man/man8/ip-link.8.in

   1 .TH IP\-LINK 8 "13 Dec 2012" "iproute2" "Linux"
   2 .SH "NAME"
   3 ip-link \- network device configuration
   4 .SH "SYNOPSIS"
   5 .sp
   6 .ad l
   7 .in +8
   8 .ti -8
   9 .B ip link
  10 .RI  " { " COMMAND " | "
  11 .BR help " }"
  12 .sp
  13
  14 .ti -8
  15 .BI "ip link add"
  16 .RB "[ " link
  17 .IR DEVICE " ]"
  18 .RB "[ " name " ]"
  19 .I NAME
  20 .br
  21 .RB "[ " txqueuelen
  22 .IR PACKETS " ]"
  23 .br
  24 .RB "[ " address
  25 .IR LLADDR " ]"
  26 .RB "[ " broadcast
  27 .IR LLADDR " ]"
  28 .br
  29 .RB "[ " mtu
  30 .IR MTU " ]"
  31 .RB "[ " index
  32 .IR IDX " ]"
  33 .br
  34 .RB "[ " numtxqueues
  35 .IR QUEUE_COUNT " ]"
  36 .RB "[ " numrxqueues
  37 .IR QUEUE_COUNT " ]"
  38 .br
  39 .BI type " TYPE"
  40 .RI "[ " ARGS " ]"
  41
  42 .ti -8
  43 .BR "ip link delete " {
  44 .IR DEVICE " | "
  45 .BI "group " GROUP
  46 }
  47 .BI type " TYPE"
  48 .RI "[ " ARGS " ]"
  49
  50 .ti -8
  51 .BR "ip link set " {
  52 .IR DEVICE " | "
  53 .BI "group " GROUP
  54 }
  55 .br
  56 .RB "[ { " up " | " down " } ]"
  57 .br
  58 .RB "[ " type
  59 .IR "ETYPE TYPE_ARGS" " ]"
  60 .br
  61 .RB "[ " arp " { " on " | " off " } ]"
  62 .br
  63 .RB "[ " dynamic " { " on " | " off " } ]"
  64 .br
  65 .RB "[ " multicast " { " on " | " off " } ]"
  66 .br
  67 .RB "[ " allmulticast " { " on " | " off " } ]"
  68 .br
  69 .RB "[ " promisc " { " on " | " off " } ]"
  70 .br
  71 .RB "[ " protodown " { " on " | " off " } ]"
  72 .br
  73 .RB "[ " trailers " { " on " | " off " } ]"
  74 .br
  75 .RB "[ " txqueuelen
  76 .IR PACKETS " ]"
  77 .br
  78 .RB "[ " name
  79 .IR NEWNAME " ]"
  80 .br
  81 .RB "[ " address
  82 .IR LLADDR " ]"
  83 .br
  84 .RB "[ " broadcast
  85 .IR LLADDR " ]"
  86 .br
  87 .RB "[ " mtu
  88 .IR MTU " ]"
  89 .br
  90 .RB "[ " netns " {"
  91 .IR PID " | " NETNSNAME " } ]"
  92 .br
  93 .RB "[ " link-netnsid
  94 .IR ID " ]"
  95 .br
  96 .RB "[ " alias
  97 .IR NAME  " ]"
  98 .br
  99 .RB "[ " vf
 100 .IR NUM " ["
 101 .B  mac
 102 .IR LLADDR " ]"
 103 .br
 104 .in +9
 105 .RI "[ " VFVLAN-LIST " ]"
 106 .br
 107 .RB "[ " rate
 108 .IR TXRATE " ]"
 109 .br
 110 .RB "[ " max_tx_rate
 111 .IR TXRATE " ]"
 112 .br
 113 .RB "[ " min_tx_rate
 114 .IR TXRATE " ]"
 115 .br
 116 .RB "[ " spoofchk " { " on " | " off " } ]"
 117 .br
 118 .RB "[ " query_rss " { " on " | " off " } ]"
 119 .br
 120 .RB "[ " state " { " auto " | " enable " | " disable " } ]"
 121 .br
 122 .RB "[ " trust " { " on " | " off " } ]"
 123 .br
 124 .RB "[ " node_guid " eui64 ]"
 125 .br
 126 .RB "[ " port_guid " eui64 ] ]"
 127 .br
 128 .in -9
 129 .RB "[ " master
 130 .IR DEVICE " ]"
 131 .br
 132 .RB "[ " nomaster " ]"
 133 .br
 134 .RB "[ " vrf
 135 .IR NAME " ]"
 136 .br
 137 .RB "[ " addrgenmode " { " eui64 " | " none " | " stable_secret " | " random " } ]"
 138 .br
 139 .RB "[ " macaddr " { " flush " | { " add " | " del " } "
 140 .IR MACADDR " | set [ "
 141 .IR MACADDR " [ "
 142 .IR MACADDR " [ ... ] ] ] } ]"
 143 .br
 144
 145 .ti -8
 146 .B ip link show
 147 .RI "[ " DEVICE " | "
 148 .B group
 149 .IR GROUP " ] ["
 150 .BR up " ] ["
 151 .B master
 152 .IR DEVICE " ] ["
 153 .B type
 154 .IR ETYPE " ]"
 155 .B vrf
 156 .IR NAME " ]"
 157
 158 .ti -8
 159 .B ip link help
 160 .RI "[ " TYPE " ]"
 161
 162 .ti -8
 163 .IR TYPE " := [ "
 164 .BR bridge " | "
 165 .BR bond " | "
 166 .BR can " | "
 167 .BR dummy " | "
 168 .BR hsr " | "
 169 .BR ifb " | "
 170 .BR ipoib " |"
 171 .BR macvlan  " | "
 172 .BR macvtap  " | "
 173 .BR vcan " | "
 174 .BR veth " | "
 175 .BR vlan " | "
 176 .BR vxlan " |"
 177 .BR ip6tnl " |"
 178 .BR ipip " |"
 179 .BR sit " |"
 180 .BR gre " |"
 181 .BR gretap " |"
 182 .BR ip6gre " |"
 183 .BR ip6gretap " |"
 184 .BR vti " |"
 185 .BR nlmon " |"
 186 .BR ipvlan " |"
 187 .BR lowpan " |"
 188 .BR geneve " |"
 189 .BR vrf " |"
 190 .BR macsec " ]"
 191
 192 .ti -8
 193 .IR ETYPE " := [ " TYPE " |"
 194 .BR bridge_slave " | " bond_slave " ]"
 195
 196 .ti -8
 197 .IR VFVLAN-LIST " := [ "  VFVLAN-LIST " ] " VFVLAN
 198
 199 .ti -8
 200 .IR VFVLAN " := "
 201 .RB "[ " vlan
 202 .IR VLANID " [ "
 203 .B qos
 204 .IR VLAN-QOS " ] ["
 205 .B proto
 206 .IR VLAN-PROTO " ] ]"
 207
 208 .SH "DESCRIPTION"
 209 .SS ip link add - add virtual link
 210
 211 .TP
 212 .BI link " DEVICE "
 213 specifies the physical device to act operate on.
 214
 215 .I NAME
 216 specifies the name of the new virtual device.
 217
 218 .I TYPE
 219 specifies the type of the new device.
 220 .sp
 221 Link types:
 222
 223 .in +8
 224 .B bridge
 225 - Ethernet Bridge device
 226 .sp
 227 .B bond
 228 - Bonding device
 229 .B can
 230 - Controller Area Network interface
 231 .sp
 232 .B dummy
 233 - Dummy network interface
 234 .sp
 235 .B hsr
 236 - High-availability Seamless Redundancy device
 237 .sp
 238 .B ifb
 239 - Intermediate Functional Block device
 240 .sp
 241 .B ipoib
 242 - IP over Infiniband device
 243 .sp
 244 .B macvlan
 245 - Virtual interface base on link layer address (MAC)
 246 .sp
 247 .B macvtap
 248 - Virtual interface based on link layer address (MAC) and TAP.
 249 .sp
 250 .B vcan
 251 - Virtual Controller Area Network interface
 252 .sp
 253 .B veth
 254 - Virtual ethernet interface
 255 .sp
 256 .BR vlan
 257 - 802.1q tagged virtual LAN interface
 258 .sp
 259 .BR vxlan
 260 - Virtual eXtended LAN
 261 .sp
 262 .BR ip6tnl
 263 - Virtual tunnel interface IPv4|IPv6 over IPv6
 264 .sp
 265 .BR ipip
 266 - Virtual tunnel interface IPv4 over IPv4
 267 .sp
 268 .BR sit
 269 - Virtual tunnel interface IPv6 over IPv4
 270 .sp
 271 .BR gre
 272 - Virtual tunnel interface GRE over IPv4
 273 .sp
 274 .BR gretap
 275 - Virtual L2 tunnel interface GRE over IPv4
 276 .sp
 277 .BR ip6gre
 278 - Virtual tunnel interface GRE over IPv6
 279 .sp
 280 .BR ip6gretap
 281 - Virtual L2 tunnel interface GRE over IPv6
 282 .sp
 283 .BR vti
 284 - Virtual tunnel interface
 285 .sp
 286 .BR nlmon
 287 - Netlink monitoring device
 288 .sp
 289 .BR ipvlan
 290 - Interface for L3 (IPv6/IPv4) based VLANs
 291 .sp
 292 .BR lowpan
 293 - Interface for 6LoWPAN (IPv6) over IEEE 802.15.4 / Bluetooth
 294 .sp
 295 .BR geneve
 296 - GEneric NEtwork Virtualization Encapsulation
 297 .sp
 298 .BR macsec
 299 - Interface for IEEE 802.1AE MAC Security (MACsec)
 300 .sp
 301 .BR vrf
 302 - Interface for L3 VRF domains
 303 .in -8
 304
 305 .TP
 306 .BI numtxqueues " QUEUE_COUNT "
 307 specifies the number of transmit queues for new device.
 308
 309 .TP
 310 .BI numrxqueues " QUEUE_COUNT "
 311 specifies the number of receive queues for new device.
 312
 313 .TP
 314 .BI index " IDX "
 315 specifies the desired index of the new virtual device. The link creation fails, if the index is busy.
 316
 317 .TP
 318 VLAN Type Support
 319 For a link of type
 320 .I VLAN
 321 the following additional arguments are supported:
 322
 323 .BI "ip link add
 324 .BI link " DEVICE "
 325 .BI name " NAME "
 326 .B "type vlan"
 327 [
 328 .BI protocol " VLAN_PROTO "
 329 ]
 330 .BI id " VLANID "
 331 [
 332 .BR reorder_hdr " { " on " | " off " } "
 333 ]
 334 [
 335 .BR gvrp " { " on " | " off " } "
 336 ]
 337 [
 338 .BR mvrp " { " on " | " off " } "
 339 ]
 340 [
 341 .BR loose_binding " { " on " | " off " } "
 342 ]
 343 [
 344 .BI ingress-qos-map " QOS-MAP "
 345 ]
 346 [
 347 .BI egress-qos-map " QOS-MAP "
 348 ]
 349
 350 .in +8
 351 .sp
 352 .BI protocol " VLAN_PROTO "
 353 - either 802.1Q or 802.1ad.
 354
 355 .BI id " VLANID "
 356 - specifies the VLAN Identifer to use. Note that numbers with a leading " 0 " or " 0x " are interpreted as octal or hexadeimal, respectively.
 357
 358 .BR reorder_hdr " { " on " | " off " } "
 359 - specifies whether ethernet headers are reordered or not (default is
 360 .BR on ")."
 361
 362 .in +4
 363 If
 364 .BR reorder_hdr " is " on
 365 then VLAN header will be not inserted immediately but only before passing to the
 366 physical device (if this device does not support VLAN offloading), the similar
 367 on the RX direction - by default the packet will be untagged before being
 368 received by VLAN device. Reordering allows to accelerate tagging on egress and
 369 to hide VLAN header on ingress so the packet looks like regular Ethernet packet,
 370 at the same time it might be confusing for packet capture as the VLAN header
 371 does not exist within the packet.
 372
 373 VLAN offloading can be checked by
 374 .BR ethtool "(8):"
 375 .in +4
 376 .sp
 377 .B ethtool -k
 378 <phy_dev> |
 379 .RB grep " tx-vlan-offload"
 380 .sp
 381 .in -4
 382 where <phy_dev> is the physical device to which VLAN device is bound.
 383 .in -4
 384
 385 .BR gvrp " { " on " | " off " } "
 386 - specifies whether this VLAN should be registered using GARP VLAN Registration Protocol.
 387
 388 .BR mvrp " { " on " | " off " } "
 389 - specifies whether this VLAN should be registered using Multiple VLAN Registration Protocol.
 390
 391 .BR loose_binding " { " on " | " off " } "
 392 - specifies whether the VLAN device state is bound to the physical device state.
 393
 394 .BI ingress-qos-map " QOS-MAP "
 395 - defines a mapping of VLAN header prio field to the Linux internal packet
 396 priority on incoming frames. The format is FROM:TO with multiple mappings
 397 separated by spaces.
 398
 399 .BI egress-qos-map " QOS-MAP "
 400 - defines a mapping of Linux internal packet priority to VLAN header prio field
 401 but for outgoing frames. The format is the same as for ingress-qos-map.
 402 .in +4
 403
 404 Linux packet priority can be set by
 405 .BR iptables "(8)":
 406 .in +4
 407 .sp
 408 .B iptables
 409 -t mangle -A POSTROUTING [...] -j CLASSIFY --set-class 0:4
 410 .sp
 411 .in -4
 412 and this "4" priority can be used in the egress qos mapping to set VLAN prio "5":
 413 .sp
 414 .in +4
 415 .B ip
 416 link set veth0.10 type vlan egress 4:5
 417 .in -4
 418 .in -4
 419 .in -8
 420
 421 .TP
 422 VXLAN Type Support
 423 For a link of type
 424 .I VXLAN
 425 the following additional arguments are supported:
 426
 427 .BI "ip link add " DEVICE
 428 .BI type " vxlan " id " VNI"
 429 [
 430 .BI dev " PHYS_DEV "
 431 .RB " ] [ { " group " | " remote " } "
 432 .I IPADDR
 433 ] [
 434 .B local
 435 .RI "{ "IPADDR " | "any " } "
 436 ] [
 437 .BI ttl " TTL "
 438 ] [
 439 .BI tos " TOS "
 440 ] [
 441 .BI flowlabel " FLOWLABEL "
 442 ] [
 443 .BI dstport " PORT "
 444 ] [
 445 .BI srcport " MIN MAX "
 446 ] [
 447 .RB [ no ] learning
 448 ] [
 449 .RB [ no ] proxy
 450 ] [
 451 .RB [ no ] rsc
 452 ] [
 453 .RB [ no ] l2miss
 454 ] [
 455 .RB [ no ] l3miss
 456 ] [
 457 .RB [ no ] udpcsum
 458 ] [
 459 .RB [ no ] udp6zerocsumtx
 460 ] [
 461 .RB [ no ] udp6zerocsumrx
 462 ] [
 463 .BI ageing " SECONDS "
 464 ] [
 465 .BI maxaddress " NUMBER "
 466 ] [
 467 .RB [ no ] external
 468 ] [
 469 .B gbp
 470 ] [
 471 .B gpe
 472 ]
 473
 474 .in +8
 475 .sp
 476 .BI  id " VNI "
 477 - specifies the VXLAN Network Identifer (or VXLAN Segment
 478 Identifier) to use.
 479
 480 .BI dev " PHYS_DEV"
 481 - specifies the physical device to use for tunnel endpoint communication.
 482
 483 .sp
 484 .BI group " IPADDR"
 485 - specifies the multicast IP address to join.
 486 This parameter cannot be specified with the
 487 .B remote
 488 parameter.
 489
 490 .sp
 491 .BI remote " IPADDR"
 492 - specifies the unicast destination IP address to use in outgoing packets
 493 when the destination link layer address is not known in the VXLAN device
 494 forwarding database. This parameter cannot be specified with the
 495 .B group
 496 parameter.
 497
 498 .sp
 499 .BI local " IPADDR"
 500 - specifies the source IP address to use in outgoing packets.
 501
 502 .sp
 503 .BI ttl " TTL"
 504 - specifies the TTL value to use in outgoing packets.
 505
 506 .sp
 507 .BI tos " TOS"
 508 - specifies the TOS value to use in outgoing packets.
 509
 510 .sp
 511 .BI flowlabel " FLOWLABEL"
 512 - specifies the flow label to use in outgoing packets.
 513
 514 .sp
 515 .BI dstport " PORT"
 516 - specifies the UDP destination port to communicate to the remote VXLAN tunnel endpoint.
 517
 518 .sp
 519 .BI srcport " MIN MAX"
 520 - specifies the range of port numbers to use as UDP
 521 source ports to communicate to the remote VXLAN tunnel endpoint.
 522
 523 .sp
 524 .RB [ no ] learning
 525 - specifies if unknown source link layer addresses and IP addresses
 526 are entered into the VXLAN device forwarding database.
 527
 528 .sp
 529 .RB [ no ] rsc
 530 - specifies if route short circuit is turned on.
 531
 532 .sp
 533 .RB [ no ] proxy
 534 - specifies ARP proxy is turned on.
 535
 536 .sp
 537 .RB [ no ] l2miss
 538 - specifies if netlink LLADDR miss notifications are generated.
 539
 540 .sp
 541 .RB [ no ] l3miss
 542 - specifies if netlink IP ADDR miss notifications are generated.
 543
 544 .sp
 545 .RB [ no ] udpcsum
 546 - specifies if UDP checksum is calculated for transmitted packets over IPv4.
 547
 548 .sp
 549 .RB [ no ] udp6zerocsumtx
 550 - skip UDP checksum calculation for transmitted packets over IPv6.
 551
 552 .sp
 553 .RB [ no ] udp6zerocsumrx
 554 - allow incoming UDP packets over IPv6 with zero checksum field.
 555
 556 .sp
 557 .BI ageing " SECONDS"
 558 - specifies the lifetime in seconds of FDB entries learnt by the kernel.
 559
 560 .sp
 561 .BI maxaddress " NUMBER"
 562 - specifies the maximum number of FDB entries.
 563
 564 .sp
 565 .RB [ no ] external
 566 - specifies whether an external control plane
 567 .RB "(e.g. " "ip route encap" )
 568 or the internal FDB should be used.
 569
 570 .sp
 571 .B gbp
 572 - enables the Group Policy extension (VXLAN-GBP).
 573
 574 .in +4
 575 Allows to transport group policy context across VXLAN network peers.
 576 If enabled, includes the mark of a packet in the VXLAN header for outgoing
 577 packets and fills the packet mark based on the information found in the
 578 VXLAN header for incomming packets.
 579
 580 Format of upper 16 bits of packet mark (flags);
 581
 582 .in +2
 583 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 584 .br
 585 |-|-|-|-|-|-|-|-|-|D|-|-|A|-|-|-|
 586 .br
 587 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 588
 589 .B D :=
 590 Don't Learn bit. When set, this bit indicates that the egress
 591 VTEP MUST NOT learn the source address of the encapsulated frame.
 592
 593 .B A :=
 594 Indicates that the group policy has already been applied to
 595 this packet. Policies MUST NOT be applied by devices when the A bit is set.
 596 .in -2
 597
 598 Format of lower 16 bits of packet mark (policy ID):
 599
 600 .in +2
 601 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 602 .br
 603 |        Group Policy ID        |
 604 .br
 605 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 606 .in -2
 607
 608 Example:
 609   iptables -A OUTPUT [...] -j MARK --set-mark 0x800FF
 610
 611 .in -4
 612
 613 .sp
 614 .B gpe
 615 - enables the Generic Protocol extension (VXLAN-GPE). Currently, this is
 616 only supported together with the
 617 .B external
 618 keyword.
 619
 620 .in -8
 621
 622 .TP
 623 GRE, IPIP, SIT Type Support
 624 For a link of types
 625 .I GRE/IPIP/SIT
 626 the following additional arguments are supported:
 627
 628 .BI "ip link add " DEVICE
 629 .BR type " { " gre " | " ipip " | " sit " }"
 630 .BI " remote " ADDR " local " ADDR
 631 [
 632 .BR encap " { " fou " | " gue " | " none " }"
 633 ] [
 634 .BR encap-sport " { " \fIPORT " | " auto " }"
 635 ] [
 636 .BI "encap-dport " PORT
 637 ] [
 638 .RB [ no ] encap-csum
 639 ] [
 640 .RB [ no ] encap-remcsum
 641 ]
 642
 643 .in +8
 644 .sp
 645 .BI  remote " ADDR "
 646 - specifies the remote address of the tunnel.
 647
 648 .sp
 649 .BI  local " ADDR "
 650 - specifies the fixed local address for tunneled packets.
 651 It must be an address on another interface on this host.
 652
 653 .sp
 654 .BR encap " { " fou " | " gue " | " none " }"
 655 - specifies type of secondary UDP encapsulation. "fou" indicates
 656 Foo-Over-UDP, "gue" indicates Generic UDP Encapsulation.
 657
 658 .sp
 659 .BR encap-sport " { " \fIPORT " | " auto " }"
 660 - specifies the source port in UDP encapsulation.
 661 .IR PORT
 662 indicates the port by number, "auto"
 663 indicates that the port number should be chosen automatically
 664 (the kernel picks a flow based on the flow hash of the
 665 encapsulated packet).
 666
 667 .sp
 668 .RB [ no ] encap-csum
 669 - specifies if UDP checksums are enabled in the secondary
 670 encapsulation.
 671
 672 .sp
 673 .RB [ no ] encap-remcsum
 674 - specifies if Remote Checksum Offload is enabled. This is only
 675 applicable for Generic UDP Encapsulation.
 676
 677 .in -8
 678
 679 .TP
 680 IP6GRE/IP6GRETAP Type Support
 681 For a link of type
 682 .I IP6GRE/IP6GRETAP
 683 the following additional arguments are supported:
 684
 685 .BI "ip link add " DEVICE
 686 .BR type " { " ip6gre " | " ip6gretap " }"
 687 .BI remote " ADDR " local " ADDR"
 688 [
 689 .RB [ i | o ] seq
 690 ] [
 691 .RB [ i | o ] key
 692 .I KEY
 693 ] [
 694 .RB [ i | o ] csum
 695 ] [
 696 .BI hoplimit " TTL "
 697 ] [
 698 .BI encaplimit " ELIM "
 699 ] [
 700 .BI tclass " TCLASS "
 701 ] [
 702 .BI flowlabel " FLOWLABEL "
 703 ] [
 704 .BI "dscp inherit"
 705 ] [
 706 .BI dev " PHYS_DEV "
 707 ]
 708
 709 .in +8
 710 .sp
 711 .BI  remote " ADDR "
 712 - specifies the remote IPv6 address of the tunnel.
 713
 714 .sp
 715 .BI  local " ADDR "
 716 - specifies the fixed local IPv6 address for tunneled packets.
 717 It must be an address on another interface on this host.
 718
 719 .sp
 720 .RB  [ i | o ] seq
 721 - serialize packets.
 722 The
 723 .B oseq
 724 flag enables sequencing of outgoing packets.
 725 The
 726 .B iseq
 727 flag requires that all input packets are serialized.
 728
 729 .sp
 730 .RB  [ i | o ] key " \fIKEY"
 731 - use keyed GRE with key
 732 .IR KEY ". "KEY
 733 is either a number or an IPv4 address-like dotted quad.
 734 The
 735 .B key
 736 parameter specifies the same key to use in both directions.
 737 The
 738 .BR ikey " and " okey
 739 parameters specify different keys for input and output.
 740
 741 .sp
 742 .RB  [ i | o ] csum
 743 - generate/require checksums for tunneled packets.
 744 The
 745 .B ocsum
 746 flag calculates checksums for outgoing packets.
 747 The
 748 .B icsum
 749 flag requires that all input packets have the correct
 750 checksum. The
 751 .B csum
 752 flag is equivalent to the combination
 753 .BR "icsum ocsum" .
 754
 755 .sp
 756 .BI  hoplimit " TTL"
 757 - specifies Hop Limit value to use in outgoing packets.
 758
 759 .sp
 760 .BI  encaplimit " ELIM"
 761 - specifies a fixed encapsulation limit. Default is 4.
 762
 763 .sp
 764 .BI  flowlabel " FLOWLABEL"
 765 - specifies a fixed flowlabel.
 766
 767 .sp
 768 .BI  tclass " TCLASS"
 769 - specifies the traffic class field on
 770 tunneled packets, which can be specified as either a two-digit
 771 hex value (e.g. c0) or a predefined string (e.g. internet).
 772 The value
 773 .B inherit
 774 causes the field to be copied from the original IP header. The
 775 values
 776 .BI "inherit/" STRING
 777 or
 778 .BI "inherit/" 00 ".." ff
 779 will set the field to
 780 .I STRING
 781 or
 782 .IR 00 ".." ff
 783 when tunneling non-IP packets. The default value is 00.
 784
 785 .in -8
 786
 787 .TP
 788 IPoIB Type Support
 789 For a link of type
 790 .I IPoIB
 791 the following additional arguments are supported:
 792
 793 .BI "ip link add " DEVICE " name " NAME
 794 .BR "type ipoib " [ " pkey \fIPKEY" " ] [ " mode " \fIMODE \fR]"
 795
 796 .in +8
 797 .sp
 798 .BI  pkey " PKEY "
 799 - specifies the IB P-Key to use.
 800
 801 .BI  mode " MODE "
 802 - specifies the mode (datagram or connected) to use.
 803
 804 .TP
 805 GENEVE Type Support
 806 For a link of type
 807 .I GENEVE
 808 the following additional arguments are supported:
 809
 810 .BI "ip link add " DEVICE
 811 .BI type " geneve " id " VNI " remote " IPADDR"
 812 [
 813 .BI ttl " TTL "
 814 ] [
 815 .BI tos " TOS "
 816 ] [
 817 .BI flowlabel " FLOWLABEL "
 818 ] [
 819 .BI dstport " PORT"
 820 ] [
 821 .RB [ no ] external
 822 ] [
 823 .RB [ no ] udpcsum
 824 ] [
 825 .RB [ no ] udp6zerocsumtx
 826 ] [
 827 .RB [ no ] udp6zerocsumrx
 828 ]
 829
 830 .in +8
 831 .sp
 832 .BI  id " VNI "
 833 - specifies the Virtual Network Identifer to use.
 834
 835 .sp
 836 .BI remote " IPADDR"
 837 - specifies the unicast destination IP address to use in outgoing packets.
 838
 839 .sp
 840 .BI ttl " TTL"
 841 - specifies the TTL value to use in outgoing packets.
 842
 843 .sp
 844 .BI tos " TOS"
 845 - specifies the TOS value to use in outgoing packets.
 846
 847 .sp
 848 .BI flowlabel " FLOWLABEL"
 849 - specifies the flow label to use in outgoing packets.
 850
 851 .sp
 852 .BI dstport " PORT"
 853 - select a destination port other than the default of 6081.
 854
 855 .sp
 856 .RB [ no ] external
 857 - make this tunnel externally controlled (or not, which is the default). This
 858 flag is mutually exclusive with the
 859 .BR id ,
 860 .BR remote ,
 861 .BR ttl ,
 862 .BR tos " and " flowlabel
 863 options.
 864
 865 .sp
 866 .RB [ no ] udpcsum
 867 - specifies if UDP checksum is calculated for transmitted packets over IPv4.
 868
 869 .sp
 870 .RB [ no ] udp6zerocsumtx
 871 - skip UDP checksum calculation for transmitted packets over IPv6.
 872
 873 .sp
 874 .RB [ no ] udp6zerocsumrx
 875 - allow incoming UDP packets over IPv6 with zero checksum field.
 876
 877 .in -8
 878
 879 .TP
 880 MACVLAN and MACVTAP Type Support
 881 For a link of type
 882 .I MACVLAN
 883 or
 884 .I MACVTAP
 885 the following additional arguments are supported:
 886
 887 .BI "ip link add link " DEVICE " name " NAME
 888 .BR type " { " macvlan " | " macvtap " } "
 889 .BR mode " { " private " | " vepa " | " bridge " | " passthru
 890 .RB " [ " nopromisc " ] | " source " } "
 891
 892 .in +8
 893 .sp
 894 .BR type " { " macvlan " | " macvtap " } "
 895 - specifies the link type to use.
 896 .BR macvlan " creates just a virtual interface, while "
 897 .BR macvtap " in addition creates a character device "
 898 .BR /dev/tapX " to be used just like a " tuntap " device."
 899
 900 .B mode private
 901 - Do not allow communication between
 902 .B macvlan
 903 instances on the same physical interface, even if the external switch supports
 904 hairpin mode.
 905
 906 .B mode vepa
 907 - Virtual Ethernet Port Aggregator mode. Data from one
 908 .B macvlan
 909 instance to the other on the same physical interface is transmitted over the
 910 physical interface. Either the attached switch needs to support hairpin mode,
 911 or there must be a TCP/IP router forwarding the packets in order to allow
 912 communication. This is the default mode.
 913
 914 .B mode bridge
 915 - In bridge mode, all endpoints are directly connected to each other,
 916 communication is not redirected through the physical interface's peer.
 917
 918 .BR mode " " passthru " [ " nopromisc " ] "
 919 - This mode gives more power to a single endpoint, usually in
 920 .BR macvtap " mode. It is not allowed for more than one endpoint on the same "
 921 physical interface. All traffic will be forwarded to this endpoint, allowing
 922 virtio guests to change MAC address or set promiscuous mode in order to bridge
 923 the interface or create vlan interfaces on top of it. By default, this mode
 924 forces the underlying interface into promiscuous mode. Passing the
 925 .BR nopromisc " flag prevents this, so the promisc flag may be controlled "
 926 using standard tools.
 927
 928 .B mode source
 929 - allows one to set a list of allowed mac address, which is used to match
 930 against source mac address from received frames on underlying interface. This
 931 allows creating mac based VLAN associations, instead of standard port or tag
 932 based. The feature is useful to deploy 802.1x mac based behavior,
 933 where drivers of underlying interfaces doesn't allows that.
 934 .in -8
 935
 936 .TP
 937 High-availability Seamless Redundancy (HSR) Support
 938 For a link of type
 939 .I HSR
 940 the following additional arguments are supported:
 941
 942 .BI "ip link add link " DEVICE " name " NAME " type hsr"
 943 .BI slave1 " SLAVE1-IF " slave2 " SLAVE2-IF "
 944 .RB [ " supervision"
 945 .IR ADDR-BYTE " ] ["
 946 .BR version " { " 0 " | " 1 " } ]"
 947
 948 .in +8
 949 .sp
 950 .BR type " hsr "
 951 - specifies the link type to use, here HSR.
 952
 953 .BI slave1 " SLAVE1-IF "
 954 - Specifies the physical device used for the first of the two ring ports.
 955
 956 .BI slave2 " SLAVE2-IF "
 957 - Specifies the physical device used for the second of the two ring ports.
 958
 959 .BI supervision " ADDR-BYTE"
 960 - The last byte of the multicast address used for HSR supervision frames.
 961 Default option is "0", possible values 0-255.
 962
 963 .BR version " { " 0 " | " 1 " }"
 964 - Selects the protocol version of the interface. Default option is "0", which
 965 corresponds to the 2010 version of the HSR standard. Option "1" activates the
 966 2012 version.
 967 .in -8
 968
 969 .TP
 970 MACsec Type Support
 971 For a link of type
 972 .I MACsec
 973 the following additional arguments are supported:
 974
 975 .BI "ip link add link " DEVICE " name " NAME " type macsec"
 976 [ [
 977 .BI address " <lladdr>"
 978 ]
 979 .BI port " PORT"
 980 |
 981 .BI sci " SCI"
 982 ] [
 983 .BI cipher " CIPHER_SUITE"
 984 ] [
 985 .BR icvlen " { "
 986 .IR 8..16 " } ] ["
 987 .BR encrypt " {"
 988 .BR on " | " off " } ] [ "
 989 .BR send_sci " { " on " | " off " } ] ["
 990 .BR end_station " { " on " | " off " } ] ["
 991 .BR scb " { " on " | " off " } ] ["
 992 .BR protect " { " on " | " off " } ] ["
 993 .BR replay " { " on " | " off " }"
 994 .BR window " { "
 995 .IR 0..2^32-1 " } ] ["
 996 .BR validate " { " strict " | " check " | " disabled " } ] ["
 997 .BR encodingsa " { "
 998 .IR 0..3 " } ]"
 999
1000 .in +8
1001 .sp
1002 .BI address " <lladdr> "
1003 - sets the system identifier component of secure channel for this MACsec device.
1004
1005 .sp
1006 .BI port " PORT "
1007 - sets the port number component of secure channel for this MACsec device, in a
1008 range from 1 to 65535 inclusive. Numbers with a leading " 0 " or " 0x " are
1009 interpreted as octal and hexadecimal, respectively.
1010
1011 .sp
1012 .BI sci " SCI "
1013 - sets the secure channel identifier for this MACsec device.
1014 .I SCI
1015 is a 64bit wide number in hexadecimal format.
1016
1017 .sp
1018 .BI cipher " CIPHER_SUITE "
1019 - defines the cipher suite to use.
1020
1021 .sp
1022 .BI icvlen " LENGTH "
1023 - sets the length of the Integrity Check Value (ICV).
1024
1025 .sp
1026 .BR "encrypt on " or " encrypt off"
1027 - switches between authenticated encryption, or authenticity mode only.
1028
1029 .sp
1030 .BR "send_sci on " or " send_sci off"
1031 - specifies whether the SCI is included in every packet, or only when it is necessary.
1032
1033 .sp
1034 .BR "end_station on " or " end_station off"
1035 - sets the End Station bit.
1036
1037 .sp
1038 .BR "scb on " or " scb off"
1039 - sets the Single Copy Broadcast bit.
1040
1041 .sp
1042 .BR "protect on " or " protect off"
1043 - enables MACsec protection on the device.
1044
1045 .sp
1046 .BR "replay on " or " replay off"
1047 - enables replay protection on the device.
1048
1049 .in +8
1050
1051 .sp
1052 .BI window " SIZE "
1053 - sets the size of the replay window.
1054
1055 .in -8
1056
1057 .sp
1058 .BR "validate strict " or " validate check " or " validate disabled"
1059 - sets the validation mode on the device.
1060
1061 .sp
1062 .BI encodingsa " AN "
1063 - sets the active secure association for transmission.
1064
1065 .in -8
1066
1067 .TP
1068 VRF Type Support
1069 For a link of type
1070 .I VRF
1071 the following additional arguments are supported:
1072
1073 .BI "ip link add " DEVICE " type vrf table " TABLE
1074
1075 .in +8
1076 .sp
1077 .BR table " table id associated with VRF device"
1078
1079 .in -8
1080
1081 .SS ip link delete - delete virtual link
1082
1083 .TP
1084 .BI dev " DEVICE "
1085 specifies the virtual device to act operate on.
1086
1087 .TP
1088 .BI group " GROUP "
1089 specifies the group of virtual links to delete. Group 0 is not allowed to be
1090 deleted since it is the default group.
1091
1092 .TP
1093 .BI type " TYPE "
1094 specifies the type of the device.
1095
1096 .SS ip link set - change device attributes
1097
1098 .PP
1099 .B Warning:
1100 If multiple parameter changes are requested,
1101 .B ip
1102 aborts immediately after any of the changes have failed.
1103 This is the only case when
1104 .B ip
1105 can move the system to an unpredictable state. The solution
1106 is to avoid changing several parameters with one
1107 .B ip link set
1108 call.
1109
1110 .TP
1111 .BI dev " DEVICE "
1112 .I DEVICE
1113 specifies network device to operate on. When configuring SR-IOV Virtual Function
1114 (VF) devices, this keyword should specify the associated Physical Function (PF)
1115 device.
1116
1117 .TP
1118 .BI group " GROUP "
1119 .I GROUP
1120 has a dual role: If both group and dev are present, then move the device to the
1121 specified group. If only a group is specified, then the command operates on
1122 all devices in that group.
1123
1124 .TP
1125 .BR up " and " down
1126 change the state of the device to
1127 .B UP
1128 or
1129 .BR "DOWN" .
1130
1131 .TP
1132 .BR "arp on " or " arp off"
1133 change the
1134 .B NOARP
1135 flag on the device.
1136
1137 .TP
1138 .BR "multicast on " or " multicast off"
1139 change the
1140 .B MULTICAST
1141 flag on the device.
1142
1143 .TP
1144 .BR "protodown on " or " protodown off"
1145 change the
1146 .B PROTODOWN
1147 state on the device. Indicates that a protocol error has been detected on the port. Switch drivers can react to this error by doing a phys down on the switch port.
1148
1149 .TP
1150 .BR "dynamic on " or " dynamic off"
1151 change the
1152 .B DYNAMIC
1153 flag on the device. Indicates that address can change when interface goes down (currently
1154 .B NOT
1155 used by the Linux).
1156
1157 .TP
1158 .BI name " NAME"
1159 change the name of the device. This operation is not
1160 recommended if the device is running or has some addresses
1161 already configured.
1162
1163 .TP
1164 .BI txqueuelen " NUMBER"
1165 .TP
1166 .BI txqlen " NUMBER"
1167 change the transmit queue length of the device.
1168
1169 .TP
1170 .BI mtu " NUMBER"
1171 change the
1172 .I MTU
1173 of the device.
1174
1175 .TP
1176 .BI address " LLADDRESS"
1177 change the station address of the interface.
1178
1179 .TP
1180 .BI broadcast " LLADDRESS"
1181 .TP
1182 .BI brd " LLADDRESS"
1183 .TP
1184 .BI peer " LLADDRESS"
1185 change the link layer broadcast address or the peer address when
1186 the interface is
1187 .IR "POINTOPOINT" .
1188
1189 .TP
1190 .BI netns " NETNSNAME " \fR| " PID"
1191 move the device to the network namespace associated with name
1192 .IR "NETNSNAME " or
1193 .RI process " PID".
1194
1195 Some devices are not allowed to change network namespace: loopback, bridge,
1196 ppp, wireless. These are network namespace local devices. In such case
1197 .B ip
1198 tool will return "Invalid argument" error. It is possible to find out if device is local
1199 to a single network namespace by checking
1200 .B netns-local
1201 flag in the output of the
1202 .BR ethtool ":"
1203
1204 .in +8
1205 .B ethtool -k
1206 .I DEVICE
1207 .in -8
1208
1209 To change network namespace for wireless devices the
1210 .B iw
1211 tool can be used. But it allows to change network namespace only for physical devices and by process
1212 .IR PID .
1213
1214 .TP
1215 .BI alias " NAME"
1216 give the device a symbolic name for easy reference.
1217
1218 .TP
1219 .BI group " GROUP"
1220 specify the group the device belongs to.
1221 The available groups are listed in file
1222 .BR "@SYSCONFDIR@/group" .
1223
1224 .TP
1225 .BI vf " NUM"
1226 specify a Virtual Function device to be configured. The associated PF device
1227 must be specified using the
1228 .B dev
1229 parameter.
1230
1231 .in +8
1232 .BI mac " LLADDRESS"
1233 - change the station address for the specified VF. The
1234 .B vf
1235 parameter must be specified.
1236
1237 .sp
1238 .BI vlan " VLANID"
1239 - change the assigned VLAN for the specified VF. When specified, all traffic
1240 sent from the VF will be tagged with the specified VLAN ID. Incoming traffic
1241 will be filtered for the specified VLAN ID, and will have all VLAN tags
1242 stripped before being passed to the VF. Setting this parameter to 0 disables
1243 VLAN tagging and filtering. The
1244 .B vf
1245 parameter must be specified.
1246
1247 .sp
1248 .BI qos " VLAN-QOS"
1249 - assign VLAN QOS (priority) bits for the VLAN tag. When specified, all VLAN
1250 tags transmitted by the VF will include the specified priority bits in the
1251 VLAN tag. If not specified, the value is assumed to be 0. Both the
1252 .B vf
1253 and
1254 .B vlan
1255 parameters must be specified. Setting both
1256 .B vlan
1257 and
1258 .B qos
1259 as 0 disables VLAN tagging and filtering for the VF.
1260
1261 .sp
1262 .BI proto " VLAN-PROTO"
1263 - assign VLAN PROTOCOL for the VLAN tag, either 802.1Q or 802.1ad.
1264 Setting to 802.1ad, all traffic sent from the VF will be tagged with VLAN S-Tag.
1265 Incoming traffic will have VLAN S-Tags stripped before being passed to the VF.
1266 Setting to 802.1ad also enables an option to concatenate another VLAN tag, so both
1267 S-TAG and C-TAG will be inserted/stripped for outgoing/incoming traffic, respectively.
1268 If not specified, the value is assumed to be 802.1Q. Both the
1269 .B vf
1270 and
1271 .B vlan
1272 parameters must be specified.
1273
1274 .sp
1275 .BI rate " TXRATE"
1276 -- change the allowed transmit bandwidth, in Mbps, for the specified VF.
1277 Setting this parameter to 0 disables rate limiting.
1278 .B vf
1279 parameter must be specified.
1280 Please use new API
1281 .B "max_tx_rate"
1282 option instead.
1283
1284 .sp
1285 .BI max_tx_rate " TXRATE"
1286 - change the allowed maximum transmit bandwidth, in Mbps, for the specified VF.
1287 .B vf
1288 parameter must be specified.
1289
1290 .sp
1291 .BI min_tx_rate " TXRATE"
1292 - change the allowed minimum transmit bandwidth, in Mbps, for the specified VF.
1293 Minimum TXRATE should be always <= Maximum TXRATE.
1294 .B vf
1295 parameter must be specified.
1296
1297 .sp
1298 .BI spoofchk " on|off"
1299 - turn packet spoof checking on or off for the specified VF.
1300 .sp
1301 .BI query_rss " on|off"
1302 - toggle the ability of querying the RSS configuration of a specific VF. VF RSS information like RSS hash key may be considered sensitive on some devices where this information is shared between VF and PF and thus its querying may be prohibited by default.
1303 .sp
1304 .BI state " auto|enable|disable"
1305 - set the virtual link state as seen by the specified VF. Setting to auto means a
1306 reflection of the PF link state, enable lets the VF to communicate with other VFs on
1307 this host even if the PF link state is down, disable causes the HW to drop any packets
1308 sent by the VF.
1309 .sp
1310 .BI trust " on|off"
1311 - trust the specified VF user. This enables that VF user can set a specific feature
1312 which may impact security and/or performance. (e.g. VF multicast promiscuous mode)
1313 .sp
1314 .BI node_guid " eui64"
1315 - configure node GUID for the VF.
1316 .sp
1317 .BI port_guid " eui64"
1318 - configure port GUID for the VF.
1319 .in -8
1320
1321 .TP
1322 .BI master " DEVICE"
1323 set master device of the device (enslave device).
1324
1325 .TP
1326 .BI nomaster
1327 unset master device of the device (release device).
1328
1329 .TP
1330 .BI addrgenmode " eui64|none|stable_secret|random"
1331 set the IPv6 address generation mode
1332
1333 .I eui64
1334 - use a Modified EUI-64 format interface identifier
1335
1336 .I none
1337 - disable automatic address generation
1338
1339 .I stable_secret
1340 - generate the interface identifier based on a preset /proc/sys/net/ipv6/conf/{default,DEVICE}/stable_secret
1341
1342 .I random
1343 - like stable_secret, but auto-generate a new random secret if none is set
1344
1345 .TP
1346 .BR "link-netnsid "
1347 set peer netnsid for a cross-netns interface
1348
1349 .TP
1350 .BI type " ETYPE TYPE_ARGS"
1351 Change type-specific settings. For a list of supported types and arguments refer
1352 to the description of
1353 .B "ip link add"
1354 above. In addition to that, it is possible to manipulate settings to slave
1355 devices:
1356
1357 .TP
1358 Bridge Slave Support
1359 For a link with master
1360 .B bridge
1361 the following additional arguments are supported:
1362
1363 .B "ip link set type bridge_slave"
1364 [
1365 .BI state " STATE"
1366 ] [
1367 .BI priority " PRIO"
1368 ] [
1369 .BI cost " COST"
1370 ] [
1371 .BR guard " { " on " | " off " }"
1372 ] [
1373 .BR hairpin " { " on " | " off " }"
1374 ] [
1375 .BR fastleave " { " on " | " off " }"
1376 ] [
1377 .BR root_block " { " on " | " off " }"
1378 ] [
1379 .BR learning " { " on " | " off " }"
1380 ] [
1381 .BR flood " { " on " | " off " }"
1382 ] [
1383 .BR proxy_arp " { " on " | " off " }"
1384 ] [
1385 .BR proxy_arp_wifi " { " on " | " off " }"
1386 ] [
1387 .BI mcast_router " MULTICAST_ROUTER"
1388 ] [
1389 .BR mcast_fast_leave " { " on " | " off "}"
1390 ] [
1391 .BR mcast_flood " { " on " | " off " } ]"
1392
1393 .in +8
1394 .sp
1395 .BI state " STATE"
1396 - Set port state.
1397 .I STATE
1398 is a number representing the following states:
1399 .BR 0 " (disabled),"
1400 .BR 1 " (listening),"
1401 .BR 2 " (learning),"
1402 .BR 3 " (forwarding),"
1403 .BR 4 " (blocking)."
1404
1405 .BI priority " PRIO"
1406 - set port priority (a 16bit unsigned value).
1407
1408 .BI cost " COST"
1409 - set port cost (a 32bit unsigned value).
1410
1411 .BR guard " { " on " | " off " }"
1412 - block incoming BPDU packets on this port.
1413
1414 .BR hairpin " { " on " | " off " }"
1415 - enable hairpin mode on this port. This will allow incoming packets on this
1416 port to be reflected back.
1417
1418 .BR fastleave " { " on " | " off " }"
1419 - enable multicast fast leave on this port.
1420
1421 .BR root_block " { " on " | " off " }"
1422 - block this port from becoming the bridge's root port.
1423
1424 .BR learning " { " on " | " off " }"
1425 - allow MAC address learning on this port.
1426
1427 .BR flood " { " on " | " off " }"
1428 - open the flood gates on this port, i.e. forward all unicast frames to this
1429 port also. Requires
1430 .BR proxy_arp " and " proxy_arp_wifi
1431 to be turned off.
1432
1433 .BR proxy_arp " { " on " | " off " }"
1434 - enable proxy ARP on this port.
1435
1436 .BR proxy_arp_wifi " { " on " | " off " }"
1437 - enable proxy ARP on this port which meets extended requirements by IEEE
1438 802.11 and Hotspot 2.0 specifications.
1439
1440 .BI mcast_router " MULTICAST_ROUTER"
1441 - configure this port for having multicast routers attached. A port with a
1442 multicast router will receive all multicast traffic.
1443 .I MULTICAST_ROUTER
1444 may be either
1445 .B 0
1446 to disable multicast routers on this port,
1447 .B 1
1448 to let the system detect the presence of of routers (this is the default),
1449 .B 2
1450 to permanently enable multicast traffic forwarding on this port or
1451 .B 3
1452 to enable multicast routers temporarily on this port, not depending on incoming
1453 queries.
1454
1455 .BR mcast_fast_leave " { " on " | " off " }"
1456 - this is a synonym to the
1457 .B fastleave
1458 option above.
1459
1460 .BR mcast_flood " { " on " | " off " }"
1461 - controls whether a given port will be flooded with multicast traffic for which there is no MDB entry.
1462
1463 .in -8
1464
1465 .TP
1466 Bonding Slave Support
1467 For a link with master
1468 .B bond
1469 the following additional arguments are supported:
1470
1471 .B "ip link set type bond_slave"
1472 [
1473 .BI queue_id " ID"
1474 ]
1475
1476 .in +8
1477 .sp
1478 .BI queue_id " ID"
1479 - set the slave's queue ID (a 16bit unsigned value).
1480
1481 .in -8
1482
1483 .TP
1484 MACVLAN and MACVTAP Support
1485 Modify list of allowed macaddr for link in source mode.
1486
1487 .B "ip link set type { macvlan | macvap } "
1488 [
1489 .BI macaddr " " "" COMMAND " " MACADDR " ..."
1490 ]
1491
1492 Commands:
1493 .in +8
1494 .B add
1495 - add MACADDR to allowed list
1496 .sp
1497 .B set
1498 - replace allowed list
1499 .sp
1500 .B del
1501 - remove MACADDR from allowed list
1502 .sp
1503 .B flush
1504 - flush whole allowed list
1505 .sp
1506 .in -8
1507
1508
1509 .SS  ip link show - display device attributes
1510
1511 .TP
1512 .BI dev " NAME " (default)
1513 .I NAME
1514 specifies the network device to show.
1515 If this argument is omitted all devices in the default group are listed.
1516
1517 .TP
1518 .BI group " GROUP "
1519 .I GROUP
1520 specifies what group of devices to show.
1521
1522 .TP
1523 .B up
1524 only display running interfaces.
1525
1526 .TP
1527 .BI master " DEVICE "
1528 .I DEVICE
1529 specifies the master device which enslaves devices to show.
1530
1531 .TP
1532 .BI vrf " NAME "
1533 .I NAME
1534 speficies the VRF which enslaves devices to show.
1535
1536 .TP
1537 .BI type " TYPE "
1538 .I TYPE
1539 specifies the type of devices to show.
1540
1541 Note that the type name is not checked against the list of supported types -
1542 instead it is sent as-is to the kernel. Later it is used to filter the returned
1543 interface list by comparing it with the relevant attribute in case the kernel
1544 didn't filter already. Therefore any string is accepted, but may lead to empty
1545 output.
1546
1547 .SS  ip link help - display help
1548
1549 .PP
1550 .I "TYPE"
1551 specifies which help of link type to dislpay.
1552
1553 .SS
1554 .I GROUP
1555 may be a number or a string from the file
1556 .B @SYSCONFDIR@/group
1557 which can be manually filled.
1558
1559 .SH "EXAMPLES"
1560 .PP
1561 ip link show
1562 .RS 4
1563 Shows the state of all network interfaces on the system.
1564 .RE
1565 .PP
1566 ip link show type bridge
1567 .RS 4
1568 Shows the bridge devices.
1569 .RE
1570 .PP
1571 ip link show type vlan
1572 .RS 4
1573 Shows the vlan devices.
1574 .RE
1575 .PP
1576 ip link show master br0
1577 .RS 4
1578 Shows devices enslaved by br0
1579 .RE
1580 .PP
1581 ip link set dev ppp0 mtu 1400
1582 .RS 4
1583 Change the MTU the ppp0 device.
1584 .RE
1585 .PP
1586 ip link add link eth0 name eth0.10 type vlan id 10
1587 .RS 4
1588 Creates a new vlan device eth0.10 on device eth0.
1589 .RE
1590 .PP
1591 ip link delete dev eth0.10
1592 .RS 4
1593 Removes vlan device.
1594 .RE
1595
1596 ip link help gre
1597 .RS 4
1598 Display help for the gre link type.
1599 .RE
1600 .PP
1601 ip link add name tun1 type ipip remote 192.168.1.1
1602 local 192.168.1.2 ttl 225 encap gue encap-sport auto
1603 encap-dport 5555 encap-csum encap-remcsum
1604 .RS 4
1605 Creates an IPIP that is encapsulated with Generic UDP Encapsulation,
1606 and the outer UDP checksum and remote checksum offload are enabled.
1607
1608 .RE
1609 .PP
1610 ip link add link wpan0 lowpan0 type lowpan
1611 .RS 4
1612 Creates a 6LoWPAN interface named lowpan0 on the underlying
1613 IEEE 802.15.4 device wpan0.
1614 .RE
1615
1616 .SH SEE ALSO
1617 .br
1618 .BR ip (8),
1619 .BR ip-netns (8),
1620 .BR ethtool (8),
1621 .BR iptables (8)
1622
1623 .SH AUTHOR
1624 Original Manpage by Michail Litvak <mci@owl.openwall.com>