]> git.ipfire.org Git - thirdparty/systemd.git/blame - man/systemd.network.xml
networkd: Add support for ipv6 privacy extension
[thirdparty/systemd.git] / man / systemd.network.xml
CommitLineData
eac684ef
TG
1<?xml version='1.0'?> <!--*-nxml-*-->
2<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
12b42c76 3 "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd">
eac684ef
TG
4
5<!--
6 This file is part of systemd.
7
8 Copyright 2013 Tom Gundersen
9
10 systemd is free software; you can redistribute it and/or modify it
11 under the terms of the GNU Lesser General Public License as published by
12 the Free Software Foundation; either version 2.1 of the License, or
13 (at your option) any later version.
14
15 systemd is distributed in the hope that it will be useful, but
16 WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
18 Lesser General Public License for more details.
19
20 You should have received a copy of the GNU Lesser General Public License
21 along with systemd; If not, see <http://www.gnu.org/licenses/>.
22-->
23
24<refentry id="systemd.network" conditional='ENABLE_NETWORKD'>
25
798d3a52
ZJS
26 <refentryinfo>
27 <title>systemd.network</title>
28 <productname>systemd</productname>
29
30 <authorgroup>
31 <author>
32 <contrib>Developer</contrib>
33 <firstname>Tom</firstname>
34 <surname>Gundersen</surname>
35 <email>teg@jklm.no</email>
36 </author>
37 </authorgroup>
38 </refentryinfo>
39
40 <refmeta>
41 <refentrytitle>systemd.network</refentrytitle>
42 <manvolnum>5</manvolnum>
43 </refmeta>
44
45 <refnamediv>
46 <refname>systemd.network</refname>
47 <refpurpose>Network configuration</refpurpose>
48 </refnamediv>
49
50 <refsynopsisdiv>
51 <para><filename><replaceable>network</replaceable>.network</filename></para>
52 </refsynopsisdiv>
53
54 <refsect1>
55 <title>Description</title>
56
57 <para>Network setup is performed by
58 <citerefentry><refentrytitle>systemd-networkd</refentrytitle><manvolnum>8</manvolnum></citerefentry>.
59 </para>
60
61 <para>Network files must have the extension
62 <filename>.network</filename>; other extensions are ignored.
63 Networks are applied to links whenever the links appear.</para>
64
65 <para>The <filename>.network</filename> files are read from the
66 files located in the system network directory
12b42c76 67 <filename>/usr/lib/systemd/network</filename>, the volatile
798d3a52
ZJS
68 runtime network directory
69 <filename>/run/systemd/network</filename> and the local
70 administration network directory
12b42c76 71 <filename>/etc/systemd/network</filename>. All configuration files
798d3a52
ZJS
72 are collectively sorted and processed in lexical order, regardless
73 of the directories in which they live. However, files with
74 identical filenames replace each other. Files in
75 <filename>/etc</filename> have the highest priority, files in
76 <filename>/run</filename> take precedence over files with the same
12b42c76 77 name in <filename>/usr/lib</filename>. This can be used to
798d3a52
ZJS
78 override a system-supplied configuration file with a local file if
79 needed; a symlink in <filename>/etc</filename> with the same name
12b42c76 80 as a configuration file in <filename>/usr/lib</filename>, pointing
798d3a52
ZJS
81 to <filename>/dev/null</filename>, disables the configuration file
82 entirely.</para>
83
84 </refsect1>
85
86 <refsect1>
87 <title>[Match] Section Options</title>
88
89 <para>The network file contains a <literal>[Match]</literal>
90 section, which determines if a given network file may be applied
91 to a given device; and a <literal>[Network]</literal> section
92 specifying how the device should be configured. The first (in
93 lexical order) of the network files that matches a given device
a22e1850
LP
94 is applied, all later files are ignored, even if they match as
95 well.</para>
798d3a52
ZJS
96
97 <para>A network file is said to match a device if each of the
98 entries in the <literal>[Match]</literal> section matches, or if
99 the section is empty. The following keys are accepted:</para>
100
101 <variablelist class='network-directives'>
102 <varlistentry>
103 <term><varname>MACAddress=</varname></term>
104 <listitem>
105 <para>The hardware address.</para>
106 </listitem>
107 </varlistentry>
108 <varlistentry>
109 <term><varname>Path=</varname></term>
110 <listitem>
5256e00e
TG
111 <para>A whitespace-separated list of shell-style globs
112 matching the persistent path, as exposed by the udev
113 property <literal>ID_PATH</literal>.</para>
798d3a52
ZJS
114 </listitem>
115 </varlistentry>
116 <varlistentry>
117 <term><varname>Driver=</varname></term>
118 <listitem>
5256e00e
TG
119 <para>A whitespace-separated list of shell-style globs
120 matching the driver currently bound to the device, as
798d3a52
ZJS
121 exposed by the udev property <literal>DRIVER</literal>
122 of its parent device, or if that is not set the driver
123 as exposed by <literal>ethtool -i</literal> of the
124 device itself.</para>
125 </listitem>
126 </varlistentry>
127 <varlistentry>
128 <term><varname>Type=</varname></term>
129 <listitem>
5256e00e
TG
130 <para>A whitespace-separated list of shell-style globs
131 matching the device type, as exposed by the udev property
798d3a52
ZJS
132 <literal>DEVTYPE</literal>.</para>
133 </listitem>
134 </varlistentry>
135 <varlistentry>
136 <term><varname>Name=</varname></term>
137 <listitem>
5256e00e
TG
138 <para>A whitespace-separated list of shell-style globs
139 matching the device name, as exposed by the udev property
140 <literal>INTERFACE</literal>.</para>
798d3a52
ZJS
141 </listitem>
142 </varlistentry>
143 <varlistentry>
144 <term><varname>Host=</varname></term>
145 <listitem>
146 <para>Matches against the hostname or machine ID of the
147 host. See <literal>ConditionHost=</literal> in
148 <citerefentry><refentrytitle>systemd.unit</refentrytitle><manvolnum>5</manvolnum></citerefentry>
149 for details.
150 </para>
151 </listitem>
152 </varlistentry>
153 <varlistentry>
154 <term><varname>Virtualization=</varname></term>
155 <listitem>
156 <para>Checks whether the system is executed in a virtualized
157 environment and optionally test whether it is a specific
158 implementation. See <literal>ConditionVirtualization=</literal> in
159 <citerefentry><refentrytitle>systemd.unit</refentrytitle><manvolnum>5</manvolnum></citerefentry>
160 for details.
161 </para>
162 </listitem>
163 </varlistentry>
164 <varlistentry>
165 <term><varname>KernelCommandLine=</varname></term>
166 <listitem>
167 <para>Checks whether a specific kernel command line option is
168 set (or if prefixed with the exclamation mark unset). See
169 <literal>ConditionKernelCommandLine=</literal> in
170 <citerefentry><refentrytitle>systemd.unit</refentrytitle><manvolnum>5</manvolnum></citerefentry>
171 for details.
172 </para>
173 </listitem>
174 </varlistentry>
175 <varlistentry>
176 <term><varname>Architecture=</varname></term>
177 <listitem>
178 <para>Checks whether the system is running on a specific
179 architecture. See <literal>ConditionArchitecture=</literal> in
180 <citerefentry><refentrytitle>systemd.unit</refentrytitle><manvolnum>5</manvolnum></citerefentry>
181 for details.
182 </para>
183 </listitem>
184 </varlistentry>
185 </variablelist>
186
187 </refsect1>
188
189 <refsect1>
190 <title>[Link] Section Options</title>
191
192 <para> The <literal>[Link]</literal> section accepts the following keys:</para>
193
194 <variablelist class='network-directives'>
195 <varlistentry>
196 <term><varname>MACAddress=</varname></term>
197 <listitem>
198 <para>The hardware address.</para>
199 </listitem>
200 </varlistentry>
201 <varlistentry>
202 <term><varname>MTUBytes=</varname></term>
203 <listitem>
204 <para>The maximum transmission unit in bytes to set for the
205 device. The usual suffixes K, M, G, are supported and are
206 understood to the base of 1024.</para>
207 </listitem>
208 </varlistentry>
209 </variablelist>
210 </refsect1>
211
212 <refsect1>
213 <title>[Network] Section Options</title>
214
215 <para>The <literal>[Network]</literal> section accepts the following keys:</para>
216
217 <variablelist class='network-directives'>
218 <varlistentry>
219 <term><varname>Description=</varname></term>
220 <listitem>
221 <para>A description of the device. This is only used for
222 presentation purposes.</para>
223 </listitem>
224 </varlistentry>
225 <varlistentry>
226 <term><varname>DHCP=</varname></term>
227 <listitem>
228 <para>Enables DHCPv4 and/or DHCPv6 support. Accepts
229 <literal>yes</literal>, <literal>no</literal>,
230 <literal>ipv4</literal>, or <literal>ipv6</literal>.</para>
e88d8021
ZJS
231
232 <para>Please note that by default the domain name
233 specified through DHCP is not used for name resolution.
234 See option <option>UseDomains=</option> below.</para>
798d3a52
ZJS
235 </listitem>
236 </varlistentry>
237 <varlistentry>
238 <term><varname>DHCPServer=</varname></term>
239 <listitem>
240 <para>A boolean. Enables a basic DHCPv4 server on the
241 device. Mostly useful for handing out leases to container
242 instances.</para>
243 </listitem>
244 </varlistentry>
245 <varlistentry>
56fd6bf7 246 <term><varname>LinkLocalAddressing=</varname></term>
798d3a52 247 <listitem>
d0d6a4cd
TG
248 <para>Enables link-local address autoconfiguration. Accepts
249 <literal>yes</literal>, <literal>no</literal>,
250 <literal>ipv4</literal>, or <literal>ipv6</literal>. Defaults to
251 <literal>ipv6</literal>.</para>
798d3a52
ZJS
252 </listitem>
253 </varlistentry>
254 <varlistentry>
255 <term><varname>IPv4LLRoute=</varname></term>
256 <listitem>
257 <para>A boolean. When true, sets up the route needed for
258 non-IPv4LL hosts to communicate with IPv4LL-only hosts. Defaults
259 to false.
260 </para>
261 </listitem>
262 </varlistentry>
263 <varlistentry>
113bfde1
TG
264 <term><varname>IPv6Token=</varname></term>
265 <listitem>
266 <para>An IPv6 address with the top 64 bits unset. When set, indicates the
267 64 bits interface part of SLAAC IPv6 addresses for this link. By default
268 it is autogenerated.</para>
269 </listitem>
270 </varlistentry>
271 <varlistentry>
798d3a52
ZJS
272 <term><varname>LLMNR=</varname></term>
273 <listitem>
274 <para>A boolean or <literal>resolve</literal>. When true, enables
275 Link-Local Multicast Name Resolution on the link, when set to
276 <literal>resolve</literal> only resolution is enabled, but not
277 announcement. Defaults to true.</para>
278 </listitem>
279 </varlistentry>
280 <varlistentry>
281 <term><varname>LLDP=</varname></term>
282 <listitem>
283 <para>A boolean. When true, enables LLDP link receive support.
284 </para>
285 </listitem>
286 </varlistentry>
0d4ad91d
AR
287 <varlistentry>
288 <term><varname>BindCarrier=</varname></term>
289 <listitem>
290 <para>A port or a list of ports. When set, controls the
291 behaviour of the current interface. When all ports in the list
292 are in an operational down state, the current interface is brought
293 down. When at least one port has carrier, the current interface
294 is brought up.
295 </para>
296 </listitem>
297 </varlistentry>
798d3a52
ZJS
298 <varlistentry>
299 <term><varname>Address=</varname></term>
300 <listitem>
301 <para>A static IPv4 or IPv6 address and its prefix length,
302 separated by a <literal>/</literal> character. Specify
303 this key more than once to configure several addresses.
304 The format of the address must be as described in
3ba3a79d 305 <citerefentry project='man-pages'><refentrytitle>inet_pton</refentrytitle><manvolnum>3</manvolnum></citerefentry>.
798d3a52
ZJS
306 This is a short-hand for an [Address] section only
307 containing an Address key (see below). This option may be
308 specified more than once.
309 </para>
310
311 <para>If the specified address is 0.0.0.0 (for IPv4) or
312 [::] (for IPv6), a new address range of the requested size
313 is automatically allocated from a system-wide pool of
314 unused ranges. The allocated range is checked against all
315 current network interfaces and all known network
316 configuration files to avoid address range conflicts. The
317 default system-wide pool consists of 192.168.0.0/16,
318 172.16.0.0/12 and 10.0.0.0/8 for IPv4, and fc00::/7 for
319 IPv6. This functionality is useful to manage a large
320 number of dynamically created network interfaces with the
321 same network configuration and automatic address range
322 assignment.</para>
323
324 </listitem>
325 </varlistentry>
326 <varlistentry>
327 <term><varname>Gateway=</varname></term>
328 <listitem>
329 <para>The gateway address, which must be in the format
330 described in
3ba3a79d 331 <citerefentry project='man-pages'><refentrytitle>inet_pton</refentrytitle><manvolnum>3</manvolnum></citerefentry>.
798d3a52
ZJS
332 This is a short-hand for a [Route] section only containing
333 a Gateway key. This option may be specified more than
334 once.</para>
335 </listitem>
336 </varlistentry>
337 <varlistentry>
338 <term><varname>DNS=</varname></term>
339 <listitem>
340 <para>A DNS server address, which must be in the format
341 described in
3ba3a79d 342 <citerefentry project='man-pages'><refentrytitle>inet_pton</refentrytitle><manvolnum>3</manvolnum></citerefentry>.
798d3a52
ZJS
343 This option may be specified more than once.</para>
344 </listitem>
345 </varlistentry>
346 <varlistentry>
347 <term><varname>Domains=</varname></term>
348 <listitem>
349 <para>The domains used for DNS resolution over this link.</para>
350 </listitem>
351 </varlistentry>
352 <varlistentry>
353 <term><varname>NTP=</varname></term>
354 <listitem>
355 <para>An NTP server address. This option may be specified more than once.</para>
356 </listitem>
357 </varlistentry>
358 <varlistentry>
359 <term><varname>IPForward=</varname></term>
360 <listitem><para>Configures IP forwarding for the network
361 interface. If enabled incoming packets on the network
362 interface will be forwarded to other interfaces according to
363 the routing table. Takes either a boolean argument, or the
364 values <literal>ipv4</literal> or <literal>ipv6</literal>,
365 which only enables IP forwarding for the specified address
2972cba1
NO
366 family, or <literal>kernel</literal>, which preserves existing sysctl settings.
367 This controls the
4046d836
LP
368 <filename>net.ipv4.conf.&lt;interface&gt;.forwarding</filename>
369 and
370 <filename>net.ipv6.conf.&lt;interface&gt;.forwarding</filename>
371 sysctl options of the network interface (see <ulink
372 url="https://www.kernel.org/doc/Documentation/networking/ip-sysctl.txt">ip-sysctl.txt</ulink>
373 for details about sysctl options). Defaults to
374 <literal>no</literal>.</para>
375
2972cba1
NO
376 <para>Note: unless this option is turned on, or set to <literal>kernel</literal>,
377 no IP forwarding is done on this interface, even if this is
4046d836
LP
378 globally turned on in the kernel, with the
379 <filename>net.ipv4.ip_forward</filename> and
380 <filename>net.ipv4.ip_forward</filename> sysctl
505c5f6d 381 options.</para>
4046d836 382 </listitem>
798d3a52
ZJS
383 </varlistentry>
384 <varlistentry>
385 <term><varname>IPMasquerade=</varname></term>
386 <listitem><para>Configures IP masquerading for the network
387 interface. If enabled packets forwarded from the network
388 interface will be appear as coming from the local host.
389 Takes a boolean argument. Implies
5c82dd13 390 <varname>IPForward=ipv4</varname>. Defaults to
4046d836 391 <literal>no</literal>.</para></listitem>
798d3a52
ZJS
392 </varlistentry>
393 <varlistentry>
394 <term><varname>Bridge=</varname></term>
395 <listitem>
396 <para>The name of the bridge to add the link to.</para>
397 </listitem>
398 </varlistentry>
399 <varlistentry>
400 <term><varname>Bond=</varname></term>
401 <listitem>
402 <para>The name of the bond to add the link to.</para>
403 </listitem>
404 </varlistentry>
405 <varlistentry>
406 <term><varname>VLAN=</varname></term>
407 <listitem>
408 <para>The name of a VLAN to create on the link. This
409 option may be specified more than once.</para>
410 </listitem>
411 </varlistentry>
412 <varlistentry>
413 <term><varname>MACVLAN=</varname></term>
414 <listitem>
415 <para>The name of a MACVLAN to create on the link. This
416 option may be specified more than once.</para>
417 </listitem>
418 </varlistentry>
419 <varlistentry>
420 <term><varname>VXLAN=</varname></term>
421 <listitem>
422 <para>The name of a VXLAN to create on the link. This
423 option may be specified more than once.</para>
424 </listitem>
425 </varlistentry>
426 <varlistentry>
427 <term><varname>Tunnel=</varname></term>
428 <listitem>
429 <para>The name of a Tunnel to create on the link. This
430 option may be specified more than once.</para>
431 </listitem>
432 </varlistentry>
433 </variablelist>
434
435 </refsect1>
436
437 <refsect1>
438 <title>[Address] Section Options</title>
439
440 <para>An <literal>[Address]</literal> section accepts the
441 following keys. Specify several <literal>[Address]</literal>
442 sections to configure several addresses.</para>
443
444 <variablelist class='network-directives'>
445 <varlistentry>
446 <term><varname>Address=</varname></term>
447 <listitem>
448 <para>As in the <literal>[Network]</literal> section. This
449 key is mandatory.</para>
450 </listitem>
451 </varlistentry>
452 <varlistentry>
453 <term><varname>Peer=</varname></term>
454 <listitem>
455 <para>The peer address in a point-to-point connection.
456 Accepts the same format as the <literal>Address</literal>
457 key.</para>
458 </listitem>
459 </varlistentry>
460 <varlistentry>
461 <term><varname>Broadcast=</varname></term>
462 <listitem>
463 <para>The broadcast address, which must be in the format
464 described in
3ba3a79d 465 <citerefentry project='man-pages'><refentrytitle>inet_pton</refentrytitle><manvolnum>3</manvolnum></citerefentry>.
798d3a52
ZJS
466 This key only applies to IPv4 addresses. If it is not
467 given, it is derived from the <literal>Address</literal>
468 key.</para>
469 </listitem>
470 </varlistentry>
471 <varlistentry>
472 <term><varname>Label=</varname></term>
473 <listitem>
474 <para>An address label.</para>
475 </listitem>
476 </varlistentry>
477 </variablelist>
478 </refsect1>
479
480 <refsect1>
481 <title>[Route] Section Options</title>
482 <para>The <literal>[Route]</literal> section accepts the
483 following keys. Specify several <literal>[Route]</literal>
484 sections to configure several routes.</para>
485
486 <variablelist class='network-directives'>
487 <varlistentry>
488 <term><varname>Gateway=</varname></term>
489 <listitem>
490 <para>As in the <literal>[Network]</literal> section.</para>
491 </listitem>
492 </varlistentry>
493 <varlistentry>
494 <term><varname>Destination=</varname></term>
495 <listitem>
496 <para>The destination prefix of the route. Possibly
497 followed by a slash and the prefixlength. If omitted, a
498 full-length host route is assumed.</para>
499 </listitem>
500 </varlistentry>
501 <varlistentry>
502 <term><varname>Source=</varname></term>
503 <listitem>
504 <para>The source prefix of the route. Possibly followed by
505 a slash and the prefixlength. If omitted, a full-length
506 host route is assumed.</para>
507 </listitem>
508 </varlistentry>
509 <varlistentry>
510 <term><varname>Metric=</varname></term>
511 <listitem>
512 <para>The metric of the route. An unsigned integer</para>
513 </listitem>
514 </varlistentry>
769b56a3
TG
515 <varlistentry>
516 <term><varname>Scope=</varname></term>
517 <listitem>
518 <para>The scope of the route. One of the values <literal>global</literal>,
519 <literal>link</literal> or <literal>host</literal>. Defaults to
520 <literal>global</literal>.</para>
521 </listitem>
522 </varlistentry>
798d3a52
ZJS
523 </variablelist>
524 </refsect1>
525
526 <refsect1>
527 <title>[DHCP] Section Options</title>
528 <para>The <literal>[DHCP]</literal> section accepts the following keys:</para>
529
530 <variablelist class='network-directives'>
531 <varlistentry>
532 <term><varname>UseDNS=</varname></term>
533 <listitem>
534 <para>When true (the default), the DNS servers received
535 from the DHCP server will be used and take precedence over
536 any statically configured ones.</para>
e88d8021
ZJS
537
538 <para>This corresponds to the <option>nameserver</option>
539 option in <citerefentry project='man-pages'><refentrytitle>resolv.conf</refentrytitle><manvolnum>5</manvolnum></citerefentry>.</para>
798d3a52
ZJS
540 </listitem>
541 </varlistentry>
301f4073
MM
542 <varlistentry>
543 <term><varname>UseNTP=</varname></term>
544 <listitem>
545 <para>When true (the default), the NTP servers received
546 from the DHCP server will be used by systemd-timesyncd
547 and take precedence over any statically configured ones.</para>
548 </listitem>
549 </varlistentry>
798d3a52
ZJS
550 <varlistentry>
551 <term><varname>UseMTU=</varname></term>
552 <listitem>
553 <para>When true, the interface maximum transmission unit
554 from the DHCP server will be used on the current link.
555 Defaults to false.</para>
556 </listitem>
557 </varlistentry>
558 <varlistentry>
559 <term><varname>SendHostname=</varname></term>
560 <listitem>
561 <para>When true (the default), the machine's hostname will be sent to the DHCP
562 server</para>
563 </listitem>
564 </varlistentry>
565 <varlistentry>
566 <term><varname>UseHostname=</varname></term>
567 <listitem>
568 <para>When true (the default), the hostname received from
569 the DHCP server will be used as the transient
570 hostname.</para>
571 </listitem>
572 </varlistentry>
573 <varlistentry>
574 <term><varname>UseDomains=</varname></term>
575 <listitem>
576 <para>When true (not the default), the domain name
577 received from the DHCP server will be used for DNS
e88d8021
ZJS
578 resolution over this link. When a name cannot be resolved
579 as specified, the domain name will be used a suffix and
580 name resolution of that will be attempted.</para>
581
582 <para>This corresponds to the <option>domain</option>
583 option in <citerefentry project='man-pages'><refentrytitle>resolv.conf</refentrytitle><manvolnum>5</manvolnum></citerefentry>
584 and should not be enabled on untrusted networks.</para>
798d3a52
ZJS
585 </listitem>
586 </varlistentry>
587 <varlistentry>
588 <term><varname>UseRoutes=</varname></term>
589 <listitem>
590 <para>When true (the default), the static routes will be
591 requested from the DHCP server and added to the routing
592 table with metric of 1024.</para>
593 </listitem>
594 </varlistentry>
595 <varlistentry>
596 <term><varname>CriticalConnection=</varname></term>
597 <listitem>
598 <para>When true, the connection will never be torn down
599 even if the DHCP lease expires. This is contrary to the
600 DHCP specification, but may be the best choice if, say,
601 the root filesystem relies on this connection. Defaults to
602 false.</para>
603 </listitem>
604 </varlistentry>
3e43b2cd
JJ
605 <varlistentry>
606 <term><varname>ClientIdentifier=</varname></term>
607 <listitem>
608 <para>DHCP client identifier to use. Either <literal>mac</literal>
609 to use the MAC address of the link or <literal>duid</literal>
4a6970c5 610 (the default) to use a RFC4361-compliant Client ID.</para>
3e43b2cd
JJ
611 </listitem>
612 </varlistentry>
798d3a52
ZJS
613 <varlistentry>
614 <term><varname>VendorClassIdentifier=</varname></term>
615 <listitem>
616 <para>The vendor class identifier used to identify vendor
617 type and configuration.</para>
618 </listitem>
619 </varlistentry>
620 <varlistentry>
621 <term><varname>RequestBroadcast=</varname></term>
622 <listitem>
623 <para>Request the server to use broadcast messages before
624 the IP address has been configured. This is necessary for
625 devices that cannot receive RAW packets, or that cannot
626 receive packets at all before an IP address has been
627 configured. On the other hand, this must not be enabled on
628 networks where broadcasts are filtered out.</para>
629 </listitem>
630 </varlistentry>
631 <varlistentry>
632 <term><varname>RouteMetric=</varname></term>
633 <listitem>
634 <para>Set the routing metric for routes specified by the
635 DHCP server.</para>
636 </listitem>
637 </varlistentry>
638 </variablelist>
639
640 </refsect1>
641
642 <refsect1>
643 <title>[Bridge] Section Options</title>
644 <para>The <literal>[Bridge]</literal> section accepts the
645 following keys.</para>
646 <variablelist class='network-directives'>
647 <varlistentry>
648 <term><varname>Cost=</varname></term>
649 <listitem>
650 <para>Each port in a bridge may have different speed. Cost
651 is used to decide which link to use. Faster interfaces
652 should have lower costs</para>
653 </listitem>
654 </varlistentry>
655 </variablelist>
656 </refsect1>
657
658 <refsect1>
659 <title>[BridgeFDB] Section Options</title>
660 <para>The <literal>[BridgeFDB]</literal> section manages the
661 forwarding database table of a port and accepts the following
662 keys. Specify several <literal>[BridgeFDB]</literal> sections to
663 configure several static MAC table entries.</para>
664
665 <variablelist class='network-directives'>
666 <varlistentry>
667 <term><varname>MACAddress=</varname></term>
668 <listitem>
669 <para>As in the <literal>[Network]</literal> section. This
670 key is mandatory.</para>
671 </listitem>
672 </varlistentry>
673 <varlistentry>
674 <term><varname>VLANId=</varname></term>
675 <listitem>
676 <para>The VLAN Id for the new static MAC table entry. If
677 omitted, no VLAN Id info is appended to the new static MAC
678 table entry.</para>
679 </listitem>
680 </varlistentry>
681 </variablelist>
682 </refsect1>
683
684 <refsect1>
685 <title>Example</title>
686 <example>
12b42c76 687 <title>/etc/systemd/network/50-static.network</title>
798d3a52
ZJS
688
689 <programlisting>[Match]
eac684ef
TG
690Name=enp2s0
691
692[Network]
693Address=192.168.0.15/24
694Gateway=192.168.0.1</programlisting>
798d3a52 695 </example>
eac684ef 696
798d3a52 697 <example>
12b42c76 698 <title>/etc/systemd/network/80-dhcp.network</title>
eac684ef 699
798d3a52 700 <programlisting>[Match]
eac684ef
TG
701Name=en*
702
703[Network]
9c8ca3f7 704DHCP=yes</programlisting>
798d3a52 705 </example>
eac684ef 706
798d3a52 707 <example>
12b42c76 708 <title>/etc/systemd/network/bridge-static.network</title>
f47c5c47 709
798d3a52 710 <programlisting>[Match]
f47c5c47 711Name=bridge0
712
713[Network]
714Address=192.168.0.15/24
715Gateway=192.168.0.1
716DNS=192.168.0.1</programlisting>
798d3a52 717 </example>
f47c5c47 718
798d3a52 719 <example>
12b42c76 720 <title>/etc/systemd/network/bridge-slave-interface.network</title>
f47c5c47 721
798d3a52 722 <programlisting>[Match]
f47c5c47 723Name=enp2s0
724
725[Network]
726Bridge=bridge0</programlisting>
798d3a52
ZJS
727 </example>
728 <example>
12b42c76 729 <title>/etc/systemd/network/ipip.network</title>
0a8a0fad 730
798d3a52 731 <programlisting>[Match]
0a8a0fad
TG
732Name=em1
733
734[Network]
735Tunnel=ipip-tun</programlisting>
798d3a52 736 </example>
0a8a0fad 737
798d3a52 738 <example>
12b42c76 739 <title>/etc/systemd/network/sit.network</title>
0a8a0fad 740
798d3a52 741 <programlisting>[Match]
0a8a0fad
TG
742Name=em1
743
744[Network]
745Tunnel=sit-tun</programlisting>
798d3a52 746 </example>
0a8a0fad 747
798d3a52 748 <example>
12b42c76 749 <title>/etc/systemd/network/gre.network</title>
0a8a0fad 750
798d3a52 751 <programlisting>[Match]
0a8a0fad
TG
752Name=em1
753
754[Network]
755Tunnel=gre-tun</programlisting>
798d3a52 756 </example>
0a8a0fad 757
798d3a52 758 <example>
12b42c76 759 <title>/etc/systemd/network/vti.network</title>
0a8a0fad 760
798d3a52 761 <programlisting>[Match]
0a8a0fad
TG
762Name=em1
763
764[Network]
765Tunnel=vti-tun</programlisting>
798d3a52
ZJS
766 </example>
767 </refsect1>
768
769 <refsect1>
770 <title>See Also</title>
771 <para>
772 <citerefentry><refentrytitle>systemd</refentrytitle><manvolnum>1</manvolnum></citerefentry>,
773 <citerefentry><refentrytitle>systemd-networkd</refentrytitle><manvolnum>8</manvolnum></citerefentry>,
774 <citerefentry><refentrytitle>systemd.link</refentrytitle><manvolnum>5</manvolnum></citerefentry>,
775 <citerefentry><refentrytitle>systemd.netdev</refentrytitle><manvolnum>5</manvolnum></citerefentry>
776 </para>
777 </refsect1>
eac684ef
TG
778
779</refentry>