLennart Poettering enables <ulink
aaa297d4e5401fd4466632555432774863457f1dLennart Poettering url="https://tools.ietf.org/html/rfc6762">Multicast
aaa297d4e5401fd4466632555432774863457f1dLennart Poettering DNS</ulink> support on the link. When set to
aaa297d4e5401fd4466632555432774863457f1dLennart Poettering <literal>resolve</literal>, only resolution is enabled,
aaa297d4e5401fd4466632555432774863457f1dLennart Poettering but not host or service registration and
aaa297d4e5401fd4466632555432774863457f1dLennart Poettering announcement. Defaults to false. This setting is read by
aaa297d4e5401fd4466632555432774863457f1dLennart Poettering <citerefentry><refentrytitle>systemd-resolved.service</refentrytitle><manvolnum>8</manvolnum></citerefentry>.</para>
ad6c04756115809d615dede330213d73edf732a8Lennart Poettering <varlistentry>
ad6c04756115809d615dede330213d73edf732a8Lennart Poettering <para>A boolean or
ad6c04756115809d615dede330213d73edf732a8Lennart Poettering <literal>allow-downgrade</literal>. When true, enables
ad6c04756115809d615dede330213d73edf732a8Lennart Poettering url="https://tools.ietf.org/html/rfc4033">DNSSEC</ulink>
ad6c04756115809d615dede330213d73edf732a8Lennart Poettering DNS validation support on the link. When set to
ad6c04756115809d615dede330213d73edf732a8Lennart Poettering <literal>allow-downgrade</literal>, compatibility with
ad6c04756115809d615dede330213d73edf732a8Lennart Poettering non-DNSSEC capable networks is increased, by automatically
ad6c04756115809d615dede330213d73edf732a8Lennart Poettering turning off DNSEC in this case. This option defines a
ad6c04756115809d615dede330213d73edf732a8Lennart Poettering per-interface setting for
ad6c04756115809d615dede330213d73edf732a8Lennart Poettering <citerefentry><refentrytitle>resolved.conf</refentrytitle><manvolnum>5</manvolnum></citerefentry>'s
ad6c04756115809d615dede330213d73edf732a8Lennart Poettering global <varname>DNSSEC=</varname> option. Defaults to
ad6c04756115809d615dede330213d73edf732a8Lennart Poettering false. This setting is read by
ad6c04756115809d615dede330213d73edf732a8Lennart Poettering <citerefentry><refentrytitle>systemd-resolved.service</refentrytitle><manvolnum>8</manvolnum></citerefentry>.</para>
ad6c04756115809d615dede330213d73edf732a8Lennart Poettering </varlistentry>
8a516214c4412e8a40544bd725a6d499a30cbbbfLennart Poettering <varlistentry>
8a516214c4412e8a40544bd725a6d499a30cbbbfLennart Poettering <term><varname>DNSSECNegativeTrustAnchors=</varname></term>
8a516214c4412e8a40544bd725a6d499a30cbbbfLennart Poettering <listitem><para>A space-separated list of DNSSEC negative
8a516214c4412e8a40544bd725a6d499a30cbbbfLennart Poettering trust anchor domains. If specified and DNSSEC is enabled,
8a516214c4412e8a40544bd725a6d499a30cbbbfLennart Poettering look-ups done via the interface's DNS server will be subject
8a516214c4412e8a40544bd725a6d499a30cbbbfLennart Poettering to the list of negative trust anchors, and not require
8a516214c4412e8a40544bd725a6d499a30cbbbfLennart Poettering authentication for the specified domains, or anything below
8a516214c4412e8a40544bd725a6d499a30cbbbfLennart Poettering it. Use this to disable DNSSEC authentication for specific
8a516214c4412e8a40544bd725a6d499a30cbbbfLennart Poettering private domains, that cannot be proven valid using the
8a516214c4412e8a40544bd725a6d499a30cbbbfLennart Poettering Internet DNS hierarchy. Defaults to the empty list. This
8a516214c4412e8a40544bd725a6d499a30cbbbfLennart Poettering setting is read by
8a516214c4412e8a40544bd725a6d499a30cbbbfLennart Poettering <citerefentry><refentrytitle>systemd-resolved.service</refentrytitle><manvolnum>8</manvolnum></citerefentry>.</para>
8a516214c4412e8a40544bd725a6d499a30cbbbfLennart Poettering </varlistentry>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>LLDP=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>A boolean. When true, enables LLDP link receive support.
0d4ad91dd4fc831c31a9775b0eadf97fea6cd7f6Alin Rauta <varlistentry>
0d4ad91dd4fc831c31a9775b0eadf97fea6cd7f6Alin Rauta <para>A port or a list of ports. When set, controls the
dd2b607b7d1ce355e93f9f71cd256ec20b8ae9c4Thomas Hindoe Paaboel Andersen behavior of the current interface. When all ports in the list
0d4ad91dd4fc831c31a9775b0eadf97fea6cd7f6Alin Rauta are in an operational down state, the current interface is brought
0d4ad91dd4fc831c31a9775b0eadf97fea6cd7f6Alin Rauta down. When at least one port has carrier, the current interface
0d4ad91dd4fc831c31a9775b0eadf97fea6cd7f6Alin Rauta is brought up.
0d4ad91dd4fc831c31a9775b0eadf97fea6cd7f6Alin Rauta </varlistentry>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>Address=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>A static IPv4 or IPv6 address and its prefix length,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek separated by a <literal>/</literal> character. Specify
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek this key more than once to configure several addresses.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek The format of the address must be as described in
3ba3a79df4ae094d1008c04a9af8d1ff970124c4Zbigniew Jędrzejewski-Szmek <citerefentry project='man-pages'><refentrytitle>inet_pton</refentrytitle><manvolnum>3</manvolnum></citerefentry>.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek This is a short-hand for an [Address] section only
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek containing an Address key (see below). This option may be
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek specified more than once.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>If the specified address is 0.0.0.0 (for IPv4) or
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [::] (for IPv6), a new address range of the requested size
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek is automatically allocated from a system-wide pool of
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek unused ranges. The allocated range is checked against all
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek current network interfaces and all known network
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek configuration files to avoid address range conflicts. The
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek default system-wide pool consists of 192.168.0.0/16,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek 172.16.0.0/12 and 10.0.0.0/8 for IPv4, and fc00::/7 for
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek IPv6. This functionality is useful to manage a large
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek number of dynamically created network interfaces with the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek same network configuration and automatic address range
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek assignment.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>Gateway=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>The gateway address, which must be in the format
3ba3a79df4ae094d1008c04a9af8d1ff970124c4Zbigniew Jędrzejewski-Szmek <citerefentry project='man-pages'><refentrytitle>inet_pton</refentrytitle><manvolnum>3</manvolnum></citerefentry>.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek This is a short-hand for a [Route] section only containing
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek a Gateway key. This option may be specified more than
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>DNS=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>A DNS server address, which must be in the format
3ba3a79df4ae094d1008c04a9af8d1ff970124c4Zbigniew Jędrzejewski-Szmek <citerefentry project='man-pages'><refentrytitle>inet_pton</refentrytitle><manvolnum>3</manvolnum></citerefentry>.
f41b446a7677c030250ccf318306dc637d1d9871Lennart Poettering This option may be specified more than once. This setting is read by
3df9bec57c3e2d96f7e2a25961585cfa609b61ebLennart Poettering <citerefentry><refentrytitle>systemd-resolved.service</refentrytitle><manvolnum>8</manvolnum></citerefentry>.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>Domains=</varname></term>
3df9bec57c3e2d96f7e2a25961585cfa609b61ebLennart Poettering <para>The domains used for DNS host name resolution on this link. Takes a list of DNS domain names which
3df9bec57c3e2d96f7e2a25961585cfa609b61ebLennart Poettering are used as search suffixes for extending single-label host names (host names containing no dots) to become
3df9bec57c3e2d96f7e2a25961585cfa609b61ebLennart Poettering fully qualified domain names (FQDNs). If a single-label host name is resolved on this interface, each of
3df9bec57c3e2d96f7e2a25961585cfa609b61ebLennart Poettering the specified search domains are appended to it in turn, converting it into a fully qualified domain name,
3df9bec57c3e2d96f7e2a25961585cfa609b61ebLennart Poettering until one of them may be successfully resolved.</para>
3df9bec57c3e2d96f7e2a25961585cfa609b61ebLennart Poettering <para>The specified domains are also used for routing of DNS queries: look-ups for host names ending in the
3df9bec57c3e2d96f7e2a25961585cfa609b61ebLennart Poettering domains specified here are preferably routed to the DNS servers configured for this interface. If a domain
3df9bec57c3e2d96f7e2a25961585cfa609b61ebLennart Poettering name is prefixed with <literal>~</literal>, the domain name becomes a pure "routing" domain, is used for
3df9bec57c3e2d96f7e2a25961585cfa609b61ebLennart Poettering DNS query routing purposes only and is not used in the described domain search logic. By specifying a
3df9bec57c3e2d96f7e2a25961585cfa609b61ebLennart Poettering routing domain of <literal>~.</literal> (the tilda indicating definition of a routing domain, the dot
3df9bec57c3e2d96f7e2a25961585cfa609b61ebLennart Poettering referring to the DNS root domain which is the implied suffix of all valid DNS names) it is possible to
3df9bec57c3e2d96f7e2a25961585cfa609b61ebLennart Poettering route all DNS traffic preferably to the DNS server specified for this interface. The route domain logic is
3df9bec57c3e2d96f7e2a25961585cfa609b61ebLennart Poettering particularly useful on multi-homed hosts with DNS servers serving particular private DNS zones on each
3df9bec57c3e2d96f7e2a25961585cfa609b61ebLennart Poettering interface.</para>
3df9bec57c3e2d96f7e2a25961585cfa609b61ebLennart Poettering <para>This setting is read by
3df9bec57c3e2d96f7e2a25961585cfa609b61ebLennart Poettering <citerefentry><refentrytitle>systemd-resolved.service</refentrytitle><manvolnum>8</manvolnum></citerefentry>.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>NTP=</varname></term>
f41b446a7677c030250ccf318306dc637d1d9871Lennart Poettering <para>An NTP server address. This option may be specified more than once. This setting is read by
3df9bec57c3e2d96f7e2a25961585cfa609b61ebLennart Poettering <citerefentry><refentrytitle>systemd-timesyncd.service</refentrytitle><manvolnum>8</manvolnum></citerefentry>.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>IPForward=</varname></term>
765afd5c4dbc71940d6dd6007ecc3eaa5a0b2aa1Lennart Poettering <listitem><para>Configures IP packet forwarding for the
765afd5c4dbc71940d6dd6007ecc3eaa5a0b2aa1Lennart Poettering system. If enabled, incoming packets on any network
765afd5c4dbc71940d6dd6007ecc3eaa5a0b2aa1Lennart Poettering interface will be forwarded to any other interfaces
765afd5c4dbc71940d6dd6007ecc3eaa5a0b2aa1Lennart Poettering according to the routing table. Takes either a boolean
765afd5c4dbc71940d6dd6007ecc3eaa5a0b2aa1Lennart Poettering argument, or the values <literal>ipv4</literal> or
765afd5c4dbc71940d6dd6007ecc3eaa5a0b2aa1Lennart Poettering <literal>ipv6</literal>, which only enable IP packet
765afd5c4dbc71940d6dd6007ecc3eaa5a0b2aa1Lennart Poettering forwarding for the specified address family. This controls
765afd5c4dbc71940d6dd6007ecc3eaa5a0b2aa1Lennart Poettering the <filename>net.ipv4.ip_forward</filename> and
765afd5c4dbc71940d6dd6007ecc3eaa5a0b2aa1Lennart Poettering <filename>net.ipv6.conf.all.forwarding</filename> sysctl
765afd5c4dbc71940d6dd6007ecc3eaa5a0b2aa1Lennart Poettering options of the network interface (see <ulink
4046d8361c55c80ab8577aea52523b9e6eab0d0cLennart Poettering url="https://www.kernel.org/doc/Documentation/networking/ip-sysctl.txt">ip-sysctl.txt</ulink>
4046d8361c55c80ab8577aea52523b9e6eab0d0cLennart Poettering for details about sysctl options). Defaults to
765afd5c4dbc71940d6dd6007ecc3eaa5a0b2aa1Lennart Poettering <para>Note: this setting controls a global kernel option,
765afd5c4dbc71940d6dd6007ecc3eaa5a0b2aa1Lennart Poettering and does so one way only: if a network that has this setting
765afd5c4dbc71940d6dd6007ecc3eaa5a0b2aa1Lennart Poettering enabled is set up the global setting is turned on. However,
765afd5c4dbc71940d6dd6007ecc3eaa5a0b2aa1Lennart Poettering it is never turned off again, even after all networks with
765afd5c4dbc71940d6dd6007ecc3eaa5a0b2aa1Lennart Poettering this setting enabled are shut down again.</para>
765afd5c4dbc71940d6dd6007ecc3eaa5a0b2aa1Lennart Poettering <para>To allow IP packet forwarding only between specific
765afd5c4dbc71940d6dd6007ecc3eaa5a0b2aa1Lennart Poettering network interfaces use a firewall.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>IPMasquerade=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <listitem><para>Configures IP masquerading for the network
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt interface. If enabled, packets forwarded from the network
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek interface will be appear as coming from the local host.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek Takes a boolean argument. Implies
5c82dd13e1eef502afcef209a3b14a2100966909Benedikt Morbach <varname>IPForward=ipv4</varname>. Defaults to
a46e37cb1225a36a33e8728005693e825cdbc01aSusant Sahani <varlistentry>
a46e37cb1225a36a33e8728005693e825cdbc01aSusant Sahani <term><varname>IPv6PrivacyExtensions=</varname></term>
1f0d9695125bf8e66d0e53e37d454755a84899bbLennart Poettering <listitem><para>Configures use of stateless temporary
1f0d9695125bf8e66d0e53e37d454755a84899bbLennart Poettering addresses that change over time (see <ulink
1f0d9695125bf8e66d0e53e37d454755a84899bbLennart Poettering url="https://tools.ietf.org/html/rfc4941">RFC 4941</ulink>,
1f0d9695125bf8e66d0e53e37d454755a84899bbLennart Poettering Privacy Extensions for Stateless Address Autoconfiguration
1f0d9695125bf8e66d0e53e37d454755a84899bbLennart Poettering in IPv6). Takes a boolean or the special values
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt <literal>kernel</literal>. When true, enables the privacy
1f0d9695125bf8e66d0e53e37d454755a84899bbLennart Poettering extensions and prefers temporary addresses over public
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt addresses. When <literal>prefer-public</literal>, enables the
1f0d9695125bf8e66d0e53e37d454755a84899bbLennart Poettering privacy extensions, but prefers public addresses over
1f0d9695125bf8e66d0e53e37d454755a84899bbLennart Poettering temporary addresses. When false, the privacy extensions
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt remain disabled. When <literal>kernel</literal>, the kernel's
1f0d9695125bf8e66d0e53e37d454755a84899bbLennart Poettering default setting will be left in place. Defaults to
a46e37cb1225a36a33e8728005693e825cdbc01aSusant Sahani </varlistentry>
941d0aa8f4426b306e246b096175a28676259055Susant Sahani <varlistentry>
941d0aa8f4426b306e246b096175a28676259055Susant Sahani <term><varname>IPv6AcceptRouterAdvertisements=</varname></term>
a8eaaee72a2f06e0fb64fb71de3b71ecba31dafbJan Engelhardt <listitem><para>Force the setting of the <filename>accept_ra</filename>
ebf9808112d7ed049f461e3ae8aad82b2d65f901Zbigniew Jędrzejewski-Szmek (router advertisements) setting for the interface.
ebf9808112d7ed049f461e3ae8aad82b2d65f901Zbigniew Jędrzejewski-Szmek When unset, the kernel default is used, and router
ebf9808112d7ed049f461e3ae8aad82b2d65f901Zbigniew Jędrzejewski-Szmek advertisements are accepted only when local forwarding
ebf9808112d7ed049f461e3ae8aad82b2d65f901Zbigniew Jędrzejewski-Szmek is disabled for that interface.
f5a8c43f39937d97c9ed75e3fe8621945b42b0dbTom Gundersen When router advertisements are accepted, they will
f5a8c43f39937d97c9ed75e3fe8621945b42b0dbTom Gundersen trigger the start of the DHCPv6 client if the relevant
f5a8c43f39937d97c9ed75e3fe8621945b42b0dbTom Gundersen flags are passed, or if no routers are found on the link.
ebf9808112d7ed049f461e3ae8aad82b2d65f901Zbigniew Jędrzejewski-Szmek Takes a boolean. If true, router advertisements are
ebf9808112d7ed049f461e3ae8aad82b2d65f901Zbigniew Jędrzejewski-Szmek accepted, when false, router advertisements are ignored,
ebf9808112d7ed049f461e3ae8aad82b2d65f901Zbigniew Jędrzejewski-Szmek independently of the local forwarding state.</para>
ebf9808112d7ed049f461e3ae8aad82b2d65f901Zbigniew Jędrzejewski-Szmek <ulink url="https://www.kernel.org/doc/Documentation/networking/ip-sysctl.txt">ip-sysctl.txt</ulink>
ebf9808112d7ed049f461e3ae8aad82b2d65f901Zbigniew Jędrzejewski-Szmek in the kernel documentation, but note that systemd's
ebf9808112d7ed049f461e3ae8aad82b2d65f901Zbigniew Jędrzejewski-Szmek setting of <constant>1</constant> corresponds to
ebf9808112d7ed049f461e3ae8aad82b2d65f901Zbigniew Jędrzejewski-Szmek kernel's setting of <constant>2</constant>.</para>
941d0aa8f4426b306e246b096175a28676259055Susant Sahani </varlistentry>
44de7fb14f0fb5b8fe0f829f128c2c3e64114c0cSusant Sahani <varlistentry>
44de7fb14f0fb5b8fe0f829f128c2c3e64114c0cSusant Sahani <term><varname>IPv6DuplicateAddressDetection=</varname></term>
a8eaaee72a2f06e0fb64fb71de3b71ecba31dafbJan Engelhardt <listitem><para>Configures the amount of IPv6 Duplicate
a8eaaee72a2f06e0fb64fb71de3b71ecba31dafbJan Engelhardt Address Detection (DAD) probes to send. Defaults to unset.
44de7fb14f0fb5b8fe0f829f128c2c3e64114c0cSusant Sahani </varlistentry>
a86cba89bebb4f5fd35841a6251c0baa321dc9a5Susant Sahani <varlistentry>
a86cba89bebb4f5fd35841a6251c0baa321dc9a5Susant Sahani <listitem><para>Configures IPv6 Hop Limit. For each router that
a86cba89bebb4f5fd35841a6251c0baa321dc9a5Susant Sahani forwards the packet, the hop limit is decremented by 1. When the
a86cba89bebb4f5fd35841a6251c0baa321dc9a5Susant Sahani hop limit field reaches zero, the packet is discarded.
a86cba89bebb4f5fd35841a6251c0baa321dc9a5Susant Sahani Defaults to unset.
a86cba89bebb4f5fd35841a6251c0baa321dc9a5Susant Sahani </varlistentry>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>Bridge=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>The name of the bridge to add the link to.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>Bond=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>The name of the bond to add the link to.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>VLAN=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>The name of a VLAN to create on the link. This
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek option may be specified more than once.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>MACVLAN=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>The name of a MACVLAN to create on the link. This
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek option may be specified more than once.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>VXLAN=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>The name of a VXLAN to create on the link. This
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek option may be specified more than once.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>Tunnel=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>The name of a Tunnel to create on the link. This
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek option may be specified more than once.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <title>[Address] Section Options</title>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>An <literal>[Address]</literal> section accepts the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek following keys. Specify several <literal>[Address]</literal>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek sections to configure several addresses.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <variablelist class='network-directives'>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>Address=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>As in the <literal>[Network]</literal> section. This
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek key is mandatory.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>Peer=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>The peer address in a point-to-point connection.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek Accepts the same format as the <literal>Address</literal>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>Broadcast=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>The broadcast address, which must be in the format
3ba3a79df4ae094d1008c04a9af8d1ff970124c4Zbigniew Jędrzejewski-Szmek <citerefentry project='man-pages'><refentrytitle>inet_pton</refentrytitle><manvolnum>3</manvolnum></citerefentry>.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek This key only applies to IPv4 addresses. If it is not
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek given, it is derived from the <literal>Address</literal>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>Label=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <title>[Route] Section Options</title>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>The <literal>[Route]</literal> section accepts the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek following keys. Specify several <literal>[Route]</literal>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek sections to configure several routes.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <variablelist class='network-directives'>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>Gateway=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>As in the <literal>[Network]</literal> section.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>Destination=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>The destination prefix of the route. Possibly
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt followed by a slash and the prefix length. If omitted, a
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek full-length host route is assumed.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>Source=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>The source prefix of the route. Possibly followed by
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt a slash and the prefix length. If omitted, a full-length
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek host route is assumed.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>Metric=</varname></term>
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt <para>The metric of the route (an unsigned integer).</para>
769b56a308c3f3d3952eda87fd4fb004207f4f49Tom Gundersen <varlistentry>
a8eaaee72a2f06e0fb64fb71de3b71ecba31dafbJan Engelhardt <para>The scope of the route, which can be <literal>global</literal>,
769b56a308c3f3d3952eda87fd4fb004207f4f49Tom Gundersen <literal>link</literal> or <literal>host</literal>. Defaults to
0d07e595cc22379ec7388406c2f4f2a74eea9083Jens Kuske </varlistentry>
0d07e595cc22379ec7388406c2f4f2a74eea9083Jens Kuske <varlistentry>
0d07e595cc22379ec7388406c2f4f2a74eea9083Jens Kuske <para>The preferred source address of the route. The address
0d07e595cc22379ec7388406c2f4f2a74eea9083Jens Kuske must be in the format described in
0d07e595cc22379ec7388406c2f4f2a74eea9083Jens Kuske <citerefentry project='man-pages'><refentrytitle>inet_pton</refentrytitle><manvolnum>3</manvolnum></citerefentry>.</para>
769b56a308c3f3d3952eda87fd4fb004207f4f49Tom Gundersen </varlistentry>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <title>[DHCP] Section Options</title>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <para>The <literal>[DHCP]</literal> section configures the
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering DHCPv4 and DHCP6 client, if it is enabled with the
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <varname>DHCP=</varname> setting described above:</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <variablelist class='network-directives'>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>UseDNS=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>When true (the default), the DNS servers received
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek from the DHCP server will be used and take precedence over
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek any statically configured ones.</para>
e88d8021ba34be32ef5ace32e7243da798b0d1c5Zbigniew Jędrzejewski-Szmek <para>This corresponds to the <option>nameserver</option>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering option in <citerefentry
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering project='man-pages'><refentrytitle>resolv.conf</refentrytitle><manvolnum>5</manvolnum></citerefentry>.</para>
301f4073fe1c2757e602aef24cee9ccf5f81a3a3Michael Marineau <varlistentry>
301f4073fe1c2757e602aef24cee9ccf5f81a3a3Michael Marineau <para>When true (the default), the NTP servers received
301f4073fe1c2757e602aef24cee9ccf5f81a3a3Michael Marineau from the DHCP server will be used by systemd-timesyncd
301f4073fe1c2757e602aef24cee9ccf5f81a3a3Michael Marineau and take precedence over any statically configured ones.</para>
301f4073fe1c2757e602aef24cee9ccf5f81a3a3Michael Marineau </varlistentry>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>UseMTU=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>When true, the interface maximum transmission unit
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek from the DHCP server will be used on the current link.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek Defaults to false.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>SendHostname=</varname></term>
d59be2cf702dd29d0bb228013cef801f2e9dd22fZbigniew Jędrzejewski-Szmek <para>When true (the default), the machine's hostname will
d59be2cf702dd29d0bb228013cef801f2e9dd22fZbigniew Jędrzejewski-Szmek be sent to the DHCP server.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>UseHostname=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>When true (the default), the hostname received from
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering the DHCP server will be set as the transient hostname of the system
1adc5d0bcd17fc8a8cd22fcd03174bfd75306dcdSusant Sahani <varlistentry>
d59be2cf702dd29d0bb228013cef801f2e9dd22fZbigniew Jędrzejewski-Szmek <para>Use this value for the hostname which is sent to the
d59be2cf702dd29d0bb228013cef801f2e9dd22fZbigniew Jędrzejewski-Szmek DHCP server, instead of machine's hostname.</para>
1adc5d0bcd17fc8a8cd22fcd03174bfd75306dcdSusant Sahani </varlistentry>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>UseDomains=</varname></term>
b2a81c0b524fee0a1713720462b6db5c302c3933Lennart Poettering <para>Takes a boolean argument, or a the special value <literal>route</literal>. When true, the domain name
b2a81c0b524fee0a1713720462b6db5c302c3933Lennart Poettering received from the DHCP server will be used as DNS search domain over this link, similar to the effect of
b2a81c0b524fee0a1713720462b6db5c302c3933Lennart Poettering the <option>Domains=</option> setting. If set to <literal>route</literal>, the domain name received from
b2a81c0b524fee0a1713720462b6db5c302c3933Lennart Poettering the DHCP server will be used for routing DNS queries only, but not for searching, similar to the effect of
b2a81c0b524fee0a1713720462b6db5c302c3933Lennart Poettering the <option>Domains=</option> setting when the argument is prefixed with <literal>~</literal>. Defaults to
b2a81c0b524fee0a1713720462b6db5c302c3933Lennart Poettering <para>It is recommended to enable this option only on trusted networks, as setting this affects resolution
b2a81c0b524fee0a1713720462b6db5c302c3933Lennart Poettering of all host names, in particular to single-label names. It is generally safer to use the supplied domain
b2a81c0b524fee0a1713720462b6db5c302c3933Lennart Poettering only as routing domain, rather than as search domain, in order to not have it affect local resolution of
b2a81c0b524fee0a1713720462b6db5c302c3933Lennart Poettering single-label names.</para>
b2a81c0b524fee0a1713720462b6db5c302c3933Lennart Poettering <para>When set to true, this setting corresponds to the <option>domain</option> option in <citerefentry
b2a81c0b524fee0a1713720462b6db5c302c3933Lennart Poettering project='man-pages'><refentrytitle>resolv.conf</refentrytitle><manvolnum>5</manvolnum></citerefentry>.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>UseRoutes=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>When true (the default), the static routes will be
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek requested from the DHCP server and added to the routing
a8eaaee72a2f06e0fb64fb71de3b71ecba31dafbJan Engelhardt table with a metric of 1024.</para>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <varlistentry>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <term><varname>UseTimezone=</varname></term>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <listitem><para>When true, the timezone received from the
7f3fdb7f19a109fa3d1be92926bfe4cea1817da5Jakub Wilk DHCP server will be set as timezone of the local
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering system. Defaults to <literal>no</literal>.</para></listitem>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering </varlistentry>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>CriticalConnection=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>When true, the connection will never be torn down
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek even if the DHCP lease expires. This is contrary to the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek DHCP specification, but may be the best choice if, say,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek the root filesystem relies on this connection. Defaults to
3e43b2cd97bd82efe6a09e8b9b2e6b5f33f578a0Jan Janssen <varlistentry>
3e43b2cd97bd82efe6a09e8b9b2e6b5f33f578a0Jan Janssen <term><varname>ClientIdentifier=</varname></term>
3e43b2cd97bd82efe6a09e8b9b2e6b5f33f578a0Jan Janssen <para>DHCP client identifier to use. Either <literal>mac</literal>
3e43b2cd97bd82efe6a09e8b9b2e6b5f33f578a0Jan Janssen to use the MAC address of the link or <literal>duid</literal>
4a6970c5354cd367b1fa62114057d8e084a20403Torstein Husebø (the default) to use a RFC4361-compliant Client ID.</para>
3e43b2cd97bd82efe6a09e8b9b2e6b5f33f578a0Jan Janssen </varlistentry>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>VendorClassIdentifier=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>The vendor class identifier used to identify vendor
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek type and configuration.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>RequestBroadcast=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>Request the server to use broadcast messages before
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek the IP address has been configured. This is necessary for
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek devices that cannot receive RAW packets, or that cannot
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek receive packets at all before an IP address has been
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek configured. On the other hand, this must not be enabled on
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek networks where broadcasts are filtered out.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>RouteMetric=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>Set the routing metric for routes specified by the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek DHCP server.</para>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering </variablelist>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <title>[DHCPServer] Section Options</title>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <para>The <literal>[DHCPServer]</literal> section contains
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering settings for the DHCP server, if enabled via the
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <varname>DHCPServer=</varname> option described above:</para>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <variablelist class='network-directives'>
9b3a67c55b7df6642a0389306c513b17c211f280Tom Gundersen <varlistentry>
9b3a67c55b7df6642a0389306c513b17c211f280Tom Gundersen <listitem><para>Configures the pool of addresses to hand out. The pool
9b3a67c55b7df6642a0389306c513b17c211f280Tom Gundersen is a contiguous sequence of IP addresses in the subnet configured for
9b3a67c55b7df6642a0389306c513b17c211f280Tom Gundersen the server address, which does not include the subnet nor the broadcast
9b3a67c55b7df6642a0389306c513b17c211f280Tom Gundersen address. <varname>PoolOffset=</varname> takes the offset of the pool
9b3a67c55b7df6642a0389306c513b17c211f280Tom Gundersen from the start of subnet, or zero to use the default value.
9b3a67c55b7df6642a0389306c513b17c211f280Tom Gundersen <varname>PoolSize=</varname> takes the number of IP addresses in the
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt pool or zero to use the default value. By default, the pool starts at
9b3a67c55b7df6642a0389306c513b17c211f280Tom Gundersen the first address after the subnet address and takes up the rest of
9b3a67c55b7df6642a0389306c513b17c211f280Tom Gundersen the subnet, excluding the broadcast address. If the pool includes
9b3a67c55b7df6642a0389306c513b17c211f280Tom Gundersen the server address (the default), this is reserved and not handed
9b3a67c55b7df6642a0389306c513b17c211f280Tom Gundersen </varlistentry>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <varlistentry>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <term><varname>DefaultLeaseTimeSec=</varname></term>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <term><varname>MaxLeaseTimeSec=</varname></term>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <listitem><para>Control the default and maximum DHCP lease
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering time to pass to clients. These settings take time values in seconds or
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering another common time unit, depending on the suffix. The default
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering lease time is used for clients that did not ask for a specific
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering lease time. If a client asks for a lease time longer than the
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt maximum lease time, it is automatically shortened to the
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering specified time. The default lease time defaults to 1h, the
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering maximum lease time to 12h. Shorter lease times are beneficial
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering if the configuration data in DHCP leases changes frequently
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering and clients shall learn the new settings with shorter
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering latencies. Longer lease times reduce the generated DHCP
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering </varlistentry>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <varlistentry>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <listitem><para>Configures whether the DHCP leases handed out
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering to clients shall contain DNS server information. The
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <varname>EmitDNS=</varname> setting takes a boolean argument
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering and defaults to <literal>yes</literal>. The DNS servers to
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering pass to clients may be configured with the
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <varname>DNS=</varname> option, which takes a list of IPv4
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering addresses. If the <varname>EmitDNS=</varname> option is
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt enabled but no servers configured, the servers are
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering automatically propagated from an "uplink" interface that has
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering appropriate servers set. The "uplink" interface is determined
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering by the default route of the system with the highest
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering priority. Note that this information is acquired at the time
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering the lease is handed out, and does not take uplink interfaces
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering into account that acquire DNS or NTP server information at a
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering later point. DNS server propagation does not take
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <filename>/etc/resolv.conf</filename> into account. Also, note
a8eaaee72a2f06e0fb64fb71de3b71ecba31dafbJan Engelhardt that the leases are not refreshed if the uplink network
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering configuration changes. To ensure clients regularly acquire the
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt most current uplink DNS server information, it is thus
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering advisable to shorten the DHCP lease time via
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <varname>MaxLeaseTimeSec=</varname> described
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering </varlistentry>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <varlistentry>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <listitem><para>Similar to the <varname>EmitDNS=</varname> and
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt <varname>DNS=</varname> settings described above, these
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering settings configure whether and what NTP server information
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering shall be emitted as part of the DHCP lease. The same syntax,
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering propagation semantics and defaults apply as for
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <varname>DNS=</varname>.</para></listitem>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering </varlistentry>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <varlistentry>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <term><varname>EmitTimezone=</varname></term>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <term><varname>Timezone=</varname></term>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <listitem><para>Configures whether the DHCP leases handed out
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering to clients shall contain timezone information. The
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <varname>EmitTimezone=</varname> setting takes a boolean
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering argument and defaults to <literal>yes</literal>. The
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <varname>Timezone=</varname> setting takes a timezone string
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering (such as <literal>Europe/Berlin</literal> or
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <literal>UTC</literal>) to pass to clients. If no explicit
b938cb902c3b5bca807a94b277672c64d6767886Jan Engelhardt timezone is set, the system timezone of the local host is
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering propagated, as determined by the
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering <filename>/etc/localtime</filename> symlink.</para></listitem>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering </varlistentry>
ad9437836f5d94b44d40ee702a0455a637c30322Lennart Poettering </variablelist>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <title>[Bridge] Section Options</title>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>The <literal>[Bridge]</literal> section accepts the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek following keys.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <variablelist class='network-directives'>
165c41a99ab6002ef3ba6bd1f9361abf32c077f2Susant Sahani <varlistentry>
072f9e4af4cf465aca6e263f4dfd6e07786786d2Zbigniew Jędrzejewski-Szmek <para>A boolean. Controls whether the bridge should flood
072f9e4af4cf465aca6e263f4dfd6e07786786d2Zbigniew Jędrzejewski-Szmek traffic for which an FDB entry is missing and the destination
072f9e4af4cf465aca6e263f4dfd6e07786786d2Zbigniew Jędrzejewski-Szmek is unknown through this port. Defaults to on.
165c41a99ab6002ef3ba6bd1f9361abf32c077f2Susant Sahani </varlistentry>
165c41a99ab6002ef3ba6bd1f9361abf32c077f2Susant Sahani <varlistentry>
47c7dfe275b30cb507108f08e471d2d9ef2baa56Zbigniew Jędrzejewski-Szmek <para>A boolean. Configures whether traffic may be sent back
47c7dfe275b30cb507108f08e471d2d9ef2baa56Zbigniew Jędrzejewski-Szmek out of the port on which it was received. By default, this
47c7dfe275b30cb507108f08e471d2d9ef2baa56Zbigniew Jędrzejewski-Szmek flag is false, and the bridge will not forward traffic back
47c7dfe275b30cb507108f08e471d2d9ef2baa56Zbigniew Jędrzejewski-Szmek out of the receiving port.</para>
165c41a99ab6002ef3ba6bd1f9361abf32c077f2Susant Sahani </varlistentry>
165c41a99ab6002ef3ba6bd1f9361abf32c077f2Susant Sahani <varlistentry>
84c3409631f48869dcb59c0a74eba6d4ac40ad93Zbigniew Jędrzejewski-Szmek <term><varname>UseBPDU=</varname></term>
47c7dfe275b30cb507108f08e471d2d9ef2baa56Zbigniew Jędrzejewski-Szmek <para>A boolean. Configures whether STP Bridge Protocol Data Units will be
84c3409631f48869dcb59c0a74eba6d4ac40ad93Zbigniew Jędrzejewski-Szmek processed by the bridge port. Defaults to yes.</para>
165c41a99ab6002ef3ba6bd1f9361abf32c077f2Susant Sahani </varlistentry>
165c41a99ab6002ef3ba6bd1f9361abf32c077f2Susant Sahani <varlistentry>
47c7dfe275b30cb507108f08e471d2d9ef2baa56Zbigniew Jędrzejewski-Szmek <para>A boolean. This flag allows the bridge to immediately stop multicast
a8eaaee72a2f06e0fb64fb71de3b71ecba31dafbJan Engelhardt traffic on a port that receives an IGMP Leave message. It is only used with
47c7dfe275b30cb507108f08e471d2d9ef2baa56Zbigniew Jędrzejewski-Szmek IGMP snooping if enabled on the bridge. Defaults to off.</para>
165c41a99ab6002ef3ba6bd1f9361abf32c077f2Susant Sahani </varlistentry>
165c41a99ab6002ef3ba6bd1f9361abf32c077f2Susant Sahani <varlistentry>
23da66bb402cc6d9bca2eb34e090ccc24dfbf3f5Zbigniew Jędrzejewski-Szmek <term><varname>AllowPortToBeRoot=</varname></term>
47c7dfe275b30cb507108f08e471d2d9ef2baa56Zbigniew Jędrzejewski-Szmek <para>A boolean. Configures whether a given port is allowed to
47c7dfe275b30cb507108f08e471d2d9ef2baa56Zbigniew Jędrzejewski-Szmek become a root port. Only used when STP is enabled on the bridge.
23da66bb402cc6d9bca2eb34e090ccc24dfbf3f5Zbigniew Jędrzejewski-Szmek Defaults to on.</para>
165c41a99ab6002ef3ba6bd1f9361abf32c077f2Susant Sahani </varlistentry>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>Cost=</varname></term>
47c7dfe275b30cb507108f08e471d2d9ef2baa56Zbigniew Jędrzejewski-Szmek <para>Sets the "cost" of sending packets of this interface.
a8eaaee72a2f06e0fb64fb71de3b71ecba31dafbJan Engelhardt Each port in a bridge may have a different speed and the cost
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek is used to decide which link to use. Faster interfaces
47c7dfe275b30cb507108f08e471d2d9ef2baa56Zbigniew Jędrzejewski-Szmek should have lower costs.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <title>[BridgeFDB] Section Options</title>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>The <literal>[BridgeFDB]</literal> section manages the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek forwarding database table of a port and accepts the following
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek keys. Specify several <literal>[BridgeFDB]</literal> sections to
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek configure several static MAC table entries.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <variablelist class='network-directives'>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>MACAddress=</varname></term>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <para>As in the <literal>[Network]</literal> section. This
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek key is mandatory.</para>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <term><varname>VLANId=</varname></term>
a8eaaee72a2f06e0fb64fb71de3b71ecba31dafbJan Engelhardt <para>The VLAN ID for the new static MAC table entry. If
a8eaaee72a2f06e0fb64fb71de3b71ecba31dafbJan Engelhardt omitted, no VLAN ID info is appended to the new static MAC
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek table entry.</para>
12b42c76672a66c2d4ea7212c14f8f1b5a62b78dTom Gundersen <title>/etc/systemd/network/50-static.network</title>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <programlisting>[Match]
eac684ef1c29684b1bcd27a89c38c202e568e469Tom GundersenGateway=192.168.0.1</programlisting>
12b42c76672a66c2d4ea7212c14f8f1b5a62b78dTom Gundersen <title>/etc/systemd/network/80-dhcp.network</title>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <programlisting>[Match]
9c8ca3f7a69f82ca181b3cd2d5e1d3e621938abbZbigniew Jędrzejewski-SzmekDHCP=yes</programlisting>
6c1695be47b2830c79e128e4d05d760eb862184eLennart Poettering <title>/etc/systemd/network/25-bridge-static.network</title>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <programlisting>[Match]
f47c5c47d1a7bcfa1842ff7cc52b1f7fc1d86bcfpomaName=bridge0
f47c5c47d1a7bcfa1842ff7cc52b1f7fc1d86bcfpomaGateway=192.168.0.1
f47c5c47d1a7bcfa1842ff7cc52b1f7fc1d86bcfpomaDNS=192.168.0.1</programlisting>
6c1695be47b2830c79e128e4d05d760eb862184eLennart Poettering <title>/etc/systemd/network/25-bridge-slave-interface.network</title>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <programlisting>[Match]
f47c5c47d1a7bcfa1842ff7cc52b1f7fc1d86bcfpomaName=enp2s0
f47c5c47d1a7bcfa1842ff7cc52b1f7fc1d86bcfpomaBridge=bridge0</programlisting>
6c1695be47b2830c79e128e4d05d760eb862184eLennart Poettering <title>/etc/systemd/network/25-ipip.network</title>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <programlisting>[Match]
0a8a0fad010018be0f46d1c2e077ade0eb27c7dbTom GundersenTunnel=ipip-tun</programlisting>
6c1695be47b2830c79e128e4d05d760eb862184eLennart Poettering <title>/etc/systemd/network/25-sit.network</title>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <programlisting>[Match]
0a8a0fad010018be0f46d1c2e077ade0eb27c7dbTom GundersenTunnel=sit-tun</programlisting>
6c1695be47b2830c79e128e4d05d760eb862184eLennart Poettering <title>/etc/systemd/network/25-gre.network</title>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <programlisting>[Match]
0a8a0fad010018be0f46d1c2e077ade0eb27c7dbTom GundersenTunnel=gre-tun</programlisting>
6c1695be47b2830c79e128e4d05d760eb862184eLennart Poettering <title>/etc/systemd/network/25-vti.network</title>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <programlisting>[Match]
0a8a0fad010018be0f46d1c2e077ade0eb27c7dbTom GundersenTunnel=vti-tun</programlisting>
6c1695be47b2830c79e128e4d05d760eb862184eLennart Poettering <title>/etc/systemd/network/25-bond.network</title>
d94facdcaa8053768a2d190ee8dd6ff5114f8b33Major Hayden <programlisting>[Match]
d94facdcaa8053768a2d190ee8dd6ff5114f8b33Major Hayden</programlisting>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <citerefentry><refentrytitle>systemd</refentrytitle><manvolnum>1</manvolnum></citerefentry>,
f41b446a7677c030250ccf318306dc637d1d9871Lennart Poettering <citerefentry><refentrytitle>systemd-networkd.service</refentrytitle><manvolnum>8</manvolnum></citerefentry>,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <citerefentry><refentrytitle>systemd.link</refentrytitle><manvolnum>5</manvolnum></citerefentry>,
aaa297d4e5401fd4466632555432774863457f1dLennart Poettering <citerefentry><refentrytitle>systemd.netdev</refentrytitle><manvolnum>5</manvolnum></citerefentry>,
aaa297d4e5401fd4466632555432774863457f1dLennart Poettering <citerefentry><refentrytitle>systemd-resolved.service</refentrytitle><manvolnum>8</manvolnum></citerefentry>