Translations by Milo Casagrande

Array of virtual function descriptors. Each VF descriptor is a dictionary mapping attribute names to GVariant values. The 'index' entry is mandatory for each VF. When represented as string a VF is in the form: "INDEX [ATTR=VALUE[ ATTR=VALUE]...]". for example: "2 mac=00:11:22:33:44:55 spoof-check=true". Multiple VFs can be specified using a comma as separator. Currently the following attributes are supported: mac, spoof-check, trust, min-tx-rate, max-tx-rate, vlans. The "vlans" attribute is represented as a semicolon-separated list of VLAN descriptors, where each descriptor has the form "ID[.PRIORITY[.PROTO]]". PROTO can be either 'q' for 802.1Q (the default) or 'ad' for 802.1ad.

This represents the identity of the connection used for various purposes. It allows to configure multiple profiles to share the identity. Also, the stable-id can contain placeholders that are substituted dynamically and deterministically depending on the context. The stable-id is used for generating IPv6 stable private addresses with ipv6.addr-gen-mode=stable-privacy. It is also used to seed the generated cloned MAC address for ethernet.cloned-mac-address=stable and wifi.cloned-mac-address=stable. It is also used as DHCP client identifier with ipv4.dhcp-client-id=stable and to derive the DHCP DUID with ipv6.dhcp-duid=stable-[llt,ll,uuid]. Note that depending on the context where it is used, other parameters are also seeded into the generation algorithm. For example, a per-host key is commonly also included, so that different systems end up generating different IDs. Or with ipv6.addr-gen-mode=stable-privacy, also the device's name is included, so that different interfaces yield different addresses. The '$' character is treated special to perform dynamic substitutions at runtime. Currently supported are "${CONNECTION}", "${DEVICE}", "${MAC}", "${BOOT}", "${RANDOM}". These effectively create unique IDs per-connection, per-device, per-boot, or every time. Note that "${DEVICE}" corresponds to the interface name of the device and "${MAC}" is the permanent MAC address of the device. Any unrecognized patterns following '$' are treated verbatim, however are reserved for future use. You are thus advised to avoid '$' or escape it as "$$". For example, set it to "${CONNECTION}-${BOOT}-${DEVICE}" to create a unique id for this connection that changes with every reboot and differs depending on the interface where the profile activates. If the value is unset, a global connection default is consulted. If the value is still unset, the default is similar to "${CONNECTION}" and uses a unique, fixed ID for the connection.

A string sent to the DHCP server to identify the local machine which the DHCP server may use to customize the DHCP lease and options. When the property is a hex string ('aa:bb:cc') it is interpreted as a binary client ID, in which case the first byte is assumed to be the 'type' field as per RFC 2132 section 9.14 and the remaining bytes may be an hardware address (e.g. '01:xx:xx:xx:xx:xx:xx' where 1 is the Ethernet ARP type and the rest is a MAC address). If the property is not a hex string it is considered as a non-hardware-address client ID and the 'type' field is set to 0. The special values "mac" and "perm-mac" are supported, which use the current or permanent MAC address of the device to generate a client identifier with type ethernet (01). Currently, these options only work for ethernet type of links. The special value "duid" generates a RFC4361-compliant client identifier based on a hash of the interface name as IAID and /etc/machine-id. The special value "stable" is supported to generate a type 0 client identifier based on the stable-id (see connection.stable-id) and a per-host key. If you set the stable-id, you may want to include the "${DEVICE}" or "${MAC}" specifier to get a per-device key. If unset, a globally configured default is used. If still unset, the default depends on the DHCP plugin.

Array of DNS search domains. Domains starting with a tilde ('~') are considered 'routing' domains and are used only to decide the interface over which a query must be forwarded; they are not used to complete unqualified host names.

Tunnel flags. Currently the following values are supported: NM_IP_TUNNEL_FLAG_IP6_IGN_ENCAP_LIMIT (0x1), NM_IP_TUNNEL_FLAG_IP6_USE_ORIG_TCLASS (0x2), NM_IP_TUNNEL_FLAG_IP6_USE_ORIG_FLOWLABEL (0x4), NM_IP_TUNNEL_FLAG_IP6_MIP6_DEV (0x8), NM_IP_TUNNEL_FLAG_IP6_RCV_DSCP_COPY (0x10), NM_IP_TUNNEL_FLAG_IP6_USE_ORIG_FWMARK (0x20). They are valid only for IPv6 tunnels.

When "method" is set to "auto" and this property to TRUE, automatically configured nameservers and search domains are ignored and only nameservers and search domains specified in the "dns" and "dns-search" properties, if any, are used.

Usage: nmcli device modify { ARGUMENTS | --help } ARGUMENTS := <ifname> ([+|-]<setting>.<property> <value>)+ Modify one or more properties currently active on the device without modifying the connection profile. The changes have immediate effect. For multi-valued properties you can use optional '+' or '-' prefix to the property name. The '+' sign allows appending items instead of overwriting the whole value. The '-' sign allows removing selected items instead of the whole value. Examples: nmcli dev mod em1 ipv4.method manual ipv4.addr "192.168.1.2/24, 10.10.1.5/8" nmcli dev mod em1 +ipv4.dns 8.8.4.4 nmcli dev mod em1 -ipv4.dns 1 nmcli dev mod em1 -ipv6.addr "abbe::cafe/56"

Usage: nmcli connection add { ARGUMENTS | help } ARGUMENTS := COMMON_OPTIONS TYPE_SPECIFIC_OPTIONS SLAVE_OPTIONS IP_OPTIONS [-- ([+|-]<setting>.<property> <value>)+] COMMON_OPTIONS: type <type> ifname <interface name> | "*" [con-name <connection name>] [autoconnect yes|no] [save yes|no] [master <master (ifname, or connection UUID or name)>] [slave-type <master connection type>] TYPE_SPECIFIC_OPTIONS: ethernet: [mac <MAC address>] [cloned-mac <cloned MAC address>] [mtu <MTU>] wifi: ssid <SSID> [mac <MAC address>] [cloned-mac <cloned MAC address>] [mtu <MTU>] [mode infrastructure|ap|adhoc] wimax: [mac <MAC address>] [nsp <NSP>] pppoe: username <PPPoE username> [password <PPPoE password>] [service <PPPoE service name>] [mtu <MTU>] [mac <MAC address>] gsm: apn <APN> [user <username>] [password <password>] cdma: [user <username>] [password <password>] infiniband: [mac <MAC address>] [mtu <MTU>] [transport-mode datagram | connected] [parent <ifname>] [p-key <IPoIB P_Key>] bluetooth: [addr <bluetooth address>] [bt-type panu|nap|dun-gsm|dun-cdma] vlan: dev <parent device (connection UUID, ifname, or MAC)> id <VLAN ID> [flags <VLAN flags>] [ingress <ingress priority mapping>] [egress <egress priority mapping>] [mtu <MTU>] bond: [mode balance-rr (0) | active-backup (1) | balance-xor (2) | broadcast (3) | 802.3ad (4) | balance-tlb (5) | balance-alb (6)] [primary <ifname>] [miimon <num>] [downdelay <num>] [updelay <num>] [arp-interval <num>] [arp-ip-target <num>] [lacp-rate slow (0) | fast (1)] bond-slave: master <master (ifname, or connection UUID or name)> team: [config <file>|<raw JSON data>] team-slave: master <master (ifname, or connection UUID or name)> [config <file>|<raw JSON data>] bridge: [stp yes|no] [priority <num>] [forward-delay <2-30>] [hello-time <1-10>] [max-age <6-40>] [ageing-time <0-1000000>] [multicast-snooping yes|no] [mac <MAC address>] bridge-slave: master <master (ifname, or connection UUID or name)> [priority <0-63>] [path-cost <1-65535>] [hairpin yes|no] vpn: vpn-type vpnc|openvpn|pptp|openconnect|openswan|libreswan|ssh|l2tp|iodine|... [user <username>] olpc-mesh: ssid <SSID> [channel <1-13>] [dhcp-anycast <MAC address>] adsl: username <username> protocol pppoa|pppoe|ipoatm [password <password>] [encapsulation vcmux|llc] tun: mode tun|tap [owner <UID>] [group <GID>] [pi yes|no] [vnet-hdr yes|no] [multi-queue yes|no] ip-tunnel: mode ipip|gre|sit|isatap|vti|ip6ip6|ipip6|ip6gre|vti6 remote <remote endpoint IP> [local <local endpoint IP>] [dev <parent device (ifname or connection UUID)>] macsec: dev <parent device (connection UUID, ifname, or MAC)> mode <psk|eap> [cak <key> ckn <key>] [encrypt yes|no] [port 1-65534] macvlan: dev <parent device (connection UUID, ifname, or MAC)> mode vepa|bridge|private|passthru|source [tap yes|no] vxlan: id <VXLAN ID> remote <IP of multicast group or remote address> [local <source IP>] [dev <parent device (ifname or connection UUID)>] [source-port-min <0-65535>] [source-port-max <0-65535>] [destination-port <0-65535>] wpan: [short-addr <0x0000-0xffff>] [pan-id <0x0000-0xffff>] [page <default|0-31>] [channel <default|0-26>] [mac <MAC address>] 6lowpan: dev <parent device (connection UUID, ifname, or MAC)> dummy: SLAVE_OPTIONS: bridge: [priority <0-63>] [path-cost <1-65535>] [hairpin yes|no] team: [config <file>|<raw JSON data>] IP_OPTIONS: [ip4 <IPv4 address>] [gw4 <IPv4 gateway>] [ip6 <IPv6 address>] [gw6 <IPv6 gateway>]

The P2P device that should be connected to. Currently this is the only way to create or join a group.

'%s' can only be used with 'wpa-eap', 'wpa-psk' or 'sae' key management

The InfiniBand P_Key to use for this device. A value of -1 means to use the default P_Key (aka "the P_Key at index 0"). Otherwise it is a 16-bit unsigned integer, whose high bit is set if it is a "full membership" P_Key.

remove [<value>|<index>|<option name>] :: delete the value Removes the property value. For single-valued properties, this sets the property back to its default value. For container-type properties, this removes all the values of that property, or you can specify an argument to remove just a single item or option. The argument is either a value or index of the item to remove, or an option name (for properties with named options). Examples: nmcli ipv4.dns> remove 8.8.8.8 nmcli ipv4.dns> remove 2 nmcli bond.options> remove downdelay

Usage: nmcli agent { COMMAND | help } COMMAND := { secret | polkit | all }

Usage: nmcli agent secret { help } Runs nmcli as NetworkManager secret agent. When NetworkManager requires a password it asks registered agents for it. This command keeps nmcli running and if a password is required asks the user for it.

Usage: nmcli agent polkit { help } Registers nmcli as a polkit action for the user session. When a polkit daemon requires an authorization, nmcli asks the user and gives the response back to polkit.

Usage: nmcli agent all { help } Runs nmcli as both NetworkManager secret and a polkit agent.

nmcli successfully registered as a NetworkManager's secret agent.

Error: secret agent initialization failed

nmcli successfully registered as a polkit agent.

Error: polkit agent initialization failed: %s

GROUP

Error: openconnect failed: %s

Error: openconnect failed with status %d

Error: openconnect failed with signal %d

Warning: password for '%s' not given in 'passwd-file' and nmcli cannot ask without '--ask' option.

Error: Could not create NMClient object: %s.

Error: argument '%s' not understood. Try passing --help instead.

Error: missing argument. Try passing --help.

portal

limited

full

Enter connection type:

Connection (name, UUID, or path):

VPN connection (name, UUID, or path):

Connection(s) (name, UUID, or path):

Connection(s) (name, UUID, path or apath):

activating

activated

deactivating

deactivated

VPN connecting

VPN connected

VPN connection failed

VPN disconnected

Usage: nmcli connection { COMMAND | help } COMMAND := { show | up | down | add | modify | clone | edit | delete | monitor | reload | load | import | export } show [--active] [--order <order spec>] show [--active] [id | uuid | path | apath] <ID> ... up [[id | uuid | path] <ID>] [ifname <ifname>] [ap <BSSID>] [passwd-file <file with passwords>] down [id | uuid | path | apath] <ID> ... add COMMON_OPTIONS TYPE_SPECIFIC_OPTIONS SLAVE_OPTIONS IP_OPTIONS [-- ([+|-]<setting>.<property> <value>)+] modify [--temporary] [id | uuid | path] <ID> ([+|-]<setting>.<property> <value>)+ clone [--temporary] [id | uuid | path ] <ID> <new name> edit [id | uuid | path] <ID> edit [type <new_con_type>] [con-name <new_con_name>] delete [id | uuid | path] <ID> monitor [id | uuid | path] <ID> ... reload load <filename> [ <filename>... ] import [--temporary] type <type> file <file to import> export [id | uuid | path] <ID> [<output file>]