man/systemd.netdev.xml

   1 <?xml version='1.0'?> <!--*-nxml-*-->
   2 <!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
   3         "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd">
   4
   5 <!--
   6   This file is part of systemd.
   7
   8   Copyright 2013 Tom Gundersen
   9
  10   systemd is free software; you can redistribute it and/or modify it
  11   under the terms of the GNU Lesser General Public License as published by
  12   the Free Software Foundation; either version 2.1 of the License, or
  13   (at your option) any later version.
  14
  15   systemd is distributed in the hope that it will be useful, but
  16   WITHOUT ANY WARRANTY; without even the implied warranty of
  17   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
  18   Lesser General Public License for more details.
  19
  20   You should have received a copy of the GNU Lesser General Public License
  21   along with systemd; If not, see <http://www.gnu.org/licenses/>.
  22 -->
  23
  24 <refentry id="systemd.netdev" conditional='ENABLE_NETWORKD'>
  25
  26         <refentryinfo>
  27                 <title>systemd.network</title>
  28                 <productname>systemd</productname>
  29
  30                 <authorgroup>
  31                         <author>
  32                                 <contrib>Developer</contrib>
  33                                 <firstname>Tom</firstname>
  34                                 <surname>Gundersen</surname>
  35                                 <email>teg@jklm.no</email>
  36                         </author>
  37                 </authorgroup>
  38         </refentryinfo>
  39
  40         <refmeta>
  41                 <refentrytitle>systemd.netdev</refentrytitle>
  42                 <manvolnum>5</manvolnum>
  43         </refmeta>
  44
  45         <refnamediv>
  46                 <refname>systemd.netdev</refname>
  47                 <refpurpose>Virtual Network Device configuration</refpurpose>
  48         </refnamediv>
  49
  50         <refsynopsisdiv>
  51                 <para><filename><replaceable>netdev</replaceable>.netdev</filename></para>
  52         </refsynopsisdiv>
  53
  54         <refsect1>
  55                 <title>Description</title>
  56
  57                 <para>Network setup is performed by
  58                 <citerefentry><refentrytitle>systemd-networkd</refentrytitle><manvolnum>8</manvolnum></citerefentry>.
  59                 </para>
  60
  61                 <para>Virtual Network Device files must have the extension
  62                 <filename>.netdev</filename>; other extensions are ignored. Virtual
  63                 network devices are created as soon as networkd is started. If a netdev
  64                 with the specified name already exists, networkd will use that as-is
  65                 rather than create its own. Note that the settings of the pre-existing
  66                 netdev will not be changed by networkd.</para>
  67
  68                 <para>The <filename>.netdev</filename> files are read from the files located in the
  69                 system network directory <filename>/usr/lib/systemd/network</filename>,
  70                 the volatile runtime network directory
  71                 <filename>/run/systemd/network</filename> and the local administration
  72                 network directory <filename>/etc/systemd/network</filename>.
  73                 All configuration files are collectively sorted and processed in lexical order,
  74                 regardless of the directories in which they live. However, files with
  75                 identical filenames replace each other. Files in
  76                 <filename>/etc</filename> have the highest priority, files in
  77                 <filename>/run</filename> take precedence over files with the same
  78                 name in <filename>/usr/lib</filename>. This can be used to override a
  79                 system-supplied configuration file with a local file if needed; a symlink in
  80                 <filename>/etc</filename> with the same name as a configuration file in
  81                 <filename>/usr/lib</filename>, pointing to <filename>/dev/null</filename>,
  82                 disables the configuration file entirely.</para>
  83
  84         </refsect1>
  85
  86         <refsect1>
  87                 <title>Supported netdev kinds</title>
  88
  89                 <para>The following kinds of virtual network devices may be configured in <filename>.netdev</filename> files:</para>
  90
  91                 <variablelist>
  92                         <varlistentry>
  93                                 <term><varname>bond</varname></term>
  94                                 <listitem>
  95                                         <para>A bond device is an aggregation of all its slave devices. See
  96                                         <ulink url="https://www.kernel.org/doc/Documentation/networking/bonding.txt">
  97                                         Linux Ethernet Bonding Driver HOWTO</ulink> for details.</para>
  98                                 </listitem>
  99                         </varlistentry>
 100                 </variablelist>
 101
 102                 <variablelist>
 103                         <varlistentry>
 104                                 <term><varname>bridge</varname></term>
 105                                 <listitem>
 106                                         <para>A bridge devcie is a software switch, each of its slave devices and the bridge itself are ports of the switch.</para>
 107                                 </listitem>
 108                         </varlistentry>
 109                 </variablelist>
 110
 111                 <variablelist>
 112                         <varlistentry>
 113                                 <term><varname>dummy</varname></term>
 114                                 <listitem>
 115                                         <para>A dummy device drops all packets sent to it.</para>
 116                                 </listitem>
 117                         </varlistentry>
 118                 </variablelist>
 119
 120                 <variablelist>
 121                         <varlistentry>
 122                                 <term><varname>gre</varname></term>
 123                                 <listitem>
 124                                         <para>A Level 3 GRE tunnel over IPv4. See
 125                                         <ulink url="https://tools.ietf.org/html/rfc2784">
 126                                         RFC 2784</ulink> for details.</para>
 127                                 </listitem>
 128                         </varlistentry>
 129                 </variablelist>
 130
 131                 <variablelist>
 132                         <varlistentry>
 133                                 <term><varname>gretap</varname></term>
 134                                 <listitem>
 135                                         <para>A Level 2 GRE tunnel over IPv4.</para>
 136                                 </listitem>
 137                         </varlistentry>
 138                 </variablelist>
 139
 140                 <variablelist>
 141                         <varlistentry>
 142                                 <term><varname>ip6gre</varname></term>
 143                                 <listitem>
 144                                         <para>A Level 3 GRE tunnel over IPv6.</para>
 145                                 </listitem>
 146                         </varlistentry>
 147                 </variablelist>
 148
 149                 <variablelist>
 150                         <varlistentry>
 151                                 <term><varname>ip6tnl</varname></term>
 152                                 <listitem>
 153                                         <para>An IPv4 or IPv6 tunnel over IPv6</para>
 154                                 </listitem>
 155                         </varlistentry>
 156                 </variablelist>
 157
 158                 <variablelist>
 159                         <varlistentry>
 160                                 <term><varname>ip6gretap</varname></term>
 161                                 <listitem>
 162                                         <para>An Level 2 GRE tunnel over IPv6.</para>
 163                                 </listitem>
 164                         </varlistentry>
 165                 </variablelist>
 166
 167                 <variablelist>
 168                         <varlistentry>
 169                                 <term><varname>ipip</varname></term>
 170                                 <listitem>
 171                                         <para>An IPv4 over IPv4 tunnel.</para>
 172                                 </listitem>
 173                         </varlistentry>
 174                 </variablelist>
 175
 176                 <variablelist>
 177                         <varlistentry>
 178                                 <term><varname>ipvlan</varname></term>
 179                                 <listitem>
 180                                         <para>An ipvlan device is a stacked device which receives packets from its
 181                                         underlying device based on IP address filtering.</para>
 182                                 </listitem>
 183                         </varlistentry>
 184                 </variablelist>
 185
 186                 <variablelist>
 187                         <varlistentry>
 188                                 <term><varname>macvlan</varname></term>
 189                                 <listitem>
 190                                         <para>A macvlan device is a stacked device which receives packets from its
 191                                         underlying device based on MAC address filtering.</para>
 192                                 </listitem>
 193                         </varlistentry>
 194                 </variablelist>
 195
 196                 <variablelist>
 197                         <varlistentry>
 198                                 <term><varname>sit</varname></term>
 199                                 <listitem>
 200                                         <para>An IPv6 over IPv4 tunnel.</para>
 201                                 </listitem>
 202                         </varlistentry>
 203                 </variablelist>
 204
 205                 <variablelist>
 206                         <varlistentry>
 207                                 <term><varname>tap</varname></term>
 208                                 <listitem>
 209                                         <para>A persistent Level 2 tunnel between a network device and a device node.</para>
 210                                 </listitem>
 211                         </varlistentry>
 212                 </variablelist>
 213
 214                 <variablelist>
 215                         <varlistentry>
 216                                 <term><varname>tun</varname></term>
 217                                 <listitem>
 218                                         <para>A persistent Level 3 tunnel between a network device and a device node.</para>
 219                                 </listitem>
 220                         </varlistentry>
 221                 </variablelist>
 222
 223                 <variablelist>
 224                         <varlistentry>
 225                                 <term><varname>veth</varname></term>
 226                                 <listitem>
 227                                         <para>An ethernet tunnel between a pair of network devices.</para>
 228                                 </listitem>
 229                         </varlistentry>
 230                 </variablelist>
 231
 232                 <variablelist>
 233                         <varlistentry>
 234                                 <term><varname>vlan</varname></term>
 235                                 <listitem>
 236                                         <para>A vlan is a stacked device which receives packets from its underlying
 237                                         device based on VLAN tagging. See
 238                                         <ulink url="http://www.ieee802.org/1/pages/802.1Q.html">
 239                                         IEEE 802.1Q</ulink> for details.</para>
 240                                 </listitem>
 241                         </varlistentry>
 242                 </variablelist>
 243
 244                 <variablelist>
 245                         <varlistentry>
 246                                 <term><varname>vti</varname></term>
 247                                 <listitem>
 248                                         <para>An IPv4 over IPSec tunnel.</para>
 249                                 </listitem>
 250                         </varlistentry>
 251                 </variablelist>
 252
 253                 <variablelist>
 254                         <varlistentry>
 255                                 <term><varname>vxlan</varname></term>
 256                                 <listitem>
 257                                         <para></para>
 258                                 </listitem>
 259                         </varlistentry>
 260                 </variablelist>
 261
 262         </refsect1>
 263
 264         <refsect1>
 265                 <title>[Match] Section Options</title>
 266
 267                 <para>A virtual network device is only created if the
 268                 <literal>[Match]</literal> section matches the current
 269                 environment, or if the section is empty. The following keys are accepted:</para>
 270
 271                         <variablelist class='network-directives'>
 272                                 <varlistentry>
 273                                         <term><varname>Host=</varname></term>
 274                                         <listitem>
 275                                                 <para>Matches against the hostname or machine ID of the
 276                                                 host. See <literal>ConditionHost=</literal> in
 277                                                 <citerefentry><refentrytitle>systemd.unit</refentrytitle><manvolnum>5</manvolnum></citerefentry>
 278                                                 for details.
 279                                                 </para>
 280                                         </listitem>
 281                                 </varlistentry>
 282                                 <varlistentry>
 283                                         <term><varname>Virtualization=</varname></term>
 284                                         <listitem>
 285                                                 <para>Checks whether the system is executed in a virtualized
 286                                                 environment and optionally test whether it is a specific
 287                                                 implementation. See <literal>ConditionVirtualization=</literal> in
 288                                                 <citerefentry><refentrytitle>systemd.unit</refentrytitle><manvolnum>5</manvolnum></citerefentry>
 289                                                 for details.
 290                                                 </para>
 291                                         </listitem>
 292                                 </varlistentry>
 293                                 <varlistentry>
 294                                         <term><varname>KernelCommandLine=</varname></term>
 295                                         <listitem>
 296                                                 <para>Checks whether a specific kernel command line option is
 297                                                 set (or if prefixed with the exclamation mark unset). See
 298                                                 <literal>ConditionKernelCommandLine=</literal> in
 299                                                 <citerefentry><refentrytitle>systemd.unit</refentrytitle><manvolnum>5</manvolnum></citerefentry>
 300                                                 for details.
 301                                                 </para>
 302                                         </listitem>
 303                                 </varlistentry>
 304                                 <varlistentry>
 305                                         <term><varname>Architecture=</varname></term>
 306                                         <listitem>
 307                                                 <para>Checks whether the system is running on a specific
 308                                                 architecture. See <literal>ConditionArchitecture=</literal> in
 309                                                 <citerefentry><refentrytitle>systemd.unit</refentrytitle><manvolnum>5</manvolnum></citerefentry>
 310                                                 for details.
 311                                                 </para>
 312                                         </listitem>
 313                                 </varlistentry>
 314                         </variablelist>
 315
 316         </refsect1>
 317
 318         <refsect1>
 319                 <title>[NetDev] Section Options</title>
 320
 321                         <para>The <literal>[NetDev]</literal> section accepts the following
 322                         keys:</para>
 323
 324                         <variablelist class='network-directives'>
 325                                 <varlistentry>
 326                                         <term><varname>Description=</varname></term>
 327                                         <listitem>
 328                                                 <para>A free-form description of the netdev.
 329                                                 </para>
 330                                         </listitem>
 331                                 </varlistentry>
 332                                 <varlistentry>
 333                                         <term><varname>Name=</varname></term>
 334                                         <listitem>
 335                                                 <para>The interface name used when creating the
 336                                                 netdev. This option is compulsory.</para>
 337                                         </listitem>
 338                                 </varlistentry>
 339                                 <varlistentry>
 340                                         <term><varname>Kind=</varname></term>
 341                                         <listitem>
 342                                                 <para>The netdev kind. This option is compulsory. See the <literal>Supported netdev kinds</literal> section
 343                                                 for the valid keys.</para>
 344                                         </listitem>
 345                                 </varlistentry>
 346                                 <varlistentry>
 347                                         <term><varname>MTUBytes=</varname></term>
 348                                         <listitem>
 349                                                 <para>The maximum transmission unit in bytes to
 350                                                 set for the device. The usual suffixes K, M, G,
 351                                                 are supported and are understood to the base of
 352                                                 1024. This key is not currently suported for
 353                                                 <literal>tun</literal> or <literal>tap</literal> devices.
 354                                                 </para>
 355                                         </listitem>
 356                                 </varlistentry>
 357                                 <varlistentry>
 358                                         <term><varname>MACAddress=</varname></term>
 359                                         <listitem>
 360                                                 <para>The MAC address to use for the device.
 361                                                 If none is given, one is generated based on
 362                                                 the interface name and the
 363                                                 <citerefentry><refentrytitle>machine-id</refentrytitle><manvolnum>5</manvolnum></citerefentry>.
 364                                                 This key is not currently suported for <literal>tun</literal> or <literal>tap</literal> devices.
 365                                                 </para>
 366                                         </listitem>
 367                                 </varlistentry>
 368                         </variablelist>
 369         </refsect1>
 370
 371         <refsect1>
 372                 <title>[VLAN] Section Options</title>
 373
 374                         <para>The <literal>[VLAN]</literal> section only applies for netdevs of kind <literal>vlan</literal>,
 375                         and accepts the following key:</para>
 376
 377                         <variablelist class='network-directives'>
 378                                 <varlistentry>
 379                                         <term><varname>Id=</varname></term>
 380                                         <listitem>
 381                                                 <para>The VLAN ID to use. An integer in the range 0–4094.
 382                                                 This option is compulsory.</para>
 383                                         </listitem>
 384                                 </varlistentry>
 385                         </variablelist>
 386
 387         </refsect1>
 388
 389         <refsect1>
 390                 <title>[MACVLAN] Section Options</title>
 391
 392                         <para>The <literal>[MACVLAN]</literal> section only applies for netdevs of kind
 393                         <literal>macvlan</literal>, and accepts the following key:</para>
 394
 395                         <variablelist class='network-directives'>
 396                                 <varlistentry>
 397                                         <term><varname>Mode=</varname></term>
 398                                         <listitem>
 399                                                 <para>The MACVLAN mode to use. The supported options are
 400                                                 <literal>private</literal>, <literal>vepa</literal>,
 401                                                 <literal>bridge</literal> and <literal>passthru</literal>.
 402                                                 </para>
 403                                         </listitem>
 404                                 </varlistentry>
 405                         </variablelist>
 406
 407         </refsect1>
 408
 409         <refsect1>
 410                 <title>[IPVLAN] Section Options</title>
 411
 412                         <para>The <literal>[IPVLAN]</literal> section only applies for netdevs of kind
 413                         <literal>ipvlan</literal>, and accepts the following key:</para>
 414
 415                         <variablelist class='network-directives'>
 416                                 <varlistentry>
 417                                         <term><varname>Mode=</varname></term>
 418                                         <listitem>
 419                                                 <para>The IPVLAN mode to use. The supported options are
 420                                                 <literal>L2</literal> and <literal>L3</literal>.
 421                                                 </para>
 422                                         </listitem>
 423                                 </varlistentry>
 424                         </variablelist>
 425
 426         </refsect1>
 427
 428         <refsect1>
 429                 <title>[VXLAN] Section Options</title>
 430                         <para>The <literal>[VXLAN]</literal> section only applies for netdevs of kind
 431                         <literal>vxlan</literal>, and accepts the following key:</para>
 432
 433                         <variablelist class='network-directives'>
 434                                 <varlistentry>
 435                                         <term><varname>Id=</varname></term>
 436                                         <listitem>
 437                                                 <para>The VXLAN ID to use.</para>
 438                                         </listitem>
 439                                 </varlistentry>
 440                                 <varlistentry>
 441                                         <term><varname>Group=</varname></term>
 442                                         <listitem>
 443                                                 <para>An assigned multicast group IP address.</para>
 444                                         </listitem>
 445                                 </varlistentry>
 446                                 <varlistentry>
 447                                         <term><varname>TOS=</varname></term>
 448                                         <listitem>
 449                                                 <para>The Type Of Service byte value for a vxlan interface.</para>
 450                                         </listitem>
 451                                 </varlistentry>
 452                                 <varlistentry>
 453                                         <term><varname>TTL=</varname></term>
 454                                         <listitem>
 455                                                 <para>A fixed Time To Live N on Virtual eXtensible Local Area Network packets.
 456                                                 N is a number in the range 1-255. 0 is a special value meaning that packets
 457                                                 inherit the TTL value.</para>
 458                                         </listitem>
 459                                 </varlistentry>
 460                                 <varlistentry>
 461                                         <term><varname>MacLearning=</varname></term>
 462                                         <listitem>
 463                                                 <para>A boolean. When true, enables dynamic MAC learning
 464                                                 to discover remote MAC addresses.</para>
 465                                         </listitem>
 466                                 </varlistentry>
 467                                 <varlistentry>
 468                                         <term><varname>FDBAgeingSec=</varname></term>
 469                                         <listitem>
 470                                                 <para>The lifetime of Forwarding Database entry learnt by the kernel in seconds.</para>
 471                                         </listitem>
 472                                 </varlistentry>
 473                                 <varlistentry>
 474                                         <term><varname>ARPProxy=</varname></term>
 475                                         <listitem>
 476                                                 <para>A boolean. When true, enables ARP proxy.</para>
 477                                         </listitem>
 478                                 </varlistentry>
 479                                 <varlistentry>
 480                                         <term><varname>L2MissNotification=</varname></term>
 481                                         <listitem>
 482                                                 <para>A boolean. When true, enables netlink LLADDR miss notifications.</para>
 483                                         </listitem>
 484                                 </varlistentry>
 485                                 <varlistentry>
 486                                         <term><varname>L3MissNotification=</varname></term>
 487                                         <listitem>
 488                                                 <para>A boolean. When true, enables netlink IP ADDR miss notifications.</para>
 489                                         </listitem>
 490                                 </varlistentry>
 491                                 <varlistentry>
 492                                         <term><varname>RouteShortCircuit=</varname></term>
 493                                         <listitem>
 494                                                 <para>A boolean. When true route short circuit is turned on.</para>
 495                                         </listitem>
 496                                 </varlistentry>
 497                         </variablelist>
 498         </refsect1>
 499         <refsect1>
 500                 <title>[Tunnel] Section Options</title>
 501
 502                         <para>The <literal>[Tunnel]</literal> section only applies for netdevs of kind
 503                         <literal>ipip</literal>, <literal>sit</literal>, <literal>gre</literal>, <literal>gretap</literal>,
 504                         <literal>ip6gre</literal>, <literal>ip6gretap</literal>, <literal>vti</literal> and <literal>ip6tnl</literal>
 505                         and accepts the following keys:</para>
 506
 507                         <variablelist class='network-directives'>
 508                                 <varlistentry>
 509                                         <term><varname>Local=</varname></term>
 510                                         <listitem>
 511                                                 <para>A static local address for tunneled packets.
 512                                                 It must be an address on another interface of this host.</para>
 513                                         </listitem>
 514                                 </varlistentry>
 515                                 <varlistentry>
 516                                         <term><varname>Remote=</varname></term>
 517                                         <listitem>
 518                                                 <para>The remote endpoint of the tunnel.</para>
 519                                         </listitem>
 520                                 </varlistentry>
 521                                 <varlistentry>
 522                                         <term><varname>TOS=</varname></term>
 523                                         <listitem>
 524                                                 <para>The Type Of Service byte value for a tunnel interface.
 525                                                 For details about the TOS see the
 526                                                 <ulink url="http://tools.ietf.org/html/rfc1349">
 527                                                 Type of Service in the Internet Protocol Suite
 528                                                 </ulink> document.
 529                                                 </para>
 530                                         </listitem>
 531                                 </varlistentry>
 532                                 <varlistentry>
 533                                         <term><varname>TTL=</varname></term>
 534                                         <listitem>
 535                                                 <para>A fixed Time To Live N on tunneled packets.
 536                                                 N is a number in the range 1-255. 0 is a special value meaning that packets
 537                                                 inherit the TTL value. The default value for IPv4 tunnels is: inherit.
 538                                                 The default value for IPv6 tunnels is: 64.</para>
 539                                         </listitem>
 540                                 </varlistentry>
 541                                 <varlistentry>
 542                                         <term><varname>DiscoverPathMTU=</varname></term>
 543                                         <listitem>
 544                                                 <para>A boolean. When true, enables Path MTU Discovery on the tunnel.</para>
 545                                         </listitem>
 546                                 </varlistentry>
 547                                 <varlistentry>
 548                                   <term><varname>Mode=</varname></term>
 549                                   <listitem>
 550                                     <para>An <literal>ip6tnl</literal> tunnels can have three modes
 551                                     <literal>ip6ip6</literal> for IPv6 over IPv6,
 552                                     <literal>ipip6</literal> for IPv4 over IPv6 or
 553                                     <literal>any</literal> for either.
 554                                     </para>
 555                                   </listitem>
 556                                 </varlistentry>
 557                         </variablelist>
 558         </refsect1>
 559         <refsect1>
 560                 <title>[Peer] Section Options</title>
 561
 562                         <para>The <literal>[Peer]</literal> section only applies for netdevs of kind <literal>veth</literal>
 563                         and accepts the following key:</para>
 564
 565                         <variablelist class='network-directives'>
 566                                 <varlistentry>
 567                                         <term><varname>Name=</varname></term>
 568                                         <listitem>
 569                                                 <para>The interface name used when creating the netdev.
 570                                                 This option is compulsory.</para>
 571                                         </listitem>
 572                                 </varlistentry>
 573                                 <varlistentry>
 574                                         <term><varname>MACAddress=</varname></term>
 575                                         <listitem>
 576                                                 <para>The peer MACAddress, if not set it is generated in the same
 577                                                 way as the MAC address of the main interface.</para>
 578                                         </listitem>
 579                                 </varlistentry>
 580                         </variablelist>
 581         </refsect1>
 582         <refsect1>
 583                 <title>[Tun] Section Options</title>
 584
 585                         <para>The <literal>[Tun]</literal> section only applies for netdevs of kind
 586                         <literal>tun</literal>, and accepts the following keys:</para>
 587
 588                         <variablelist class='network-directives'>
 589                                 <varlistentry>
 590                                         <term><varname>OneQueue=</varname></term>
 591                                         <listitem><para>Takes a boolean argument. Configures whether
 592                                         all packets are queued at the device (enabled), or a fixed number
 593                                         of packets are queued at the device and the rest at the
 594                                         <literal>qdisc</literal>. Defaults to <literal>no</literal>.</para>
 595                                         </listitem>
 596                                 </varlistentry>
 597                                 <varlistentry>
 598                                         <term><varname>MultiQueue=</varname></term>
 599                                         <listitem><para>Takes a boolean argument. Configures whether to
 600                                         use multiple file descriptors (queues) to parallelize packets
 601                                         sending and receiving. Defaults to <literal>no</literal>.</para>
 602                                         </listitem>
 603                                 </varlistentry>
 604                                 <varlistentry>
 605                                         <term><varname>PacketInfo=</varname></term>
 606                                         <listitem><para>Takes a boolean argument. Configures whether packets
 607                                         should be prepened with four extra bytes (two flag bytes and two
 608                                         protocol bytes). If disabled it indicates that the packets will be
 609                                         pure IP packets. Defaults to <literal>no</literal>.</para>
 610                                         </listitem>
 611                                 </varlistentry>
 612                                 <varlistentry>
 613                                         <term><varname>User=</varname></term>
 614                                         <listitem><para>User to grant access to the <filename>/dev/net/tun</filename>
 615                                         device.</para>
 616                                         </listitem>
 617                                 </varlistentry>
 618                                 <varlistentry>
 619                                         <term><varname>Group=</varname></term>
 620                                         <listitem><para>Group to grant access to the <filename>/dev/net/tun</filename>
 621                                         device.</para>
 622                                         </listitem>
 623                                 </varlistentry>
 624
 625                         </variablelist>
 626
 627         </refsect1>
 628
 629         <refsect1>
 630                 <title>[Tap] Section Options</title>
 631
 632                         <para>The <literal>[Tap]</literal> section only applies for netdevs of kind
 633                         <literal>tap</literal>, and accepts the same keys as the
 634                         <literal>[Tun]</literal> section.</para>
 635         </refsect1>
 636
 637         <refsect1>
 638                 <title>[Bond] Section Options</title>
 639
 640                         <para>The <literal>[Bond]</literal> section accepts the following
 641                         key:</para>
 642
 643                         <variablelist class='network-directives'>
 644                                 <varlistentry>
 645                                         <term><varname>Mode=</varname></term>
 646                                         <listitem>
 647                                           <para>Specifies one of the bonding policies. The default is
 648                                           <literal>balance-rr</literal> (round robin). Possible values are
 649                                                 <literal>balance-rr</literal>,
 650                                                 <literal>active-backup</literal>,
 651                                                 <literal>balance-xor</literal>,
 652                                                 <literal>broadcast</literal>,
 653                                                 <literal>802.3ad</literal>,
 654                                                 <literal>balance-tlb</literal>, and
 655                                                 <literal>balance-alb</literal>.
 656                                           </para>
 657                                         </listitem>
 658                                 </varlistentry>
 659
 660                                 <varlistentry>
 661                                   <term><varname>TransmitHashPolicy=</varname></term>
 662                                   <listitem>
 663                                     <para>Selects the transmit hash policy to use for slave selection in
 664                                     balance-xor, 802.3ad, and tlb modes. Possible values are
 665                                     <literal>layer2</literal>,
 666                                     <literal>layer3+4</literal>,
 667                                     <literal>layer2+3</literal>,
 668                                     <literal>encap2+3</literal>,
 669                                     <literal>802.3ad</literal>, and
 670                                     <literal>encap3+4</literal>.
 671                                     </para>
 672                                   </listitem>
 673                                 </varlistentry>
 674
 675                                 <varlistentry>
 676                                   <term><varname>LACPTransmitRate=</varname></term>
 677                                   <listitem>
 678                                     <para>Specifies the rate with which link partner
 679                                     transmits Link Aggregation Control Protocol Data Unit packets
 680                                     in 802.3ad mode. Possible values are
 681                                     <literal>slow</literal>, which requests partner to transmit LACPDUs every 30 seconds, and
 682                                     <literal>fast</literal>, which requests partner to transmit LACPDUs every second.
 683                                     The default value is <literal>slow</literal>.</para>
 684                                   </listitem>
 685                                 </varlistentry>
 686
 687                                 <varlistentry>
 688                                   <term><varname>MIIMonitorSec=</varname></term>
 689                                   <listitem>
 690                                     <para>Specifies the frequency that Media Independent Interface link
 691                                     monitoring will occur. A value of zero disables MII link monitoring.
 692                                     This values is rounded down to the nearest millisecond. The default
 693                                     value is 0.</para>
 694                                   </listitem>
 695                                 </varlistentry>
 696
 697                                 <varlistentry>
 698                                   <term><varname>UpDelaySec=</varname></term>
 699                                   <listitem>
 700                                     <para>Specifies the delay before a link is enabled after a link up
 701                                     status has been detected. This value is rounded down to a multiple of
 702                                     MIIMonitorSec. The default value is 0.</para>
 703                                   </listitem>
 704                                 </varlistentry>
 705
 706                                 <varlistentry>
 707                                   <term><varname>DownDelaySec=</varname></term>
 708                                   <listitem>
 709                                     <para>Specifies the delay before a link is disabled after a link down
 710                                     status has been detected. This value is rounded down to a multiple of
 711                                     MIIMonitorSec. The default value is 0.</para>
 712                                   </listitem>
 713                                 </varlistentry>
 714
 715                         </variablelist>
 716         </refsect1>
 717
 718         <refsect1>
 719                 <title>Example</title>
 720                 <example>
 721                         <title>/etc/systemd/network/bridge.netdev</title>
 722
 723                         <programlisting>[NetDev]
 724 Name=bridge0
 725 Kind=bridge</programlisting>
 726                 </example>
 727
 728                 <example>
 729                         <title>/etc/systemd/network/vlan1.netdev</title>
 730
 731                         <programlisting>[Match]
 732 Virtualization=no
 733
 734 [NetDev]
 735 Name=vlan1
 736 Kind=vlan
 737
 738 [VLAN]
 739 Id=1</programlisting>
 740                 </example>
 741                 <example>
 742                         <title>/etc/systemd/network/ipip.netdev</title>
 743                         <programlisting>[NetDev]
 744 Name=ipip-tun
 745 Kind=ipip
 746 MTUBytes=1480
 747
 748 [Tunnel]
 749 Local=192.168.223.238
 750 Remote=192.169.224.239
 751 TTL=64</programlisting>
 752                 </example>
 753                 <example>
 754                   <title>/etc/systemd/network/tap.netdev</title>
 755                   <programlisting>[NetDev]
 756 Name=tap-test
 757 Kind=tap
 758
 759 [Tap]
 760 MultiQueue=true
 761 PacketInfo=true</programlisting> </example>
 762
 763                 <example>
 764                         <title>/etc/systemd/network/sit.netdev</title>
 765                         <programlisting>[NetDev]
 766 Name=sit-tun
 767 Kind=sit
 768 MTUBytes=1480
 769
 770 [Tunnel]
 771 Local=10.65.223.238
 772 Remote=10.65.223.239</programlisting>
 773                 </example>
 774
 775                 <example>
 776                         <title>/etc/systemd/network/gre.netdev</title>
 777                         <programlisting>[NetDev]
 778 Name=gre-tun
 779 Kind=gre
 780 MTUBytes=1480
 781
 782 [Tunnel]
 783 Local=10.65.223.238
 784 Remote=10.65.223.239</programlisting>
 785                 </example>
 786
 787                 <example>
 788                         <title>/etc/systemd/network/vti.netdev</title>
 789
 790                         <programlisting>[NetDev]
 791 Name=vti-tun
 792 Kind=vti
 793 MTUBytes=1480
 794
 795 [Tunnel]
 796 Local=10.65.223.238
 797 Remote=10.65.223.239</programlisting>
 798                 </example>
 799
 800                 <example>
 801                         <title>/etc/systemd/network/veth.netdev</title>
 802                         <programlisting>[NetDev]
 803 Name=veth-test
 804 Kind=veth
 805
 806 [Peer]
 807 Name=veth-peer</programlisting>
 808                 </example>
 809
 810                 <example>
 811                         <title>/etc/systemd/network/dummy.netdev</title>
 812                         <programlisting>[NetDev]
 813 Name=dummy-test
 814 Kind=dummy
 815 MACAddress=12:34:56:78:9a:bc</programlisting>
 816                 </example>
 817
 818         </refsect1>
 819         <refsect1>
 820                 <title>See Also</title>
 821                 <para>
 822                         <citerefentry><refentrytitle>systemd</refentrytitle><manvolnum>1</manvolnum></citerefentry>,
 823                         <citerefentry><refentrytitle>systemd-networkd</refentrytitle><manvolnum>8</manvolnum></citerefentry>,
 824                         <citerefentry><refentrytitle>systemd.link</refentrytitle><manvolnum>5</manvolnum></citerefentry>,
 825                         <citerefentry><refentrytitle>systemd.network</refentrytitle><manvolnum>5</manvolnum></citerefentry>
 826                 </para>
 827         </refsect1>
 828
 829 </refentry>