SYSTEMD.NETDEV(5) systemd.network SYSTEMD.NETDEV(5) (NAME) systemd.netdev - (SYNOPSIS) netdev.netdev (DESCRIPTION) ini systemd- networkd(8) . systemd.syntax(7) . .netdev . systemd-networkd . netdev systemd-networkd (kind) ( foo (bonding) .netdev ) netdev netdev . ( VLAN) netdev . netdev networkctl reload systemd-networkd . networkctl(1) . .netdev /usr/lib/systemd/network /usr/local/lib/systemd/network /run/systemd/network /etc/systemd/network . - . . "70" ( 10-vlan.netdev). .netdev systemd-network- generator.service(8) . /etc/ /run/ /usr/lib/ . . ( ) /dev/null ( "" ). netdev foo.netdev ("drop-in") foo.netdev.d/ . ".conf" - . . . /etc/systemd/network ".d" /usr/lib/systemd/network /run/systemd/network . /etc/ /run/ /usr/lib/ . netdev . ( /run/ /usr/lib/ .) NETDEV (SUPPORTED NETDEV KINDS) .netdev : 1. +-----------------+--------------------------------------+ | (Kind) | | +-----------------+--------------------------------------+ |bond | bond | | | | | | | | | | | | (slave) | | | . | | | Linux | | | Ethernet Bonding Driver HOWTO[1] | | | . | +-----------------+--------------------------------------+ |bridge | | | | (bridge) | | | | | | | | | | | | | | | | | | | | | . | +-----------------+--------------------------------------+ |dummy | dummy | | | | | | | | | | | | | | | . | +-----------------+--------------------------------------+ |gre | | | | GRE IPv4. | | | | | | RFC 2784[2] | | | . | | | "gre0" | | | | | | | | | | | | | | | | | | | | | | | | | | | . | +-----------------+--------------------------------------+ |gretap | | | | GRE IPv4. | | | "gretap0" | | | | | | | | | | | | | | | | | | | | | | | | | | | . | +-----------------+--------------------------------------+ |erspan | ERSPAN | | | | | | | | | | | | (mirror) | | | | | | | | | | | | | | | | | | . | | | | | | | | | | | | (GRE) | | | | | | | | | | | | | | | | | | | | | | | | | | | . | | | "erspan0" | | | | | | | | | | | | | | | | | | | | | | | | | | | . | +-----------------+--------------------------------------+ |ip6gre | | | | GRE IPv6. | +-----------------+--------------------------------------+ |ip6tnl | IPv4 IPv6 | | | IPv6. | +-----------------+--------------------------------------+ |ip6gretap | | | | GRE IPv6. | +-----------------+--------------------------------------+ |ipip | IPv4 | | | IPv4. | +-----------------+--------------------------------------+ |ipvlan | IPVLAN | | | | | | | | | | | | | | | IP | | | | | | | | | . | +-----------------+--------------------------------------+ |ipvtap | IPVTAP | | | | | | | | | | | | | | | IP | | | | | | | | | | | | | | | | | | tap | | | . | +-----------------+--------------------------------------+ |macvlan | macvlan | | | | | | | | | | | | | | | MAC | | | | | | | | | . | +-----------------+--------------------------------------+ |macvtap | macvtap | | | | | | | | | | | | | | | MAC | | | | | | | | | . | +-----------------+--------------------------------------+ |sit | IPv6 | | | IPv4. | +-----------------+--------------------------------------+ |tap | | | | | | | | | | . | +-----------------+--------------------------------------+ |tun | | | | | | | | | | . | +-----------------+--------------------------------------+ |veth | | | | | | | . | +-----------------+--------------------------------------+ |vlan | VLAN | | | | | | | | | | | | | | | | | | VLAN | | | | | | | | | . | | | IEEE | | | 802.1Q[3] | | | . | +-----------------+--------------------------------------+ |vti | IPv4 | | | IPSec. | +-----------------+--------------------------------------+ |vti6 | IPv6 | | | IPSec. | +-----------------+--------------------------------------+ |vxlan | | | | | | | (vxlan) | | | | | | | | | . | +-----------------+--------------------------------------+ |geneve | netdev | | | | | | | | | | | | (GENEVE). | +-----------------+--------------------------------------+ |hsr | | | | | | | | | | | | | (HSR) | | | | | | | | | (PRP). | | | HSR | | | PRP | | | | | | | | | IEC | | | 62439-3 | | | | | | | | | | | | | | | | | | | | | | | | . | +-----------------+--------------------------------------+ |l2tp | | | | | | | (L2TP) | | | | | | | | | | | | | | | | | | | | | (VPN) | | | | | | | | | ISP | | | . | | | | | | | | | | | | | | | | | | . | +-----------------+--------------------------------------+ |macsec | | | | | | | (MACsec) | | | | | | | | | 802.1AE IEEE | | | | | | | | | | | | | | | | | | . | | | MACsec | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | . | +-----------------+--------------------------------------+ |vrf | | | | | | | | | | (VRF[4]) | | | | | | | | | | | | | | | . | +-----------------+--------------------------------------+ |vcan | CAN | | | (vcan). | | | | | | | | | loopback | | | vcan | | | CAN | | | | | | . | +-----------------+--------------------------------------+ |vxcan | | | | CAN | | | (vxcan). | | | | | | veth | | | vxcan | | | CAN | | | | | | CAN | | | | | | | | | . | | | vxcan | | | vxcan | | | | | | | | | . | | | | | | | | | | | | | | | | | | | | | . vxcan | | | | | | | | | | | | (namespaces) | | | . | +-----------------+--------------------------------------+ |wireguard | | | | WireGuard. | +-----------------+--------------------------------------+ |nlmon | | | | Netlink. | | | | | | | | | Netlink | | | | | | | | | nlmon | | | . | +-----------------+--------------------------------------+ |fou | | | | Foo-over-UDP. | +-----------------+--------------------------------------+ |xfrm | | | | | | | vti/vti6 | | | | | | . | +-----------------+--------------------------------------+ |ifb | | | | | | | | | | (ifb) | | | | | | QoS | | | | | | | | | . | +-----------------+--------------------------------------+ |bareudp | Bare UDP | | | | | | | | | | | | | | | | | | | | | | | | MPLS IP | | | | | | UDP | | | | | | . | +-----------------+--------------------------------------+ |batadv | B.A.T.M.A.N. | | | Advanced[5] | | | | | | | | | | | | | | | | | | | | | | | | . | +-----------------+--------------------------------------+ |ipoib | IP | | | | | | | | | (IP over Infiniband). | +-----------------+--------------------------------------+ |wlan | | | | | | | (WLAN). | +-----------------+--------------------------------------+ [MATCH] ([MATCH] SECTION OPTIONS) [Match] . : Host= . ConditionHost= systemd.unit(5) . ("!") . . 211 . Virtualization= . ConditionVirtualization= systemd.unit(5) . ("!") . . 211 . KernelCommandLine= . ConditionKernelCommandLine= systemd.unit(5) . ("!") . . 211 . KernelVersion= ( uname -r ) . ConditionKernelVersion= systemd.unit(5) . ("!") . . 237 . Version= . ConditionVersion= systemd.unit(5) . ("!") . . 258 . Credential= systemd-udevd.service . System and Service Credentials[6] . ("!") . . 252 . Architecture= . ConditionArchitecture= systemd.unit(5) . ("!") . . 211 . Firmware= . ConditionFirmware= systemd.unit(5) . ("!") . . 249 . [NETDEV] ([NETDEV] SECTION OPTIONS) [NetDev] : Description= netdev. 215 . Name= netdev . . 211 . Kind= netdev. . " netdev" . 211 . MTUBytes= (MTU) . K M G 1024 . "tun" "tap" MTUBytes= [NetDev] . [Link] systemd.network(5) . 215 . MACAddress= MAC "none" . "none" systemd-networkd MAC MAC . "tun" "tap" "l2tp" MACAddress= [NetDev] . [Link] systemd.network(5) . "vlan" MAC . netdev MAC machine-id(5) . "none" systemd-udevd MAC 99-default.link MACAddressPolicy=persistent . MAC .link . 215 . [BRIDGE] ([BRIDGE] SECTION OPTIONS) [Bridge] netdev "bridge" : HelloTimeSec= HelloTimeSec hello (root bridge) . hello . 227 . MaxAgeSec= MaxAgeSec . hello () . 227 . ForwardDelaySec= ForwardDelaySec Listening () Learning () Forwarding () . 227 . AgeingTimeSec= MAC MAC . 232 . Priority= . 0 65535. . . 232 . GroupForwardMask= 802.1D (01:80:C2:00:00:0X). AND 2^X ( MAC) . 8 01:80:C2:00:00:03 (802.1X PAE) . 235 . DefaultPVID= VLAN (PVID) . 1...4094 "none" PVID . 232 . MulticastQuerier= . IFLA_BR_MCAST_QUERIER . ICMP . . . 230 . MulticastSnooping= . IFLA_BR_MCAST_SNOOPING . IGMP snooping (IGMP) . . 230 . VLANFiltering= . IFLA_BR_VLAN_FILTERING . VLAN . . 231 . VLANProtocol= VLAN . 802.1q 802.1ad . 246 . STP= . (STP) . . 232 . MulticastIGMPVersion= (IGMP) . 2 3 . . 243 . FDBMaxLearned= . . . 0 . 257 . LinkLocalLearning= . . . 258 . [VLAN] ([VLAN] SECTION OPTIONS) [VLAN] netdev "vlan" : Id= VLAN . 0...4094. . 211 . Protocol= VLAN . "802.1q" "802.1ad" . 248 . GVRP= . VLAN (GVRP) VLAN . . 234 . MVRP= . VLAN (MVRP) GARP VLAN (GVRP) VLAN . 802.1ak 802.1Q-2005 . . 234 . LooseBinding= . (loose binding) VLAN VLAN VLAN . . 234 . ReorderHeader= . (reorder header) VLAN VLAN . . 234 . EgressQOSMaps=, IngressQOSMaps= (SO_PRIORITY) PCP VLAN . 1...4294967294 "from"-"to" "21-7 45-5". "from" "to" . . 248 . [MACVLAN] ([MACVLAN] SECTION OPTIONS) [MACVLAN] netdev "macvlan" : Mode= MACVLAN . "private" "vepa" "bridge" "passthru" "source". 211 . SourceMACAddress= MACVLAN . source . . . . . 246 . BroadcastMulticastQueueLength= / . 0...4294967294. . 248 . BroadcastQueueThreshold= macvlan . "no" 0...2147483647 . "no" . macvlan . . 256 . [MACVTAP] ([MACVTAP] SECTION OPTIONS) [MACVTAP] netdev "macvtap" [MACVLAN] . [IPVLAN] ([IPVLAN] SECTION OPTIONS) [IPVLAN] netdev "ipvlan" : Mode= IPVLAN . "L2" "L3" "L3S". 219 . Flags= IPVLAN . "bridge" "private" "vepa". 237 . [IPVTAP] ([IPVTAP] SECTION OPTIONS) [IPVTAP] netdev "ipvtap" [IPVLAN] . [VXLAN] ([VXLAN] SECTION OPTIONS) [VXLAN] netdev "vxlan" : VNI= VXLAN ( VXLAN). 1...16777215 . External= true . 243 . Remote= IP . 233 . Local= IP . VXLAN "ipv4_link_local" "ipv6_link_local" "dhcp4" "dhcp6" "slaac". . . 233 . Group= IP VXLAN . VXLAN . 243 . TOS= Type Of Service vxlan. 215 . TTL= N (Time To Live) Virtual eXtensible Local Area Network. "inherit" 0...255 . 0 TTL . "inherit" TTL . 215 . MacLearning= . true MAC MAC . 215 . FDBAgeingSec= (FDB) . 218 . MaximumFDBEntries= FDB . 228 . ReduceARPProxy= . true VXLAN ARP Distributed Overlay Virtual Ethernet (DOVE)[7] . false . 233 . L2MissNotification= . true LLADDR netlink . 218 . L3MissNotification= . true IP netlink . 218 . RouteShortCircuit= . true (route short circuiting) . 218 . UDPChecksum= . true UDP VXLAN/IPv4 . 220 . UDP6ZeroChecksumTx= . true VXLAN/IPv6 . 220 . UDP6ZeroChecksumRx= . true VXLAN/IPv6 . 220 . RemoteChecksumTx= . true VXLAN . 232 . RemoteChecksumRx= . true VXLAN . 232 . GroupPolicyExtension= . true Group Policy VXLAN VXLAN . Group Policy VXLAN VXLAN Group Policy[8] . false . 224 . GenericProtocolExtension= . true Generic Protocol Extension VXLAN OAM . VXLAN GPE Generic Protocol Extension for VXLAN[9] . Generic Protocol Extension 4790 . false . 243 . DestinationPort= UDP . . IANA 4789 . 229 . PortRange= VXLAN . UDP . UDP . 229 . FlowLabel= . 0-1048575 . 234 . IPDoNotFragment= Do not Fragment (DF) IPv4 IPv4 . "inherit" . IPv6 "inherit" . . 243 . Independent= . true vxlan . false VXLAN .network VXLAN VXLAN= . 247 . External= . true vxlan EVPN. false . 258 . VNIFilter= . true VNI . External= false . false . 258 . [GENEVE] ([GENEVE] SECTION OPTIONS) [GENEVE] netdev "geneve" : Id= (VNI) 0 16777215. . 234 . Remote= IP . 234 . TOS= TOS . 1 255 . 234 . TTL= [VXLAN] 0 TTL /proc/sys/net/ipv4/ip_default_ttl . 234 . UDPChecksum= . true UDP IPv4 . 234 . UDP6ZeroChecksumTx= . true UDP IPv6 . 234 . UDP6ZeroChecksumRx= . true UDP IPv6 . 234 . DestinationPort= . 6081 . 6081 . 234 . FlowLabel= . 234 . IPDoNotFragment= [VXLAN] . 243 . InheritInnerProtocol= . true Protocol Type GENEVE . false . 254 . [HSR] ([HSR] SECTION OPTIONS) [HSR] netdev "hsr" : Ports= . . : Ports=eth1 eth2 Ports=eth1 Ports=eth2 . 258 . Protocol= . "hsr" "prp" . "hsr" . . . . HSR . PRP . 258 . Supervision= MAC (supervision) . 0 255 . 0 . HSR PRP . MAC 01:15:4E:00:01 . 258 . [BAREUDP] ([BAREUDP] SECTION OPTIONS) [BareUDP] netdev "bareudp" : DestinationPort= UDP ( 1...65535). . 247 . EtherType= L3 . "ipv4" "ipv6" "mpls-uc" "mpls-mc" . . 247 . MinSourcePort= UDP ( 1...65535). . 257 . [L2TP] ([L2TP] SECTION OPTIONS) [L2TP] netdev "l2tp" : TunnelId= . 1...4294967295 . "PeerTunnelId=" . . 242 . PeerTunnelId= . 1...4294967295 . "TunnelId=" . . 242 . Remote= IP . . 242 . Local= IP . IP "auto" "static" "dynamic" . "@" "192.168.0.1@eth0" "auto@eth0". . "auto" . "static" "dynamic" . "auto" . 242 . EncapsulationType= . "udp" "ip" . 242 . UDPSourcePort= UDP . UDP . IP . 242 . UDPDestinationPort= . UDP . IP . 245 . UDPChecksum= . true UDP IPv4 . 242 . UDP6ChecksumTx= . true UDP IPv6 . 242 . UDP6ChecksumRx= . true UDP IPv6 . 242 . [L2TPSESSION] ([L2TPSESSION] SECTION OPTIONS) [L2TPSession] netdev "l2tp" : Name= . . 242 . SessionId= . 1...4294967295 . "SessionId=" . . 242 . PeerSessionId= . 1...4294967295 . "PeerSessionId=" . . 242 . Layer2SpecificHeader= . "none" "default". "default" . 242 . [MACSEC] ([MACSEC] SECTION OPTIONS) [MACsec] "macsec" : Port= MACsec . (SCI) . 1 65535 . . 243 . Encrypt= . true . . 243 . [MACSECRECEIVECHANNEL] ([MACSECRECEIVECHANNEL] SECTION OPTIONS) [MACsecReceiveChannel] "macsec" : Port= MACsec . (SCI) . 1 65535 . . 243 . MACAddress= MAC MACsec . MAC (SCI) . . 243 . [MACSECTRANSMITASSOCIATION] ([MACSECTRANSMITASSOCIATION] SECTION OPTIONS) [MACsecTransmitAssociation] "macsec" : PacketNumber= (replay protection) ( [SCI]) . 1-4,294,967,295 . . 243 . KeyId= . 0-255 . . 243 . Key= . . . "dffafc8d7b9a43d5b9a3dfbbf6a30c16". 243 . KeyFile= . Key= . "systemd-network" "root:systemd-network" "0640" . AF_UNIX . 243 . Activate= . . . 243 . UseForEncoding= . . [MACsecTransmitAssociation] . Activate=yes . . 243 . [MACSECRECEIVEASSOCIATION] ([MACSECRECEIVEASSOCIATION] SECTION OPTIONS) [MACsecReceiveAssociation] "macsec" : Port= [MACsecReceiveChannel] . 243 . MACAddress= [MACsecReceiveChannel] . 243 . PacketNumber= [MACsecTransmitAssociation] . 243 . KeyId= [MACsecTransmitAssociation] . 243 . Key= [MACsecTransmitAssociation] . 243 . KeyFile= [MACsecTransmitAssociation] . 243 . Activate= [MACsecTransmitAssociation] . 243 . [TUNNEL] ([TUNNEL] SECTION OPTIONS) [Tunnel] netdev "ipip" "sit" "gre" "gretap" "ip6gre" "ip6gretap" "vti" "vti6" "ip6tnl" "erspan" : External= . true (collect metadata mode) Local= Remote= . Independent= . false . 251 . Local= . "any" "ipv4_link_local" "ipv6_link_local" "dhcp4" "dhcp6" "dhcp_pd" "slaac". "any" . "any" . 215 . Remote= . IP "any" . 215 . TOS= Type Of Service . TOS Type of Service in the Internet Protocol Suite[10] . 215 . TTL= N (Time To Live) . N 1...255 . 0 TTL . IPv4 0 ( ) . IPv6 64 . 215 . DiscoverPathMTU= . true MTU (Path MTU Discovery) . IgnoreDontFragment= false . true . 215 . IgnoreDontFragment= . true Don't Fragment (DF) IPv4 . false . IgnoreDontFragment= true DiscoverPathMTU= true . GRE GRETAP ERSPAN . 254 . IPv6FlowLabel= ( RFC 6437[11] ) IPv6 ( RFC 2460[12] ) . IPv6 . . 0...0xFFFFF "inherit" . 223 . CopyDSCP= . true Differentiated Service Code Point (DSCP) IPv6 . DSCP IP . "no" . 223 . EncapsulationLimit= Tunnel Encapsulation Limit . Tunnel Encapsulation Limit . ( RFC 2473[13] ). 0...255 "none" . 4 . 226 . Key= Key= (InputKey= OutputKey=) . Key= IPv4. SAD/SPD (mark) ( ) IP XFRM ( IPsec) . ip-xfrm -- transform configuration[14] . VTI/VTI6 GRE GRETAP ERSPAN . 231 . InputKey= InputKey= . Key= . VTI/VTI6 GRE GRETAP ERSPAN . 231 . OutputKey= OutputKey= . Key= . VTI/VTI6 GRE GRETAP ERSPAN . 231 . Mode= . . 2. +-----------------+---------------------+-------------------------+ | (Kind) | (Mode) | | +-----------------+---------------------+-------------------------+ |"ipip" | "ipip" | IPv4 IPv4 | | | | () | | +---------------------+-------------------------+ | | "any" | IPv4 | | | | IPv6 IPv4 | +-----------------+---------------------+-------------------------+ |"sit" | "ipip" | IPv4 IPv4 | | +---------------------+-------------------------+ | | "ip6ip" | IPv6 IPv4 | | | | () | | +---------------------+-------------------------+ | | "any" | IPv4 | | | | IPv6 IPv4 | +-----------------+---------------------+-------------------------+ |"ip6tnl" | "ipip6" | IPv4 IPv6 | | +---------------------+-------------------------+ | | "ip6ip6" | IPv6 IPv6 | | +---------------------+-------------------------+ | | "any" | IPv4 | | | | IPv6 IPv6 | | | | () | +-----------------+---------------------+-------------------------+ 219 . Independent= . false () .network Tunnel= . true "tunnel@NONE" . 235 . AssignToLoopback= . "yes" loopback "lo" . "no" . 243 . AllowLocalRemote= . true ip6tnl . . 237 . FooOverUDP= . FooOverUDP= . false . IPIP SIT GRE GRETAP . Foo over UDP[15] . 240 . FOUDestinationPort= UDP . FooOverUDP=yes . 240 . FOUSourcePort= UDP . 0 -- . 240 . Encapsulation= [FooOverUDP] . 240 . IPv6RapidDeploymentPrefix= IPv6 Rapid Deployment[16] 6rd . IPv6 ISP . SIT . 240 . ISATAP= . (ISATAP) . SIT . . 240 . SerializeTunneledPackets= . yes (serialize) . GRE GRETAP ERSPAN . . 240 . ERSPANVersion= ERSPAN . 0 0 ( I) 1 1 ( II) 2 2 ( III) . 1 . 252 . ERSPANIndex= (index) ERSPAN . 0...1048575 ERSPAN . ERSPANVersion=1 . 0 . 240 . ERSPANDirection= ERSPAN . "ingress" "egress" . ERSPANVersion=2 . "ingress" . 252 . ERSPANHardwareId= ERSPAN . 0...63 . ERSPANVersion=2 . 0 . 252 . [FOOOVERUDP] ([FOOOVERUDP] SECTION OPTIONS) [FooOverUDP] netdev "fou" : Encapsulation= UDP . : "FooOverUDP" UDP UDP . "GenericUDPEncapsulation" IP . Generic UDP Encapsulation[17] . "FooOverUDP" . 240 . Port= . . . 240 . PeerPort= . . "Peer=" . 243 . Protocol= Protocol= UDP . Encapsulation=FooOverUDP . IP "gre" "ipip" 1...255 . Encapsulation=GenericUDPEncapsulation . 240 . Peer= IP . "PeerPort=" . 243 . Local= IP . 243 . [PEER] ([PEER] SECTION OPTIONS) [Peer] netdev "veth" : Name= netdev . . 215 . MACAddress= MAC MAC . 215 . [VXCAN] ([VXCAN] SECTION OPTIONS) [VXCAN] netdev "vxcan" : Peer= netdev . . 236 . [TUN] ([TUN] SECTION OPTIONS) [Tun] netdev "tun" : MultiQueue= . () . "no" . 215 . PacketInfo= . ( ) . IP . "no" . 215 . VNetHeader= . IFF_VNET_HDR tun tap . Generic Segmentation Offload (GSO) . . "no" . 223 . User= /dev/net/tun . . . 215 . Group= /dev/net/tun . . . 215 . KeepCarrier= . (carrier) . . "no" . 252 . [TAP] ([TAP] SECTION OPTIONS) [Tap] netdev "tap" [Tun] . [WIREGUARD] ([WIREGUARD] SECTION OPTIONS) [WireGuard] : PrivateKey= Base64 . wg genkey ( wg(8) ). "@" (credential) . systemd-networkd.service(8) "network.wireguard.*" . systemd.exec(5) . WireGuard . "network.wireguard.private.netdev" 50-foobar.netdev "network.wireguard.private.50-foobar" . () . .netdev "root:systemd-network" "0640" . 237 . PrivateKeyFile= Base64 . PrivateKey= . "systemd-network" "root:systemd-network" "0640" . AF_UNIX . 242 . ListenPort= UDP . 1 65535 "auto" . "auto" . "auto" . 237 . FirewallMark= (firewall mark) WireGuard . 1 4294967295 . 243 . RouteTable= AllowedIPs=. "default" "main" "local" RouteTable= networkd.conf(5) 1...4294967295 . "off" AllowedIPs= . false . [WireGuardPeer] . 250 . RouteMetric= AllowedIPs=. 0...4294967295 . IPv4 0 IPv6 1024 . [WireGuardPeer] . 250 . [WIREGUARDPEER] ([WIREGUARDPEER] SECTION OPTIONS) [WireGuardPeer] : PublicKey= Base64 wg pubkey ( wg(8) ) (out of band) . "@" PrivateKey= [WireGuard] . . 237 . PublicKeyFile= Base64 . PublicKey= . "systemd-network" "root:systemd-network" "0640" . AF_UNIX . 257 . PresharedKey= (preshared key) . wg genpsk . (post-quantum resistance) . "@" PrivateKey= [WireGuard] . () . .netdev "root:systemd-network" "0640" . 237 . PresharedKeyFile= Base64 . PresharedKey= . "systemd-network" "root:systemd-network" "0640" . AF_UNIX . 242 . AllowedIPs= IP ( ) CIDR . . . IPv4 0.0.0.0/0 IPv6 ::/0 . . -- "[Routes]" ".network" wireguard systemd-networkd. 237 . Endpoint= IP (endpoint) . IPv6 () . "111.222.333.444:51820" IPv4 "[1111:2222::3333]:51820" IPv6. IP . "@" PrivateKey= [WireGuard] . 237 . PersistentKeepalive= 1 65535 (stateful) NAT . NAT . 0 "off" . . . 237 . RouteTable= AllowedIPs=. "default" "main" "local" RouteTable= networkd.conf(5) 1...4294967295 . [WireGuard] . 250 . RouteMetric= AllowedIPs=. 0...4294967295 . [WireGuard] . 250 . [BOND] ([BOND] SECTION OPTIONS) [Bond] : Mode= (bonding) . "balance-rr" ( / round robin) . "balance-rr" "active-backup" "balance-xor" "broadcast" "802.3ad" "balance-tlb" "balance-alb". 216 . TransmitHashPolicy= (slave) balance-xor 802.3ad tlb . "layer2" "layer3+4" "layer2+3" "encap2+3" "encap3+4". 216 . LACPTransmitRate= (LACPDU) 802.3ad . "slow" LACPDUs "fast" LACPDUs . "slow" . 216 . MIIMonitorSec= (MII) . MII . . 0 . 216 . PeerNotifyDelaySec= (ARP / gratuitous ARP IPv6 ) . MII (miimon) . 0...300s . 0 MIIMonitorSec= . 256 . UpDelaySec= (link up) . MIIMonitorSec= . 0 . 216 . DownDelaySec= (link down) . MIIMonitorSec= . 0 . 216 . LearnPacketIntervalSec= . 1...0x7fffffff 1 . balance-tlb balance-alb . 220 . AdSelect= 802.3ad . "stable" "bandwidth" "count". 220 . AdActorSystemPriority= 802.3ad . 1...65535 . 240 . AdUserPortKey= 802.3ad . 0...1023 . 240 . AdActorSystem= MAC 802.3ad . (null) . 240 . FailOverMACPolicy= active-backup MAC MAC . none . "none" "active" "follow". 220 . ARPValidate= ARP ARP -ARP ( ) . "none" "active" "backup" "all". 220 . ARPIntervalSec= ARP . 0 ARP . 0 . 220 . ARPIPTargets= IP ARP ARPIntervalSec= 0 . ARP . IPv4 . ARP IP . . IP . 220 . ARPAllTargets= ARPIPTargets= ARP (up) . active-backup ARPValidate . "any" "all". 220 . PrimaryReselectPolicy= . . . "always" "better" "failure". 220 . ResendIGMP= IGMP . . 0...255 . 1 . 0 IGMP . 220 . PacketsPerSlave= . 0 . 0...65535 . 1 . balance-rr . 220 . GratuitousARP= (ARP IPv6 ) . VLAN . (ARPIntervalSec MIIMonitorSec ) . 0...255 . 1 . active- backup . 220 . AllSlavesActive= . ( ) false true . ( ) . . false ( ). 220 . DynamicTransmitLoadBalancing= . . balance-tlb . . 240 . MinLinks= (carrier) . 0 . 220 . ARPMissedMax= arp ARP . (down) . . 256 . Linux Ethernet Bonding Driver HOWTO[1] . [XFRM] ([XFRM] SECTION OPTIONS) [Xfrm] : InterfaceId= / xfrm SA/policy . 1-0xffffffff . . 243 . Independent= . false () xfrm (hardware offloading) . 243 . Virtual XFRM Interfaces[18] . [VRF] ([VRF] SECTION OPTIONS) [VRF] netdev "vrf" : Table= . . RouteTable= networkd.conf(5) . . 243 . [BATMANADVANCED] ([BATMANADVANCED] SECTION OPTIONS) [BatmanAdvanced] netdev "batadv" : GatewayMode= "off" "server" "client" . batman- adv ( ) ( ) ( ). 248 . Aggregation= . (originator messages) . true . 248 . BridgeLoopAvoidance= . . true . 248 . DistributedArpTable= . ARP . true . 248 . Fragmentation= . (fragmentation) . true . 248 . HopPenalty= (hop penalty) batctl(8) . TQ ( ) (OGM) ( ). . '15' . 255 ( ) . 0 . 248 . OriginatorIntervalSec= batman-adv . systemd.time(7) . 248 . GatewayBandwidthDown= . K M G T ( ) batman-adv . 248 . GatewayBandwidthUp= . K M G T ( ) batman-adv . 248 . RoutingAlgorithm= "batman-v" "batman-iv" routing_algo batctl(8) . . "batman-v" . 248 . [IPOIB] ([IPOIB] SECTION OPTIONS) [IPoIB] netdev "ipoib" : PartitionKey= 1...0xffff 0x8000 . . 250 . Mode= "datagram" "connected" . . "datagram" (UD) MTU MTU IPoIB ( ) . MTU 2K MTU IPoIB 2048 - 4 = 2044 . "connected" (RC) . MTU IP 64K IP UDP TCP . 250 . IgnoreUserspaceMulticastGroups= . true . . 250 . [WLAN] ([WLAN] SECTION OPTIONS) [WLAN] WLAN : PhysicalDevice= WLAN ( "0" "phy0"). WLAN iw phy . . 251 . Type= . "ad-hoc" "station" "ap" "ap-vlan" "wds" "monitor" "mesh-point" "p2p-client" "p2p-go" "p2p-device" "ocb" "nan" . . 251 . WDS= (WDS) . " " . . . 251 . (EXAMPLES) 1. /etc/systemd/network/25-bridge.netdev [NetDev] Name=bridge0 Kind=bridge 2. /etc/systemd/network/25-vlan1.netdev [Match] Virtualization=no [NetDev] Name=vlan1 Kind=vlan [VLAN] Id=1 3. /etc/systemd/network/25-ipip.netdev [NetDev] Name=ipip-tun Kind=ipip MTUBytes=1480 [Tunnel] Local=192.168.223.238 Remote=192.169.224.239 TTL=64 4. /etc/systemd/network/1-fou-tunnel.netdev [NetDev] Name=fou-tun Kind=fou [FooOverUDP] Port=5555 Protocol=4 5. /etc/systemd/network/25-fou-ipip.netdev [NetDev] Name=ipip-tun Kind=ipip [Tunnel] Independent=yes Local=10.65.208.212 Remote=10.65.208.211 FooOverUDP=yes FOUDestinationPort=5555 6. /etc/systemd/network/25-tap.netdev [NetDev] Name=tap-test Kind=tap [Tap] MultiQueue=yes PacketInfo=yes 7. /etc/systemd/network/25-sit.netdev [NetDev] Name=sit-tun Kind=sit MTUBytes=1480 [Tunnel] Local=10.65.223.238 Remote=10.65.223.239 8. /etc/systemd/network/25-6rd.netdev [NetDev] Name=6rd-tun Kind=sit MTUBytes=1480 [Tunnel] Local=10.65.223.238 IPv6RapidDeploymentPrefix=2602::/24 9. /etc/systemd/network/25-gre.netdev [NetDev] Name=gre-tun Kind=gre MTUBytes=1480 [Tunnel] Local=10.65.223.238 Remote=10.65.223.239 10. /etc/systemd/network/25-ip6gre.netdev [NetDev] Name=ip6gre-tun Kind=ip6gre [Tunnel] Key=123 11. /etc/systemd/network/25-vti.netdev [NetDev] Name=vti-tun Kind=vti MTUBytes=1480 [Tunnel] Local=10.65.223.238 Remote=10.65.223.239 12. /etc/systemd/network/25-veth.netdev [NetDev] Name=veth-test Kind=veth [Peer] Name=veth-peer 13. /etc/systemd/network/25-bond.netdev [NetDev] Name=bond1 Kind=bond [Bond] Mode=802.3ad TransmitHashPolicy=layer3+4 MIIMonitorSec=1s LACPTransmitRate=fast 14. /etc/systemd/network/25-dummy.netdev [NetDev] Name=dummy-test Kind=dummy MACAddress=12:34:56:78:9a:bc 15. /etc/systemd/network/25-vrf.netdev VRF . [NetDev] Name=vrf-test Kind=vrf [VRF] Table=42 16. /etc/systemd/network/25-macvtap.netdev MacVTap. [NetDev] Name=macvtap-test Kind=macvtap 17. /etc/systemd/network/25-wireguard.netdev [NetDev] Name=wg0 Kind=wireguard [WireGuard] PrivateKey=EEGlnEPYJV//kbvvIqxKkQwOiS+UENyPncC4bF46ong= ListenPort=51820 [WireGuardPeer] PublicKey=RDf+LSpeEre7YEIKaxg+wbpsNV7du+ktR99uBEtIiCA= AllowedIPs=fd31:bf08:57cb::/48,192.168.26.0/24 Endpoint=wireguard.example.com:51820 18. /etc/systemd/network/27-xfrm.netdev [NetDev] Name=xfrm0 Kind=xfrm [Xfrm] Independent=yes (SEE ALSO) systemd(1), systemd-networkd.service(8), systemd.link(5), systemd.network(5), systemd-network-generator.service(8) (NOTES) 1. Linux Ethernet Bonding Driver HOWTO https://docs.kernel.org/networking/bonding.html 2. RFC 2784 https://tools.ietf.org/html/rfc2784 3. IEEE 802.1Q http://www.ieee802.org/1/pages/802.1Q.html 4. VRF https://docs.kernel.org/networking/vrf.html 5. B.A.T.M.A.N. Advanced https://www.open-mesh.org/projects/open-mesh/wiki 6. System and Service Credentials https://systemd.io/CREDENTIALS 7. Distributed Overlay Virtual Ethernet (DOVE) https://en.wikipedia.org/wiki/Distributed_Overlay_Virtual_Ethernet 8. VXLAN Group Policy https://tools.ietf.org/html/draft-smith-vxlan-group-policy 9. Generic Protocol Extension for VXLAN https://tools.ietf.org/html/draft-ietf-nvo3-vxlan-gpe-07 10. Type of Service in the Internet Protocol Suite http://tools.ietf.org/html/rfc1349 11. RFC 6437 https://tools.ietf.org/html/rfc6437 12. RFC 2460 https://tools.ietf.org/html/rfc2460 13. RFC 2473 https://tools.ietf.org/html/rfc2473#section-4.1.1 14. ip-xfrm -- transform configuration https://man7.org/linux/man-pages/man8/ip-xfrm.8.html 15. Foo over UDP https://lwn.net/Articles/614348 16. IPv6 Rapid Deployment https://tools.ietf.org/html/rfc5569 17. Generic UDP Encapsulation https://lwn.net/Articles/615044 18. Virtual XFRM Interfaces https://lwn.net/Articles/757391 systemd 261.2 SYSTEMD.NETDEV(5)