]>
Commit | Line | Data |
---|---|---|
1 | `dhcp`: `boolean` :: | |
2 | ||
3 | Enable DHCP. | |
4 | ||
5 | `enable`: `boolean` :: | |
6 | ||
7 | Enable/disable firewall rules. | |
8 | ||
9 | `ipfilter`: `boolean` :: | |
10 | ||
11 | Enable default IP filters. This is equivalent to adding an empty | |
12 | ipfilter-net<id> ipset for every interface. Such ipsets implicitly contain | |
13 | sane default restrictions such as restricting IPv6 link local addresses to | |
14 | the one derived from the interface's MAC address. For containers the | |
15 | configured IP addresses will be implicitly added. | |
16 | ||
17 | `log_level_in`: `(alert | crit | debug | emerg | err | info | nolog | notice | warning)` :: | |
18 | ||
19 | Log level for incoming traffic. | |
20 | ||
21 | `log_level_out`: `(alert | crit | debug | emerg | err | info | nolog | notice | warning)` :: | |
22 | ||
23 | Log level for outgoing traffic. | |
24 | ||
25 | `macfilter`: `boolean` :: | |
26 | ||
27 | Enable/disable MAC address filter. | |
28 | ||
29 | `ndp`: `boolean` :: | |
30 | ||
31 | Enable NDP. | |
32 | ||
33 | `policy_in`: `(ACCEPT | DROP | REJECT)` :: | |
34 | ||
35 | Input policy. | |
36 | ||
37 | `policy_out`: `(ACCEPT | DROP | REJECT)` :: | |
38 | ||
39 | Output policy. | |
40 | ||
41 | `radv`: `boolean` :: | |
42 | ||
43 | Allow sending Router Advertisement. | |
44 |