|
Server : Apache System : Linux cvar2.toservers.com 3.10.0-962.3.2.lve1.5.73.el7.x86_64 #1 SMP Wed Aug 24 21:31:23 UTC 2022 x86_64 User : njnconst ( 1116) PHP Version : 8.4.18 Disable Function : NONE Directory : /usr/share/locale/zh_CN/LC_MESSAGES/ |
Upload File : |
�� 7 �A �� �� �� �� ɯ ү � $ � ! � 5 6� % l� �� # �� а # � � # ,� P� m� �� �� �� ��
�� ű ױ � ' � 7� 7 R� �� �� ʲ � �� > � Q� l� s� {� ! �� �� �� ۳ & �� "� C� * `� ( �� H �� - �� % +� 3 Q� . �� / �� ( � 0
� >� S� j� - �� $ �� ) Ӷ �� � /� ' P� x� �� �� з ! � � 0 4� e� �� �� �� �� ' � ;� \� ! x� " �� 2 �� " � � ,� , G� t� " �� * �� � � #� ?� G `� �� < �� �� ) � 7 ;� 4 s� / �� ' ؼ # � ) $� # N� r� �� 0 �� . ؽ 4 � <� R P� �� ' �� % � ( � * /� Z� # w� , �� ȿ * � � 3� J� D `� % �� - � / �� )� <� Z� {� �� # �� & � � �� � � � � 9� 2 3� f� h� q� ~� �� �� �� �� �� � �� & U� |� �� / �� 0 �� � � )� - :� h� r� @ �� A �� U � N a� 4 �� Y �� 8 ?� E x� G �� % � � ,� # � Z B� T �� �� � � � �� � {� r F� * �� 5 �� 4 � C O� � �� , �� , �� � �� ( i� �� �� ? �� �� �� �� �� < � 9 E� : � H �� H � L� U� k� ��
�� 3 �� �� �� 0 �� . &� * U� �� & �� �� �� �� ��
�� � � <� $ Y� ~� % �� � �� � �� � R� � R� , )� � V� � . � 5 6� ( l� � �� � 8� 4 �� �
� � � % � �� � ! &� H� � e� � �� � �� S� t� �� �� + �� � �� � /� 9� O� e� � ��
�� �� �� � � � � \ � N X q v � � � � � � F M e � � 6 � � �
�
9 S ] C o & � � � " 3 : Q n � � � � 5 � 0 : L _ v � q � � �
�
�
�
) �
+ �
, ) J + t ( � A � " . N ^ { , � 0 � , � ? ! : a 2 � % � + � ! . � H ^ � � 0 � � 2 � � � � @ 9" 8 M' n �' � �( I �) * , * / F* , v* / �* 3 �* 4 + / <+ w l+ 1 �+ ' , 2 >, * q, . �, * �, b �, ) Y. 5 �. 1 �. ( �. ! / & 6/ ]/ 9 ~/ 4 �/ # �/ # 0 50 $ S0 x0 �0 �0 �0 �0 % 1 (1 I1 j1 �1 �1 ' �1 ' �1 & 2 A2 Z2 {2 �2 �2 �2 � �2 n3 �3 �3 �3 �3 �3 �3 Q 4 S: W: j: 1 |: 8 �: �:
�: �: ; ; X &; ; �; . �; ' �; " �; < 1 ,< ^< % m< �< �< a �< � #= � �= � J> H? Q? g? ' |? - �? = �? " @ ) 3@ ]@ ( s@ �@ �@ �@ �@ �@ / �@ * A & GA nA 1 rA �A �A �A �A �A & �A B "B � >B �B �B �B # C *C :C RC jC �C �C �C 0 �C ' D # *D * ND % yD # �D � �D � [H u �H ; VJ �J � �J J EK A �K b �L � 5M � �M Z �O b Q k ~Q 6 �Q � !S ] �V � W 9 �W I Y [Z � sZ � >[ � +\ � �\ � �] � �^ b R` ' �` �` " �` a
@a ' Ka sa 0 �a
�a �a �a �a !
b ,b * Gb rb 4 �b > �b # c ) $c 2 Nc 2 �c �c B �c d < !d ^d {d �d �d �d # �d
e 'e He + ^e . �e �e # �e & �e 0 f . Hf 5 wf A �f ' �f 9 g % Qg ' wg . �g & �g , �g , "h , Oh 1 |h ) �h �h �h 7 i [ Mi # �i 8 �i 3 j ( :j ( cj 0 �j + �j / �j & k * @k kk % �k �k - �k �k l :l ' Yl �l 1 �l > �l 6 m > Gm 5 �m 0 �m B �m ; 0n ! ln �n # �n + �n �n o =o @ Zo �o < �o 6 �o / .p , ^p ! �p 3 �p # �p * q ( 0q ( Yq �q * �q ! �q ( �q ! r % 9r % _r . �r ( �r * �r ' s ! 0s Rs 0 ss ) �s �s # �s # t # 4t / Xt ! �t �t �t ; �t > "u 5 au �u �u �u ( �u , v ) Gv ) qv % �v ) �v + �v ( w # @w ! dw �w $ �w �w E �w ( /x ) Xx ) �x �x �x - �x y " +y Ny ) ly 8 �y �y �y z ! z ( ;z $ dz �z �z + �z ! �z J { ]{ f{ }{ �{ ? �{ % �{ | # | � C| �| % } ) =} ) g} �} $ �} �} " �} & ~ * ?~ < j~ = �~ + �~ # # 5 Y 5 p , � ) � + � )� ) C� , m� ' �� + ; � 0 *� , [� ; �� 0 ā , �� ! "� D� - d� " �� �� ւ + �� + #� O� ? `� C �� < � 6 !� 7 X� ; �� F ̄ J � J ^� 2 �� : ܅ C � 2 [� a �� , � � � � ˈ � �� � Q� b J�
�� �� Ό Ҍ ، �� ! � 4� J� Y� y� �� �� �� �� Í Ӎ � �� � � -� :�
Z� e� t� �� �� # �� ێ � �� � � 0�
�� 5 �� 5 �� v ,� q ��
� � L *� w� �� �� �� Δ � � � � �� � � 6�
J� X� " k� �� ��
Е # ו - �� % )� � O� � U � Q J� d �� 5 � � 7� / � � <� C � : a� � �� � X� � !� � �� ^ Z� 9 �� 8 � ; ,� = h� 8 �� � ߣ � v� | ]� � ڥ � Ӧ � ʧ � �� H h� E �� } �� � u� � j� � %� � � � �� M �� � � ~ �� x � �� u �� � $� Q 8� �� � �� � @� � ռ � �� k� � � � �� � [� � � � �� � �� u d� � �� � �� � J� �� , �� $ � A 8� � z� �
� � �� � .� , �� & ��
� A � a� w� 1 �� �� �� �� �� E �� ?� N� Z� x� �� �� �� ( �� ( � ) @� ! j� 0 �� ! �� �� �� B � # ]� �� �� �� �� �� �� 0 �� # � @� 7 E� 4 }� 7 �� , �� , � D� c T� �� ��
�� & ��
� � � �� � �� � �� � �� ^� g� |� 5 �� ��
�� �� � � ( #� L� S� m� �� ' �� �� �� �� �� �� ��
�� � � 4 !� 0 V� 9 �� 0 �� / �� 4 "� W� ^� w� }� �� �� �� K �� , �� (� /� # G� k� �� �� �� - �� ��
� ! ,� N� # S� w� �� �� ( �� * �� ! !� # C� = g� �� ) �� �� �� 0 �� b � �� �� �� �� " �� � ,� G� f� � }� Z� q� �� ��
�� / �� ( �� ( #� L� & [� �� �� �� �� �� �� � � +� E� ]� n� �� e �� � � � )� ! >� � `� X �� k :� �� �� �� �� �� ' � 4� % T� z� �� ��
�� �� ��
�� �� � =� < L� 8 �� �� �� $ �� & �� ! � 8� V� Z� 2 k� �� ( �� �� ��
�� �� � /� <� B� S� g� v� �� �� �� �� " �� �� �� � - � � N� 4 7� 5 l�
�� N �� �� � < � H� `� �� 5 �� �� �� �� + �� % &� L� $ U� z� �� �� �� Z ��
� � 3� E� # T� x� � �� �� + �� + � � � '� ?� G� T� 3 j� �� �� �� ( �� - � ! � 0� @� � U� � $ � 0 � 6 F� 5 }� 2 �� ' � � 1 � 4 I� ~� �� �� �� �� � � � � �� / �� z � >� M�
T� _� ) �� G �� � � �
3� , A� n� u� n �� ` � � U� � ( � � � � � � 3 W V � L � � / � � F J Y � p � Y \ < � ` � � T 2
) R
C |
C �
3 R 8 � � }
" � � � & x
�
�
o �
> 5 t | " � 5 � : � K 1 B } > � E � > E E � @ � N E Z F � / � H D ` C � � � � 4 D W c + m $ � F � , 0 2 ? c � � ' j H � � � � � 7 � 7
6 B � y M [! e �" � # > $ 8 A$ A z$ J �$ > % g F% � �% C E& U �& ! �& % ' '' . G' $ v' D �' , �' %
) $ 3) L X) 6 �) � �* + �+ @ �+ 5 �+ ., 1 O, ; �, ( �, q �, ` X- �- . �- - . ) 6. * `. . �. * �. * �. ) / + :/ * f/ , �/ * �/ / �/ 2 0 - L0 ) z0 ( �0 0 �0 ) �0 * (1 7 S1 / �1 0 �1 / �1 2 =2 g X2 �2 1 �4 �4 H 5 B _5 G �5 > �5 & )6 � P6 �6 * 7 , >7 k7 �7 �7 ) �7 " �7 W
8 � e8 _ 69 C �9 � �9 � �: � T; � < B �< = 0 1= 5 b= � �= � > �> o �> l "? S �? b �? b F@ q �@ 6 A RA Z oA
�C = �D � F � �F � yG � .H � �H � �I � =J � �J � �K O aL K �L P �L R NM ' �M �M A �M > +N Y jN �O C �P X R W vR � �R ^ VS � �S 6 oT H �T \ �T G LU M �U �U � V C �] S �] )^ � ;_ �` �` a
a k a E b * �b 3 �b $c 1c Hc _c 4 cc � �c � <d � �d �e �e % �e f :f + Uf & �f . �f + �f g g +g
Bg Pg hg g �g �g �g + �g �g % h % @h $ fh �h �h _ �m � n � �n M �o � p 2 �� � օ �� V �� � �� o � � d� 4 d� �� Q �� X � � M� � /� � �� � � � � Н � �� � V� � @� � �� � � � ��
� o (� �� n �� b � � � � � p � � ]� > � < ]� } �� ~ � } �� � � k �� �
� � %
� $ 3� X� j�
y� �� �� 4 �� 5 ջ � 3 "� / V� �� �� �� �� �� ۼ % � � �
$� 2� ) A� $ k� �� �� �� & ʽ � � � .� 2� 7� =� F� W� s� �� �� �� ! �� � � � � %� 5� O� p� v� �� 9 �� 1 ڿ 4 � & A� ' h� A �� N � 1 !� & S� 2 z� & �� �
� � � 7 � J L� ; �� < �� < � ' M� u� > �� K �� H
� 7 V� 7 �� � �� & �� J �� F
� < T� c �� 0 �� @ &� � g� � S� � �� r �� :� ` V� � �� � �� w� ! |� + �� �� �� I
� 6 T� | �� � � * �� 8 �� 4 �� 2 *� t ]� � �� 4 �� �� � � � +� 5� J� [� c o� �� �� ��
� "� (� 7� H� R� g� ~� �� �� �� �� �� �� H �� 5� O� L S� * �� ( �� 0 �� %� : B� }� �� �� A �� C
� D Q� D �� > �� # �
>� L� � a� `�
j� � u� T�
`� n� ' u� ' �� �� �� �� ! �� & �� $� +� ?� @ T� G �� �� �� , �� 7 )� % a� G �� 4 �� 3 � 0 8� i� % �� & �� 3 �� � & #� J� + e� O �� ; �� % � C� E \� �� �� �
� % �
� % #� I� j� + �
�� �� & � � � %� ! B� d� G z� � � � � 1 � � "� � �� / S� 1 �� �� ��
� ( � � � 5� H� Y� l� �� # �� �� �� � � " � : $� # _� �� �� �� � " � � +� & L� s�
�� �� ��
�� $ �� : � � � /� * ,� & W� ( ~� 0 �� 4 �
� � � &� F� . d� �� �� D � * 6 S ' q � ' � ) � , + 0 \ w W � � � : . G v � � � � � + G - Z � � � " � , � % , 7 R � � � � � � 4 2 K + ~ * � � � % . , $ [ � ' � � � �
# , 3 P " � � � $ � 7 K ` | � � � � - � 2 L ` , o + �
� � �
" )
L
X
d
y
# �
/ �
9 �
# " & F m � � � # � � " ( ' 8 ` h � � + � > � %
* C
n
~
�
�
& �
$ �
( - A o + { � � � 3 4 # P t �
� � + � � " � . ! ? & a � + � � � W � � $ V � B 1 Y � � � # � � # � : U l q � 5 � : � : R a m , } � ( � � 3 � $ , Q ! i ! � P � � ) G ] D s � ( � � 9 T l � � � � � � � � I 2 5 A w � � � � � 0 L ! ] 6 4 � # � . � > �
� 0 � ! 3 *! ^! }! �! �! � �! B" b$ ' j$ �$ �$ �$ �$ �$ � % U �% - �% - & ' ?& g& , y& 5 �& 9 �& . ' , E' r' z' �' �' , �' �' . �' ( ( 7( + L( x( �( 8 �( + �( ! ) - .) - \) �) �) �) ) �) , * " 4* - W* �* �* D �* 9 + ) A+ ( k+ , �+ �+ T �+ 1 5, @ g, �, 5 �, = �, F (- o- w- �- �- �- �- $ �-
. &. @. Q. f. {. �. �. ' �. �. �. / ;/ ! T/ v/ ? �/ : �/ Q 0 `0 " v0 & �0
�0 �0 �0 �0 - 1 71 O1 : b1 3 �2 ! �2 �2 % �2 ( #3 L3
P3 � ^3 �4 5 "5 15 @5 ! O5 q5 / �5 " �5 �5 �5 6 ,6 I6 `6 �6 �6 �6 �6
�6 �6 �6
�6 7 7 :7 X7 2 s7 �7 �7 �7 8 8 / /8 _8 {8 �8 �8 % �8 �8 �8 �8 & 9 09 O9 # k9 % �9 > �9 ) �9 : 0 <: % m: 2 �: % �: 0 �: ; 5; L; `; �; ) �; �; �; ! �; & < F< `< �< �< ! �< �< , = 1= R= r= ! �= �= �= 1 �= > # /> # S> w> ) �> �> �> �> / ? I? j? # �? �? �? �?
@ ; *@ f@ K r@ �@ �@ @ �@ , <A 1 iA $ �A % �A , �A B ,B AB / [B / �B 8 �B �B G C QC # bC & �C & �C # �C �C D # 4D XD # rD �D �D �D A �D 'E # FE * jE �E �E * �E �E F %F EF fF sF }F �F ! �F � �F �I �K
�K
�K
�K �K �K �K �K
�K P �K >M [M {M " �M * �M �M �M �M ( N .N � 8N 5 .O 9 dO \ �O H �O 0 DP O uP - �P : �P ? .Q nQ � �Q dR R �R 1 �R � T " �T � V � �V H �W �X 0 Y ! HY 5 jY � �Y � 3_ ) c m 2c � �c ae fe < re �e �e
�e �e , �e ) �e - #f B Qf B �f �f �f �f �f g ' g ?g
Fg * Tg ( g ! �g �g $ �g h h h >h Eh Rh jh �h �h �h �h � �h � �i � )j � �j � �k � �l � Am �o ' �o " &p � Ip � �p $ Wq � |q � Jr # �r s 2s Es ^s d zs d �t � Dv ;x Wx ^x qx �x ! �x ! �x ' �x y y +y 8y Ky ^y
ty �y �y �y �y �y �y ? �y {
{ { ${ 1{ A{ N{ f{ �{ �{ W �{ | | /| B| : I| �| �| �| �| # �| �| �| } : } O} o} {} �} �} �} �} �} �} ~ ~ $~ +~ * C~ $ n~ �~ �~ �~ �~ �~ � � � � i� s� �� $ �� �� $ ֆ $ �� & � ' G� 6 o� & �� ͇ � � � ! � + >� % j� ; �� 3 ̈ * � & +� 4 R� �� �� B �� " � H � N Y� � �� ! 3� � U� 5 � - F� a t� � ֝ 9 m� �� % �� ( Ԟ % �� ( #� , L� - y� ( �� ` П * 1� \� + }� # �� ' ͠ # �� A � " [� . ~� * �� ! آ �� ! � 4� 6 P� 0 �� �� * ֣ � � ! 4� V� r� �� �� ) �� � � (� H� `� & x� & �� % ƥ � �� � @� G� _� � w� ��
� " "� E� Z� o�
�� � �� 4� 8�
I� * W� , �� �� �� �� ǭ έ X � ;� B� ' W� � �� �� 0 ʮ �� ' � 0� F� M \� n �� � � � �� �� �� �� % �� . � � '� # H� l� 6 �� �� ϲ ֲ � � * � 2� R� r� ( v� �� �� �� ɳ ֳ ' � � � r 9� �� �� ش � � � 2� E� [� s� �� ( �� е � ! � -� L� h� T k� ' �� 5 � � � 1� H �� - � e 6� � �� � B� F �� e =� d �� % � Y .� _ �� � �� 1 �� - �� � � � � �� � �� � �� � �� _ t� n �� C� " d� " �� " �� �� / ��
� . '� V� e� u� �� �� �� / �� $ � 2 :� D m� , �� ' �� 2 � . :� i� C |� �� B �� "� B� c� � �� �� �� �� � ( +� + T� �� �� % �� + �� 1 � 2 =� @ p� $ �� 0 �� � '� ) H� ! r� + �� - �� , �� 5 � + Q� # }� $ �� B �� v � �� 3 �� , �� � & #� * J� & u� , �� , �� ' �� % � 8 D� " }� 1 �� �� ��
� - )� W� 5 s� 8 �� / �� 8 � . K� - z� @ �� 4 �� � % <� ' b� ' �� �� �� �� F � # N� ? r� . �� ) �� - � " 9� 2 \� ! �� $ �� : �� + � =� ( \� # �� 0 �� _ �� ( :� # c� / �� ) �� ' �� ' � # 1� U� ; v� ) �� �� $ �� & � & G� 1 n� % �� �� �� B � I I� 8 �� $ �� & �� � # 1� 5 U� % �� * �� ! �� - �� - ,� * Z� $ �� ! �� ! �� * �� ! � E ;� ) �� + �� + �� � ! $� * F� q� $ �� �� 0 �� 7 �� 4� P� h� �� ) �� ( �� �� � $ 3� X� M w� �� �� �� �� 6 � 8� X� r� � �� #� D� $ _� " �� - �� �� �� � � :� 0 Z� - �� �� - �� � $� 9� 0 Z� , �� $ �� �� " �� ' � C� # b� . �� $ �� �� . �� * (� S� r� �� �� �� $ �� $ �� $ !� $ F� k� 8 �� < �� 5 �� / -� 0 ]� 4 �� ? �� C � C G� + �� 3 �� < �� + (� Y T� �� � �� � q� � +� � � A �
� � )� -� ) 1� ) [� ' �� ! ��
� � � �� � � � -� =� M� a� k�
}� �� " �� �� � & � $ � '� 3 .� b� l� $ �� �� ` ��
� 4 ,� 5 a� f �� c ��
b� m� 6 w� � �� � � � � � � � � � 3 E Q ] { � � � - � * � ! H ; � V � W � \ : 4 � � � . p � � > S " � O � � k � � , e � 5 4 M 7 � 9 � 4 � � ) � � e ~ � � � � � � � i G � F D d � � � � � � X � & � � H � q � l ; c � � c � � \ � . � .! [ �# � V% � �% � �& m T' � �' � W( � �( � �) � B* { �* + q+ � �, � ?- � �- Z. a. �. 9 �. � �. � a/ � �/ � g0 �0
3
5 / 5 I5 [5 , p5 �5 �5 �5 �5 - �5 6 6 6 46 O6 m6 �6 0 �6 0 �6 1 7 ( :7 ) c7 �7 �7 �7 ; �7 # '8 K8 f8 v8 �8 �8 �8 6 �9 ( �9 : % : % 2: * X: �: " �: �: _ �: 7; J; W; . j; �= b �= > � '> � �> � �? C@ M@ `@ ; s@ �@ �@ �@ �@ �@ " A /A 6A NA
fA ! tA �A �A �A �A �A �A �A �A �A > �A ? =B M }B K �B ? C : WC �C �C �C �C �C �C �C B �C . .D ]D gD ( ~D �D �D �D �D 2 �D 0E =E SE lE * sE �E $ �E �E ! �E F <F XF 1 qF �F 0 �F �F �F ! �F S G hG ~G ! �G ! �G �G �G
H &H AH � WH I I 5I KI dI + kI ( �I ' �I �I �I J !J 1J DJ TJ pJ }J �J �J �J �J �J �J ] K aK hK rK �K �K ] �K L
M WN jP wP �P �P �P " �P �P
Q *Q DQ [Q qQ ~Q % �Q
�Q �Q " �Q
�Q 1 R , 5R bR fR $ jR $ �R * �R �R S S S 6S ! ES gS
kS
vS �S �S
�S �S �S �S �S �S �S T T .T AT `T gT tT * �T � �T $ �U % �U �U 2 �U V V ' V GV WV # uV F �V �W �W �W $ X $ )X NX XX vX �X �X �X B �X �X �X
Y Y ! *Y LY SY ]Y dY ' yY ' �Y �Y �Y �Y Z Z Z = (Z fZ
jZ xZ % }Z & �Z # �Z �Z [ e [ |[ , �[ �[ + �[ ) �[ 0 )\ Z\ v\ $ �\ ' �\ �\ �\ �\ �\ ] ] #] ;] � Q] % �] y ^ |^ �^ �^ �^ �^ 6 �^ _ ._ 5_ R_ $ __ �_ � �_ 8 �` W �a � b � �b � �c � ld � /e / �e ? $f J df O �f ` �g ; `i E �i V �i E 9j 6 j N �j � k ! �k �k 9 �k 9 +l ! el I �l b �l b 4m �m � �m % an �n �n + �n
�o �p �p �p ' q . Fq : uq 0 �q - �q 3 r - Cr 9 qr * �r 2 �r - s 0 7s - hs = �s 7 �s 0 t =t Dt
Qt \t ft mt �t �t �t �t % �t �t * �t 'u 2 Cu = vu { �u 0w O Fw � �w � dx � Ey ) z ) Jz P tz � �| � Y Ѐ � *� 3 � 3 $� 9 X� B �� 6 Ղ S � y `� - ڃ \ � $ e� �� �� �� ބ . �� � $� � 2� H I� �� � �� � ? 9� 0 y� �� �� , ܈ � i *� Z �� � �� " � A� `� , �� �� ͊ ( � � ) 5� ! _� ' �� # �� # ͋ # � ( � >� 0 \� �� �� + ˌ " �� $ � # ?� c� u� ] �� � � �� �� - �� , � 1 � ' E� m� � �� � '� F� _� x� �� �� �� Q ё � #� N ޒ * -� � X� � � � �� � e� - � 5� 5 H� $ ~� � �� � (� �� ] �� ] � O v� _ Ƙ b &� ] �� ! � � � "� � � % �� � � � f� � � � �� x >� � �� � B� � ߡ r g� L ڢ - '� K U� E �� � � 0 � - K� y� � {� x� Q �� V ԧ � +� Q Ψ � � 3 ɩ E �� Y C� F �� $ � � � � E � E 2� � x� 0 f� �� �� ��
�� X �� G � . a� 0 ��
�� ̶ � �� > � � ?� � ķ � Y� �� � (� D� \� w� $ �� �� ڹ �� �� � 0� =� U� p� �� �� �� ( �� � �� � # =� a� h� � �� � � � M �� � B� �� � �� � �� F �� � �� > �� �� � �� � �� Z �� 5� � S� � �� � �� � �� � ~� � R� p � � �� � [� � � � �� � q�
� o � � Z � Y � � V � � � � [ 9 # 8 ] } � � � � � #
k �
� � / O d t � � ' � ( � � = � ) =
g
l
}
�
�
�
�
�
�
�
& : Z
t
* � �
� � � � � � * = U Z * l
�
� � � � � � � � + $ L + q , � " � 8 � ? & " f � � � � �
� * 3 F @ z 1 � A � , / \ 6 i h � E 5 O 5 � O � ! G - C u = � q � + i 9 � � � � � � C Q � � & y � � f � �" �# �# � �# �% �% � �& �( f �) >* ' \* ' �* �* I �* � , , �- ). A. G. N. X. b. s. �. l �. �. / &/ */ =/ C/ T/ a/ k/ �/ �/ �/ �/ �/ �/ �/ � �/ ) �0 �5 6 A 6 ! N6 p6 0 �6 �6 F �6 (7 :7 L7 2 a7 2 �7 2 �7 8 �7 6 38 j8 �8 �8 � �8 �9 �9 � �9 j: t: �: �: �: �: �: �: �: $ ; '; .; D; - Q; < ; �; �; �; < �; $ 4< K Y< ; �< 8 �< 4 = O= & l= 1 �= 3 �= �= > #> $ ;> A `> ; �> �> �> = ? U? _? x? �? ( �? �? % �? @ "@ ' 8@ `@ g@ t@ �@ �@ �@ �@ �@ @ �@ A -A 7A AA ) HA � rA � B $ �B ( �B C C *C 4C SC rC �C �C �C �C �C ! �C �C D D 1D " MD ; pD # �D �D �D E E ! 6E XE & kE & �E �E �E �E �E �E & F 0 )F ZF � gF * MG $ xG ( �G - �G - �G "H 2H 9H @H _H / ~H �H �H = �H $ I AI \I * xI �I $ �I ( �I J #J CJ VJ V fJ �J �J �J �J K . K MK fK # �K �K �K �K �K �K L .L ( DL mL �L �L " �L , �L * M < /M " lM �M �M �M �M �M �M N (N 6 BN . yN > �N $ �N O # O , BO 2 oO �O �O �O �O
P &P 9P & LP - sP �P �P �P " �P Q 0Q NQ dQ zQ % �Q �Q % �Q �Q R 5 3R iR {R * �R �R ) �R ( �R #S -S ?S ZS + wS
�S
�S �S �S # �S 5 T F AT # �T , �T �T �T U ,U 3 9U mU # �U �U �U �U �U �U �U V ' V I BV �V �V �V �V �V �V & �V & W GW ) WW 0 �W �W - �W �W X - *X . XX �X �X �X �X �X �X . �X ,Y % 0Y VY tY * �Y �Y $ �Y �Y �Y I �Y � GZ 5 �[ ] ] - v] �] �] �] $ �] �] * ^ 8 A^ z^ �^ �^ �^ 3 �^ ; _ <_ Z_ v_ �_ �_ �_ * �_ �_ $ �_
` + ` :` ' [` �` ! �` ! �` H �` (a Fa ea ~a 3 �a �a + �a b # 1b Ub pb �b �b �b �b �b �b o �b � Kc 1 �c 0 d Id Vd rd d �d �d �d # �d �d �d ) e ) <e fe ' �e { �e +f � 5f � g �h ! i 0i Ii `i ri u |i � �i �k % �k l ' 8l `l pl �l ~ �l P m $ ]m ' �m �m �m $ �m * �m . &n & Un ' |n �n �n �n �n ' �n ( �n 7 "o + Zo �o ! �o �o �o ; �o % !p " Gp jp �p �p �p �p # �p 5 q :q 6 Xq �q �q 6 �q 2 r # 6r Zr zr �r H �r & �r D "s gs = qs C �s N �s Bt It ct pt �t �t ( �t �t �t u u 6u Lu Vu " pu ' �u �u �u 3 �u v 8 5v nv = �v 8 �v S �v
Rw `w �w �w �w �w �w 2 �w x "x ,x & Hy oy �y �y 0 �y �y �y � * $ � � J R d � � � � � � m � � B � 3 � ) � � 1 S � � * � � 9 � � � � { ' � | � � � r � � � � V � � � r u � g � � � z � = � = � � P ] & � � � ! . � \ � o � � � � | e + z k � � � � u F f � - � L � � � � � � � q F � � � � $ � Q $ � � < � � � # x
� � 7 � � } � � � v � � � � � � � c � 6 w � � W j 0 R � � � : L " � 4 � � h � 7 � � � � O � � q � � � _ � � � � � � g c � � � � = � # H � r I � � � � � � , - o � � � � � f w � � � � H ^ � � ' ! � � ? � � � � � - � � m � � _ 4 � � � M k � � $ � � � K � Y � x G u � x 8 a � O � � � 7 D � N � � � } A � � 2 : F � � � � W � � / � � q � � 8 b � � � � n # � S � � � 9 � ; � � � � � . � � � � : % Q � � S V � 8 � < � h � � � � � { � P � � � � ; m � � * � � � � � m � t � z � y � b � Q 1 P q a g m � � � J � � � � ( � � y � R � � S � w 6 � o o � � o P � & * X � R � ~ � ) � & h � V I � � � � - ^ � { � � � � � � � s � q * R E v U � H � � � � � � � [ � � � / [ � � n n � : � �
� � � � � � � � a � B
� � 1 Z � } � � � � 5 h � D � ` P � � � � 9 / � 8 i T 1 e W Z � � � � 1 � % y � + � � K 0 Y � � M � _ ~ @ ) � Z � � � � � � � � � � * " � � � � a � � � � f W � � 5 ! � � J � � J 4 @ q e � u \ p � � a � � Q ) < � � � � � 5 � 0 � � � � A ! l * t � @ � J � � � � V E = � 5 0 � / � � $ � � � K � � � � � W � j � $ � � ^ � � �
� � E / p � � c � � � & L F Z E � + ^ [ � U � � p & � � C � { � , R ] � L + � �
� � � � � � A J # ; # �
� � q � � � j � ? ( � - � � d � � � h P 2 � � � � � � � � � @ � � � E � E � ) � | � � � � � � h Z 1 � / � � � � ! [
B � X � � � � % � � � x \ � � � � � Z D , G � ' � � 0 � � � � � M � � o � � ' � g � r % [ H G � i l f � � � ) � � C � � � z � � � � � P " t } ~ � i � y � � & . l i . � c � r � M � s � � � � 5 � N � � L I � > � H � 4 � � g � � � C � + � � ^ � � � 6 � � U u � � � � ] V � p � � s
7 � V � � � z � � � � � �
Q k ! � � � b s � a � � ` ) � ] � � � t " � c � n � x � y � � � � � � � V } ) � < c � j � � r � � � " $ � � � � U ( � � � � � _ t � � � � � � � | � � � � } � � r � � � j ` | � ] u b � � � T ~ � I 2 � � 9 ' � � k 6 � � N � % � � 0 � � N � � � > � � { 2 e � 6 � U � � � = N G � � ; d U � " � U e � 5 C � > Z � h ' � � s $ * l D � � z � < T o 3 o � � & � � � % � � ( s � � Q
\ , �
v . % � � � � 3 � n � � � � � @ � � � # � p � ^ � � 6 ! l � p � � c ( � B y � � = j � �
� v q � � � K { ( � D � ' � � � � � f � m � � � � � � > � � x � � M � # A i � C � � � / � � + W 4 � � � � + � � � Y � � d � L 8 � � � � � � � C ` ~ � � � ] ' b N * � � =
> 4 � k t � j 4 � � ` 5 � � � T � � � d , X v � . 7 � B � f @ � � i L Y � � ! � � � 6 � X � O � � � � O \ � � � � � � B M � � 3 t � � � i � � � � _ � : � � � � _ � ; \ � 3 @ � � ` ? / � � � A � � @ � � � K � � � ` E � k � + \ � h
| � � z _ r � { � - � � � : l � - � � _ 7 � , � a � % � � s � � ? ` � > u �
� � � � e � 9 I ; G � u G � p d � � � 3 ^ 1 � + Z � g ? Y H � 5 9 � ~ � , � 5 � # y A � ? � ( � � � W � � � � � G g � � � � � � � n � � � w � � J � T O F m 9 � , � \ M � � ! V � t w � � & ] C � � � . � D � � n � � B � � � � : � > � C � A � & � � 3 � � � � � � � � � � < � } � � M � � g W Y � � b � � n f X ? � � � l � � s � � � � N 6 � A O � b K � � : � = � � � � 7 � � � � l " G � 6 � � L e � � � � J e � ( � c � i 4 < � � � R � � � � � v E � � [ � � � F � � � 2 ~ S � � 1 � H � ^ � � �
� � � ] 0 a � p � � � N - 0 � � � � � � T � T � k 8 8 ) � � m � S F � % � 2 � K I 7 w O � � � - Y � � w � � � 4 � } x � F S � � [ X ? � B � � Q � � � � � I � � X � � { � b " � � � � $
, Q � � � 7 U
v v � � ; � | � � D ; . 2 T f � ' > < # y | � � � � � D j � 2 3 R � . � � � 3 K � � 8 � � � � � 0 P � � w � I � � � � x � � � � ( ~ � � [ d � � � � H � z � � � / O 2 Y S � 1 � " X d � k 9 # Created by NetworkManager
# Merged from %s
%d (key) %d (passphrase) %d (unknown) %d is greater than local port max %d %d. DNS server address is invalid %d. IP address has 'label' property with invalid type %d. IP address has invalid label '%s' %d. IP address is invalid %d. IPv4 address has invalid prefix %d. IPv4 address is invalid %d. IPv6 address has invalid prefix %d. IPv6 address is invalid %d. route cannot be a default route %d. route has invalid prefix %d. route is invalid %lld (%s) %lld - %s %s (%s) %s (%s) cloned as %s (%s).
%s Network %s VPN connection %s argument is missing %s is already running (pid %ld)
%s is incompatible with static WEP keys %s is out of range [0, %d] %s. Please use --help to see a list of valid options.
%s: connection profile changed
%s: connection profile created
%s: connection profile removed
%s: device created
%s: device removed
%s: don't retry loading plugin which already failed previously %s: using connection '%s'
%u MHz %u Mb/s %u Mbit/s %u. rule has wrong address-family %u. rule is invalid: %s '%d' is not a valid channel '%d' is not a valid tunnel mode '%d' is out of valid range <128-16384> '%d' value is out of range <0-3> '%ld' is not a valid channel '%s' and '%s' cannot have different values '%s' can only be used with '%s=%s' (WEP) '%s' can only be used with 'wpa-eap', 'wpa-psk' or 'sae' key management '%s' connection requires '%s' or '%s' setting '%s' connection requires '%s' setting '%s' connections must be enslaved to '%s', not '%s' '%s' connections require '%s' in this property '%s' contains invalid char(s) (use [A-Za-z._-]) '%s' does not contain a valid PAC Script '%s' does not contain a valid team configuration '%s' has to be alone '%s' is ambiguous (%s) '%s' is ambiguous: %s '%s' is neither an UUID nor an interface name '%s' is not a VPN connection profile '%s' is not a name of any exiting profile '%s' is not a number '%s' is not a valid DCB flag '%s' is not a valid Ethernet MAC '%s' is not a valid Ethernet port value '%s' is not a valid FQDN '%s' is not a valid IBoIP P_Key '%s' is not a valid IP address '%s' is not a valid IP%c address '%s' is not a valid IPv%c address '%s' is not a valid IPv4 address '%s' is not a valid IPv4 address for '%s' option '%s' is not a valid IPv6 address '%s' is not a valid MAC address '%s' is not a valid UUID '%s' is not a valid Wi-Fi mode '%s' is not a valid band '%s' is not a valid channel '%s' is not a valid channel; use <1-13> '%s' is not a valid duplex value '%s' is not a valid handle. '%s' is not a valid hex character '%s' is not a valid interface name '%s' is not a valid interface name for '%s' option '%s' is not a valid interface type '%s' is not a valid kind '%s' is not a valid number '%s' is not a valid number (or out of range) '%s' is not a valid tunnel key '%s' is not a valid value for '%s' '%s' is not a valid value for the property '%s' is not allowed in bond_mode '%s' is not allowed in fail_mode '%s' is not allowed in lacp '%s' is not allowed in vlan_mode '%s' is not compatible with '%s' type, please change or delete the key. '%s' is not valid '%s' is not valid WEP key (it should be 5 or 13 ASCII chars) '%s' is not valid WPA PSK '%s' is not valid for the '%s' option: %s '%s' is not valid master; use ifname or connection UUID '%s' is not valid; 2 or 3 strings should be provided '%s' is not valid; use 'on', 'off', or 'ignore' '%s' is not valid; use <option>=<value> '%s' is not valid; use [%s] or [%s] '%s' is not valid; use [%s], [%s] or [%s] '%s' is now the primary connection
'%s' is out of range [% '%s' is out of range [0, %u] '%s' length is invalid (should be 5 or 6 digits) '%s' not a number between 0 and %u (inclusive) '%s' not a number between 0 and %u (inclusive) or %u '%s' not among [%s] '%s' not compatible with %s '%s', please change the key or set the right %s first. '%s' option is empty '%s' option is not valid with mode '%s' '%s' option is only valid for '%s=%s' '%s' option is only valid with mode '%s' '%s' option requires '%s' option to be set '%s' option should be string '%s' requires setting '%s' property '%s' security requires '%s' setting presence '%s' security requires '%s=%s' '%s' unexpected: parent already specified. '%s' value doesn't match '%s=%s' '%s': invalid group ID '%s': invalid user ID '%s::%s' is not a valid property name; '%s' is not a GObject subtype '%s=%s' is incompatible with '%s > 0' '%s=%s' is not a valid configuration for '%s' '%u' flags are not valid; use combination of %s '%u': invalid mode '--order' argument is missing (%s): Invalid DHCP client-id %s
(%s): Invalid IID %s
(No custom routes) (No support for dynamic-wep yet...) (No support for wpa-enterprise yet...) (default) (none) (unknown error) (unknown) , neither a valid setting name ---[ Main menu ]---
goto [<setting> | <prop>] :: go to a setting or property
remove <setting>[.<prop>] | <prop> :: remove setting or reset property value
set [<setting>.<prop> <value>] :: set property value
describe [<setting>.<prop>] :: describe property
print [all | <setting>[.<prop>]] :: print the connection
verify [all | fix] :: verify the connection
save [persistent|temporary] :: save the connection
activate [<ifname>] [/<ap>|<nsp>] :: activate the connection
back :: go one level up (back)
help/? [<command>] :: print this help
nmcli <conf-option> <value> :: nmcli configuration
quit :: exit nmcli
---[ Property menu ]---
set [<value>] :: set new value
add [<value>] :: add new option to the property
change :: change current value
remove [<index> | <option>] :: delete the value
describe :: describe property
print [setting | connection] :: print property (setting/connection) value(s)
back :: go to upper level
help/? [<command>] :: print this help or command description
quit :: exit nmcli
0 0 (NONE) 0 (disabled) 0 (none) 1024 6LOWPAN connection 6LOWPAN settings 6LoWPAN 802-1x settings 802.11 frequency band of the network. One of "a" for 5GHz 802.11a or "bg" for 2.4GHz 802.11. This will lock associations to the Wi-Fi network to the specific band, i.e. if "a" is specified, the device will not associate with the same network in the 2.4GHz band even if the network's settings are compatible. This setting depends on specific driver capability and may not work with all drivers. 802.1X supplicant configuration failed 802.1X supplicant disconnected 802.1X supplicant failed 802.1X supplicant took too long to authenticate 802.1x setting requires 'wpa-eap' key management 802.3ad <invisible> <invisible> | %s ===| nmcli interactive connection editor |=== A (5 GHz) A MCC/MNC string like "310260" or "21601" identifying the specific mobile network operator which this connection applies to. If given, the connection will apply to any device also allowed by "device-id" and "sim-id" which contains a SIM card provisioned by the given operator. A connection of type '%s' cannot have an ovs-interface.type "%s" A connection of type '%s' cannot have ovs-interface.type "system" A connection with '%s' setting must be of connection.type "ovs-interface" but is "%s" A connection with '%s' setting needs to be of 'patch' interface type, not '%s' A connection with a '%s' setting must have a master. A connection with a '%s' setting must have the slave-type set to '%s'. Instead it is '%s' A connection with a '%s' setting must not have a master. A connection with a '%s' setting needs connection.type explicitly set A connection with ovs-interface.type '%s' setting a 'ovs-patch' setting A dependency of the connection failed A dictionary of key/value pairs with user data. This data is ignored by NetworkManager and can be used at the users discretion. The keys only support a strict ascii format, but the values can be arbitrary UTF8 strings up to a certain length. A duplicate IP address was detected A human readable unique identifier for the connection, like "Work Wi-Fi" or "T-Mobile 3G". A list of BSSIDs (each BSSID formatted as a MAC address like "00:11:22:33:44:55") that have been detected as part of the Wi-Fi network. NetworkManager internally tracks previously seen BSSIDs. The property is only meant for reading and reflects the BSSID list of NetworkManager. The changes you make to this property will not be preserved. A list of group/broadcast encryption algorithms which prevents connections to Wi-Fi networks that do not utilize one of the algorithms in the list. For maximum compatibility leave this property empty. Each list element may be one of "wep40", "wep104", "tkip", or "ccmp". A list of interface names to match. Each element is a shell wildcard pattern. When an element is prefixed with exclamation mark (!) the condition is inverted. A candidate interface name is considered matching when both these conditions are satisfied: (a) any of the elements not prefixed with '!' matches or there aren't such elements; (b) none of the elements prefixed with '!' match. A list of pairwise encryption algorithms which prevents connections to Wi-Fi networks that do not utilize one of the algorithms in the list. For maximum compatibility leave this property empty. Each list element may be one of "tkip" or "ccmp". A list of permanent MAC addresses of Wi-Fi devices to which this connection should never apply. Each MAC address should be given in the standard hex-digits-and-colons notation (eg "00:11:22:33:44:55"). A mask of group addresses to forward. Usually, group addresses in the range from 01:80:C2:00:00:00 to 01:80:C2:00:00:0F are not forwarded according to standards. This property is a mask of 16 bits, each corresponding to a group address in that range that must be forwarded. The mask can't have bits 0, 1 or 2 set because they are used for STP, MAC pause frames and LACP. A password is required to connect to '%s'. A problem with the RFC 2684 Ethernet over ADSL bridge A secondary connection of the base connection failed A slave connection with '%s' set to '%s' cannot have a '%s' setting A string containing the DHCPv6 Unique Identifier (DUID) used by the dhcp client to identify itself to DHCPv6 servers (RFC 3315). The DUID is carried in the Client Identifier option. If the property is a hex string ('aa:bb:cc') it is interpreted as a binary DUID and filled as an opaque value in the Client Identifier option. The special value "lease" will retrieve the DUID previously used from the lease file belonging to the connection. If no DUID is found and "dhclient" is the configured dhcp client, the DUID is searched in the system-wide dhclient lease file. If still no DUID is found, or another dhcp client is used, a global and permanent DUID-UUID (RFC 6355) will be generated based on the machine-id. The special values "llt" and "ll" will generate a DUID of type LLT or LL (see RFC 3315) based on the current MAC address of the device. In order to try providing a stable DUID-LLT, the time field will contain a constant timestamp that is used globally (for all profiles) and persisted to disk. The special values "stable-llt", "stable-ll" and "stable-uuid" will generate a DUID of the corresponding type, derived from the connection's stable-id and a per-host unique key. You may want to include the "${DEVICE}" or "${MAC}" specifier in the stable-id, in case this profile gets activated on multiple devices. So, the link-layer address of "stable-ll" and "stable-llt" will be a generated address derived from the stable id. The DUID-LLT time value in the "stable-llt" option will be picked among a static timespan of three years (the upper bound of the interval is the same constant timestamp used in "llt"). When the property is unset, the global value provided for "ipv6.dhcp-duid" is used. If no global value is provided, the default "lease" value is assumed. A string sent to the DHCP server to identify the local machine which the DHCP server may use to customize the DHCP lease and options. When the property is a hex string ('aa:bb:cc') it is interpreted as a binary client ID, in which case the first byte is assumed to be the 'type' field as per RFC 2132 section 9.14 and the remaining bytes may be an hardware address (e.g. '01:xx:xx:xx:xx:xx:xx' where 1 is the Ethernet ARP type and the rest is a MAC address). If the property is not a hex string it is considered as a non-hardware-address client ID and the 'type' field is set to 0. The special values "mac" and "perm-mac" are supported, which use the current or permanent MAC address of the device to generate a client identifier with type ethernet (01). Currently, these options only work for ethernet type of links. The special value "duid" generates a RFC4361-compliant client identifier based on a hash of the interface name as IAID and /etc/machine-id. The special value "stable" is supported to generate a type 0 client identifier based on the stable-id (see connection.stable-id) and a per-host key. If you set the stable-id, you may want to include the "${DEVICE}" or "${MAC}" specifier to get a per-device key. If unset, a globally configured default is used. If still unset, the default depends on the DHCP plugin. A timeout for a DHCP transaction in seconds. A timeout for the authentication. Zero means the global default; if the global default is not set, the authentication timeout is 25 seconds. A universally unique identifier for the connection, for example generated with libuuid. It should be assigned when the connection is created, and never changed as long as the connection still applies to the same network. For example, it should not be changed when the "id" property or NMSettingIP4Config changes, but might need to be re-created when the Wi-Fi SSID, mobile broadband network provider, or "type" property changes. The UUID must be in the format "2815492f-7e56-435e-b2e9-246bd7cdc664" (ie, contains only hexadecimal characters and "-"). ADSL ADSL connection ADSL connection protocol. Can be "pppoa", "pppoe" or "ipoatm". APN ARP ARP targets Access Point Access point does not support 802.1x but setting requires it Access point does not support PSK but setting requires it Access point is unencrypted but setting specifies security Access point mode is Ad-Hoc but setting requires Infrastructure security Access point mode is Infrastructure but setting requires Ad-Hoc security Activate Activate a connection Activate connection details Activation failed: %s Active Backup Active connection removed before it was initialized Ad-Hoc Ad-Hoc Network Ad-Hoc mode is incompatible with 802.1x security Ad-Hoc mode is incompatible with LEAP security Ad-Hoc mode requires 'open' authentication Adaptive Load Balancing (alb) Adaptive Transmit Load Balancing (tlb) Add Add... Adding a new '%s' connection Addresses Aging time Allow BSD data compression Allow Deflate data compression Allow control of Wi-Fi scans Allow control of network connections Allowed authentication methods: Allowed values for '%s' property: %s
An array of 8 boolean values, where the array index corresponds to the User Priority (0 - 7) and the value indicates whether or not the corresponding priority should transmit priority pause. An array of 8 boolean values, where the array index corresponds to the User Priority (0 - 7) and the value indicates whether or not the priority may use all of the bandwidth allocated to its assigned group. An array of 8 uint values, where the array index corresponds to the Priority Group ID (0 - 7) and the value indicates the percentage of link bandwidth allocated to that group. Allowed values are 0 - 100, and the sum of all values must total 100 percents. An array of 8 uint values, where the array index corresponds to the User Priority (0 - 7) and the value indicates the Priority Group ID. Allowed Priority Group ID values are 0 - 7 or 15 for the unrestricted group. An array of 8 uint values, where the array index corresponds to the User Priority (0 - 7) and the value indicates the percentage of bandwidth of the priority's assigned group that the priority may use. The sum of all percentages for priorities which belong to the same group must total 100 percents. An array of 8 uint values, where the array index corresponds to the User Priority (0 - 7) and the value indicates the traffic class (0 - 7) to which the priority is mapped. An array of strings defining what access a given user has to this connection. If this is NULL or empty, all users are allowed to access this connection; otherwise users are allowed if and only if they are in this list. When this is not empty, the connection can be active only when one of the specified users is logged into an active session. Each entry is of the form "[type]:[id]:[reserved]"; for example, "user:dcbw:blah". At this time only the "user" [type] is allowed. Any other values are ignored and reserved for future use. [id] is the username that this permission refers to, which may not contain the ":" character. Any [reserved] information present must be ignored and is reserved for future use. All of [type], [id], and [reserved] must be valid UTF-8. An authentication session is already underway. An http(s) address for checking internet connectivity An interface name and UUID are required
Anonymous identity string for EAP authentication methods. Used as the unencrypted identity with EAP types that support different tunneled identity like EAP-TTLS. Anycast DHCP MAC address used when requesting an IP address via DHCP. The specific anycast address used determines which DHCP server class answers the request. Are you sure you want to delete the connection '%s'? Array of DNS options as described in man 5 resolv.conf. NULL means that the options are unset and left at the default. In this case NetworkManager will use default options. This is distinct from an empty list of properties. Array of DNS search domains. Domains starting with a tilde ('~') are considered 'routing' domains and are used only to decide the interface over which a query must be forwarded; they are not used to complete unqualified host names. Array of IP addresses of DNS servers. Array of IP addresses. Array of IP routes. Array of TC queueing disciplines. Array of TC traffic filters. Array of bridge VLAN objects. In addition to the VLANs specified here, the bridge will also have the default-pvid VLAN configured by the bridge.vlan-default-pvid property. In nmcli the VLAN list can be specified with the following syntax: $vid [pvid] [untagged] [, $vid [pvid] [untagged]]... where $vid is either a single id between 1 and 4094 or a range, represented as a couple of ids separated by a dash. Array of bridge VLAN objects. In addition to the VLANs specified here, the port will also have the default-pvid VLAN configured on the bridge by the bridge.vlan-default-pvid property. In nmcli the VLAN list can be specified with the following syntax: $vid [pvid] [untagged] [, $vid [pvid] [untagged]]... where $vid is either a single id between 1 and 4094 or a range, represented as a couple of ids separated by a dash. Array of virtual function descriptors. Each VF descriptor is a dictionary mapping attribute names to GVariant values. The 'index' entry is mandatory for each VF. When represented as string a VF is in the form: "INDEX [ATTR=VALUE[ ATTR=VALUE]...]". for example: "2 mac=00:11:22:33:44:55 spoof-check=true". Multiple VFs can be specified using a comma as separator. Currently the following attributes are supported: mac, spoof-check, trust, min-tx-rate, max-tx-rate, vlans. The "vlans" attribute is represented as a semicolon-separated list of VLAN descriptors, where each descriptor has the form "ID[.PRIORITY[.PROTO]]". PROTO can be either 'q' for 802.1Q (the default) or 'ad' for 802.1ad. Ask for this password every time Authentication Authentication error: %s
Authentication message: %s
Authentication required by wireless network AutoIP service error AutoIP service failed AutoIP service failed to start Automatic Automatic (DHCP-only) Automatically connect Available properties: %s
Available settings: %s
Available to all users B/G (2.4 GHz) BOND BRIDGE BRIDGE PORT BSSID Back Bad '%s' option: Base type of the connection. For hardware-dependent connections, should contain the setting name of the hardware-type specific setting (ie, "802-3-ethernet" or "802-11-wireless" or "bluetooth", etc), and for non-hardware dependent connections like VPN or otherwise, should contain the setting name of that setting type (ie, "vpn" or "bridge", etc). Bluetooth Bluetooth device address Bond Bond connection Bond connection %d Bond device Bonding arp-interval [0] Bonding arp-ip-target [none] Bonding downdelay [0] Bonding miimon [100] Bonding mode. One of "active-backup", "balance-slb", or "balance-tcp". Bonding monitoring mode Bonding primary interface [none] Bonding updelay [0] Bridge Bridge VLANs %d and %d are not sorted by ascending vid Bridge connection Bridge connection %d Bridge device Bridge port Bridge port STP path cost [100] Bridge port priority [32] Broadcast Browser only [no] Byte-width of the serial communication. The 8 in "8n1" for example. CA certificate must be in X.509 format CDMA connection CDMA mobile broadband connection CHAP Can not change the connection type Cancel Cannot create '%s': %s Cannot set '%s' without '%s' Carrier/link changed Certificate file is empty Certificate password Channel Channel (<default|0-26>) Channel on which the mesh network to join is located. Checkpoint was removed before it was initialized Cloned MAC [none] Cloned MAC address Closing %s failed: %s
Config directory location Config file location Configure IPv6 Privacy Extensions for SLAAC, described in RFC4941. If enabled, it makes the kernel generate a temporary IPv6 address in addition to the public one generated from MAC address via modified EUI-64. This enhances privacy, but could cause problems in some applications, on the other hand. The permitted values are: -1: unknown, 0: disabled, 1: enabled (prefer public address), 2: enabled (prefer temporary addresses). Having a per-connection setting set to "-1" (unknown) means fallback to global configuration "ipv6.ip6-privacy". If also global configuration is unspecified or set to "-1", fallback to read "/proc/sys/net/ipv6/conf/default/use_tempaddr". Note that this setting is distinct from the Stable Privacy addresses that can be enabled with the "addr-gen-mode" property's "stable-privacy" setting as another way of avoiding host tracking with IPv6 addresses. Configure method for creating the address for use with RFC4862 IPv6 Stateless Address Autoconfiguration. The permitted values are: NM_SETTING_IP6_CONFIG_ADDR_GEN_MODE_EUI64 (0) or NM_SETTING_IP6_CONFIG_ADDR_GEN_MODE_STABLE_PRIVACY (1). If the property is set to EUI64, the addresses will be generated using the interface tokens derived from hardware address. This makes the host part of the address to stay constant, making it possible to track host's presence when it changes networks. The address changes when the interface hardware is replaced. The value of stable-privacy enables use of cryptographically secure hash of a secret host-specific key along with the connection's stable-id and the network address as specified by RFC7217. This makes it impossible to use the address track host's presence, and makes the address stable when the network interface hardware is replaced. On D-Bus, the absence of an addr-gen-mode setting equals enabling stable-privacy. For keyfile plugin, the absence of the setting on disk means EUI64 so that the property doesn't change on upgrade from older versions. Note that this setting is distinct from the Privacy Extensions as configured by "ip6-privacy" property and it does not affect the temporary addresses configured with this option. Configure the token for draft-chown-6man-tokenised-ipv6-identifiers-02 IPv6 tokenized interface identifiers. Useful with eui64 addr-gen-mode. Connected Connecting Connecting... Connection '%s' (%s) successfully added.
Connection '%s' (%s) successfully deleted.
Connection '%s' (%s) successfully modified.
Connection '%s' (%s) successfully saved.
Connection '%s' (%s) successfully updated.
Connection '%s' deactivation failed: %s
Connection '%s' successfully deactivated (D-Bus active path: %s)
Connection (name, UUID, or path): Connection Token for Stable IDs Connection UUID Connection is already active Connection profile details Connection removed before it was initialized Connection sharing via a protected Wi-Fi network Connection sharing via an open Wi-Fi network Connection successfully activated (%s) (D-Bus active path: %s)
Connection successfully activated (D-Bus active path: %s)
Connection successfully reapplied to device '%s'.
Connection(s) (name, UUID, or path): Connection(s) (name, UUID, path or apath): Connectivity Connectivity is now '%s'
Constraint for server domain name. If set, this FQDN is used as a suffix match requirement for dNSName element(s) of the certificate presented by the authentication server during the inner "phase 2" authentication. If a matching dNSName is found, this constraint is met. If no dNSName values are present, this constraint is matched against SubjectName CN using same suffix match comparison. Constraint for server domain name. If set, this FQDN is used as a suffix match requirement for dNSName element(s) of the certificate presented by the authentication server. If a matching dNSName is found, this constraint is met. If no dNSName values are present, this constraint is matched against SubjectName CN using same suffix match comparison. Contains the "phase 2" CA certificate if used by the EAP method specified in the "phase2-auth" or "phase2-autheap" properties. Certificate data is specified using a "scheme"; two are currently supported: blob and path. When using the blob scheme (which is backwards compatible with NM 0.7.x) this property should be set to the certificate's DER encoded data. When using the path scheme, this property should be set to the full UTF-8 encoded path of the certificate, prefixed with the string "file://" and ending with a terminating NUL byte. This property can be unset even if the EAP method supports CA certificates, but this allows man-in-the-middle attacks and is NOT recommended. Contains the "phase 2" client certificate if used by the EAP method specified in the "phase2-auth" or "phase2-autheap" properties. Certificate data is specified using a "scheme"; two are currently supported: blob and path. When using the blob scheme (which is backwards compatible with NM 0.7.x) this property should be set to the certificate's DER encoded data. When using the path scheme, this property should be set to the full UTF-8 encoded path of the certificate, prefixed with the string "file://" and ending with a terminating NUL byte. This property can be unset even if the EAP method supports CA certificates, but this allows man-in-the-middle attacks and is NOT recommended. Contains the "phase 2" inner private key when the "phase2-auth" or "phase2-autheap" property is set to "tls". Key data is specified using a "scheme"; two are currently supported: blob and path. When using the blob scheme and private keys, this property should be set to the key's encrypted PEM encoded data. When using private keys with the path scheme, this property should be set to the full UTF-8 encoded path of the key, prefixed with the string "file://" and ending with a terminating NUL byte. When using PKCS#12 format private keys and the blob scheme, this property should be set to the PKCS#12 data and the "phase2-private-key-password" property must be set to password used to decrypt the PKCS#12 certificate and key. When using PKCS#12 files and the path scheme, this property should be set to the full UTF-8 encoded path of the key, prefixed with the string "file://" and ending with a terminating NUL byte, and as with the blob scheme the "phase2-private-key-password" property must be set to the password used to decode the PKCS#12 private key and certificate. Contains the CA certificate if used by the EAP method specified in the "eap" property. Certificate data is specified using a "scheme"; two are currently supported: blob and path. When using the blob scheme (which is backwards compatible with NM 0.7.x) this property should be set to the certificate's DER encoded data. When using the path scheme, this property should be set to the full UTF-8 encoded path of the certificate, prefixed with the string "file://" and ending with a terminating NUL byte. This property can be unset even if the EAP method supports CA certificates, but this allows man-in-the-middle attacks and is NOT recommended. Contains the client certificate if used by the EAP method specified in the "eap" property. Certificate data is specified using a "scheme"; two are currently supported: blob and path. When using the blob scheme (which is backwards compatible with NM 0.7.x) this property should be set to the certificate's DER encoded data. When using the path scheme, this property should be set to the full UTF-8 encoded path of the certificate, prefixed with the string "file://" and ending with a terminating NUL byte. Contains the private key when the "eap" property is set to "tls". Key data is specified using a "scheme"; two are currently supported: blob and path. When using the blob scheme and private keys, this property should be set to the key's encrypted PEM encoded data. When using private keys with the path scheme, this property should be set to the full UTF-8 encoded path of the key, prefixed with the string "file://" and ending with a terminating NUL byte. When using PKCS#12 format private keys and the blob scheme, this property should be set to the PKCS#12 data and the "private-key-password" property must be set to password used to decrypt the PKCS#12 certificate and key. When using PKCS#12 files and the path scheme, this property should be set to the full UTF-8 encoded path of the key, prefixed with the string "file://" and ending with a terminating NUL byte, and as with the blob scheme the "private-key-password" property must be set to the password used to decode the PKCS#12 private key and certificate. WARNING: "private-key" is not a "secret" property, and thus unencrypted private key data using the BLOB scheme may be readable by unprivileged users. Private keys should always be encrypted with a private key password to prevent unauthorized access to unencrypted private key data. Control whether VLAN filtering is enabled on the bridge. Controls the interpretation of WEP keys. Allowed values are NM_WEP_KEY_TYPE_KEY (1), in which case the key is either a 10- or 26-character hexadecimal string, or a 5- or 13-character ASCII password; or NM_WEP_KEY_TYPE_PASSPHRASE (2), in which case the passphrase is provided as a string and will be hashed using the de-facto MD5 method to derive the actual WEP key. Controls whether IGMP snooping is enabled for this bridge. Note that if snooping was automatically disabled due to hash collisions, the system may refuse to enable the feature until the collisions are resolved. Controls whether Spanning Tree Protocol (STP) is enabled for this bridge. Cookie Corresponds to the teamd mcast_rejoin.count. Corresponds to the teamd mcast_rejoin.interval. Corresponds to the teamd notify_peers.count. Corresponds to the teamd notify_peers.interval. Corresponds to the teamd ports.PORTIFNAME.lacp_key. Corresponds to the teamd ports.PORTIFNAME.lacp_prio. Corresponds to the teamd ports.PORTIFNAME.prio. Corresponds to the teamd ports.PORTIFNAME.queue_id. When set to -1 means the parameter is skipped from the json config. Corresponds to the teamd ports.PORTIFNAME.sticky. Corresponds to the teamd runner.active. Corresponds to the teamd runner.agg_select_policy. Corresponds to the teamd runner.fast_rate. Corresponds to the teamd runner.hwaddr_policy. Corresponds to the teamd runner.min_ports. Corresponds to the teamd runner.name. Permitted values are: "roundrobin", "broadcast", "activebackup", "loadbalance", "lacp", "random". When setting the runner, all the properties specific to the runner will be reset to the default value; all the properties specific to other runners will be set to an empty value (or if not possible to a default value). Corresponds to the teamd runner.sys_prio. Corresponds to the teamd runner.tx_balancer.interval. Corresponds to the teamd runner.tx_balancer.name. Corresponds to the teamd runner.tx_hash. Could not activate connection: %s Could not contact NetworkManager: %s.
Could not create a software link Could not create editor for connection '%s' of type '%s'. Could not create editor for invalid connection '%s'. Could not create temporary file: %s Could not daemonize: %s [error %u]
Could not decode private key. Could not delete connection '%s': %s Could not find "%s" binary Could not generate random data. Could not load file '%s'
Could not parse arguments Could not re-read file: %s Couldn't convert password to UCS2: %d Couldn't decode PKCS#12 file: %d Couldn't decode PKCS#12 file: %s Couldn't decode PKCS#8 file: %s Couldn't decode certificate: %d Couldn't decode certificate: %s Couldn't initialize PKCS#12 decoder: %d Couldn't initialize PKCS#12 decoder: %s Couldn't initialize PKCS#8 decoder: %s Couldn't initialize slot Couldn't verify PKCS#12 file: %d Couldn't verify PKCS#12 file: %s Create Current DHCPv4 address Current nmcli configuration:
D-Bus service name of the VPN plugin that this setting uses to connect to its network. i.e. org.freedesktop.NetworkManager.vpnc for the vpnc plugin. DCB or FCoE setup failed DCB settings DHCP anycast MAC address [none] DHCP client error DHCP client failed DHCP client failed to start DNS servers DNS servers priority. The relative priority for DNS servers specified by this setting. A lower value is better (higher priority). Zero selects a globally configured default value. If the latter is missing or zero too, it defaults to 50 for VPNs and 100 for other connections. Note that the priority is to order DNS settings for multiple active connections. It does not disambiguate multiple DNS servers within the same connection profile. When using dns=default, servers with higher priority will be on top of resolv.conf. To prioritize a given server over another one within the same connection, just specify them in the desired order. When multiple devices have configurations with the same priority, the one with an active default route will be preferred. Negative values have the special effect of excluding other configurations with a greater priority value; so in presence of at least a negative priority, only DNS servers from connections with the lowest priority value will be used. When using a DNS resolver that supports split-DNS as dns=dnsmasq or dns=systemd-resolved, each connection is used to query domains in its search list. Queries for domains not present in any search list are routed through connections having the '~.' special wildcard domain, which is added automatically to connections with the default route (or can be added manually). When multiple connections specify the same domain, the one with the highest priority (lowest numerical value) wins. If a connection specifies a domain which is subdomain of another domain with a negative DNS priority value, the subdomain is ignored. DSL DSL authentication DSL connection %d DUN connection must include a GSM or CDMA setting DUN requested, but Bluetooth device does not support DUN Datagram Deactivate Delete Destination Destination port [8472] Detect a slave connection with '%s' set and a port type '%s'. '%s' should be set to '%s' Device Device '%s' not found Device '%s' successfully activated with '%s'.
Device '%s' successfully disconnected.
Device '%s' successfully removed.
Device LLDP neighbors Device MAC (%s) is blacklisted by the connection. Device details Device disconnected by user or client Device is now managed Device is now unmanaged Dictionary of key/value pairs of VPN plugin specific data. Both keys and values must be strings. Dictionary of key/value pairs of VPN plugin specific secrets like passwords or private keys. Both keys and values must be strings. Dictionary of key/value pairs of bonding options. Both keys and values must be strings. Option names must contain only alphanumeric characters (ie, [a-zA-Z0-9]). Dictionary of key/value pairs of s390-specific device options. Both keys and values must be strings. Allowed keys include "portno", "layer2", "portname", "protocol", among others. Key names must contain only alphanumeric characters (ie, [a-zA-Z0-9]). Disabled Disconnected by D-Bus Disconnected by user Do you also want to clear '%s'? [yes]: Do you also want to set '%s' to '%s'? [yes]: Do you want to provide it? %s Do you want to provide them? %s Do you want to remove them? [yes] Doesn't look like a PEM private key file. Don't become a daemon Don't become a daemon, and log to stderr Don't print anything Dummy Dummy connection Dummy settings Dynamic WEP (802.1x) Dynamic WEP requires 'ieee8021x' key management Dynamic WEP requires 'open' authentication Dynamic WEP requires an 802.1x setting EAP EAP key management requires '%s' setting presence ETHERNET Edit '%s' value: Edit Connection Edit a connection Edit... Editing existing '%s' connection: '%s' Editor failed: %s Egress priority maps [none] Either "dun" for Dial-Up Networking connections or "panu" for Personal Area Networking connections to devices supporting the NAP profile. Enable IGMP snooping Enable IGMP snooping [no] Enable PI [no] Enable STP (Spanning Tree Protocol) Enable STP [no] Enable VNET header [no] Enable encryption [yes] Enable multi queue [no] Enable or disable RSTP. Enable or disable STP. Enable or disable Wi-Fi devices Enable or disable WiMAX mobile broadband devices Enable or disable connectivity checking Enable or disable device statistics Enable or disable mobile broadband devices Enable or disable multicast snooping. Enable or disable system networking Enable policy routing (source routing) and set the routing table used when adding routes. This affects all routes, including device-routes, IPv4LL, DHCP, SLAAC, default-routes and static routes. But note that static routes can individually overwrite the setting by explicitly specifying a non-zero routing table. If the table setting is left at zero, it is eligible to be overwritten via global configuration. If the property is zero even after applying the global configuration value, policy routing is disabled for the address family of this connection. Policy routing disabled means that NetworkManager will add all routes to the main table (except static routes that explicitly configure a different table). Additionally, NetworkManager will not delete any extraneous routes from tables except the main table. This is to preserve backward compatibility for users who manage routing tables outside of NetworkManager. Enables or disables "hairpin mode" for the port, which allows frames to be sent back out through the port the frame was received on. Enables or disables in-line provisioning of EAP-FAST credentials when FAST is specified as the EAP method in the "eap" property. Recognized values are "0" (disabled), "1" (allow unauthenticated provisioning), "2" (allow authenticated provisioning), and "3" (allow both authenticated and unauthenticated provisioning). See the wpa_supplicant documentation for more details. Encapsulation of ADSL connection. Can be "vcmux" or "llc". Enter '%s' value: Enter a list of IPv4 addresses formatted as:
ip[/prefix], ip[/prefix],...
Missing prefix is regarded as prefix of 32.
Example: 192.168.1.5/24, 10.0.0.11/24
Enter a list of IPv4 addresses of DNS servers.
Example: 8.8.8.8, 8.8.4.4
Enter a list of IPv4 routes formatted as:
ip[/prefix] [next-hop] [metric],...
Missing prefix is regarded as a prefix of 32.
Missing next-hop is regarded as 0.0.0.0.
Missing metric means default (NM/kernel will set a default value).
Examples: 192.168.2.0/24 192.168.2.1 3, 10.1.0.0/16 10.0.0.254
10.1.2.0/24
Enter a list of IPv4 routing rules formatted as:
priority [prio] [from [src]] [to [dst]], ,...
Enter a list of IPv6 addresses formatted as:
ip[/prefix], ip[/prefix],...
Missing prefix is regarded as prefix of 128.
Example: 2607:f0d0:1002:51::4/64, 1050:0:0:0:5:600:300c:326b
Enter a list of IPv6 addresses of DNS servers. If the IPv6 configuration method is 'auto' these DNS servers are appended to those (if any) returned by automatic configuration. DNS servers cannot be used with the 'shared' or 'link-local' IPv6 configuration methods, as there is no upstream network. In all other IPv6 configuration methods, these DNS servers are used as the only DNS servers for this connection.
Example: 2607:f0d0:1002:51::4, 2607:f0d0:1002:51::1
Enter a list of IPv6 routes formatted as:
ip[/prefix] [next-hop] [metric],...
Missing prefix is regarded as a prefix of 128.
Missing next-hop is regarded as "::".
Missing metric means default (NM/kernel will set a default value).
Examples: 2001:db8:beef:2::/64 2001:db8:beef::2, 2001:db8:beef:3::/64 2001:db8:beef::3 2
abbe::/64 55
Enter a list of IPv6 routing rules formatted as:
priority [prio] [from [src]] [to [dst]], ,...
Enter a list of S/390 options formatted as:
option = <value>, option = <value>,...
Valid options are: %s
Enter a list of bonding options formatted as:
option = <value>, option = <value>,...
Valid options are: %s
'mode' can be provided as a name or a number:
balance-rr = 0
active-backup = 1
balance-xor = 2
broadcast = 3
802.3ad = 4
balance-tlb = 5
balance-alb = 6
Example: mode=2,miimon=120
Enter a list of link watchers formatted as dictionaries where the keys are teamd properties. Dictionary pairs are in the form: key=value and pairs are separated by ' '. Dictionaries are separated with ','.
The keys allowed/required in the dictionary change on the basis of the link watcher type, while the only property common to all the link watchers is 'name'*, which defines the link watcher to be specified.
Properties available for the 'ethtool' link watcher:
'delay-up', 'delay-down'
Properties available for the 'nsna_ping' link watcher:
'init-wait', 'interval', 'missed-max', 'target-host'*
Properties available for the 'arp_ping' include all the ones for 'nsna_ping' and:
'source-host'*, 'validate-active', 'validate-inactive', 'send-always'.
Properties flagged with a '*' are mandatory.
Example:
name=arp_ping source-host=172.16.1.1 target-host=172.16.1.254, name=ethtool delay-up=3
Enter a list of subchannels (comma or space separated).
Example: 0.0.0e20 0.0.0e21 0.0.0e22
Enter a list of user permissions. This is a list of user names formatted as:
[user:]<user name 1>, [user:]<user name 2>,...
The items can be separated by commas or spaces.
Example: alice bob charlie
Enter a value which indicates whether the connection is subject to a data
quota, usage costs or other limitations. Accepted options are:
'true','yes','on' to set the connection as metered
'false','no','off' to set the connection as not metered
'unknown' to let NetworkManager choose a value using some heuristics
Enter bytes as a list of hexadecimal values.
Two formats are accepted:
(a) a string of hexadecimal digits, where each two digits represent one byte
(b) space-separated list of bytes written as hexadecimal digits (with optional 0x/0X prefix, and optional leading 0).
Examples: ab0455a6ea3a74C2
ab 4 55 0xa6 ea 3a 74 C2
Enter connection type: Enter file path to CA certificate (optionally prefixed with file://).
[file://]<file path>
Note that nmcli does not support specifying certificates as raw blob data.
Example: /home/cimrman/cacert.crt
Enter file path to CA certificate for inner authentication (optionally prefixed
with file://).
[file://]<file path>
Note that nmcli does not support specifying certificates as raw blob data.
Example: /home/cimrman/ca-zweite-phase.crt
Enter file path to client certificate (optionally prefixed with file://).
[file://]<file path>
Note that nmcli does not support specifying certificates as raw blob data.
Example: /home/cimrman/jara.crt
Enter file path to client certificate for inner authentication (optionally prefixed
with file://).
[file://]<file path>
Note that nmcli does not support specifying certificates as raw blob data.
Example: /home/cimrman/jara-zweite-phase.crt
Enter path to a private key and the key password (if not set yet):
[file://]<file path> [<password>]
Note that nmcli does not support specifying private key as raw blob data.
Example: /home/cimrman/jara-priv-key Dardanely
Enter secondary connections that should be activated when this connection is
activated. Connections can be specified either by UUID or ID (name). nmcli
transparently translates names to UUIDs. Note that NetworkManager only supports
VPNs as secondary connections at the moment.
The items can be separated by commas or spaces.
Example: private-openvpn, fe6ba5d8-c2fc-4aae-b2e3-97efddd8d9a7
Enter the type of WEP keys. The accepted values are: 0 or unknown, 1 or key, and 2 or passphrase.
Error initializing certificate data: %s Error reading nmcli output: %s
Error updating secrets for %s: %s
Error writing nmcli output: %s
Error: %s
Error: %s - no such connection profile. Error: %s argument is missing. Error: %s properties, nor it is a setting name.
Error: %s. Error: %s.
Error: %s: %s. Error: '%s' argument is missing. Error: '%s' argument is required. Error: '%s' cannot repeat. Error: '%s' is ambiguous (%s.%s or %s.%s). Error: '%s' is mandatory. Error: '%s' is not a valid argument for '%s' option. Error: '%s' is not a valid monitoring mode; use '%s' or '%s'.
Error: '%s' is not a valid timeout. Error: '%s' is not an active connection.
Error: '%s' is not valid argument for '%s' option. Error: '%s' setting not present in the connection
Error: '%s': %s Error: '--fields' value '%s' is not valid here (allowed field: %s) Error: 'autoconnect': %s. Error: 'bt-type': '%s' not valid; use [%s, %s, %s (%s), %s]. Error: 'connection show': %s Error: 'device lldp list': %s Error: 'device show': %s Error: 'device status': %s Error: 'device wifi': %s Error: 'file' argument is required. Error: 'general logging': %s Error: 'general permissions': %s Error: 'managed': %s. Error: 'monitor' command '%s' is not valid. Error: 'networking' command '%s' is not valid. Error: 'save': %s. Error: 'type' argument is required. Error: <new name> argument is missing. Error: <setting>.<property> argument is missing. Error: Access point with bssid '%s' not found. Error: Argument '%s' was expected, but '%s' provided. Error: BSSID to connect to (%s) differs from bssid argument (%s). Error: Cannot activate connection: %s.
Error: Connection '%s' exists but properties don't match. Error: Connection activation failed.
Error: Connection activation failed: %s Error: Connection activation failed: (%d) %s.
Error: Connection deletion failed: %s
Error: Could not create NMClient object: %s
Error: Could not create NMClient object: %s. Error: Device '%s' (%s) deletion failed: %s
Error: Device '%s' (%s) disconnecting failed: %s
Error: Device '%s' is not a Wi-Fi device. Error: Device '%s' not found. Error: Device '%s' not found.
Error: Device '%s' supports neither AP nor Ad-Hoc mode. Error: Device '%s' was not recognized as a Wi-Fi device, check NetworkManager Wi-Fi plugin. Error: Device activation failed: %s Error: Device activation failed: device was disconnected Error: Failed to activate '%s' (%s) connection: %s
Error: Failed to activate connection: %s Error: Failed to add '%s' connection: %s Error: Failed to add/activate new connection: %s Error: Failed to modify connection '%s': %s Error: Failed to save '%s' (%s) connection: %s
Error: Failed to scan hidden SSID: %s. Error: Failed to setup a Wi-Fi hotspot: %s Error: Invalid 'password': %s. Error: NetworkManager is not running. Error: No Wi-Fi device found. Error: No access point with BSSID '%s' found. Error: No arguments provided. Error: No connection specified. Error: No interface specified. Error: No network with SSID '%s' found. Error: No property specified. Error: Option '%s' is unknown, try 'nmcli -help'. Error: Option '--pretty' is mutually exclusive with '--terse'. Error: Option '--pretty' is specified the second time. Error: Option '--terse' is mutually exclusive with '--pretty'. Error: Option '--terse' is specified the second time. Error: Parameter '%s' is neither SSID nor BSSID. Error: Reading applied connection from device '%s' (%s) failed: %s Error: Reapplying connection to device '%s' (%s) failed: %s Error: SSID or BSSID are missing. Error: Timeout %d sec expired. Error: Timeout expired (%d seconds) Error: Timeout saving '%s' (%s) connection
Error: Unexpected argument '%s' Error: Unknown connection '%s'. Error: Unknown parameter %s. Error: argument '%s' not understood. Try passing --help instead. Error: bad connection type: %s Error: band argument value '%s' is invalid; use 'a' or 'bg'. Error: bssid argument value '%s' is not a valid BSSID. Error: cannot delete unknown connection(s): %s. Error: channel '%s' not valid for band '%s'. Error: channel requires band too. Error: connection is not saved. Type 'save' first.
Error: connection is not valid: %s
Error: connection verification failed: %s
Error: error adding bond option '%s=%s'. Error: extra argument not allowed: '%s'. Error: failed to %s %s.%s: %s. Error: failed to create temporary file %s. Error: failed to export '%s': %s. Error: failed to find VPN plugin for %s. Error: failed to import '%s': %s. Error: failed to load VPN plugin: %s. Error: failed to load connection: %s. Error: failed to read temporary file '%s': %s. Error: failed to reload connections: %s. Error: failed to remove value of '%s': %s
Error: failed to set '%s' property: %s
Error: failed to set hostname: %s Error: failed to set logging: %s Error: invalid '%s' argument: '%s' (use on/off). Error: invalid <setting>.<property> '%s'. Error: invalid argument '%s'
Error: invalid connection type; %s
Error: invalid connection type; %s. Error: invalid extra argument '%s'. Error: invalid or not allowed setting '%s': %s. Error: invalid property '%s': %s. Error: invalid property: %s
Error: invalid property: %s%s
Error: invalid property: %s, neither a valid setting name.
Error: invalid rescan argument: '%s' not among [auto, no, yes] Error: invalid setting argument '%s'; valid are [%s]
Error: invalid setting name; %s
Error: invalid slave type; %s. Error: master is required Error: missing argument for '%s' option. Error: missing argument. Try passing --help. Error: missing setting for '%s' property
Error: nmcli terminated by signal %s (%d) Error: no active connection provided. Error: no argument given; valid are [%s]
Error: no setting selected; valid are [%s]
Error: not all active connections found. Error: not all connections deleted. Error: not all connections found. Error: not all devices deleted. Error: not all devices disconnected. Error: not all devices found. Error: only one of 'id', 'filename', uuid, or 'path' can be provided. Error: only these fields are allowed: %s Error: openconnect failed with signal %d
Error: openconnect failed with status %d
Error: openconnect failed: %s Error: openconnect failed: %s
Error: polkit agent initialization failed: %s Error: property %s
Error: property '%s' is not known. Error: save-confirmation: %s
Error: secret agent initialization failed Error: setting '%s' is mandatory and cannot be removed.
Error: show-secrets: %s
Error: ssid is too long. Error: status-line: %s
Error: the connection is not VPN. Error: timeout creating NMClient object
Error: unknown extra argument: '%s'. Error: unknown setting '%s'
Error: unknown setting: '%s'
Error: value for '%s' argument is required. Error: value for '%s' is missing. Error: wep-key-type argument value '%s' is invalid, use 'key' or 'phrase'. Ethernet Ethernet connection %d Ethernet device Ethtool settings Exit immediately if NetworkManager is not running or connecting Expected a line break following '%s'
Expected a value for '%s'
Expected whitespace following '%s'
FALSE if the connection can be modified using the provided settings service's D-Bus interface with the right privileges, or TRUE if the connection is read-only and cannot be modified. FQDN to send to DHCP server Failed to configure SR-IOV parameters Failed to convert '%s' value '%s' to uint Failed to create WireGuard connection: %s Failed to create pager pipe: %s
Failed to decode PKCS#8 private key. Failed to decode certificate. Failed to decrypt the private key. Failed to decrypt the private key: %d. Failed to decrypt the private key: %s (%s) Failed to decrypt the private key: decrypted data too large. Failed to decrypt the private key: unexpected padding length. Failed to determine AP security information Failed to duplicate pager pipe: %s
Failed to encrypt the data: %s (%s) Failed to encrypt: %d. Failed to finalize decryption of the private key: %d. Failed to find expected PKCS#8 end tag '%s'. Failed to find expected PKCS#8 start tag. Failed to find interface index for %s (%s)
Failed to fork pager: %s
Failed to initialize the MD5 context: %d. Failed to initialize the MD5 engine: %s (%s) Failed to initialize the crypto engine. Failed to initialize the crypto engine: %d. Failed to initialize the decryption cipher context: %s (%s) Failed to initialize the decryption cipher slot. Failed to initialize the decryption context. Failed to initialize the encryption cipher context: %s (%s) Failed to initialize the encryption cipher slot. Failed to initialize the encryption context. Failed to read configuration: %s
Failed to recognize certificate Failed to register with the requested network Failed to select the specified APN Failed to set IV for decryption. Failed to set IV for encryption. Failed to set symmetric key for decryption. Failed to set symmetric key for encryption. File to import: Flags indicating how to handle the "ca-cert-password" property. Flags indicating how to handle the "client-cert-password" property. Flags indicating how to handle the "leap-password" property. Flags indicating how to handle the "mka-cak" property. Flags indicating how to handle the "password" property. Flags indicating how to handle the "password-raw" property. Flags indicating how to handle the "phase2-ca-cert-password" property. Flags indicating how to handle the "phase2-client-cert-password" property. Flags indicating how to handle the "phase2-private-key-password" property. Flags indicating how to handle the "pin" property. Flags indicating how to handle the "private-key" property. Flags indicating how to handle the "private-key-password" property. Flags indicating how to handle the "psk" property. Flags indicating how to handle the "wep-key0", "wep-key1", "wep-key2", and "wep-key3" properties. Flags indicating which mode of WPS is to be used if any. There's little point in changing the default setting as NetworkManager will automatically determine whether it's feasible to start WPS enrollment from the Access Point capabilities. WPS can be disabled by setting this property to a value of 1. Flags indicating which mode of WPS is to be used. There's little point in changing the default setting as NetworkManager will automatically determine the best method to use. For incoming packets, a list of mappings from 802.1p priorities to Linux SKB priorities. The mapping is given in the format "from:to" where both "from" and "to" are unsigned integers, ie "7:3". For outgoing packets, a list of mappings from Linux SKB priorities to 802.1p priorities. The mapping is given in the format "from:to" where both "from" and "to" are unsigned integers, ie "7:3". Forces use of the new PEAP label during key derivation. Some RADIUS servers may require forcing the new PEAP label to interoperate with PEAPv1. Set to "1" to force use of the new PEAP label. See the wpa_supplicant documentation for more details. Forces which PEAP version is used when PEAP is set as the EAP method in the "eap" property. When unset, the version reported by the server will be used. Sometimes when using older RADIUS servers, it is necessary to force the client to use a particular PEAP version. To do so, this property may be set to "0" or "1" to force that specific PEAP version. Forward delay Forward delay [15] GRE GROUP GSM Modem's SIM PIN required GSM Modem's SIM PUK required GSM Modem's SIM card not inserted GSM Modem's SIM wrong GSM connection GSM mobile broadband connection GVRP, Gateway Gateway certificate hash General settings Generic settings Group ID [none] Group forward mask Group forward mask [0] Group password HTTP proxy password Hairpin [no] Hairpin mode Hash length too long (%d > %d). Hello time Hello time [2] Hex-encoded DHCPv4 client ID Hex-encoded Interface Identifier Hide Hint: use '%s' to get more details. Hostname Hostname set to '%s'
Hostname to send to DHCP server Hotspot password: %s
How many additional levels of encapsulation are permitted to be prepended to packets. This property applies only to IPv6 tunnels. IEEE 802.15.4 IEEE 802.15.4 (WPAN) parent device or connection UUID IEEE 802.15.4 Personal Area Network (PAN) identifier. IEEE 802.15.4 channel page. A positive integer or -1, meaning "do not set, use whatever the device is already set to". IEEE 802.15.4 channel. A positive integer or -1, meaning "do not set, use whatever the device is already set to". INFINIBAND IP Tunnel IP configuration could not be reserved (no available address, timeout, etc.) IP configuration method. NMSettingIP4Config and NMSettingIP6Config both support "auto", "manual", and "link-local". See the subclass-specific documentation for other values. In general, for the "auto" method, properties such as "dns" and "routes" specify information that is added on to the information returned from automatic configuration. The "ignore-auto-routes" and "ignore-auto-dns" properties modify this behavior. For methods that imply no upstream network, such as "shared" or "link-local", these properties must be empty. For IPv4 method "shared", the IP subnet can be configured by adding one manual IPv4 address or otherwise 10.42.x.0/24 is chosen. Note that the shared method must be configured on the interface which shares the internet to a subnet, not on the uplink which is shared. IP tunnel IP tunnel connection IP tunnel connection %d IP-tunnel settings IP6GRE IP6IP6 IPIP IPIP6 IPTunnel IPv4 CONFIGURATION IPv4 address (IP[/plen]) [none] IPv4 gateway [none] IPv4 protocol IPv6 CONFIGURATION IPv6 SLAAC address generation mode IPv6 address (IP[/plen]) [none] IPv6 gateway [none] IPv6 protocol ISATAP IV contains non-hexadecimal digits. IV must be an even number of bytes in length. IV must contain at least 8 characters Identifies specific subchannels that this network device uses for communication with z/VM or s390 host. Like the "mac-address" property for non-z/VM devices, this property can be used to ensure this connection only applies to the network device that uses these subchannels. The list should contain exactly 3 strings, and each string may only be composed of hexadecimal characters and the period (.) character. Identity Identity string for EAP authentication methods. Often the user's user or login name. If TRUE the IFF_VNET_HDR the tunnel packets will include a virtio network header. If TRUE the interface will prepend a 4 byte header describing the physical interface to the packets. If TRUE, "deflate" compression will not be requested. If TRUE, 128-bit MPPE (Microsoft Point-to-Point Encryption) will be required for the PPP session, and the "require-mppe" property must also be set to TRUE. If 128-bit MPPE is not available the session will fail. If TRUE, BSD compression will not be requested. If TRUE, MPPE (Microsoft Point-to-Point Encryption) will be required for the PPP session. If either 64-bit or 128-bit MPPE is not available the session will fail. Note that MPPE is not used on mobile broadband connections. If TRUE, Van Jacobsen TCP header compression will not be requested. If TRUE, a hostname is sent to the DHCP server when acquiring a lease. Some DHCP servers use this hostname to update DNS databases, essentially providing a static hostname for the computer. If the "dhcp-hostname" property is NULL and this property is TRUE, the current persistent hostname of the computer is sent. If TRUE, allow overall network configuration to proceed even if the configuration specified by this property times out. Note that at least one IP configuration must succeed or overall network configuration will still fail. For example, in IPv6-only networks, setting this property to TRUE on the NMSettingIP4Config allows the overall network configuration to succeed if IPv4 configuration fails but IPv6 configuration completes successfully. If TRUE, do not require the other side (usually the PPP server) to authenticate itself to the client. If FALSE, require authentication from the remote side. In almost all cases, this should be TRUE. If TRUE, indicates that the network is a non-broadcasting network that hides its SSID. This works both in infrastructure and AP mode. In infrastructure mode, various workarounds are used for a more reliable discovery of hidden networks, such as probe-scanning the SSID. However, these workarounds expose inherent insecurities with hidden SSID networks, and thus hidden SSID networks should be used with caution. In AP mode, the created network does not broadcast its SSID. Note that marking the network as hidden may be a privacy issue for you (in infrastructure mode) or client stations (in AP mode), as the explicit probe-scans are distinctly recognizable on the air. If TRUE, specify that pppd should set the serial port to use hardware flow control with RTS and CTS signals. This value should normally be set to FALSE. If TRUE, stateful MPPE is used. See pppd documentation for more information on stateful MPPE. If TRUE, the CHAP authentication method will not be used. If TRUE, the EAP authentication method will not be used. If TRUE, the MSCHAP authentication method will not be used. If TRUE, the MSCHAPv2 authentication method will not be used. If TRUE, the PAP authentication method will not be used. If TRUE, this connection will never be the default connection for this IP type, meaning it will never be assigned the default route by NetworkManager. If given, specifies the parent interface name on which this PPPoE connection should be created. If this property is not specified, the connection is activated on the interface specified in "interface-name" of NMSettingConnection. If given, specifies the parent interface name or parent connection UUID from which this 6LowPAN interface should be created. If given, specifies the parent interface name or parent connection UUID from which this MAC-VLAN interface should be created. If this property is not specified, the connection must contain an "802-3-ethernet" setting with a "mac-address" property. If given, specifies the parent interface name or parent connection UUID from which this MACSEC interface should be created. If this property is not specified, the connection must contain an "802-3-ethernet" setting with a "mac-address" property. If given, specifies the parent interface name or parent connection UUID from which this VLAN interface should be created. If this property is not specified, the connection must contain an "802-3-ethernet" setting with a "mac-address" property. If given, specifies the parent interface name or parent connection UUID the new device will be bound to so that tunneled packets will only be routed via that interface. If given, specifies the parent interface name or parent connection UUID. If given, specifies the source IP address to use in outgoing packets. If greater than zero, delay success of IP addressing until either the timeout is reached, or an IP gateway replies to a ping. If non-zero, directs the device to only use the specified bitrate for communication with the access point. Units are in Kb/s, ie 5500 = 5.5 Mbit/s. This property is highly driver dependent and not all devices support setting a static bitrate. If non-zero, directs the device to use the specified transmit power. Units are dBm. This property is highly driver dependent and not all devices support setting a static transmit power. If non-zero, instruct pppd to presume the connection to the peer has failed if the specified number of LCP echo-requests go unanswered by the peer. The "lcp-echo-interval" property must also be set to a non-zero value if this property is used. If non-zero, instruct pppd to request that the peer send packets no larger than the specified size. If non-zero, the MRU should be between 128 and 16384. If non-zero, instruct pppd to send an LCP echo-request frame to the peer every n seconds (where n is the specified value). Note that some PPP peers will respond to echo requests and some will not, and it is not possible to autodetect this. If non-zero, instruct pppd to send packets no larger than the specified size. If non-zero, instruct pppd to set the serial port to the specified baudrate. This value should normally be left as 0 to automatically choose the speed. If non-zero, only transmit packets of the specified size or smaller, breaking larger packets up into multiple Ethernet frames. If non-zero, only transmit packets of the specified size or smaller, breaking larger packets up into multiple fragments. If non-zero, only transmit packets of the specified size or smaller, breaking larger packets up into multiple fragments. If zero a default MTU is used. Note that contrary to wg-quick's MTU setting, this does not take into account the current routes at the time of activation. If non-zero, only transmit packets of the specified size or smaller, breaking larger packets up into multiple frames. If specified, directs the device to only associate with the given access point. This capability is highly driver dependent and not supported by all devices. Note: this property does not control the BSSID used when creating an Ad-Hoc network and is unlikely to in the future. If specified, instruct PPPoE to only initiate sessions with access concentrators that provide the specified service. For most providers, this should be left blank. It is only required if there are multiple access concentrators or a specific service is known to be required. If specified, request that the device use this MAC address instead of its permanent MAC address. This is known as MAC cloning or spoofing. Beside explicitly specifying a MAC address, the special values "preserve", "permanent", "random" and "stable" are supported. "preserve" means not to touch the MAC address on activation. "permanent" means to use the permanent hardware address if the device has one (otherwise this is treated as "preserve"). "random" creates a random MAC address on each connect. "stable" creates a hashed MAC address based on connection.stable-id and a machine dependent key. If unspecified, the value can be overwritten via global defaults, see manual of NetworkManager.conf. If still unspecified, it defaults to "permanent". On D-Bus, this field is expressed as "assigned-mac-address" or the deprecated "cloned-mac-address". If specified, request that the device use this MAC address instead of its permanent MAC address. This is known as MAC cloning or spoofing. Beside explicitly specifying a MAC address, the special values "preserve", "permanent", "random" and "stable" are supported. "preserve" means not to touch the MAC address on activation. "permanent" means to use the permanent hardware address of the device. "random" creates a random MAC address on each connect. "stable" creates a hashed MAC address based on connection.stable-id and a machine dependent key. If unspecified, the value can be overwritten via global defaults, see manual of NetworkManager.conf. If still unspecified, it defaults to "permanent". On D-Bus, this field is expressed as "assigned-mac-address" or the deprecated "cloned-mac-address". If specified, the MAC address of bridge. When creating a new bridge, this MAC address will be set. If this field is left unspecified, the "ethernet.cloned-mac-address" is referred instead to generate the initial MAC address. Note that setting "ethernet.cloned-mac-address" anyway overwrites the MAC address of the bridge later while activating the bridge. Hence, this property is deprecated. Deprecated: 1 If specified, the password used with magic-packet-based Wake-on-LAN, represented as an Ethernet MAC address. If NULL, no password will be required. If specified, this connection will never apply to the Ethernet device whose permanent MAC address matches an address in the list. Each MAC address is in the standard hex-digits-and-colons notation (00:11:22:33:44:55). If specified, this connection will only apply to the Ethernet device whose permanent MAC address matches. This property does not change the MAC address of the device (i.e. MAC spoofing). If specified, this connection will only apply to the IEEE 802.15.4 (WPAN) MAC layer device whose permanent MAC address matches. If specified, this connection will only apply to the IPoIB device whose permanent MAC address matches. This property does not change the MAC address of the device (i.e. MAC spoofing). If specified, this connection will only apply to the Wi-Fi device whose permanent MAC address matches. This property does not change the MAC address of the device (i.e. MAC spoofing). If specified, this connection will only apply to the WiMAX device whose MAC address matches. This property does not change the MAC address of the device (known as MAC spoofing). Deprecated: 1 If the "dhcp-send-hostname" property is TRUE, then the specified FQDN will be sent to the DHCP server when acquiring a lease. This property and "dhcp-hostname" are mutually exclusive and cannot be set at the same time. If the "dhcp-send-hostname" property is TRUE, then the specified name will be sent to the DHCP server when acquiring a lease. This property and "dhcp-fqdn" are mutually exclusive and cannot be set at the same time. If the SIM is locked with a PIN it must be unlocked before any other operations are requested. Specify the PIN here to allow operation of the device. If the VPN connection requires a user name for authentication, that name should be provided here. If the connection is available to more than one user, and the VPN requires each user to supply a different name, then leave this property empty. If this property is empty, NetworkManager will automatically supply the username of the user which requested the VPN connection. If the VPN service supports persistence, and this property is TRUE, the VPN will attempt to stay connected across link changes and outages, until explicitly disconnected. If the property is set to TRUE, the interface will support multiple file descriptors (queues) to parallelize packet sending or receiving. Otherwise, the interface will only support a single queue. If you are creating a VPN, and the VPN connection you wish to create does not appear in the list, you may not have the correct VPN plugin installed. Ignore Ignore automatically obtained DNS parameters Ignore automatically obtained routes Ignoring unrecognized log domain(s) '%s' passed on command line.
Index 0 WEP key. This is the WEP key used in most networks. See the "wep-key-type" property for a description of how this key is interpreted. Index 1 WEP key. This WEP index is not used by most networks. See the "wep-key-type" property for a description of how this key is interpreted. Index 2 WEP key. This WEP index is not used by most networks. See the "wep-key-type" property for a description of how this key is interpreted. Index 3 WEP key. This WEP index is not used by most networks. See the "wep-key-type" property for a description of how this key is interpreted. Indicates whether Fast Initial Link Setup (802.11ai) must be enabled for the connection. One of NM_SETTING_WIRELESS_SECURITY_FILS_DEFAULT (0) (use global default value), NM_SETTING_WIRELESS_SECURITY_FILS_DISABLE (1) (disable FILS), NM_SETTING_WIRELESS_SECURITY_FILS_OPTIONAL (2) (enable FILS if the supplicant and the access point support it) or NM_SETTING_WIRELESS_SECURITY_FILS_REQUIRED (3) (enable FILS and fail if not supported). When set to NM_SETTING_WIRELESS_SECURITY_FILS_DEFAULT (0) and no global default is set, FILS will be optionally enabled. Indicates whether Protected Management Frames (802.11w) must be enabled for the connection. One of NM_SETTING_WIRELESS_SECURITY_PMF_DEFAULT (0) (use global default value), NM_SETTING_WIRELESS_SECURITY_PMF_DISABLE (1) (disable PMF), NM_SETTING_WIRELESS_SECURITY_PMF_OPTIONAL (2) (enable PMF if the supplicant and the access point support it) or NM_SETTING_WIRELESS_SECURITY_PMF_REQUIRED (3) (enable PMF and fail if not supported). When set to NM_SETTING_WIRELESS_SECURITY_PMF_DEFAULT (0) and no global default is set, PMF will be optionally enabled. InfiniBand InfiniBand P_Key connection did not specify parent interface name InfiniBand connection InfiniBand connection %d InfiniBand device does not support connected mode Info: %s
Infra Ingress priority maps [none] Input key Interface name of the master device or UUID of the master connection. Interface(s): Interface: Internal config file location Invalid IPv4 address '%s' Invalid IPv4 address prefix '%u' Invalid IPv6 address '%s' Invalid IPv6 address prefix '%u' Invalid IV length (must be at least %d). Invalid IV length (must be at least %u). Invalid IV length (must be at least %zd). Invalid MAC in the blacklist: %s. Invalid configuration option '%s'; allowed [%s]
Invalid device Bluetooth address. Invalid device MAC address %s. Invalid device MAC address. Invalid option. Please use --help to see a list of valid options. Invalid peer starting at %s:%zu: %s Invalid routing metric '%s' Invalid secrets Invalid verify option: %s
JSON configuration Key Key management used for the connection. One of "none" (WEP), "ieee8021x" (Dynamic WEP), "wpa-none" (Ad-Hoc WPA-PSK), "wpa-psk" (infrastructure WPA-PSK), "sae" (SAE) or "wpa-eap" (WPA-Enterprise). This property must be set for any Wi-Fi connection that uses security. LACP mode. One of "active", "off", or "passive". LACP rate ('slow' or 'fast') [slow] LEAP LEAP authentication is incompatible with 802.1x setting LEAP authentication is incompatible with Ad-Hoc mode LEAP authentication requires IEEE 802.1x key management LEAP authentication requires a LEAP username LEAP username requires 'leap' authentication LOOSE_BINDING, Legacy setting that used to help establishing PPP data sessions for GSM-based modems. Deprecated: 1 Link down delay Link monitoring Link up delay Link watchers configuration for the connection: each link watcher is defined by a dictionary, whose keys depend upon the selected link watcher. Available link watchers are 'ethtool', 'nsna_ping' and 'arp_ping' and it is specified in the dictionary with the key 'name'. Available keys are: ethtool: 'delay-up', 'delay-down', 'init-wait'; nsna_ping: 'init-wait', 'interval', 'missed-max', 'target-host'; arp_ping: all the ones in nsna_ping and 'source-host', 'validate-active', 'validate-inactive', 'send-always'. See teamd.conf man for more details. Link-Local List of connection UUIDs that should be activated when the base connection itself is activated. Currently only VPN connections are supported. List of plugins separated by ',' List of strings specifying the allowed WPA protocol versions to use. Each element may be one "wpa" (allow WPA) or "rsn" (allow WPA2/RSN). If not specified, both WPA and RSN connections are allowed. List of strings to be matched against the altSubjectName of the certificate presented by the authentication server during the inner "phase 2" authentication. If the list is empty, no verification of the server certificate's altSubjectName is performed. List of strings to be matched against the altSubjectName of the certificate presented by the authentication server. If the list is empty, no verification of the server certificate's altSubjectName is performed. Local IP Local address [none] Local endpoint [none] Log domains separated by ',': any combination of [%s] Log level: one of [%s] MAC [none] MAC address ageing time [300] MACVLAN MACVLAN connection MACVLAN parent device or connection UUID MACsec MACsec EAP authentication MACsec PSK authentication MACsec connection MACsec parent device or connection UUID MII (recommended) MKA CAK MKA_CKN MSCHAP MSCHAPv2 MTU MTU [auto] MVRP, Make all warnings fatal Malformed PEM file: DEK-Info was not the second tag. Malformed PEM file: Proc-Type was not first tag. Malformed PEM file: invalid format of IV in DEK-Info tag. Malformed PEM file: no IV found in DEK-Info tag. Malformed PEM file: unknown Proc-Type tag '%s'. Malformed PEM file: unknown private key cipher '%s'. Manual Master connection failed Match Max age Max age [20] Maximum source port [0] Mesh Method for proxy configuration, Default is NM_SETTING_PROXY_METHOD_NONE (0) Method returned type '%s', but expected '%s' Metric Minimum source port [0] Missing %s in arp_ping link watcher Missing IPv4 address Missing IPv6 address Missing ovs interface setting Missing ovs interface type Missing target-host in nsna_ping link watcher Mobile Broadband Mobile broadband connection %d Mobile broadband network password Mode Modem failed or no longer available Modem initialization failed Modem now ready and available ModemManager is unavailable Modify network connections for all users Modify persistent global DNS configuration Modify persistent system hostname Modify personal network connections Monitoring connection activation (press any key to continue)
Monitoring frequency Must specify a P_Key if specifying parent N/A NAME Necessary firmware for the device may be missing Network Service Provider (NSP) name of the WiMAX network this connection should use. Deprecated: 1 Network registration denied Network registration timed out NetworkManager TUI NetworkManager active profiles NetworkManager connection profiles NetworkManager has started NetworkManager has stopped NetworkManager is not running. NetworkManager logging NetworkManager monitors all network connections and automatically
chooses the best connection to use. It also allows the user to
specify wireless access points which wireless cards in the computer
should associate with. NetworkManager options NetworkManager permissions NetworkManager status NetworkManager went to sleep Networking Networkmanager is not running (waiting for it)
Networkmanager is now in the '%s' state
Never use this network for default route New Connection New connection activation was enqueued New connection name: Next Hop No carrier could be established No connection specified No custom routes are defined. No dial tone No interface specified No reason given No service name specified No such connection '%s' No valid secrets Not a valid PAC Script Not searching for networks Number of stop bits for communication on the serial port. Either 1 or 2. The 1 in "8n1" for example. OK OLPC Mesh OLPC Mesh channel [1] OLPC Mesh connection One custom route %d custom routes One of NM_SETTING_MAC_RANDOMIZATION_DEFAULT (0) (never randomize unless the user has set a global default to randomize and the supplicant supports randomization), NM_SETTING_MAC_RANDOMIZATION_NEVER (1) (never randomize the MAC address), or NM_SETTING_MAC_RANDOMIZATION_ALWAYS (2) (always randomize the MAC address). This property is deprecated for 'cloned-mac-address'. Deprecated: 1 One of NM_SETTING_WIRELESS_POWERSAVE_DISABLE (2) (disable Wi-Fi power saving), NM_SETTING_WIRELESS_POWERSAVE_ENABLE (3) (enable Wi-Fi power saving), NM_SETTING_WIRELESS_POWERSAVE_IGNORE (1) (don't touch currently configure setting) or NM_SETTING_WIRELESS_POWERSAVE_DEFAULT (0) (use the globally configured value). All other values are reserved. One or more flags which control the behavior and features of the VLAN interface. Flags include NM_VLAN_FLAG_REORDER_HEADERS (0x1) (reordering of output packet headers), NM_VLAN_FLAG_GVRP (0x2) (use of the GVRP protocol), and NM_VLAN_FLAG_LOOSE_BINDING (0x4) (loose binding of the interface to its master device's operating state). NM_VLAN_FLAG_MVRP (0x8) (use of the MVRP protocol). The default value of this property is NM_VLAN_FLAG_REORDER_HEADERS, but it used to be 0. To preserve backward compatibility, the default-value in the D-Bus API continues to be 0 and a missing property on D-Bus is still considered as 0. Open System Open vSwitch Bridge Open vSwitch Interface Open vSwitch Port Open vSwitch bridge settings Open vSwitch database connection failed Open vSwitch interface settings Open vSwitch patch interface settings Open vSwitch port settings Opening %s failed: %s
Output file name: Output key PAC URL PAC URL for obtaining PAC file. PAC script PAC script for the connection. PAN Identifier (<0x0000-0xffff>) PAN connection PAN connections cannot specify GSM, CDMA, or serial settings PAN requested, but Bluetooth device does not support NAP PAP PCI PEM certificate had no end tag '%s'. PEM certificate had no start tag '%s'. PEM key file had no end tag '%s'. PEM key file had no start tag PIN PIN check failed PIN code is needed for the mobile broadband device PIN code required PIN used for EAP authentication methods. PPP PPP CONFIGURATION PPP failed PPP service disconnected PPP service failed to start PPP settings PPPoE PPPoE connection PPPoE parent device PPPoE username P_KEY [none] Page (<default|0-31>) Parent Parent device [none] Parent interface [none] Parity setting of the serial port. Password Password [none] Password must be UTF-8 Password provided, but key was not encrypted. Password used for EAP authentication methods, given as a byte array to allow passwords in other encodings than UTF-8 to be used. If both the "password" property and the "password-raw" property are specified, "password" is preferred. Password used to authenticate with the ADSL service. Password used to authenticate with the PPPoE service. Password: Passwords or encryption keys are required to access the wireless network '%s'. Path cost Peer Perform a checkpoint or rollback of interfaces configuration Please select an option Plugin file does not exist (%s) Plugin is not a valid file (%s) Pre-Shared-Key for WPA networks. For WPA-PSK, it's either an ASCII passphrase of 8 to 63 characters that is (as specified in the 802.11i standard) hashed to derive the actual key, or the key in form of 64 hexadecimal character. The WPA3-Personal networks use a passphrase of any length for SAE authentication. Prefix Preshared-key for %s Primary Print NetworkManager configuration and exit Print NetworkManager version and exit Priority Private key cipher '%s' was unknown. Private key password Profile name Property name? Proxy Put NetworkManager to sleep or wake it up (should only be used by system power management) Quit Quit after initial configuration REORDER_HEADERS, Radio switches Reload NetworkManager configuration Remote Remote IP Remove Require 128-bit encryption Require IPv4 addressing for this connection Require IPv6 addressing for this connection Round-robin Route priority for IPv4 Route priority for IPv6 Routing SCI port [1] SIM PIN was incorrect SIM operator ID must be a 5 or 6 number MCCMNC code SIT SR-IOV settings SSID SSID length is out of range <1-32> bytes SSID of the Wi-Fi network. Must be specified. SSID of the mesh network to join. SSID or BSSID: STP priority [32768] Saving the connection with 'autoconnect=yes'. That might result in an immediate activation of the connection.
Do you still want to save? %s Search domains Secret flags property '%s' not found Secrets are required for the DSL connection '%s' Secrets are required to access the MACsec network '%s' Secrets are required to access the wired network '%s' Secrets are required to connect WireGuard VPN '%s' Secrets were required, but not provided Security Select the type of connection you wish to create. Select the type of slave connection you wish to add. Select... Send PPP echo packets Serial settings Service Service [none] Set Hostname Set hostname to '%s' Set system hostname Sets the Spanning Tree Protocol (STP) priority for this bridge. Lower values are "better"; the lowest priority bridge will be elected the root bridge. Setting '%s' is not present in the connection.
Setting name of the device type of this slave's master connection (eg, "bond"), or NULL if this connection is not a slave. Setting name? Shared Shared Key Shared connection service failed Shared connection service failed to start Short IEEE 802.15.4 address to be used within a restricted environment. Short address (<0x0000-0xffff>) Show Show NetworkManager options Show password Slave connections need a valid '%s' property Slaves Specific port type to use if the device supports multiple attachment methods. One of "tp" (Twisted Pair), "aui" (Attachment Unit Interface), "bnc" (Thin Ethernet) or "mii" (Media Independent Interface). If the device supports only one port type, this setting is ignored. Specifies authentication flags to use in "phase 1" outer authentication using NMSetting8021xAuthFlags options. The individual TLS versions can be explicitly disabled. If a certain TLS disable flag is not set, it is up to the supplicant to allow or forbid it. The TLS options map to tls_disable_tlsv1_x settings. See the wpa_supplicant documentation for more details. Specifies how the CAK (Connectivity Association Key) for MKA (MACsec Key Agreement) is obtained. Specifies the NMSettingDcbFlags for DCB Priority Flow Control (PFC). Flags may be any combination of NM_SETTING_DCB_FLAG_ENABLE (0x1), NM_SETTING_DCB_FLAG_ADVERTISE (0x2), and NM_SETTING_DCB_FLAG_WILLING (0x4). Specifies the NMSettingDcbFlags for DCB Priority Groups. Flags may be any combination of NM_SETTING_DCB_FLAG_ENABLE (0x1), NM_SETTING_DCB_FLAG_ADVERTISE (0x2), and NM_SETTING_DCB_FLAG_WILLING (0x4). Specifies the NMSettingDcbFlags for the DCB FCoE application. Flags may be any combination of NM_SETTING_DCB_FLAG_ENABLE (0x1), NM_SETTING_DCB_FLAG_ADVERTISE (0x2), and NM_SETTING_DCB_FLAG_WILLING (0x4). Specifies the NMSettingDcbFlags for the DCB FIP application. Flags may be any combination of NM_SETTING_DCB_FLAG_ENABLE (0x1), NM_SETTING_DCB_FLAG_ADVERTISE (0x2), and NM_SETTING_DCB_FLAG_WILLING (0x4). Specifies the NMSettingDcbFlags for the DCB iSCSI application. Flags may be any combination of NM_SETTING_DCB_FLAG_ENABLE (0x1), NM_SETTING_DCB_FLAG_ADVERTISE (0x2), and NM_SETTING_DCB_FLAG_WILLING (0x4). Specifies the TOS value to use in outgoing packets. Specifies the UDP destination port to communicate to the remote VXLAN tunnel endpoint. Specifies the VXLAN Network Identifier (or VXLAN Segment Identifier) to use. Specifies the allowed "phase 2" inner EAP-based authentication methods when an EAP method that uses an inner TLS tunnel is specified in the "eap" property. Recognized EAP-based "phase 2" methods are "md5", "mschapv2", "otp", "gtc", and "tls". Each "phase 2" inner method requires specific parameters for successful authentication; see the wpa_supplicant documentation for more details. Specifies the allowed "phase 2" inner non-EAP authentication methods when an EAP method that uses an inner TLS tunnel is specified in the "eap" property. Recognized non-EAP "phase 2" methods are "pap", "chap", "mschap", "mschapv2", "gtc", "otp", "md5", and "tls". Each "phase 2" inner method requires specific parameters for successful authentication; see the wpa_supplicant documentation for more details. Specifies the lifetime in seconds of FDB entries learnt by the kernel. Specifies the maximum UDP source port to communicate to the remote VXLAN tunnel endpoint. Specifies the maximum number of FDB entries. A value of zero means that the kernel will store unlimited entries. Specifies the minimum UDP source port to communicate to the remote VXLAN tunnel endpoint. Specifies the time-to-live value to use in outgoing packets. Specifies the unicast destination IP address of a remote Open vSwitch bridge port to connect to. Specifies the unicast destination IP address to use in outgoing packets when the destination link layer address is not known in the VXLAN device forwarding database, or the multicast IP address to join. Specifies the validation mode for incoming frames. Specifies whether ARP proxy is turned on. Specifies whether netlink IP ADDR miss notifications are generated. Specifies whether netlink LL ADDR miss notifications are generated. Specifies whether route short circuit is turned on. Specifies whether the SCI (Secure Channel Identifier) is included in every packet. Specifies whether the profile can be active multiple times at a particular moment. The value is of type NMConnectionMultiConnect. Specifies whether unknown source link layer addresses and IP addresses are entered into the VXLAN device forwarding database. Specify the location of a PID file Speed to use for communication over the serial port. Note that this value usually has no effect for mobile broadband modems as they generally ignore speed settings and use the highest available speed. State file for no-auto-default devices State file location Status of devices Substring to be matched against the subject of the certificate presented by the authentication server during the inner "phase 2" authentication. When unset, no verification of the authentication server certificate's subject is performed. This property provides little security, if any, and its use is deprecated in favor of NMSetting8021x:phase2-domain-suffix-match. Substring to be matched against the subject of the certificate presented by the authentication server. When unset, no verification of the authentication server certificate's subject is performed. This property provides little security, if any, and its use is deprecated in favor of NMSetting8021x:domain-suffix-match. Success System config directory location System policy prevents Wi-Fi scans System policy prevents control of network connections System policy prevents enabling or disabling Wi-Fi devices System policy prevents enabling or disabling WiMAX mobile broadband devices System policy prevents enabling or disabling connectivity checking System policy prevents enabling or disabling device statistics System policy prevents enabling or disabling mobile broadband devices System policy prevents enabling or disabling system networking System policy prevents modification of network settings for all users System policy prevents modification of personal network settings System policy prevents modification of the persistent global DNS configuration System policy prevents modification of the persistent system hostname System policy prevents putting NetworkManager to sleep or waking it up System policy prevents reloading NetworkManager System policy prevents sharing connections via a protected Wi-Fi network System policy prevents sharing connections via an open Wi-Fi network System policy prevents the creation of a checkpoint or its rollback TEAM TEAM PORT TUN connection Tap [no] Team Team JSON configuration [none] Team connection Team connection %d Team device Team port The 256 bit private-key in base64 encoding. The Bluetooth address of the device. The Bluetooth addresses of the device and the connection didn't match. The Bluetooth connection failed or timed out The Ethernet MAC address aging time, in seconds. The FCoE controller mode; either "fabric" (default) or "vn2vn". The GPRS Access Point Name specifying the APN used when establishing a data session with the GSM-based network. The APN often determines how the user will be billed for their network usage and whether the user has access to the Internet or just a provider-specific walled-garden, so it is important to use the correct APN for the user's mobile broadband plan. The APN may only be composed of the characters a-z, 0-9, ., and - per GSM 03.60 Section 14.9. The IP configuration is no longer valid The IP-over-InfiniBand transport mode. Either "datagram" or "connected". The InfiniBand P_Key to use for this device. A value of -1 means to use the default P_Key (aka "the P_Key at index 0"). Otherwise it is a 16-bit unsigned integer, whose high bit is set if it is a "full membership" P_Key. The JSON configuration for the team network interface. The property should contain raw JSON configuration data suitable for teamd, because the value is passed directly to teamd. If not specified, the default configuration is used. See man teamd.conf for the format details. The JSON configuration for the team port. The property should contain raw JSON configuration data suitable for teamd, because the value is passed directly to teamd. If not specified, the default configuration is used. See man teamd.conf for the format details. The MACs of the device and the connection didn't match. The MACs of the device and the connection do not match. The NMSettingWiredWakeOnLan options to enable. Not all devices support all options. May be any combination of NM_SETTING_WIRED_WAKE_ON_LAN_PHY (0x2), NM_SETTING_WIRED_WAKE_ON_LAN_UNICAST (0x4), NM_SETTING_WIRED_WAKE_ON_LAN_MULTICAST (0x8), NM_SETTING_WIRED_WAKE_ON_LAN_BROADCAST (0x10), NM_SETTING_WIRED_WAKE_ON_LAN_ARP (0x20), NM_SETTING_WIRED_WAKE_ON_LAN_MAGIC (0x40) or the special values NM_SETTING_WIRED_WAKE_ON_LAN_DEFAULT (0x1) (to use global settings) and NM_SETTING_WIRED_WAKE_ON_LAN_IGNORE (0x8000) (to disable management of Wake-on-LAN in NetworkManager). The NMSettingWirelessWakeOnWLan options to enable. Not all devices support all options. May be any combination of NM_SETTING_WIRELESS_WAKE_ON_WLAN_ANY (0x2), NM_SETTING_WIRELESS_WAKE_ON_WLAN_DISCONNECT (0x4), NM_SETTING_WIRELESS_WAKE_ON_WLAN_MAGIC (0x8), NM_SETTING_WIRELESS_WAKE_ON_WLAN_GTK_REKEY_FAILURE (0x10), NM_SETTING_WIRELESS_WAKE_ON_WLAN_EAP_IDENTITY_REQUEST (0x20), NM_SETTING_WIRELESS_WAKE_ON_WLAN_4WAY_HANDSHAKE (0x40), NM_SETTING_WIRELESS_WAKE_ON_WLAN_RFKILL_RELEASE (0x80), NM_SETTING_WIRELESS_WAKE_ON_WLAN_TCP (0x100) or the special values NM_SETTING_WIRELESS_WAKE_ON_WLAN_DEFAULT (0x1) (to use global settings) and NM_SETTING_WIRELESS_WAKE_ON_WLAN_IGNORE (0x8000) (to disable management of Wake-on-LAN in NetworkManager). The Network ID (GSM LAI format, ie MCC-MNC) to force specific network registration. If the Network ID is specified, NetworkManager will attempt to force the device to register only on the specified network. This can be used to ensure that the device does not roam when direct roaming control of the device is not otherwise possible. The P2P device that should be connected to. Currently this is the only way to create or join a group. The SIM card unique identifier (as given by the WWAN management service) which this connection applies to. If given, the connection will apply to any device also allowed by "device-id" which contains a SIM card matching the given identifier. The Spanning Tree Protocol (STP) forwarding delay, in seconds. The Spanning Tree Protocol (STP) hello time, in seconds. The Spanning Tree Protocol (STP) maximum message age, in seconds. The Spanning Tree Protocol (STP) port cost for destinations via this port. The Spanning Tree Protocol (STP) priority of this bridge port. The TTL to assign to tunneled packets. 0 is a special value meaning that packets inherit the TTL value. The VLAN identifier that the interface created by this connection should be assigned. The valid range is from 0 to 4094, without the reserved id 4095. The VLAN identifiers of the device and the connection didn't match. The VLAN mode. One of "access", "native-tagged", "native-untagged", "trunk" or unset. The VLAN tag in the range 0-4095. The VPN service did not start in time The VPN service failed to start The VPN service returned invalid configuration The VPN service stopped unexpectedly The VXLAN identifiers of the device and the connection didn't match. The Wi-Fi Display (WFD) Information Elements (IEs) to set. Wi-Fi Display requires a protocol specific information element to be set in certain Wi-Fi frames. These can be specified here for the purpose of establishing a connection. This setting is only useful when implementing a Wi-Fi Display client. The Wi-Fi P2P peer could not be found The Wi-Fi network could not be found The WireGuard config file must be a valid interface name followed by ".conf" The allowed EAP method to be used when authenticating to the network with 802.1x. Valid methods are: "leap", "md5", "tls", "peap", "ttls", "pwd", and "fast". Each method requires different configuration using the properties of this setting; refer to wpa_supplicant documentation for the allowed combinations. The autoconnect priority. If the connection is set to autoconnect, connections with higher priority will be preferred. Defaults to 0. The higher number means higher priority. The base network connection was interrupted The bridge failure mode. One of "secure", "standalone" or empty. The connection and device differ in S390 subchannels. The connection attempt timed out The connection did not specify an interface name. The connection is not saved. Do you really want to quit? %s The connection is of Bluetooth NAP type. The connection profile has been removed from another client. You may type 'save' in the main menu to restore it.
The connection profile has been removed from another client. You may type 'save' to restore it.
The connection was disconnected The connection was not a Bluetooth connection. The connection was not a MAC-VLAN connection. The connection was not a VLAN connection. The connection was not a VXLAN connection. The connection was not a Wi-Fi P2P connection. The connection was not a Wi-Fi connection. The connection was not a WiMAX connection. The connection was not a bond connection. The connection was not a bridge connection. The connection was not a dummy connection. The connection was not a generic connection. The connection was not a modem connection. The connection was not a ovs_bridge connection. The connection was not a ovs_interface connection. The connection was not a ovs_port connection. The connection was not a team connection. The connection was not a tun connection. The connection was not a valid modem connection. The connection was not a wpan connection. The connection was not an ADSL connection. The connection was not an Ethernet or PPPoE connection. The connection was not an IP tunnel connection. The connection was not an InfiniBand connection. The connection was not an OLPC Mesh connection. The connection was not valid: %s The connection was removed The default PVID for the ports of the bridge, that is the VLAN id assigned to incoming untagged frames. The default metric for routes that don't explicitly specify a metric. The default value -1 means that the metric is chosen automatically based on the device type. The metric applies to dynamic routes, manual (static) routes that don't have an explicit metric setting, address prefix routes, and the default route. Note that for IPv6, the kernel accepts zero (0) but coerces it to 1024 (user default). Hence, setting this property to zero effectively mean setting it to 1024. For IPv4, zero is a regular value for the metric. The device could not be readied for configuration The device disappeared The device is lacking Bluetooth capabilities required by the connection. The device is lacking WPA capabilities required by the connection. The device is lacking WPA2/RSN capabilities required by the connection. The device is lacking capabilities required by the connection. The device parent's management changed The device unique identifier (as given by the WWAN management service) which this connection applies to. If given, the connection will only apply to the specified device. The device was removed The device's active connection disappeared The device's existing connection was assumed The device's parent changed The dialing attempt failed The dialing request timed out The error cannot be fixed automatically.
The expected start of the response The flow label to assign to tunnel packets. This property applies only to IPv6 tunnels. The gateway associated with this configuration. This is only meaningful if "addresses" is also set. This also requires "never-default" to be unset. Otherwise, the gateway will be cleared during normalization. The group ID which will own the device. If set to NULL everyone will be able to use the device. The hardware address of the device and the connection didn't match. The highest User Priority (0 - 7) which FCoE frames should use, or -1 for default priority. Only used when the "app-fcoe-flags" property includes the NM_SETTING_DCB_FLAG_ENABLE (0x1) flag. The highest User Priority (0 - 7) which FIP frames should use, or -1 for default priority. Only used when the "app-fip-flags" property includes the NM_SETTING_DCB_FLAG_ENABLE (0x1) flag. The highest User Priority (0 - 7) which iSCSI frames should use, or -1 for default priority. Only used when the "app-iscsi-flags" property includes the NM_SETTING_DCB_FLAG_ENABLE (0x1) flag. The interface name of the parent device of this device. Normally NULL, but if the "p_key" property is set, then you must specify the base device by setting either this property or "mac-address". The interface names of the device and the connection didn't match. The interface to manage The interface type. Either "internal", or empty. The interval between connectivity checks (in seconds) The key used for tunnel input packets; the property is valid only for certain tunnel modes (GRE, IP6GRE). If empty, no key is used. The key used for tunnel output packets; the property is valid only for certain tunnel modes (GRE, IP6GRE). If empty, no key is used. The line is busy The listen-port. If listen-port is not specified, the port will be chosen randomly when the interface comes up. The local endpoint of the tunnel; the value can be empty, otherwise it must contain an IPv4 or IPv6 address. The logging backend configuration value. See logging.backend in NetworkManager.conf The login password for legacy LEAP connections (ie, key-mgmt = "ieee8021x" and auth-alg = "leap"). The login username for legacy LEAP connections (ie, key-mgmt = "ieee8021x" and auth-alg = "leap"). The macvlan mode, which specifies the communication mechanism between multiple macvlans on the same lower device. The mode of the device and the connection didn't match The modem could not be found The name of the network interface this connection is bound to. If not set, then the connection can be attached to any interface of the appropriate type (subject to restrictions imposed by other settings). For software devices this specifies the name of the created device. For connection types where interface names cannot easily be made persistent (e.g. mobile broadband or USB Ethernet), this property should not be used. Setting this property restricts the interfaces a connection can be used with, and if interface names change or are reordered the connection may be applied to the wrong interface. The number of retries for the authentication. Zero means to try indefinitely; -1 means to use a global default. If the global default is not set, the authentication retries for 3 times before failing the connection. Currently this only applies to 802-1x authentication. The number of times a connection should be tried when autoactivating before giving up. Zero means forever, -1 means the global default (4 times if not overridden). Setting this to 1 means to try activation only once before blocking autoconnect. Note that after a timeout, NetworkManager will try to autoconnect again. The number to dial to establish the connection to the CDMA-based mobile broadband network, if any. If not specified, the default number (#777) is used when required. The operating mode of the virtual device. Allowed values are NM_SETTING_TUN_MODE_TUN (1) to create a layer 3 device and NM_SETTING_TUN_MODE_TAP (2) to create an Ethernet-like layer 2 one. The password used to access the "phase2" CA certificate stored in "phase2-ca-cert" property. Only makes sense if the certificate is stored on a PKCS#11 token that requires a login. The password used to access the "phase2" client certificate stored in "phase2-client-cert" property. Only makes sense if the certificate is stored on a PKCS#11 token that requires a login. The password used to access the CA certificate stored in "ca-cert" property. Only makes sense if the certificate is stored on a PKCS#11 token that requires a login. The password used to access the client certificate stored in "client-cert" property. Only makes sense if the certificate is stored on a PKCS#11 token that requires a login. The password used to authenticate with the network, if required. Many providers do not require a password, or accept any password. But if a password is required, it is specified here. The password used to decrypt the "phase 2" private key specified in the "phase2-private-key" property when the private key either uses the path scheme, or is a PKCS#12 format key. The password used to decrypt the private key specified in the "private-key" property when the private key either uses the path scheme, or if the private key is a PKCS#12 format key. The port component of the SCI (Secure Channel Identifier), between 1 and 65534. The pre-shared CAK (Connectivity Association Key) for MACsec Key Agreement. The pre-shared CKN (Connectivity-association Key Name) for MACsec Key Agreement. The remote endpoint of the tunnel; the value must contain an IPv4 or IPv6 address. The selected IP method is not supported The supplicant is now available The time port must be active before it starts forwarding traffic. The time port must be inactive in order to be considered down. The time, in seconds since the Unix Epoch, that the connection was last _successfully_ fully activated. NetworkManager updates the connection timestamp periodically when the connection is active to ensure that an active connection has the latest timestamp. The property is only meant for reading (changes to this property will not be preserved). The total number of virtual functions to create. Note that when the sriov setting is present NetworkManager enforces the number of virtual functions on the interface also when it is zero. To prevent any changes to SR-IOV parameters don't add a sriov setting to the connection. The trust level of a the connection. Free form case-insensitive string (for example "Home", "Work", "Public"). NULL or unspecified zone means the connection will be placed in the default zone as defined by the firewall. When updating this property on a currently activated connection, the change takes effect immediately. The tunneling mode, for example NM_IP_TUNNEL_MODE_IPIP (1) or NM_IP_TUNNEL_MODE_GRE (2). The type of service (IPv4) or traffic class (IPv6) field to be set on tunneled packets. The use of fwmark is optional and is by default off. Setting it to 0 disables it. Otherwise it is a 32-bit fwmark for outgoing packets. The user ID which will own the device. If set to NULL everyone will be able to use the device. The username used to authenticate with the network, if required. Many providers do not require a username, or accept any username. But if a username is required, it is specified here. The valid syntax is: '<vid>[-<vid>] [pvid] [untagged]' The valid syntax is: '[root | parent <handle>] [handle <handle>] <kind>' The valid syntax is: 'ip[/prefix] [next-hop] [metric] [attribute=val]... [,ip[/prefix] ...]' The valid syntax is: vf [attribute=value]... [,vf [attribute=value]...] There is %d optional setting for %s.
There are %d optional settings for %s.
There's no primary connection
This represents the identity of the connection used for various purposes. It allows to configure multiple profiles to share the identity. Also, the stable-id can contain placeholders that are substituted dynamically and deterministically depending on the context. The stable-id is used for generating IPv6 stable private addresses with ipv6.addr-gen-mode=stable-privacy. It is also used to seed the generated cloned MAC address for ethernet.cloned-mac-address=stable and wifi.cloned-mac-address=stable. It is also used as DHCP client identifier with ipv4.dhcp-client-id=stable and to derive the DHCP DUID with ipv6.dhcp-duid=stable-[llt,ll,uuid]. Note that depending on the context where it is used, other parameters are also seeded into the generation algorithm. For example, a per-host key is commonly also included, so that different systems end up generating different IDs. Or with ipv6.addr-gen-mode=stable-privacy, also the device's name is included, so that different interfaces yield different addresses. The '$' character is treated special to perform dynamic substitutions at runtime. Currently supported are "${CONNECTION}", "${DEVICE}", "${MAC}", "${BOOT}", "${RANDOM}". These effectively create unique IDs per-connection, per-device, per-boot, or every time. Note that "${DEVICE}" corresponds to the interface name of the device and "${MAC}" is the permanent MAC address of the device. Any unrecognized patterns following '$' are treated verbatim, however are reserved for future use. You are thus advised to avoid '$' or escape it as "$$". For example, set it to "${CONNECTION}-${BOOT}-${DEVICE}" to create a unique id for this connection that changes with every reboot and differs depending on the interface where the profile activates. If the value is unset, a global connection default is consulted. If the value is still unset, the default is similar to "${CONNECTION}" and uses a unique, fixed ID for the connection. Time to delay between each byte sent to the modem, in microseconds. Time to wait for a connection, in seconds (without the option, default value is 30) Timeout for the VPN service to establish the connection. Some services may take quite a long time to connect. Value of 0 means a default timeout, which is 60 seconds (unless overridden by vpn.timeout in configuration file). Values greater than zero mean timeout in seconds. Timeout in milliseconds used to check for the presence of duplicate IP addresses on the network. If an address conflict is detected, the activation will fail. A zero value means that no duplicate address detection is performed, -1 means the default value (either configuration ipvx.dad-timeout override or zero). A value greater than zero is a timeout in milliseconds. The property is currently implemented only for IPv4. Traffic controls Transport mode Tun Tun device Tunnel flags. Currently the following values are supported: NM_IP_TUNNEL_FLAG_IP6_IGN_ENCAP_LIMIT (0x1), NM_IP_TUNNEL_FLAG_IP6_USE_ORIG_TCLASS (0x2), NM_IP_TUNNEL_FLAG_IP6_USE_ORIG_FLOWLABEL (0x4), NM_IP_TUNNEL_FLAG_IP6_MIP6_DEV (0x8), NM_IP_TUNNEL_FLAG_IP6_RCV_DSCP_COPY (0x10), NM_IP_TUNNEL_FLAG_IP6_USE_ORIG_FWMARK (0x20). They are valid only for IPv6 tunnels. Type 'describe [<setting>.<prop>]' for detailed property description. Type 'help' or '?' for available commands. Type 'print' to show all the connection properties. URI is empty URI is not valid UTF-8 URI not NUL terminated USB UTF-8 encoded file path containing PAC for EAP-FAST. UTF-8 encoded password used for EAP authentication methods. If both the "password" property and the "password-raw" property are specified, "password" is preferred. UTF-8 encoded path to a directory containing PEM or DER formatted certificates to be added to the verification chain in addition to the certificate specified in the "ca-cert" property. UTF-8 encoded path to a directory containing PEM or DER formatted certificates to be added to the verification chain in addition to the certificate specified in the "phase2-ca-cert" property. Unable to add new connection: %s Unable to delete connection: %s Unable to determine private key type. Unable to save connection: %s Unable to set hostname: %s Unexpected amount of data after encrypting. Unexpected end of file following '%s'
Unexpected failure to normalize the connection Unexpected failure to verify the connection Unknown Unknown command argument: '%s'
Unknown command: '%s'
Unknown error Unknown log domain '%s' Unknown log level '%s' Unknown parameter: %s Unknown parameter: %s
Unknown reason Unknown slave type '%s' Unknown/unhandled Bluetooth connection type Unsupported extra-argument Unsupported key cipher for decryption Unsupported key cipher for encryption Unsupported to-string-flags argument Usage Usage: nmcli [OPTIONS] OBJECT { COMMAND | help }
OPTIONS
-a, --ask ask for missing parameters
-c, --colors auto|yes|no whether to use colors in output
-e, --escape yes|no escape columns separators in values
-f, --fields <field,...>|all|common specify fields to output
-g, --get-values <field,...>|all|common shortcut for -m tabular -t -f
-h, --help print this help
-m, --mode tabular|multiline output mode
-o, --overview overview mode
-p, --pretty pretty output
-s, --show-secrets allow displaying passwords
-t, --terse terse output
-v, --version show program version
-w, --wait <seconds> set timeout waiting for finishing operations
OBJECT
g[eneral] NetworkManager's general status and operations
n[etworking] overall networking control
r[adio] NetworkManager radio switches
c[onnection] NetworkManager's connections
d[evice] devices managed by NetworkManager
a[gent] NetworkManager secret agent or polkit agent
m[onitor] monitor NetworkManager changes
Usage: nmcli agent all { help }
Runs nmcli as both NetworkManager secret and a polkit agent.
Usage: nmcli agent polkit { help }
Registers nmcli as a polkit action for the user session.
When a polkit daemon requires an authorization, nmcli asks the user and gives
the response back to polkit.
Usage: nmcli agent secret { help }
Runs nmcli as NetworkManager secret agent. When NetworkManager requires
a password it asks registered agents for it. This command keeps nmcli running
and if a password is required asks the user for it.
Usage: nmcli agent { COMMAND | help }
COMMAND := { secret | polkit | all }
Usage: nmcli connection add { ARGUMENTS | help }
ARGUMENTS := COMMON_OPTIONS TYPE_SPECIFIC_OPTIONS SLAVE_OPTIONS IP_OPTIONS [-- ([+|-]<setting>.<property> <value>)+]
COMMON_OPTIONS:
type <type>
ifname <interface name> | "*"
[con-name <connection name>]
[autoconnect yes|no]
[save yes|no]
[master <master (ifname, or connection UUID or name)>]
[slave-type <master connection type>]
TYPE_SPECIFIC_OPTIONS:
ethernet: [mac <MAC address>]
[cloned-mac <cloned MAC address>]
[mtu <MTU>]
wifi: ssid <SSID>
[mac <MAC address>]
[cloned-mac <cloned MAC address>]
[mtu <MTU>]
[mode infrastructure|ap|adhoc]
wimax: [mac <MAC address>]
[nsp <NSP>]
pppoe: username <PPPoE username>
[password <PPPoE password>]
[service <PPPoE service name>]
[mtu <MTU>]
[mac <MAC address>]
gsm: apn <APN>
[user <username>]
[password <password>]
cdma: [user <username>]
[password <password>]
infiniband: [mac <MAC address>]
[mtu <MTU>]
[transport-mode datagram | connected]
[parent <ifname>]
[p-key <IPoIB P_Key>]
bluetooth: [addr <bluetooth address>]
[bt-type panu|nap|dun-gsm|dun-cdma]
vlan: dev <parent device (connection UUID, ifname, or MAC)>
id <VLAN ID>
[flags <VLAN flags>]
[ingress <ingress priority mapping>]
[egress <egress priority mapping>]
[mtu <MTU>]
bond: [mode balance-rr (0) | active-backup (1) | balance-xor (2) | broadcast (3) |
802.3ad (4) | balance-tlb (5) | balance-alb (6)]
[primary <ifname>]
[miimon <num>]
[downdelay <num>]
[updelay <num>]
[arp-interval <num>]
[arp-ip-target <num>]
[lacp-rate slow (0) | fast (1)]
bond-slave: master <master (ifname, or connection UUID or name)>
team: [config <file>|<raw JSON data>]
team-slave: master <master (ifname, or connection UUID or name)>
[config <file>|<raw JSON data>]
bridge: [stp yes|no]
[priority <num>]
[forward-delay <2-30>]
[hello-time <1-10>]
[max-age <6-40>]
[ageing-time <0-1000000>]
[multicast-snooping yes|no]
[mac <MAC address>]
bridge-slave: master <master (ifname, or connection UUID or name)>
[priority <0-63>]
[path-cost <1-65535>]
[hairpin yes|no]
vpn: vpn-type vpnc|openvpn|pptp|openconnect|openswan|libreswan|ssh|l2tp|iodine|...
[user <username>]
olpc-mesh: ssid <SSID>
[channel <1-13>]
[dhcp-anycast <MAC address>]
adsl: username <username>
protocol pppoa|pppoe|ipoatm
[password <password>]
[encapsulation vcmux|llc]
tun: mode tun|tap
[owner <UID>]
[group <GID>]
[pi yes|no]
[vnet-hdr yes|no]
[multi-queue yes|no]
ip-tunnel: mode ipip|gre|sit|isatap|vti|ip6ip6|ipip6|ip6gre|vti6
remote <remote endpoint IP>
[local <local endpoint IP>]
[dev <parent device (ifname or connection UUID)>]
macsec: dev <parent device (connection UUID, ifname, or MAC)>
mode <psk|eap>
[cak <key> ckn <key>]
[encrypt yes|no]
[port 1-65534]
macvlan: dev <parent device (connection UUID, ifname, or MAC)>
mode vepa|bridge|private|passthru|source
[tap yes|no]
vxlan: id <VXLAN ID>
remote <IP of multicast group or remote address>
[local <source IP>]
[dev <parent device (ifname or connection UUID)>]
[source-port-min <0-65535>]
[source-port-max <0-65535>]
[destination-port <0-65535>]
wpan: [short-addr <0x0000-0xffff>]
[pan-id <0x0000-0xffff>]
[page <default|0-31>]
[channel <default|0-26>]
[mac <MAC address>]
6lowpan: dev <parent device (connection UUID, ifname, or MAC)>
dummy:
SLAVE_OPTIONS:
bridge: [priority <0-63>]
[path-cost <1-65535>]
[hairpin yes|no]
team: [config <file>|<raw JSON data>]
IP_OPTIONS:
[ip4 <IPv4 address>] [gw4 <IPv4 gateway>]
[ip6 <IPv6 address>] [gw6 <IPv6 gateway>]
Usage: nmcli connection clone { ARGUMENTS | help }
ARGUMENTS := [--temporary] [id | uuid | path] <ID> <new name>
Clone an existing connection profile. The newly created connection will be
the exact copy of the <ID>, except the uuid property (will be generated) and
id (provided as <new name> argument).
Usage: nmcli connection delete { ARGUMENTS | help }
ARGUMENTS := [id | uuid | path] <ID>
Delete a connection profile.
The profile is identified by its name, UUID or D-Bus path.
Usage: nmcli connection down { ARGUMENTS | help }
ARGUMENTS := [id | uuid | path | apath] <ID> ...
Deactivate a connection from a device (without preventing the device from
further auto-activation). The profile to deactivate is identified by its name,
UUID or D-Bus path.
Usage: nmcli connection edit { ARGUMENTS | help }
ARGUMENTS := [id | uuid | path] <ID>
Edit an existing connection profile in an interactive editor.
The profile is identified by its name, UUID or D-Bus path
ARGUMENTS := [type <new connection type>] [con-name <new connection name>]
Add a new connection profile in an interactive editor.
Usage: nmcli connection export { ARGUMENTS | help }
ARGUMENTS := [id | uuid | path] <ID> [<output file>]
Export a connection. Only VPN connections are supported at the moment.
The data are directed to standard output or to a file if a name is given.
Usage: nmcli connection import { ARGUMENTS | help }
ARGUMENTS := [--temporary] type <type> file <file to import>
Import an external/foreign configuration as a NetworkManager connection profile.
The type of the input file is specified by type option.
Only VPN configurations are supported at the moment. The configuration
is imported by NetworkManager VPN plugins.
Usage: nmcli connection load { ARGUMENTS | help }
ARGUMENTS := <filename> [<filename>...]
Load/reload one or more connection files from disk. Use this after manually
editing a connection file to ensure that NetworkManager is aware of its latest
state.
Usage: nmcli connection modify { ARGUMENTS | help }
ARGUMENTS := [id | uuid | path] <ID> ([+|-]<setting>.<property> <value>)+
Modify one or more properties of the connection profile.
The profile is identified by its name, UUID or D-Bus path. For multi-valued
properties you can use optional '+' or '-' prefix to the property name.
The '+' sign allows appending items instead of overwriting the whole value.
The '-' sign allows removing selected items instead of the whole value.
Examples:
nmcli con mod home-wifi wifi.ssid rakosnicek
nmcli con mod em1-1 ipv4.method manual ipv4.addr "192.168.1.2/24, 10.10.1.5/8"
nmcli con mod em1-1 +ipv4.dns 8.8.4.4
nmcli con mod em1-1 -ipv4.dns 1
nmcli con mod em1-1 -ipv6.addr "abbe::cafe/56"
nmcli con mod bond0 +bond.options mii=500
nmcli con mod bond0 -bond.options downdelay
Usage: nmcli connection monitor { ARGUMENTS | help }
ARGUMENTS := [id | uuid | path] <ID> ...
Monitor connection profile activity.
This command prints a line whenever the specified connection changes.
Monitors all connection profiles in case none is specified.
Usage: nmcli connection reload { help }
Reload all connection files from disk.
Usage: nmcli connection show { ARGUMENTS | help }
ARGUMENTS := [--active] [--order <order spec>]
List in-memory and on-disk connection profiles, some of which may also be
active if a device is using that connection profile. Without a parameter, all
profiles are listed. When --active option is specified, only the active
profiles are shown. --order allows custom connection ordering (see manual page).
ARGUMENTS := [--active] [id | uuid | path | apath] <ID> ...
Show details for specified connections. By default, both static configuration
and active connection data are displayed. It is possible to filter the output
using global '--fields' option. Refer to the manual page for more information.
When --active option is specified, only the active profiles are taken into
account. Use global --show-secrets option to reveal associated secrets as well.
Usage: nmcli connection up { ARGUMENTS | help }
ARGUMENTS := [id | uuid | path] <ID> [ifname <ifname>] [ap <BSSID>] [nsp <name>] [passwd-file <file with passwords>]
Activate a connection on a device. The profile to activate is identified by its
name, UUID or D-Bus path.
ARGUMENTS := ifname <ifname> [ap <BSSID>] [nsp <name>] [passwd-file <file with passwords>]
Activate a device with a connection. The connection profile is selected
automatically by NetworkManager.
ifname - specifies the device to active the connection on
ap - specifies AP to connect to (only valid for Wi-Fi)
nsp - specifies NSP to connect to (only valid for WiMAX)
passwd-file - file with password(s) required to activate the connection
Usage: nmcli connection { COMMAND | help }
COMMAND := { show | up | down | add | modify | clone | edit | delete | monitor | reload | load | import | export }
show [--active] [--order <order spec>]
show [--active] [id | uuid | path | apath] <ID> ...
up [[id | uuid | path] <ID>] [ifname <ifname>] [ap <BSSID>] [passwd-file <file with passwords>]
down [id | uuid | path | apath] <ID> ...
add COMMON_OPTIONS TYPE_SPECIFIC_OPTIONS SLAVE_OPTIONS IP_OPTIONS [-- ([+|-]<setting>.<property> <value>)+]
modify [--temporary] [id | uuid | path] <ID> ([+|-]<setting>.<property> <value>)+
clone [--temporary] [id | uuid | path ] <ID> <new name>
edit [id | uuid | path] <ID>
edit [type <new_con_type>] [con-name <new_con_name>]
delete [id | uuid | path] <ID>
monitor [id | uuid | path] <ID> ...
reload
load <filename> [ <filename>... ]
import [--temporary] type <type> file <file to import>
export [id | uuid | path] <ID> [<output file>]
Usage: nmcli device connect { ARGUMENTS | help }
ARGUMENTS := <ifname>
Connect the device.
NetworkManager will try to find a suitable connection that will be activated.
It will also consider connections that are not set to auto-connect.
Usage: nmcli device delete { ARGUMENTS | help }
ARGUMENTS := <ifname> ...
Delete the software devices.
The command removes the interfaces. It only works for software devices
(like bonds, bridges, etc.). Hardware devices cannot be deleted by the
command.
Usage: nmcli device disconnect { ARGUMENTS | help }
ARGUMENTS := <ifname> ...
Disconnect devices.
The command disconnects the device and prevents it from auto-activating
further connections without user/manual intervention.
Usage: nmcli device lldp { ARGUMENTS | help }
ARGUMENTS := [list [ifname <ifname>]]
List neighboring devices discovered through LLDP. The 'ifname' option can be
used to list neighbors for a particular interface.
Usage: nmcli device modify { ARGUMENTS | --help }
ARGUMENTS := <ifname> ([+|-]<setting>.<property> <value>)+
Modify one or more properties currently active on the device without modifying
the connection profile. The changes have immediate effect. For multi-valued
properties you can use optional '+' or '-' prefix to the property name.
The '+' sign allows appending items instead of overwriting the whole value.
The '-' sign allows removing selected items instead of the whole value.
Examples:
nmcli dev mod em1 ipv4.method manual ipv4.addr "192.168.1.2/24, 10.10.1.5/8"
nmcli dev mod em1 +ipv4.dns 8.8.4.4
nmcli dev mod em1 -ipv4.dns 1
nmcli dev mod em1 -ipv6.addr "abbe::cafe/56"
Usage: nmcli device monitor { ARGUMENTS | help }
ARGUMENTS := [<ifname>] ...
Monitor device activity.
This command prints a line whenever the specified devices change state.
Monitors all devices in case no interface is specified.
Usage: nmcli device reapply { ARGUMENTS | help }
ARGUMENTS := <ifname>
Attempts to update device with changes to the currently active connection
made since it was last applied.
Usage: nmcli device set { ARGUMENTS | help }
ARGUMENTS := DEVICE { PROPERTY [ PROPERTY ... ] }
DEVICE := [ifname] <ifname>
PROPERTY := { autoconnect { yes | no } |
{ managed { yes | no }
Modify device properties.
Usage: nmcli device show { ARGUMENTS | help }
ARGUMENTS := [<ifname>]
Show details of device(s).
The command lists details for all devices, or for a given device.
Usage: nmcli device status { help }
Show status for all devices.
By default, the following columns are shown:
DEVICE - interface name
TYPE - device type
STATE - device state
CONNECTION - connection activated on device (if any)
Displayed columns can be changed using '--fields' global option. 'status' is
the default command, which means 'nmcli device' calls 'nmcli device status'.
Usage: nmcli device wifi { ARGUMENTS | help }
Perform operation on Wi-Fi devices.
ARGUMENTS := [list [ifname <ifname>] [bssid <BSSID>] [--rescan yes|no|auto]]
List available Wi-Fi access points. The 'ifname' and 'bssid' options can be
used to list APs for a particular interface, or with a specific BSSID. The
--rescan flag tells whether a new Wi-Fi scan should be triggered.
ARGUMENTS := connect <(B)SSID> [password <password>] [wep-key-type key|phrase] [ifname <ifname>]
[bssid <BSSID>] [name <name>] [private yes|no] [hidden yes|no]
Connect to a Wi-Fi network specified by SSID or BSSID. The command finds a
matching connection or creates one and then activates it on a device. This
is a command-line counterpart of clicking an SSID in a GUI client. If a
connection for the network already exists, it is possible to bring up the
existing profile as follows: nmcli con up id <name>. Note that only open,
WEP and WPA-PSK networks are supported if no previous connection exists.
It is also assumed that IP configuration is obtained via DHCP.
ARGUMENTS := hotspot [ifname <ifname>] [con-name <name>] [ssid <SSID>]
[band a|bg] [channel <channel>] [password <password>]
Create a Wi-Fi hotspot. Use 'connection down' or 'device disconnect'
to stop the hotspot.
Parameters of the hotspot can be influenced by the optional parameters:
ifname - Wi-Fi device to use
con-name - name of the created hotspot connection profile
ssid - SSID of the hotspot
band - Wi-Fi band to use
channel - Wi-Fi channel to use
password - password to use for the hotspot
ARGUMENTS := rescan [ifname <ifname>] [[ssid <SSID to scan>] ...]
Request that NetworkManager immediately re-scan for available access points.
NetworkManager scans Wi-Fi networks periodically, but in some cases it might
be useful to start scanning manually. 'ssid' allows scanning for a specific
SSID, which is useful for APs with hidden SSIDs. More 'ssid' parameters can be
given. Note that this command does not show the APs,
use 'nmcli device wifi list' for that.
Usage: nmcli device { COMMAND | help }
COMMAND := { status | show | set | connect | reapply | modify | disconnect | delete | monitor | wifi | lldp }
status
show [<ifname>]
set [ifname] <ifname> [autoconnect yes|no] [managed yes|no]
connect <ifname>
reapply <ifname>
modify <ifname> ([+|-]<setting>.<property> <value>)+
disconnect <ifname> ...
delete <ifname> ...
monitor <ifname> ...
wifi [list [ifname <ifname>] [bssid <BSSID>] [--rescan yes|no|auto]]
wifi connect <(B)SSID> [password <password>] [wep-key-type key|phrase] [ifname <ifname>]
[bssid <BSSID>] [name <name>] [private yes|no] [hidden yes|no]
wifi hotspot [ifname <ifname>] [con-name <name>] [ssid <SSID>] [band a|bg] [channel <channel>] [password <password>]
wifi rescan [ifname <ifname>] [[ssid <SSID to scan>] ...]
lldp [list [ifname <ifname>]]
Usage: nmcli general hostname { ARGUMENTS | help }
ARGUMENTS := [<hostname>]
Get or change persistent system hostname.
With no arguments, this prints currently configured hostname. When you pass
a hostname, NetworkManager will set it as the new persistent system hostname.
Usage: nmcli general logging { ARGUMENTS | help }
ARGUMENTS := [level <log level>] [domains <log domains>]
Get or change NetworkManager logging level and domains.
Without any argument current logging level and domains are shown. In order to
change logging state, provide level and/or domain. Please refer to the man page
for the list of possible logging domains.
Usage: nmcli general permissions { help }
Show caller permissions for authenticated operations.
Usage: nmcli general status { help }
Show overall status of NetworkManager.
'status' is the default action, which means 'nmcli gen' calls 'nmcli gen status'
Usage: nmcli general { COMMAND | help }
COMMAND := { status | hostname | permissions | logging }
status
hostname [<hostname>]
permissions
logging [level <log level>] [domains <log domains>]
Usage: nmcli monitor
Monitor NetworkManager changes.
Prints a line whenever a change occurs in NetworkManager
Usage: nmcli networking connectivity { ARGUMENTS | help }
ARGUMENTS := [check]
Get network connectivity state.
The optional 'check' argument makes NetworkManager re-check the connectivity.
Usage: nmcli networking off { help }
Switch networking off.
Usage: nmcli networking on { help }
Switch networking on.
Usage: nmcli networking { COMMAND | help }
COMMAND := { [ on | off | connectivity ] }
on
off
connectivity [check]
Usage: nmcli radio all { ARGUMENTS | help }
ARGUMENTS := [on | off]
Get status of all radio switches, or turn them on/off.
Usage: nmcli radio wifi { ARGUMENTS | help }
ARGUMENTS := [on | off]
Get status of Wi-Fi radio switch, or turn it on/off.
Usage: nmcli radio wwan { ARGUMENTS | help }
ARGUMENTS := [on | off]
Get status of mobile broadband radio switch, or turn it on/off.
Usage: nmcli radio { COMMAND | help }
COMMAND := { all | wifi | wwan }
all | wifi | wwan [ on | off ]
Use "nmcli device show" to get complete information about known devices and
"nmcli connection show" to get an overview on active connection profiles.
Consult nmcli(1) and nmcli-examples(7) manual pages for complete usage details.
Use TCP header compression Use an IPv6 temporary privacy address Use point-to-point encryption (MPPE) Use stateful MPPE User ID [none] User settings Username Username [none] Username used to authenticate with the ADSL service. Username used to authenticate with the PPPoE service. VCI of ADSL connection VF with index %u, but the total number of VFs is %u VFs %d and %d are not sorted by ascending index VLAN VLAN ID (<0-4094>) VLAN connection VLAN connection %d VLAN flags (<0-7>) [none] VLAN id VLAN parent device or connection UUID VPI of ADSL connection VPN VPN connected VPN connecting VPN connecting (getting IP configuration) VPN connecting (need authentication) VPN connecting (prepare) VPN connection VPN connection %d VPN connection (name, UUID, or path): VPN connection failed VPN disconnected VPN password required VTI VTI6 VXLAN VXLAN ID VXLAN connection Valid connection types: %s
Verify connection: %s
Verify setting '%s': %s
Veth WEP 128-bit Passphrase WEP 40/128-bit Key (Hex or ASCII) WEP index WEP key index1 (Default) WEP key index2 WEP key index3 WEP key index4 WEP key index set to '%d' WEP key is guessed to be of '%s' WI-FI WPA & WPA2 Enterprise WPA & WPA2 Personal WPA Ad-Hoc authentication requires 'none' pairwise cipher WPA Ad-Hoc authentication requires 'wpa' protocol WPA Ad-Hoc authentication requires an Ad-Hoc mode AP WPA Ad-Hoc disabled due to kernel bugs WPA Ad-Hoc requires 'tkip' group cipher WPA authentication is incompatible with Shared Key authentication WPA authentication is incompatible with non-EAP (original) LEAP or Dynamic WEP WPA-EAP authentication requires an 802.1x setting WPA-EAP requires 'open' authentication WPA-PSK authentication is incompatible with 802.1x WPA-PSK requires 'open' authentication WPAN connection WPAN settings WPS is required WWAN radio switch Wait for NetworkManager startup instead of a connection Waits for NetworkManager to finish activating startup network connections. Wake-on-LAN mode 'default' and 'ignore' are exclusive flags Wake-on-LAN password can only be used with magic packet mode Wake-on-WLAN mode 'default' and 'ignore' are exclusive flags Wake-on-WLAN trying to set unknown flag Warning: %s
Warning: %s is not an UUID of any existing connection profile
Warning: %s.%s set to '%s', but it might be ignored in infrastructure mode
Warning: '%s' should be SSID for hidden APs; but it looks like a BSSID.
Warning: 'file' already specified, ignoring extra one.
Warning: 'type' already specified, ignoring extra one.
Warning: There is another connection with the name '%1$s'. Reference the connection by its uuid '%2$s'
Warning: There are %3$u other connections with the name '%1$s'. Reference the connection by its uuid '%2$s'
Warning: argument '%s' is duplicated.
Warning: editing existing connection '%s'; 'con-name' argument is ignored
Warning: editing existing connection '%s'; 'type' argument is ignored
Warning: master='%s' doesn't refer to any existing profile.
Warning: password for '%s' not given in 'passwd-file' and nmcli cannot ask without '--ask' option.
Warning: polkit agent initialization failed: %s
Warning: setting %s.%s requires removing ipv4 and ipv6 settings
When "method" is set to "auto" and this property to TRUE, automatically configured nameservers and search domains are ignored and only nameservers and search domains specified in the "dns" and "dns-search" properties, if any, are used. When "method" is set to "auto" and this property to TRUE, automatically configured routes are ignored and only routes specified in the "routes" property, if any, are used. When TRUE, enforce auto-negotiation of speed and duplex mode. If "speed" and "duplex" properties are both specified, only that single mode will be advertised and accepted during the link auto-negotiation process: this works only for BASE-T 802.3 specifications and is useful for enforcing gigabits modes, as in these cases link negotiation is mandatory. When FALSE, "speed" and "duplex" properties should be both set or link configuration will be skipped. When TRUE, only connections to the home network will be allowed. Connections to roaming networks will not be made. When TRUE, overrides the "ca-path" and "phase2-ca-path" properties using the system CA directory specified at configure time with the --system-ca-path switch. The certificates in this directory are added to the verification chain in addition to any certificates specified by the "ca-cert" and "phase2-ca-cert" properties. If the path provided with --system-ca-path is rather a file name (bundle of trusted CA certificates), it overrides "ca-cert" and "phase2-ca-cert" properties instead (sets ca_cert/ca_cert2 options for wpa_supplicant). When WEP is used (ie, key-mgmt = "none" or "ieee8021x") indicate the 802.11 authentication algorithm required by the AP here. One of "open" for Open System, "shared" for Shared Key, or "leap" for Cisco LEAP. When using Cisco LEAP (ie, key-mgmt = "ieee8021x" and auth-alg = "leap") the "leap-username" and "leap-password" properties must be specified. When a value grater than 0 is set, configures the device to use the specified speed. If "auto-negotiate" is "yes" the specified speed will be the only one advertised during link negotiation: this works only for BASE-T 802.3 specifications and is useful for enforcing gigabit speeds, as in this case link negotiation is mandatory. If the value is unset (0, the default), the link configuration will be either skipped (if "auto-negotiate" is "no", the default) or will be auto-negotiated (if "auto-negotiate" is "yes") and the local device will advertise all the supported speeds. In Mbit/s, ie 100 == 100Mbit/s. Must be set together with the "duplex" property when non-zero. Before specifying a speed value be sure your device supports it. When a value is set, either "half" or "full", configures the device to use the specified duplex mode. If "auto-negotiate" is "yes" the specified duplex mode will be the only one advertised during link negotiation: this works only for BASE-T 802.3 specifications and is useful for enforcing gigabits modes, as in these cases link negotiation is mandatory. If the value is unset (the default), the link configuration will be either skipped (if "auto-negotiate" is "no", the default) or will be auto-negotiated (if "auto-negotiate" is "yes") and the local device will advertise all the supported duplex modes. Must be set together with the "speed" property if specified. Before specifying a duplex mode be sure your device supports it. When static WEP is used (ie, key-mgmt = "none") and a non-default WEP key index is used by the AP, put that WEP key index here. Valid values are 0 (default key) through 3. Note that some consumer access points (like the Linksys WRT54G) number the keys 1 - 4. Whether DHCPv4 must be successful Whether LLDP is enabled for the connection. Whether Link-Local Multicast Name Resolution (LLMNR) is enabled for the connection. LLMNR is a protocol based on the Domain Name System (DNS) packet format that allows both IPv4 and IPv6 hosts to perform name resolution for hosts on the same local link. The permitted values are: yes: register hostname and resolving for the connection, no: disable LLMNR for the interface, resolve: do not register hostname but allow resolving of LLMNR host names. This feature requires a plugin which supports LLMNR. One such plugin is dns-systemd-resolved. Whether SLAAC must be successful Whether mDNS is enabled for the connection. The permitted values are: yes: register hostname and resolving for the connection, no: disable mDNS for the interface, resolve: do not register hostname but allow resolving of mDNS host names. This feature requires a plugin which supports mDNS. One such plugin is dns-systemd-resolved. Whether or not slaves of this connection should be automatically brought up when NetworkManager activates this connection. This only has a real effect for master connections. The properties "autoconnect", "autoconnect-priority" and "autoconnect-retries" are unrelated to this setting. The permitted values are: 0: leave slave connections untouched, 1: activate all the slave connections with this connection, -1: default. If -1 (default) is set, global connection.autoconnect-slaves is read to determine the real value. If it is default as well, this fallbacks to 0. Whether or not the connection should be automatically connected by NetworkManager when the resources for the connection are available. TRUE to automatically activate the connection, FALSE to require manual intervention to activate the connection. Note that autoconnect is not implemented for VPN profiles. See "secondaries" as an alternative to automatically connect VPN profiles. Whether the connection is metered. When updating this property on a currently activated connection, the change takes effect immediately. Whether the interface should be a MACVTAP. Whether the interface should be put in promiscuous mode. Whether the proxy configuration is for browser only. Whether the transmitted traffic must be encrypted. Whether to automatically add routes for the AllowedIPs ranges of the peers. If TRUE (the default), NetworkManager will automatically add routes in the routing tables according to ipv4.route-table and ipv6.route-table. If FALSE, no such routes are added automatically. In this case, the user may want to configure static routes in ipv4.routes and ipv6.routes, respectively. Whether to autoprobe virtual functions by a compatible driver. If set to NM_TERNARY_TRUE (1), the kernel will try to bind VFs to a compatible driver and if this succeeds a new network interface will be instantiated for each VF. If set to NM_TERNARY_FALSE (0), VFs will not be claimed and no network interfaces will be created for them. When set to NM_TERNARY_DEFAULT (-1), the global default is used; in case the global default is unspecified it is assumed to be NM_TERNARY_TRUE (1). Whether to enable Path MTU Discovery on this tunnel. Whether to manage IPv6 SLAAC Wi-Fi Wi-FiAutomatic Wi-FiClient Wi-Fi P2P Wi-Fi P2P connection Wi-Fi connection Wi-Fi connection %d Wi-Fi network mode; one of "infrastructure", "adhoc" or "ap". If blank, infrastructure is assumed. Wi-Fi radio switch Wi-Fi scan list Wi-Fi securityNone Wi-Fi security settings WiMAX WiMAX NSP name WiMAX connection WireGuard WireGuard VPN secret WireGuard VPN settings WireGuard private-key Wired Wired 802.1X authentication Wired Ethernet Wired connection Wired connection %d Wireless channel to use for the Wi-Fi connection. The device will only join (or create for Ad-Hoc networks) a Wi-Fi network on the specified channel. Because channel numbers overlap between bands, this property also requires the "band" property to be set. With "cloned-mac-address" setting "random" or "stable", by default all bits of the MAC address are scrambled and a locally-administered, unicast MAC address is created. This property allows to specify that certain bits are fixed. Note that the least significant bit of the first MAC address will always be unset to create a unicast MAC address. If the property is NULL, it is eligible to be overwritten by a default connection setting. If the value is still NULL or an empty string, the default is to create a locally-administered, unicast MAC address. If the value contains one MAC address, this address is used as mask. The set bits of the mask are to be filled with the current MAC address of the device, while the unset bits are subject to randomization. Setting "FE:FF:FF:00:00:00" means to preserve the OUI of the current MAC address and only randomize the lower 3 bytes using the "random" or "stable" algorithm. If the value contains one additional MAC address after the mask, this address is used instead of the current MAC address to fill the bits that shall not be randomized. For example, a value of "FE:FF:FF:00:00:00 68:F7:28:00:00:00" will set the OUI of the MAC address to 68:F7:28, while the lower bits are randomized. A value of "02:00:00:00:00:00 00:00:00:00:00:00" will create a fully scrambled globally-administered, burned-in MAC address. If the value contains more than one additional MAC addresses, one of them is chosen randomly. For example, "02:00:00:00:00:00 00:00:00:00:00:00 02:00:00:00:00:00" will create a fully scrambled MAC address, randomly locally or globally administered. Writing to %s failed: %s
XOR You can specify this option more than once. Press <Enter> when you're done.
You may edit the following properties: %s
You may edit the following settings: %s
You may try running 'verify fix' to fix errors.
You must be root to run %s!
[ Type: %s | Name: %s | UUID: %s | Dirty: %s | Temp: %s ]
['%s' setting values]
[NM property description] [nmcli specific description] a connection using '%s' authentication cannot specify WPA ciphers a connection using '%s' authentication cannot specify WPA protocols a connection using '%s' authentication cannot specify a WPA password a connection using '%s' authentication cannot use WPA key management a fixed TTL is allowed only when path MTU discovery is enabled a gateway is incompatible with '%s' access denied action name missing. activate [<ifname>] [/<ap>|<nsp>] :: activate the connection
Activates the connection.
Available options:
<ifname> - device the connection will be activated on
/<ap>|<nsp> - AP (Wi-Fi) or NSP (WiMAX) (prepend with / when <ifname> is not specified)
activated activating add [<value>] :: append new value to the property
This command adds provided <value> to this property, if the property is of a container type. For single-valued properties the property value is replaced (same as 'set').
advertise, agent-owned, asleep attribute is not valid for a IPv4 route attribute is not valid for a IPv6 route auth auto autoconnect back :: go to upper menu level
bandwidth percentages must total 100%% barbar binary data missing bluetooth connection both speed and duplex are required for static link configuration both speed and duplex should have a valid value or both should be unset bytes can not set property: %s can't be simultaneously disabled and enabled can't set property of type '%s' from value of type '%s' cannot detect address family for rule cannot load VPN plugin "%s" due to missing "%s". Missing client plugin? cannot load VPN plugin in '%s': invalid service name cannot load VPN plugin in '%s': missing plugin name cannot load legacy-only VPN plugin "%s" for "%s" cannot load plugin "%s": %s cannot read pac-script from file '%s' cannot read team config from file '%s' cannot set connection.multi-connect for VPN setting cannot set empty "%s" option certificate detected as invalid scheme certificate is invalid: %s certificate or key file '%s' does not exist change :: change current value
Displays current value and allows editing it.
changes will have no effect until '%s' includes 1 (enabled) channel must not be between %d and %d conflicting secret flags conflicting value of mac-address-randomization and cloned-mac-address connected connected (local only) connected (site only) connecting connecting (checking IP connectivity) connecting (configuring) connecting (getting IP configuration) connecting (need authentication) connecting (prepare) connecting (starting secondary connections) connection connection available connection does not match access point connection does not match device connection failed connection id fallback%s %u connection type '%s' is not valid connections available construct property "%s" for object '%s' can't be set after construction data missing deactivated deactivating default deprecated semicolon at the end of value %s: '%s' describe :: describe property
Shows property description. You can consult nm-settings(5) manual page to see all NM settings and properties.
describe [<setting>.<prop>] :: describe property
Shows property description. You can consult nm-settings(5) manual page to see all NM settings and properties.
device '%s' not compatible with connection '%s' device '%s' not compatible with connection '%s': disabled disconnected disconnecting don't know how to get the property value duplicate VF index %u duplicate bridge VLAN vid %u duplicate key "%s" duplicate key %s duplicate property duplicate setting name element invalid empty text does not describe a rule enabled enabled, error loading setting value: %s failed stat file %s: %s failed to load VPN plugin "%s": %s failed to load nm_vpn_editor_plugin_factory() from %s (%s) failed to read passwd-file '%s': %s failed to set bond option "%s" failed to set property: %s failure to select field field '%s' has to be alone file '%s' contains non-valid utf-8 file permissions for %s filename has invalid format (%s) filename must be an absolute path (%s) flags are invalid flags invalid flags invalid - disabled full fw missing garbage at the end of value %s: '%s' gateway cannot be set if there are no addresses configured gateway is invalid goto <setting>[.<prop>] | <prop> :: enter setting/property for editing
This command enters into a setting or property for editing it.
Examples: nmcli> goto connection
nmcli connection> goto secondaries
nmcli> goto ipv4.addresses
has from/src but the prefix-length is zero has to match '%s' property for PKCS#12 has to/dst but the prefix-length is zero help/? [<command>] :: help for nmcli commands
help/? [<command>] :: help for the nmcli commands
host.domain.org hw iface ignoring invalid %s address: %s ignoring invalid %s route: %s ignoring invalid DNS server IPv%c address '%s' ignoring invalid MAC address ignoring invalid SSID ignoring invalid byte element '%d' (not between 0 and 255 inclusive) ignoring invalid gateway '%s' for %s route ignoring invalid number '%s' ignoring invalid raw password ignoring invalid team configuration: %s ignoring missing number incorrect item '%s' in '--order' option incorrect string '%s' of '--order' option interface name contains an invalid character interface name is longer than 15 characters interface name is reserved interface name is too short interface name of software infiniband device must be '%s' or unset (instead it is '%s') invalid " invalid "from" part invalid "to" part invalid '%s' or its value '%s' invalid DUID invalid IP address "%s" for allowed-ip of peer invalid IP address: %s invalid IPv%c address '%s' invalid JSON at position %d (%s) invalid PKCS#11 URI "%s" invalid VF %u: %s invalid action invalid action: invalid address family invalid attribute type '%s' invalid auth flags invalid boolean value '%s' for attribute '%s' invalid certificate format invalid destination port range invalid endpoint for peer invalid field '%s%s%s%s%s'; %s%s%s invalid field '%s%s%s'; allowed fields: [%s] invalid field '%s%s%s'; no such field invalid field '%s'; allowed fields: %s and %s, or %s,%s invalid file owner %d for %s invalid from/src invalid gateway address '%s' invalid handle: '%s' invalid iifname invalid key "%s" invalid key "%s": %s invalid key '%s.%s' invalid key/cert value invalid key/cert value data:;base64, is not base64 invalid key/cert value data:;base64,file:// invalid key/cert value is not a valid blob invalid key/cert value path "%s" invalid oifname invalid option '%s' or its value '%s' invalid option '%s', use a combination of [%s] invalid option '%s', use one of [%s] invalid parity value '%s' invalid peer public key in section '%s' invalid peer secrets invalid permission "%s" invalid phase2 private key invalid port %d invalid prefix %s invalid prefix '%s'; <1-%d> allowed invalid prefix length for %s '%s', defaulting to %d invalid prefix length for from/src invalid prefix length for to/dst invalid preshared-key for peer invalid preshared-key-flags for peer invalid priority invalid priority map '%s' invalid private key invalid proxy method invalid public-key for peer invalid qdisc: %s invalid route: %s. %s invalid runner "%s" invalid secret '%s' at %s:%zu invalid setting name '%s' invalid setting name in 'password' entry '%s' invalid setting: %s invalid source port range invalid tfilter: %s invalid to/dst invalid uint32 value '%s' for attribute '%s' invalid uint8 value '%s' for attribute '%s' invalid value invalid value for "%s" invalid value for "%s": %s invalid value for '%s' at %s:%zu invalid variant type '%s' for "%s" ip4 default ip6 default is not a JSON object is not a valid MAC address key '%s.%s' has invalid allowed-ips key '%s.%s' is not a integer in range 0 to 2^32 key '%s.%s' is not a valid 256 bit key in base64 encoding key '%s.%s' is not a valid endpoint key '%s.%s' is not a valid secret flag key '%s.%s' is not boolean key cannot contain ".." key contains invalid characters key is too long key must be 32 bytes base64 encoded key must be UTF8 key requires a '.' for a namespace kind is missing libtool archives are not supported (%s) limited long device name%s %s macvlan connection mandatory option '%s' is missing master maximum number of user data entries reached maximum number of user data entries reached (%u instead of %u) metered value %d is not valid method "%s" is not supported for WireGuard millisecondsms missing " missing "plugin" setting missing argument for "%s" missing colon in 'password' entry '%s' missing dot in 'password' entry '%s' missing filename missing filename to load VPN plugin info missing from/src for a non zero prefix-length missing key missing key-value separator '%c' after '%s' missing link watcher name missing name for VPN plugin info missing name, try one of [%s] missing prefix length for %s '%s', defaulting to %d missing public-key for peer missing service for VPN plugin info missing setting missing source address missing table missing target host missing to/dst for a non zero prefix-length mtu mtu can be at most %u but it is %u multiple addresses are not allowed for '%s=%s' must be either psk (0) or eap (1) must contain 8 comma-separated numbers name neither a valid connection nor device given never new hostname nm-iface-helper is a small, standalone process that manages a single network interface. nmcli [<conf-option> <value>] :: nmcli configuration
Configures nmcli. The following options are available:
status-line yes | no [default: no]
save-confirmation yes | no [default: yes]
show-secrets yes | no [default: no]
prompt-color <color> | <0-8> [default: 0]
%s
Examples: nmcli> nmcli status-line yes
nmcli> nmcli save-confirmation no
nmcli> nmcli prompt-color 3
nmcli can accepts both direct JSON configuration data and a file name containing the configuration. In the latter case the file is read and the contents is put into this property.
Examples: set team.config { "device": "team0", "runner": {"name": "roundrobin"}, "ports": {"eth1": {}, "eth2": {}} }
set team.config /etc/my-team.conf
nmcli successfully registered as a NetworkManager's secret agent.
nmcli successfully registered as a polkit agent.
nmcli tool, version %s
no no (guessed) no active connection on device '%s' no active connection or device no device found for connection '%s' non promiscuous operation is allowed only in passthru mode non-existing peer '%s' none not a file (%s) not a secret property not a valid ethernet MAC address #%u at position %lld not a valid ethernet MAC address for mask at position %lld not a valid hex-string not a valid interface name not a valid private key not required, not saved, not valid utf-8 object class '%s' has no property named '%s' off offload feature has invalid variant type on only makes sense with EUI64 address generation mode only one VLAN can be the PVID only one of '%s' and '%s' can be set only valid for psk mode openconnect failed with signal %d openconnect failed with status %d openconnect will be run to authenticate.
It will return to nmtui when completed. page must be between %d and %d page must be defined along with a channel parent handle missing parent not specified. password is not supported when certificate is not on a PKCS#11 token path is not absolute (%s) peer #%u has invalid allowed-ips setting peer #%u has invalid endpoint peer #%u has invalid public-key peer #%u has no public-key peer #%u is invalid: %s peer #%u lacks public-key peer '%s' is invalid: %s plugin missing port portal preparing print [all] :: print setting or connection values
Shows current property or the whole connection.
Example: nmcli ipv4> print all
print [property|setting|connection] :: print property (setting, connection) value(s)
Shows property value. Providing an argument you can also display values for the whole setting or connection.
property '%s' of object class '%s' is not writable property cannot be set when dhcp-hostname is also set property invalid property invalid (not enabled) property is empty property is empty or wrong size property is invalid property is missing property is not specified property is not specified and neither is '%s:%s' property missing property must contain only digits property should be TRUE when method is set to disabled property should be TRUE when method is set to ignore property type should be set to '%s' property value '%s' is empty or too long (>64) quit :: exit nmcli
This command exits nmcli. When the connection being edited is not saved, the user is asked to confirm the action.
reject %s remove <setting>[.<prop>] :: remove setting or reset property value
This command removes an entire setting from the connection, or if a property
is given, resets that property to the default value.
Examples: nmcli> remove wifi-sec
nmcli> remove eth.mtu
remove [<value>|<index>|<option name>] :: delete the value
Removes the property value. For single-valued properties, this sets the
property back to its default value. For container-type properties, this removes
all the values of that property, or you can specify an argument to remove just
a single item or option. The argument is either a value or index of the item to
remove, or an option name (for properties with named options).
Examples: nmcli ipv4.dns> remove 8.8.8.8
nmcli ipv4.dns> remove 2
nmcli bond.options> remove downdelay
requires '%s' or '%s' setting requires presence of '%s' setting in the connection requires setting '%s' property rule #%u is invalid: %s rule is invalid: %s running s390 network device type; one of "qeth", "lcs", or "ctc", representing the different types of virtual network devices available on s390 systems. save [persistent|temporary] :: save the connection
Sends the connection profile to NetworkManager that either will save it
persistently, or will only keep it in memory. 'save' without an argument
means 'save persistent'.
Note that once you save the profile persistently those settings are saved
across reboot or restart. Subsequent changes can also be temporary or
persistent, but any temporary changes will not persist across reboot or
restart. If you want to fully remove the persistent connection, the connection
profile must be deleted.
seconds secret flags must not be "not-required" secret flags property not found secret is not of correct type secret not found secret value was empty secret was empty set [<setting>.<prop> <value>] :: set property value
This command sets property value.
Example: nmcli> set con.id My connection
set [<value>] :: set new value
This command sets provided <value> to this property
setting contained a secret with an empty name setting is required for non-slave connections setting not allowed in slave connection setting not found setting required for connection of type '%s' setting this property requires non-zero '%s' property slave-type '%s' requires a '%s' setting in the connection some flags are invalid for the select mode: %s source-host '%s' contains invalid characters started starting sum not 100% sw target-host '%s' contains invalid characters team config exceeds size limit team config file '%s' contains non-valid utf-8 team configuration must be a JSON object teamd control failed the key contains non-hexadecimal characters the key is empty the key must be %d characters the mask can't contain bits 0 (STP), 1 (MAC) or 2 (LACP) the metric ('%s') must be before attributes the next hop ('%s') must be first the plugin does not support export capability the plugin does not support import capability the property can't be changed the script is not valid utf8 the script is too large the script lacks FindProxyForURL function the tag id must be in range 0-4094 but is %u the value '%s' is not a valid UUID the vlan id must be in range 0-4094 but is %u there are duplicate TC filters there are duplicate TC qdiscs there exists a conflicting plugin (%s) that has the same %s.%s value there exists a conflicting plugin with the same name (%s) this property cannot be empty for '%s=%s' this property is not allowed for '%s=%s' this property is not allowed for method none token is not in canonical form too many arguments. Please only specify a private key file and optionally a password tunnel keys can only be specified for GRE tunnels unable to set property '%s' of type '%s' from value of type '%s' unavailable unexpected character '%c' for %s: '%s' (position %td) unexpected character '%c' for address %s: '%s' (position %td) unexpected character '%c' in prefix length for %s: '%s' (position %td) unknown unknown VPN plugin "%s" unknown attribute unknown attribute '%s' unknown connection '%s' unknown device '%s'. unknown error initializing plugin %s unknown ethtool option '%s' unknown link watcher "%s" unknown property unknown secret flags unknown setting name unmanaged unrecognized line at %s:%zu unsupported action option: '%s'. unsupported attribute '%s' of type '%s' unsupported key "%s" unsupported offload feature unsupported qdisc option: '%s'. unsupported secret flags unsupported tfilter option: '%s'. unterminated escape sequence use 'goto <setting>' first, or 'describe <setting>.<property>'
use 'goto <setting>' first, or 'set <setting>.<property>'
value "%s" of type '%s' is invalid or out of range for property '%s' of type '%s' value %d is not valid value '%d' is out of range <%d-%d> value cannot be interpreted as integer value is NULL value is empty value is missing value is not a valid token value is not an integer in range [%lld, %lld] value is not valid UTF8 value is too large verify [all | fix] :: verify setting or connection validity
Verifies whether the setting or connection is valid and can be saved later.
It indicates invalid values on error. Some errors may be fixed automatically
by 'fix' option.
Examples: nmcli> verify
nmcli> verify fix
nmcli bond> verify
vlan setting should have a ethernet setting as well vlanid is out of range [-1, 4094] willing, wired setting not allowed for mode %s wrong type; should be a list of strings. yes yes (guessed) Project-Id-Version: PACKAGE VERSION
Report-Msgid-Bugs-To:
POT-Creation-Date: 2020-04-27 09:44+0200
PO-Revision-Date: 2019-05-23 03:13+0000
Last-Translator: tfu <tfu@redhat.com>
Language-Team: Chinese (China) <i18n-zh@googlegroups.com>
Language: zh_Hans
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Plural-Forms: nplurals=1; plural=0;
X-Generator: Zanata 4.6.2
# 由 NetworkManger 创建
# 合并自 %s
%d（密钥） %d（密码） %d（未知） %d 大于本地端口最大值 %d %d。DNS 服务器地址无效 %d。IP 地址有无效类型的 "label" 属性 %d。IP 地址有无效标签 "%s" %d。IP 地址无效 %d。IPv4 地址前缀无效 %d。IPv4 地址无效 %d。IPv6 地址前缀无效 %d。IPv6 地址无效 %d。路由不能是默认路由 %d。路由前缀无效 %d。路由无效 %lld（%s） %lld — %s %s（%s） %s (%s) 已克隆为 %s (%s)。
%s 网络 %s VPN 连接 缺少 %s 参数 %s 已在运行中（pid %ld）
%s 不兼容静态 WEP 密钥 %s 超出了范围 [0, %d] %s。请使用 --help 查看有效选项列表。
%s：连接配置集已改动
%s：连接配置集已创建
%s：连接配置集已移除
%s：设备已创建
%s：设备已移除
%s：不要重试加载之前已失败的插件 %s：正使用连接 "%s"
%u MHz %u Mb/s %u Mbit/s %u. 规则带有错误的地址家族 %u. 规则无效：%s "%d" 不是有效的信道 "%d" 是无效的隧道模式 '%d' 超出了有效范围 <128-16384> '%d' 值超出了 范围 <0-3> "%ld" 不是有效的信道 "%s" 和 "%s" 不能有不同的值 "%s" 只能与 "%s=%s"（WEP）共用 '%s' 只能用于 'wpa-eap'、'wpa-psk' 或 'sae' 密钥管理 "%s" 连接需要 "%s" 或者 "%s" 设置 "%s" 连接需要 "%s" 设置 "%s" 连接必须从属于 "%s"，而不是 "%s" "%s" 连接需要此属性中的 "%s" "%s" 包含无效字符（请使用 [A-Za-z._-]） "%s" 没有包含有效的 PAC 脚本 "%s" 没有包含有效的组合（team）配置 "%s" 必须是单独的 "%s" 不明确（%s） "%s" 不明确：%s "%s" 不是 UUID 或接口名称 "%s" 不是 VPN 连接配置集 "%s" 不是任何现有配置集的名称 "%s" 不是数字 "%s" 不是有效的 DCB 标记 "%s" 不是有效的以太网 MAC "%s" 不是有效的以太网端口值 "%s" 不是有效的 FQDN "%s" 不是有效的 IBoIP P_Key "%s" 不是有效的 IP 地址 "%s" 不是有效的 IP%c 地址 "%s" 不是有效的 IPv%c 地址 "%s" 不是有效的 IPv4 地址 "%s" 不是 "%s" 选项的有效 IPv4 地址 "%s" 不是有效的 IPv6 地址 "%s" 不是有效的 MAC 地址 "%s"不是有效的 UUID "%s" 不是有效的 Wi-Fi 模式 "%s" 不是有效频段 "%s" 不是有效的信道 '%s' 不是一个有效的 channel; 使用 <1-13> "%s"不是有效的双工值 "%s" 不是有效的处理模块。 "%s" 不是有效十六进制字符 "%s" 不是有效的接口名称 "%s" 不是 "%s" 选项的有效接口名 "%s" 不是有效的接口类型 "%s" 不是有效的种类 "%s" 不是有效的数字 "%s" 不是有效的数字（或超出范围） "%s" 不是有效的隧道密钥 "%s" 不是 "%s" 的有效取值 "%s" 不是该属性的有效取值 "%s" 在 bond_mode 里不允许 "%s" 在 fail_mode 里不允许 "%s" 在 lacp 里不允许 "%s" 在 vlan_mode 里不允许 "%s" 和 "%s" 类型不兼容，请修改或删除密钥。 "%s" 无效 "%s" 不是有效的 WEP 密钥（它应该是 5 或 13 个 ASCII 字符） "%s" 不是有效的 WPA PSK "%s" 对 "%s" 选项无效：%s "%s" 不是有效的主连接；使用接口名或连接的 UUID "%s" 无效；应提供两至三个字符串 "%s" 无效；请使用 "on"、"off" 或 "ignore" '%s' 无效; 使用 <option>=<value> "%s" 无效，请使用 [%s] 或 [%s] "%s" 无效，请使用 [%s]、[%s] 或 [%s] "%s" 现在是主连接
'%s' 超出范围 [% "%s" 超出范围 [0, %u] "%s" 长度无效（应为 5 位或 6 位数） "%s" 不是 0 和 %u（包括）之间的数字 "%s" 不是 0 和 %u（包括）之间的数字或是 %u "%s" 不在 [%s] 中 "%s" 和 %s "%s" 不兼容，请先修改密钥或设置正确的 %s。 "%s"选项为空 "%s" 选项在 "%s" 模式里无效 "%s" 选项只能在 "%s=%s" 中使用 "%s" 选项只在 "%s" 模式里有效 "%s" 选项需要设置 "%s" 选项 "%s" 选项应该为字符串 "%s" 需要设置 "%s" 属性 "%s" 安全需要 "%s" 设置存在 "%s" 安全需要 "%s=%s" 意外的 "%s"：已指定上级。 "%s" 值与 "%s=%s" 不匹配 "%s"：无效的组 ID "%s"：无效的用户 ID "%s::%s" 不是有效的属性名；"%s" 不是 GObject 子类型 "%s=%s" 与 "%s > 0" 不兼容 "%s=%s" 不是 "%s" 的有效配置 "%u" 标记无效；请使用 %s 的组合 "%u"：无效模式 缺少 "--order" 参数 （%s）：无效的 DHCP 客户端 ID %s
（%s）：无效的 IID %s
（没有自定义路由） （还未支持动态 WEP...） （还未支持 WPA 企业...） （默认） （无） （未知错误） （未知） ，也不是有效的设置名称 ---[ 主菜单 ]---
goto [<设置> | <属性>] :: 转到设置或属性
remove <设置>[.<属性>] | <属性> :: 移除设置或重置属性值
set [<设置>.<属性> <值>] :: 设置属性值
describe [<设置>.<属性>] :: 描述属性
print [all | <设置>[.<属性>]] :: 输出连接
verify [all | fix] :: 验证连接
save [persistent|temporary] :: 保存连接
activate [<接口名>] [/<ap>|<nsp>] :: 激活连接
back :: 转到上层（返回）
help/? [<命令>] :: 输出此帮助
nmcli <配置选项> <值> :: nmcli configuration
quit :: 退出 nmcli
---[ 属性菜单 ]---
set [<值>] :: 设置新值
add [<值>] :: 添加新选项到属性
change :: 更改当前值
remove [<目录> | <选项>] :: 删除该值
describe :: 描述属性
print [setting | connection] :: 输出（设置/连接）值
back :: 转到上一级
help/? [<命令>] :: 输出该帮助或命令描述
quit :: 退出 nmcli
0 0（无） 0（禁用） 0（无） 1024 6LOWPAN 连接 6LOWPAN 设置 6LoWPAN 802-1x 设置 网络的 802.11 频段。一个 "a" 代表 5GHz 802.11a 或 "bg" 代表 2.4GHz 802.11。这将锁定关联的 Wi-Fi 网络到特定的频段，比如指定了 "a"，设备就不会关联在 2.4GHz 内的相同网络，不管网络设置是否兼容。此设置取决于具体驱动的功能，且可能不是全部的驱动都有效。 802.1X 请求方配置失败 802.1X 请求方已断开连接 802.1X 请求方失败 802.1X 请求方验证时间过长 802.1x 设置要求 "wpa-eap" 密钥管理 802.3ad <invisible> <invisible> | %s ===| nmcli 交互式连接编辑器 |=== A (5 GHz) 一个如 "310260" 或 "21601" 的 MCC/MNC 字符串，用来鉴定此连接应用到的指定移动网络运营商。如果给定了，连接将应用到包含给定运营商提供 SIM 卡的 "device-id" 和 "sim-id" 所允许的任何设备。 "%s" 类型的连接不能有 ovs-interface.type "%s" "%s" 类型的连接不能有 ovs-interface.type "system" 有 "%s" 设置的连接必须是 connection.type "ovs-interface" 类型，但现在是 "%s" 有 "%s" 设置的连接必须是 "patch" 接口类型 ，而不是 "%s" 有 "%s" 设置的连接必须有个主连接。 具有 "%s" 设置的连接必须将 slave-type 设置为 "%s"。而它是 "%s" 有 "%s" 设置的连接不能有主连接。 有 "%s" 设置的连接需要明确设定 connection.type ovs-interface.type "%s" 类型的连接缺少设置 "ovs-patch" 连接的依赖关系失败 包含用户数据的键/值对字典。此数据被网络管理器（NetworkManager）忽略且可被用户随意使用。键只支持严格的 ASCII 格式，但是值可以为长度有限的任意 UTF8 字符串。 检测到重复的 IP 地址 用户可读的连接的唯一标识符，如 "工作 Wi-Fi" 或 "运营商 4G"。 检测为 Wi-Fi 网络一部分的 BSSID 列表（每个 BSSID 格式化为如 "00:11:22:33:44:55" 的 MAC 地址）。网络管理器（NetworkManager）会内部追踪先前见过的 BSSID。此属性仅用于读取和显示网络管理器的 BSSID 列表。您对此属性所作的更改不会保留。 组/广播加密算法列表，用来阻止连接到那些不使用列表中算法的 Wi-Fi 网络。为了最好的兼容性，可以让此属性留空。每个列表元素可以为 "wep40"、"wep104"、"tkip" 或 "ccmp" 中的一个。 要匹配的接口名列表。每个元素都为 shell 通配符模式。当元素以感叹号（!）为前缀时，条件反转。当满足下列条件时，视为匹配的候选接口名：(a) 未前插 "!" 的任意元素匹配或不存此类元素；(b) 无前插 "!" 的元素匹配。 成对加密算法列表，用来阻止连接到那些不使用列表中算法的 Wi-Fi 网络。为了最好的兼容性，可以让此属性留空。每个列表元素可以为 "tkip" 或 "ccmp" 中的一个。 Wi-Fi 设备的永久 MAC 地址列表，其地址此连接应该从不应用。每个 MAC 地址应给定为标准的十六进制数字和冒号的表示法（比如 "00:11:22:33:44:55"）。 要转发的组地址掩码。通常，范围在 01:80:C2:00:00:00 到 01:80:C2:00:00:0F 内的组地址根据标准不转发。此属性是个 16 位的掩码，每个对应于一个组地址，组地址范围内的地址必须被转发。掩码不能设定了位 0、1 或 2，因为它们用于 STP、MAC 暂停帧和 LACP。 需要密码来连接到 "%s"。 ADSL 网桥上的 RFC 2684 以太网出现问题 基础连接的次级连接失败 "%s" 设为 "%s" 的从连接不能有个 "%s" 设置 包含 DHCPv6 唯一标识符（DUID）的字符串，用于 dhcp 客户端鉴定它自己到 DHCPv6 服务器（RFC 3315）。DUID 携带在客户端标识符选项中。如果属性为十六进制的字符串（"aa:bb:cc"），它被解读为二进制 DUID 并在客户端标识符选项中以不透明值填充。特殊值 "lease" 将重试连接所属租约文件上次使用的 DUID。如果为找到且 "dhclient" 为配置的 dhcp 客户端，DUID 将在系统范围的 dhclient 租约文件中搜索。如果仍为找到 DUID 或使用了其他 dhcp 客户端，将基于 machine-id 生成全局和永久的 DUID-UUID（RFC 6355）。特殊值 "llt" 和 "ll" 将基于设备的当前 MAC 地址生成 LLT 或 LL 类型的 DUID（参阅 RFC 3315）。为了试着提供稳定的 DUID-LLT，时间字段将包含固定时间戳，用于全局（的所有配置集）且保留到磁盘上。特殊值 "stable-llt"、"stable-ll" 和 "stable-uuid" 将生成相应类型的 DUID，衍生自连接的 stable-id 和每个主机的唯一密钥。因此，"stable-ll" 和 "stable-llt" 的链路层地址将是衍生自稳定 id 的生成地址。"stable-llt" 选项中的 DUID-LLT 时间值将在静态的三年时间跨度中选择（区间的上限与用在 "llt" 中的固定时间戳相同）。当属性未设定时，使用 "ipv6.dhcp-duid" 提供的全局值。如果未提供全局值，认定为默认的 "lease" 值。 发送到 DHCP 服务器的字符串，用以确定 DHCP 服务器可能用于自定义 DHCP 租约和选项的本地机器。当属性值为十六进制字符串时，将其解读为二进制的客户端 ID，这种情况下根据 RFC 2132 章节 9.14 首字节被认为是 "type" 字段而剩下的字节可为一个硬件地址（例如 "01:xx:xx:xx:xx:xx:xx" 中 1 是以太网 ARP 类型而其余的是个 MAC 地址）。如果属性不是十六进制字符串，它被视作非硬件地址客户端 ID 且 "type" 字段被设为 0。支持特殊值 "mac" 和 "perm-mac"，其使用设备的当前或永久 MAC 地址来生成类型为以太网类型 (01) 的客户端标识符。当前这些选项仅适用于以太网类型的链路。支持特殊值 "stable" 基于 stable-id 和每个主机的密钥生成一个类型 0 的客户端标识符（参见 connection.stable-id）。如果未设，使用全局默认值。如果仍未设定，默认值取决于 DHCP 插件。 DHCP 事务的超时时间，以秒计。 身份验证的超时时间。零代表全局默认；如果全局默认未设定，验证超时为 25 秒。 用于连接的全局唯一标识符，例如以 libuuid 生成。它应该在连接创建时分配，并且只要连接仍应用到同个网络就不改变。例如，当 "id" 属性或 NMSettingIP4Config 更改时它不应改变；但当 Wi-Fi SSID、移动宽带网络运营商或 "type" 属性改变时它可能需要重新创建。UUIS 必须为如 "2815492f-7e56-435e-b2e9-246bd7cdc664" 的格式（示例，只包含十六进制和 "-"）。 ADSL ADSL 连接 ADSL 连接协议。可为 "pppoa"、"pppoe" 或 "ipoatm"。 APN ARP ARP 目标 接入点 接入点不支持 802.1x 但设置要求它 接入点不支持 PSK 但设置要求它 接入点未加密但设置指定了安全性 接入点模式是 Ad-Hoc 但设置要求 Infrastructure 安全性 接入点模式是 Infrastructure 但设置要求 Ad-Hoc 安全性 激活 启用连接 激活连接详情 激活失败：%s 热备 活动连接在初始化之前被删除 Ad-Hoc Ad-Hoc 网络 Ad-Hoc 模式和 802.1x 安全性不兼容 Ad-Hoc 模式和 LEAP 安全性不兼容 Ad-Hoc 模式要求 "open" 验证 自适应负载均衡（alb） 自适应传输负载均衡（tlb） 添加 添加... 正在添加新的 "%s" 连接 地址 老化时间 允许 BSD 数据压缩 允许 Deflate 数据压缩 允许控制 Wi-Fi 扫描 允许控制网络连接 允许的验证方法： "%s" 属性允许的值：%s
8 个布尔值组成的数组，其数组索引对应于用户优先级（0～7）而其值指示对应优先级是否应该传输优先级暂停。 8 个布尔值组成的数组，其数组索引对应于用户优先级（0～7）而其值指示优先级是否可以使用分配到它指定组的全部带宽。 8 个无符号整数值组成的数组，其数组索引对应于用户优先级（0～7）而其值指示分配到该组的链路带宽百分比。允许的值为 0～100，且所有值的总和必须为 100%。 8 个无符号整数值组成的数组，其数组索引对应于用户优先级（0～7）而其值指示优先级组 ID。允许的优先级组 ID 值为 0～7，或 15 表示无限制组。 8 个无符号整数值组成的数组，其数组索引对应于用户优先级（0～7）而其值指示优先级可使用的优先级指定组的带宽百分比。属于同个组的所有优先级百分比总和必须为 100%。 8 个无符号整数值组成的数组，其数组索引对应于用户优先级（0～7）而其值指示该优先级映射的流量等级（0～7）。 字符串数组，用于定义给定用户对此连接的访问权。如果此属性为 NULL 或空，允许所有用户访问此连接；否则只允许在此列表中的用户。当此属性非空时，只有当指定用户之一登录到活动会话时，连接被激活。每个条目的形式为 "[类型]:[ID]:[已保留]"；例如 "user:dcbw:blah"。此时，只允许用户 "user" [类型]。其他任何值被忽略并保留为将来使用。[ID] 是此权限引用的用户名，不能包含冒号 ":" 字符。存在的任何 [已保留] 信息都必须被忽略并保留为将来使用。所有的 [类型]、[ID] 和 [已保留] 都必须为有效的 UTF-8。 验证会话已在进行。 检查网络连通用的 http(s) 地址 接口名称和 UUID 是必需的
用于 EAP 验证方法的匿名标识字符串。用作支持不同隧道标识如 EAP-TTLS 的 EAP 类型的未加密标识。 通过 DHCP 请求 IP 时使用的任意广播 DHCP MAC 地址。使用的指定任播地址决定了哪个 DHCP 服务器来回复请求。 您确定要删除连接 "%s" 吗？ 在 man 5 resolv.conf 中描述的 DNS 选项数组。NULL 代表选项未设定并保留默认值。此情况下网络管理器（NetworkManager）将使用默认选项。这跟空列表的属性不同。 DNS 搜索域的数组。域以半角波浪号（"~"）开头的视为 "路由" 域并只用于确定查询必须转发的接口；它们不用于完全未限定的主机名。 DNS 服务器的 IP 地址数组。 IP 地址数组。 IP 路由数组。 TC 排队规则阵列。 TC 流量过滤器阵列。 网桥 VLAN 对象阵列。除了这里指定的 VLAN，网桥还可以带有由 bridge.vlan-default-pvid 属性配置的 default-pvid VLAN。在 nmcli 中，VLAN 列表可以使用以下语法指定： $vid [pvid] [untagged] [, $vid [pvid] [untagged]]... 其中 $vid 是一个 1 到 4094 的 id，或是一个由短横线分隔的 id 所代表的范围。 网桥 VLAN 对象阵列。除了这里指定的 VLAN，网桥还可以带有由 bridge.vlan-default-pvid 属性配置的 default-pvid VLAN。在 nmcli 中，VLAN 列表可以使用以下语法指定： $vid [pvid] [untagged] [, $vid [pvid] [untagged]]... 其中 $vid 是一个 1 到 4094 的 id，或是一个由短横线分隔的 id 所代表的范围。 虚拟功能描述符阵列。每个虚拟功能描述符是个映射属性名到 GVariant 值的字典。"index" 条目为每个虚拟功能的必填项。当表示为字符串时，虚拟功能的格式为："INDEX [ATTR=VALUE[ ATTR=VALUE]...]"。例如："2 mac=00:11:22:33:44:55 spoof-check=true"。"vlans" 属性表示为分号分隔的 VLAN 描述符列表，其中每个描述符的格式为 "ID[.PRIORITY[.PROTO]]"。PROTO 可以是用于 802.1Q（默认）的 "q" 或用于 802.1ad 的 "ad"。 每次都询问这个密码 验证 验证错误：%s
验证消息：%s
无线网络要求身份验证 自动 IP（AutoIP）服务出错 自动 IP（AutoIP）服务失败 自动 IP（AutoIP）服务无法启动 自动 自动（仅 DHCP） 自动连接 有效属性：%s
有效设置：%s
对所有用户有效 B/G (2.4 GHz) 绑定 网桥 网桥端口 BSSID 返回 错误的 '%s' 选项： 连接的基础类型。对于硬件相关的连接，应包含硬件类型特定设置的设置名称（例如 "802-3-ethernet" 或 "802-11-wireless" 或 "bluetooth"，等等），而对于非硬件相关的连接如 VPN 或其他的，应包含该设置类型的设置名称（例如 "vpn" 或 "bridge"，等等）。 蓝牙 蓝牙设备地址 绑定 绑定连接 绑定连接 %d 绑定设备 绑定 arp-interval [0] 绑定 arp-ip-target [none] 绑定 downdelay [0] 绑定 miimon [100] 绑定（Bonding）模式。"active-backup"、"balance-slb" 或 "balance-tcp" 之一。 绑定监控模式 绑定主要接口 [无] 绑定 updelay [0] 网桥 网桥 VLANs %d 和 %d 没有根据生序 vid 进行排序 网桥连接 网桥连接 %d 网桥设备 网桥端口 网桥端口 STP 路径开销 [100] 网桥端口优先级 [32] 广播 仅浏览器 [否] 串口通信的字节宽度。以 "8n1" 中的 8 为例。 CA 证书必须是 X.509 格式 CDMA 连接 CDMA 移动宽带连接 CHAP 无法更改连接类型 取消 无法创建 "%s"：%s 没有 "%s" 无法设置 "%s" 载波/链路已更改 整数文件为空 证书密码 信道 频道 (<default|0-26>) 已位于要加入的 Mesh 网络信道。 检查点在初始化之前被删除 克隆的 MAC 地址 [无] 克隆的 MAC 地址 关闭 %s 失败：%s
配置目录位置 配置文件位置 配置 SLAAC 的 IPv6 隐私扩展，描述于 RFC4941。如果启用，它让内核通过修改 EUI-64 生成临时的 IPv6 地址附加到从 MAC 地址生成的公共地址上。此可以增强隐私性，但另一方面也可能在有些应用程序上引起问题。允许的值有：-1，未知；0：禁用；1：启用（首选公共地址）；2：启用（首选临时地址）。把单个连接的设置设为 "-1" 表示其回落到全局配置 "ipv6.ip6-privacy"。如果全局配置也为配置或设为 "-1"，回落到读取 "/proc/sys/net/ipv6/conf/default/use_tempaddr" 的值。注意此设置与固定隐私地址不同，后者可通过 "addr-gen-mode" 属性的 "stable-privacy" 设置启用，可作为避免 IPv6 地址追踪的另一种方法。 创建用于 RFC4862 IPv6 无状态地址自动配置的地址的配置方法。允许的值有：NM_SETTING_IP6_CONFIG_ADDR_GEN_MODE_EUI64 (0) 或 NM_SETTING_IP6_CONFIG_ADDR_GEN_MODE_STABLE_PRIVACY (1)。如果属性设为 EUI64，地址将使用衍生自硬件地址的接口令牌来生成。这会让地址的主机部分保持不变，使得在地址变化时能够追踪主机的存在。接口硬件被替换时地址改变。stable-privacy 值启用主机特定密钥的加密安全散列，随同连接的 stable-id 和由 RFC7217 指定的网络地址一起使用。这使得可以利用地址追踪主机的存在，且在网络接口硬件被替换时能保持地址固定。在 D-Bus 上，没有 addr-gen-mode 设置等于启用 stable-privacy。对于密钥文件，磁盘上没有设置则表示 EUI6，因此属性在从旧版本升级时不会改变。注意此设置与由 "ip6-privacy" 配置的隐私扩展不同，而且它不会影响此选项配置的临时地址。 配置用于 draft-chown-6man-tokenised-ipv6-identifiers-02 IPv6 令牌化接口标识符的令牌。对 eui64 addr-gen-mode 有用。 已连接 正在连接 正在连接... 连接 "%s" (%s) 已成功添加。
成功删除连接 "%s" (%s)。
连接 "%s" (%s) 已成功修改。
连接 "%s" (%s) 已成功保存。
成功地更新了连接 "%s" (%s)。
错误：停用连接 "%s" 失败：%s
成功停用连接 "%s"（D-Bus 活动路径：%s）
连接（名称、UUID 或路径）： 固定 ID 的连接令牌 连接 UUID 连接已经激活 连接配置集详情 连接在初始化之前被删除 通过受保护的 Wi-Fi 网络共享连接 通过开放 Wi-Fi 网络共享连接 连接已成功激活（%s）（D-Bus 活动路径：%s）
连接已成功激活（D-Bus 活动路径：%s）
成功重新应用连接到设备 "%s"。
连接（名称、UUID 或路径）： 连接（名称、UUID、路径或活动路径）： 连接性 连接性现在是 "%s"
服务器域名的约束。如果设定，在内部 "phase 2" 验证期间，此 FQDN 用作后缀以匹配验证服务器所提供证书的 dNSName 元素需求。如果找到了匹配的 dNSName，此约束被满足。如果未提供 dNSName 值，此约束用来匹配使用同个后缀匹配对比的 SubjectName CN。 服务器域名的约束。如果设定，此其 FQDN 用作后缀以匹配验证服务器所提供证书的 dNSName 元素需求。如果找到了匹配的 dNSName，此约束被满足。如果未提供 dNSName 值，此约束用来匹配使用同个后缀匹配对比的 SubjectName CN。 包含 "phase2-auth" 或 "phase2-autheap" 属性指定的 EAP 方法所使用的 "phase 2" CA 证书，如果其使用了。证书数据用 "scheme" 指定；当前支持两种方案：比特块（blob）和路径。当使用比特块方案（与 NM 0.7.x 后向兼容）时，此属性应设定为证书的 DER 编码数据。当使用路径方案时，此属性应设定为证书的完整 UTF-8 编码路径，以字符串 "file://" 为前缀并以终止 NUL 字节结束。此属性可不设定，即使 EAP 方法支持 CA 证书，但这将允许中间人攻击因此不推荐。 包含 "phase2-auth" 或 "phase2-autheap" 属性指定的 EAP 方法所使用的 "phase 2" 客户端证书，如果其使用了。证书数据用 "scheme" 指定；当前支持两种方案：比特块（blob）和路径。当使用比特块方案（与 NM 0.7.x 后向兼容）时，此属性应设定为证书的 DER 编码数据。当使用路径方案时，此属性应设定为证书的完整 UTF-8 编码路径，以字符串 "file://" 为前缀并以终止 NUL 字节结束。此属性可不设定，即使 EAP 方法支持 CA 证书，但这将允许中间人攻击因此不推荐。 包含如果 "phase2-auth" 或 "phase2-autheap" 属性设为 "tls" 时的 "phase 2" 内部私钥。密钥数据用 "scheme" 指定；当前支持两种方案：比特块（blob）和路径。当使用比特块方案时，此属性应设定为私钥加密过的 PEM 编码数据。当使用路径方案时，此属性应设定为私钥的完整 UTF-8 编码路径，以字符串 "file://" 为前缀并以终止 NUL 字节结束。当使用 PKCS#12 格式私钥和比特块方案时，此属性应设为 PKCS#12 数据且 "phase2-private-key-password" 属性必须设为用于解密 PKCS#12 证书和私钥的密码。当使用 PKCS#12 文件和路径方案时，此属性应设为私钥的完整 UTF-8 编码路径，以字符串 "file://" 为前缀并以终止 NUL 字节结束；而与 blob 方案同用时，"phase2-private-key-password" 属性必须设为用于解码 PKCS#12 私钥和证书的密码。 包含 "eap" 属性指定的 EAP 方法所使用的 CA 证书，如果其使用了。证书数据用 "scheme" 指定；当前支持两种方案：比特块（blob）和路径。当使用比特块方案（与 NM 0.7.x 后向兼容）时，此属性应设定为证书的 DER 编码数据。当使用路径方案时，此属性应设定为证书的完整 UTF-8 编码路径，以字符串 "file://" 为前缀并以终止 NUL 字节结束。此属性可不设定，即使 EAP 方法支持 CA 证书，但这将允许中间人攻击因此不推荐。 包含 "eap" 属性指定的 EAP 方法所使用的客户端证书，如果其使用了。证书数据用 "scheme" 指定；当前支持两种方案：比特块（blob）和路径。当使用比特块方案（与 NM 0.7.x 后向兼容）时，此属性应设定为证书的 DER 编码数据。当使用路径方案时，此属性应设定为证书的完整 UTF-8 编码路径，以字符串 "file://" 为前缀并以终止 NUL 字节结束。 包含如果 "eap" 属性设为 "tls" 时的私钥。私钥数据用 "scheme" 指定；当前支持两种方案：比特块（blob）和路径。当使用比特块方案时，此属性应设为私钥加密过的 PEM 编码数据。当使用路径方案时，此属性应设定为私钥的完整 UTF-8 编码路径，以字符串 "file://" 为前缀并以终止 NUL 字节结束。当使用 PKCS#12 格式私钥和比特块方案时，此属性应设为 PKCS#12 数据且 "private-key-password" 属性必须设为用于解密 PKCS#12 证书和私钥的密码。当使用 PKCS#12 文件和路径方案时，此属性应设为私钥的完整 UTF-8 编码路径，以字符串 "file://" 为前缀并以终止 NUL 字节结束；而与比特块方案同用时，"private-key-password" 属性必须设为用于解码 PKCS#12 私钥和证书的密码。警告："private-key" 不是 "secret" 属性，因此使用比特块方案时未加密的私钥数据可能会被非特权用户读取。私钥总是应该用私钥密码加密以阻止对未加密私钥数据的未授权访问。 控制在网桥中是否启用 VLAN 过滤。 控制 WEP 密钥的转义。允许的值有 NM_WEP_KEY_TYPE_KEY (1)，此情况下密钥要么是 10 或 26 个字符长度的十六进制字符串，要么是 5 或 13 个字符长度的 ASCII 密码；还有 NM_WEP_KEY_TYPE_PASSPHRASE (2)，此情况下密码以字符串提供，并使用事实上的 MD5 方法散列以衍生实际的 WEP 密钥。 控制是否为此网桥启用 IGMP 监听。注意如果散列冲突监听会被自动禁用，系统可能拒绝启用该功能直到冲突解决。 控制是否为此网桥启用生成树协议（STP）。 Cookie 对应于 teamd mcast_rejoin.count。 对应于 teamd mcast_rejoin.interval。 对应于 teamd notify_peers.count。 对应于 teamd notify_peers.interval。 对应于 teamd ports.PORTIFNAME.lacp_key。 对应于 teamd ports.PORTIFNAME.lacp_prio。 对应于 teamd ports.PORTIFNAME.prio。 对应于 teamd ports.PORTIFNAME.queue_id。设定为 -1 时表示参数从 json 配置忽略。 对应于 teamd ports.PORTIFNAME.sticky。 对应于 teamd runner.active。 对应于 teamd runner.agg_select_policy。 对应于 teamd runner.fast_rate。 对应于 teamd runner.hwaddr_policy。 对应于 teamd runner.min_ports。 对应于 teamd runner.name。允许的值有："roundrobin"、"broadcast"、"activebackup"、"loadbalance"、"lacp" 和 "random"。设置运行程序时，所有指定到运行程序的属性都将充值为默认值；所有指定到其他运行程序的属性都将设为空值（或者不可能时设为默认值）。 对应于 teamd runner.sys_prio。 对应于 teamd runner.tx_balancer.interval。 对应于 teamd runner.tx_balancer.name。 对应于 teamd runner.tx_hash。 无法激活连接：%s 无法联系网络管理器：%s
无法创建软件链路： 无法为类型 "%s" 的连接 "%s" 创建编辑器。 无法为无效的连接 "%s" 创建编辑器。 无法创建临时文件：%s 无法设为守护进程：%s [错误 %u]
无法解码私钥。 无法删除连接 "%s"：%s 无法找到 "%s" 二进制文件 无法生成随机数据。 无法加载文件 "%s"
无法解析参数 无法重新读取文件：%s 无法将密码转换为 USC2 方式：%d 无法解码 PKCS#12 文件：%d 无法解码 PKCS#12 文件：%s 无法解码 PKCS#8 文件：%s 无法解码证书：%d 无法解码证书：%s 无法初始化 PKCS#12 解码器：%d 无法初始化 PKCS#12 解码器：%s 无法初始化 PKCS#8 解码器：%s 无法初始 slot 无法校验 PKCS#12 文件：%d 无法校验 PKCS#12 文件：%s 创建 当前的 DHCPv4 地址 当前 nmcli 配置：
此连接用于连接到它网络的 VPN 插件的 D-Bus 服务名。例如 org.freedesktop.NetworkManager.vpnc 用于 vpnc 插件。 DCB 或 FCoE 设置失败 DCB 设置 DHCP 任意广播 MAC 地址 [无] DHCP 客户端错误 DHCP 客户端失败 DHCP 客户端启动失败 DNS 服务器 DNS 服务器优先级。此设置指定 DNS 服务器的相关优先级。值越低优先级越高。零代表默认值，即 50 用于 VPN 和 100 用于其他连接。注意此优先级用于为多个活动连接排序 DNS 设置。它不是对同个连接配置集中的多个 DNS 服务器进行明确选择。当使用 dns=default 时，更高优先级的服务器将在 resolv.conf 里的更顶部。要让给定服务器优先于同连接内的另一服务器，只要以期望的顺序指定它们就行。当多个设备配置了同样的优先级，将优先选择活动默认路由的那一个。注意当使用 dns=dnsmasq 时，此顺序无意义因为 dnsmasq 同时转发查询到所有已知服务器。负值具有排除其他拥有更高优先级值的配置的特殊效果；所以存在至少一个负值优先级的情况下，只使用具有最低优先级值的连接的 DNS 服务器。当使用支持拆分 DNS 为 dns=dnsmasq 或 dns=systemd-resolved 的 DNS 解析器时，每个连接用于查询它搜索列表中的域。未在任何搜索列表中的域查询会由具有 "~." 特殊通配符的域进行路由，被自动以默认路由添加到连接（或可以手动添加）。当多个连接指定了同个域时，拥有最高权限（最低的数值）的那个连接将获选。如果连接指定了个域，其为具有负 DNS 优先级值的另一域的子域，那这个子域会被忽略。 DSL DSL 身份验证 DSL 连接 %d DUN 连接必须包含 GSM 或 CDMA 设置 DUN 已请求，但蓝牙设备不支持 DUN 数据报 停用 删除 目标 目标端口 [8472] 检测到设置了 "%s" 和端口类型为 "%s" 的从连接。"%s" 应该设置为 "%s" 设备 未找到设备 "%s" 成功用 "%s%s" 激活了设备 ""。
成功断开设备 "%s"。
成功移除设备 "%s"。
设备 LLDP 邻居 设备 MAC（%s）被连接列入了黑名单。 设备详情 用户或客户端断开了设备连接 设备现在已托管 设备现在未托管 VPN 插件特定数据的键/值对字典。键和值都必须为字符串。 VPN 插件指定如密码或密钥的密钥（secret）的键/值对字典。键和值都必须为字符串。 绑定（bonding）选项的键/值对目录。键和值都必须为字符串。选项名必须只能包含字母数字字符（示例 [a-zA-Z0-9]）。 s390 特定设备的键值对字典。键和值都必须为字符串。允许的值包括 "portno"、"layer2"、"portname"、"protocol" 等等。键名必须只能包含字母数字字符（例如 [a-zA-Z0-9]）。 禁用 被 D-Bus 断开 已被用户断开连接 您是否也要清除 "%s"？[yes]： 您是否也要将 "%s" 设为 "%s"？[yes]： 您要提供它吗？%s 您要删除它们吗？[yes]： 不像是一个 PEM 私钥文件。 不成为守护进程 不成为守护进程，并向标准错误打印日志 不输出任何结果 虚拟 虚拟连接 虚拟设置 动态 WEP（802.1x） 动态 WEP 要求 "ieee8021x" 密钥管理 动态 WEP 要求 "open" 验证 动态 WEP 要求 802.1x 设置 EAP EAP 密钥管理需要 "%s" 设置存在 以太网 编辑 "%s" 值： 编辑连接 编辑连接 编辑... 正在编辑已有的连接 "%s"："%s" 编辑器失败：%s 出口优先级映射 [无] 拨号网络连接时使用 "dun"，或者支持 NAP 配置集设备的个人区域网络连接时使用 "panu"。 启用 IGMP 监听 启用 IGMP 监听 [否] 启用 PI [否] 启用 STP（生成树协议） 启用 STP [否] 启用 VNET 首部 [否] 启用加密 [是] 启用多队列 [否] 启用或禁用 RSTP。 启用或禁用 STP。 启用或禁用 Wi-Fi 设备 启用或禁用 WiMAX 移动宽带设备 启用或禁用连接性检查 启用或禁用设备统计 启用或禁用移动宽带设备 启用或禁用多播监听。 启用或禁用系统联网 启用策略路由（源路由）并在添加路由时设定路由表。此属性影响所有的路由器，包括设备路由、IPv4LL、DHCP、SLAAC、默认路由和静态路由。但请注意静态路由可以通过明确地指定非零的路由表来自己覆盖掉设置。如果表设置保留为零，它有权被全局配置覆盖。如果在应用全局配置值后属性仍为零，对此连接的地址族禁用策略路由。禁用策略路由意味着网络管理器（NetworkManager）将添加所有路由到主表（除了明确配置了不同路由表的静态路由）。另外，网络管理器将不会从表中删除任何外部路由，除了主路由。这是为了给用网络管理器之外工具管理路由表的用户保持后向兼容性。 启用或禁用端口的 "hairpin mode"，其允许从接收帧的端口发回帧。 当 "eap" 属性里的 EAP 方法指定为 FAST 时，启用或禁用 EAP-FAST 凭据的行内设置。可识别的值有 "0"（禁用）、"1"（允许未验证的设置）、"2"（允许验证的设置）和 "3"（验证和未验证的设置都允许）。详情请见 wpa_supplicant 文档。 ADSL 连接的封装。可以是 "vcmux" 或 "llc"。 输入 "%s" 值： 输入 IPv4 地址列表，格式为：
ip[/prefix], ip[/prefix],...
缺少前缀则默认为 32。
示例：192.168.1.5/24, 10.0.0.11/24
输入 DNS 服务器的 IPv4 地址列表。
示例：8.8.8.8, 8.8.4.4
输入 IPv4 路由列表，格式为：
ip[/prefix] [next-hop] [metric],...
缺少前缀则默认为 32。
缺少 next-hop 则默认为 0.0.0.0。
缺少跃点数则使用默认值（NM/kernel 将设置默认值）。
示例：192.168.2.0/24 192.168.2.1 3, 10.1.0.0/16 10.0.0.254
10.1.2.0/24
使用以下格式输入一组 IPv4 路由规则：
priority [prio] [from [src]] [to [dst]], ,...
输入 IPv6 地址列表，格式为：
ip[/prefix], ip[/prefix],...
缺少前缀则默认为 128。
示例：2607:f0d0:1002:51::4/64, 1050:0:0:0:5:600:300c:326b
输入 DNS 服务器的 IPv6 地址列表。如果 IPv6 配置方法为 "auto"，这些 DNS 服务器将附加到哪些自动配置返回的地址中（如果有）。DNS 服务器不能使用 "shared" 或者 "link-local" IPv6 配置方法，因为它们不是上游网络。在所有其他 IPv6 配置方法中，这些 DNS 服务器可作为这个连接的唯一 DNS 服务器。
示例：2607:f0d0:1002:51::4, 2607:f0d0:1002:51::1
输入 IPv6 路由列表，格式为：
ip[/prefix] [next-hop] [metric],...
缺少前缀则默认为 128。
缺少 next-hop 则默认为 "::"。
缺少跃点数则使用默认值（NM/kernel 将设置默认值）。
示例：2001:db8:beef:2::/64 2001:db8:beef::2, 2001:db8:beef:3::/64 2001:db8:beef::3 2
abbe::/64 55
使用以下格式输入一组 IPv6 路由规则：
priority [prio] [from [src]] [to [dst]], ,...
输入 S/390 选项列表，格式为:
option = <value>, option = <value>,...
有效选项为: %s
输入绑定选项列表，格式为:
option = <value>, option = <value>,...
有效选项为: %s
'mode' 可以是一个名称或数字:
balance-rr = 0
active-backup = 1
balance-xor = 2
broadcast = 3
802.3ad = 4
balance-tlb = 5
balance-alb = 6
例如：mode=2,miimon=120
输入链路监视器列表，其格式为键值是 teamd 属性的字典。字典对的形式为：键=值，且字典对以空格 " " 分隔。字典间以 "," 分隔。
在字典里允许或需要的键根据链路监视器的类型改变，而所有链路监视器的唯一共同属性是 "name"*，其定义了指定的链路监视器。
适用于 "ethtool" 链路监视器的属性有：
"delay-up"、"delay-down"
适用于 "nsna_ping" 链路监视器的属性有：
"init-wait"、"interval"、"missed-max"、"target-host"*
适用于 "arp_ping" 链路监视器的属性除了包含 "nsna_ping" 下的所有属性还有：
"source-host"*、"validate-active"、"validate-inactive"、"send-always"。
带有 "*" 标记的属性为必填的。
示例：
name=arp_ping source-host=172.16.1.1 target-host=172.16.1.254, name=ethtool delay-up=3
输入子通道列表（用逗号或者空格分开）。
示例：0.0.0e20 0.0.0e21 0.0.0e22
输入用户权限列表。这个列表的用户名格式为：
[user:]<用户名 1>, [user:]<用户名 2>,...
使用逗号或者空格将名称分开。
例如：alice bob charlie
输入的值表示连接是否有数据配额、使用成本或其他限制。
可接受的选项是：
"true"、"yes"、"on"，设置连接为计算流量的
"false"、"no"、"off"，设置连接为不计流量的
"unknown"，让网络管理器（NetworkManager）使用一些启发式算法来选择值
输入十六进制值列表。
可使用两种格式：
(a) 十六进制数字字符串，每两个数字代表一个字节。
(b) 用空格分开的采用十六进制数字写入的字节（选项有0x/0X 前缀以及自选的 0 开头）。
例如：ab0455a6ea3a74C2
ab 4 55 0xa6 ea 3a 74 C2
输入连接类型： 输入 CA 证书的文件路径（前缀可选择 file://）。
[file://]<文件路径>
请注意，nmcli 不支持将证书指定为原始比特块（blob）数据。
示例：/home/cimrman/cacert.crt
输入内部验证的 CA 证书的文件路径（前缀可选择 file://）。
[file://]<文件路径>
请注意，nmcli 不支持将证书指定为原始比特块（blob）数据。
示例：/home/cimrman/ca-zweite-phase.crt
输入客户证书的文件路径（前缀可选择 file://）。
[file://]<文件路径>
请注意，nmcli 不支持将证书指定为原始比特块（blob）数据。
示例：/home/cimrman/jara.crt
输入内部验证的客户证书的文件路径（前缀可选择 file://）。
[file://]<文件路径>
请注意，nmcli 不支持将证书指定为原始比特块（blob）数据。
示例：/home/cimrman/jara-zweite-phase.crt
输入私有密钥和密钥密码的路径（如果还没有设置）：
[file://]<文件路径> [<密码>]
请注意，nmcli 不支持将私有密钥指定为原始比特块（blob）数据。
示例：/home/cimrman/jara-priv-key Dardanely
输入当这个连接激活时应该被激活的次级连接。连接可用 UUID 或 ID（名称）指定。nmcli
自动将名称地转换为 UUID。请注意，目前网络管理器（NetworkManager）只支持将 VPN 作为次级连接。
这些输入项可用逗号或空格隔开。
示例：private-openvpn, fe6ba5d8-c2fc-4aae-b2e3-97efddd8d9a7
输入 WEP 密钥类型。可接受的值为：0 或者 unknown、1 或者 key, 以及 2 或者 passphrase。
初始化证书数据出错：%s 读取 nmcli 输出时出错：%s
更新 %s 的密钥时出错：%s
写入 nmcli 输出时出错：%s
错误：%s
错误：%s - 没有这样的连接配置集。 错误：缺少 %s 参数。 错误：%s 属性，也不是设置名称。
错误：%s。 错误：%s。
错误：%s：%s。 错误：缺少 "%s" 参数。 错误：需要 "%s" 参数。 错误："%s" 不能重复。 错误："%s" 不明确（%s.%s 或 %s.%s）。 错误：设置 "%s" 是必填的。 错误："%s" 不是 "%s" 选项的有效参数。 错误："%s" 不是有效的监视模式；使用 "%s" 或 "%s"。
错误："%s" 不是有效的超时时间。 错误："%s" 不是活动的连接。
错误："%s" 不是 "%s" 选项的有效参数。 错误：设置 "%s" 在连接里未提供。
错误："%s"：%s 错误："--fields" 值 "%s" 在此无效（允许的字段：%s） 错误："autoconnect"：%s。 错误："bt-type"："%s" 无效；使用 [%s, %s, %s (%s), %s]。 错误："connection show"：%s 错误："device lldp list"：%s 错误："device show"：%s 错误："dev status": %s 错误："device wifi"：%s 错误：需要 "file" 参数。 错误："常规日志"：%s 错误："常规权限"：%s 错误："managed"：%s。 错误："monitor" 命令 "%s" 无效。 错误："networking" 命令 "%s" 无效。 错误："save"：%s。 错误：需要 "type" 参数。 错误：缺少 <新名称> 参数。 错误：缺少 <设置>.<属性> 参数。 错误：未找到 bssid 为 "%s" 的接入点。 错误：需要参数 "%s" 但提供的是 "%s"。 错误：要连接的 BSSID (%s) 与 bssid 参数 (%s) 不同。 错误：无法激活连接：%s。
错误：连接 '%s' 存在但属性不匹配。 错误：连接激活失败。
错误：连接激活失败：%s 错误：连接激活失败：(%d) %s。
错误：连接删除失败：%s
错误：无法创建 NMClient 对象：%s
错误：无法创建 NMClient 对象：%s。 错误：删除设备 "%s" (%s) 失败：%s
错误：断开设备 "%s" (%s) 的连接失败：%s
错误：设备 "%s" 不是 Wi-Fi 设备。 错误：没有找到设备 "%s"。 错误：没有找到设备 "%s"。
错误：设备 "%s" 既不支持 AP 也不支持 Ad-Hoc 模式。 错误：设备 "%s" 没有被识别为 Wi-Fi 设备，请检查网络管理器（NetworkManager）的 Wi-Fi 插件。 错误：激活设备失败：%s 错误：设备激活失败：设备已断开连接 错误：激活 "%s" (%s) 连接失败：%s
错误：激活连接失败：%s 错误：添加 "%s" 连接失败：%s 错误：添加/激活新连接失败：%s 错误：修改连接 "%s" 失败：%s 错误：保存 "%s" (%s) 连接失败：%s
错误：扫描隐藏的 SSID 失败：%s。 错误：建立 Wi-Fi 热点失败：%s 错误：无效的 "password"：%s。 错误：网络管理器（NetworkManager）未运行。 错误：未发现 Wi-Fi 设备。 错误：未找到 BSSID 为 "%s" 的接入点。 错误：未提供参数。 错误：未指定连接。 错误：没有指定接口。 错误：未发现 SSID 为 "%s" 的网络。 错误：未指定属性。 错误：选项 "%s" 未知，尝试 "nmcli -help"。 错误：选项 "--pretty" 与 "--terse" 相互排斥。 错误：第二次指定了选项 "--pretty"。 错误：选项 "--terse" 与 "--pretty" 相互排斥。 错误：第二次指定了选项 "--terse"。 错误：参数 "%s" 不是 SSID 或 BSSID。 错误：从设备 "%s" (%s) 读取已应用的连接失败：%s 错误：重新应用连接到 "%s" (%s) 失败：%s 错误：缺少 SSID/BSSID。 错误：超时时间 %d 秒已到。 错误：超时时间已到（%d 秒） 错误：保存 '%s' (%s) 连接超时
错误：意外参数 "%s" 错误：未知连接 "%s"。 错误：未知参数 %s。 错误：不能理解参数 "%s"。试下换成传递 --help 参数。 错误：错误的连接类型：%s 错误：band 参数值 "%s" 无效，请使用 "a" 或 "bg"。 错误：bssid 参数值"%s"为无效 BSSID。 错误：无法删除未知连接：%s。 错误：band "%s" 的 channel "%s" 无效。 错误：channal 也需要 band。 错误：连接还未保存。先输入 "save"。
错误：连接是无效的：%s
错误：连接验证失败：%s。
错误：添加绑定（bond）选项 "%s=%s" 时出错。 错误：不允许的额外参数："%s"。 错误：%s %s.%s 失败 : %s. 错误：创建临时文件 %s 失败。 错误：导出 "%s" 失败：%s。 错误：查找用于 %s 的 VPN 插件失败。 错误：导入 "%s" 失败失败失败失败失败失败失败失败失败失败失败：%s。 错误：加载 VPN 插件失败：%s。 错误：加载连接失败：%s。 错误：读取临时文件 "%s" 失败：%s。 错误：重新加载连接失败：%s。 错误：移除 "%s" 的值失败：%s
错误：设置 "%s" 属性失败：%s
错误：设置主机名失败：%s 错误：设置日志失败：%s 错误：无效的 "%s" 参数："%s"（使用 on/off）。 Error: invalid <setting>.<property> '%s'. 错误：无效的参数 "%s"
错误：无效的连接类型；%s
错误：无效的连接类型；%s。 错误：无效的额外参数 "%s"。 错误：无效或不允许的设置 "%s"：%s。 错误：无效的属性 "%s"：%s。 错误：无效的属性：%s
错误：无效的属性：%s%s
错误：无效的属性：%s，也不是有效的设置名称。
错误：无效的重新扫描参数："%s" 未在 [auto, no, yes] 之中 错误：无效的设置参数 "%s"；有效的为 [%s]
错误：无效的设置名称；%s
错误：无效的从属类型；%s。 错误：需要主连接 错误："%s" 选项缺少参数。 错误：缺少参数。试下传递 --help 参数。 错误：缺少 "%s" 属性的设置
错误：nmcli 被信号 %s (%d) 终止了 错误：未提供活动连接。 错误：未给定参数：有效的为 [%s]
错误：未选择设置；有效的为 [%s]
错误：未找到所有的活动连接。 错误：未删除所有的连接。 错误：未找到所有连接。 错误：未删除所有设备。 错误：未断开所有设备的连接。 错误：未找到所有设备。 错误：只能提供 "id"、"filename"、"uuid" 或 "path" 之一。 错误：只允许使用这些字段：%s 错误：openconnect 失败，信号为 %d
错误：openconnect 失败，状态为 %d
错误：openconnect 失败：%s 错误：openconnect 失败：%s
错误：polkit 代理初始化失败：%s 错误：属性 %s
错误：属性 "%s" 是未知的。 错误：save-confirmation：%s
错误：密钥（secret）代理初始化失败 错误：设置 "%s" 是必填的而且无法移除。
错误：show-secrets：%s
错误：SSID 太长。 错误：status-line：%s
错误：连接不是 VPN。 错误：创建 NMClient 对象时超时
错误：未知的额外参数："%s"。 错误：未知的设置 "%s"
错误：未知的设置："%s"
错误：需要 "%s" 参数的值。 错误：缺少 "%s" 的值。 错误：wep-key-type 参数值 "%s" 无效，请使用 "key" 或 "phrase"。 以太网 以太网连接 %d 以太网设备 Ethtool 设置 如果网络管理器未运行或连接则立即退出 期望 "%s" 后更随换行符
期望一个 "%s" 的值
期望 "%s" 后更随空白
如果连接可以用提供设置服务的 D-Bus 接口以正确的权限来修改，为 FALSE；如果连接为只读且无法修改，为 TRUE。 发送至 DHCP 服务器的 FQDN 配置 SR-IOV 参数失败 转换 "%s" 值 "%s" 为 uint 失败 创建 WireGuard 连接失败 : %s 创建与子进程通讯的管道失败：%s
无法解码 PKCS#8 私钥。 无法解码证书。 解密私钥失败。 解密私钥失败：%d。 解密私钥失败：%s（%s） 解密私钥失败：解密后的数据太大。 解密私钥失败：意外的填充长度。 确定 AP 安全信息失败 复制与子进程通讯的管道失败：%s
加密数据失败：%s（%s） 加密失败：%d。 结束解密私钥失败：%d。 无法找到预期的 PKCS#8 结束标记"%s"。 无法找到预期的 PKCS#8 起始标记。 寻找 %s(%s) 的接口索引失败
fork 子进程失败：%s
初始化 MD5 环境失败：%d。 初始化 MD5 引擎失败：%s（%s） 初始化加密引擎失败。 初始化加密引擎失败：%d。 初始化解密计算内容失败：%s（%s） 初始化解密计算插槽失败。 初始化解密环境失败。 初始化加密计算内容失败：%s（%s） 初始化加密计算插槽空间失败。 初始化加密内容失败。 读取配置失败：%s
识别证书失败。 注册请求的网络失败 无法选择指定的 APN 为解密设置初始向量失败。 为加密设置初始向量失败。 为解密设置对称密钥失败。 为加密设置对称密钥失败。 要导入的文件： 指示如何处理 "ca-cert-password" 属性的标志。 指示如何处理 "client-cert-password" 属性的标志。 指示如何处理 "leap-password" 属性的标志。 指示如何处理 "mka-cak" 属性的标志。 指示如何处理 "password" 属性的标志。 指示如何处理 "password-raw" 属性的标志。 指示如何处理 "phase2-ca-cert-password" 属性的标志。 指示如何处理 "phase2-client-cert-password" 属性的标志。 指示如何处理 "phase2-private-key-password" 属性的标志。 指示如何处理 "pin" 属性的标志。 指示如何处理 "private-key" 属性的标志。 指示如何处理 "private-key-password" 属性的标志。 指示如何处理 "psk" 属性的标志。 指示如何处理 "wep-key0"、"wep-key1"、"wep-key2" 和 "wep-key3" 属性的标志。 指示使用哪种 WPS 模式（如果可用）的标志。由于网络管理器（NetworkManager）会自动从接入点功能确定启动 WPS 注册是否可行，因此改变默认设置几乎没有意义。可以通过设置此属性值为 1 来禁用 WPS。 指示使用哪种 WPS 模式（如果可用）的标志。由于网络管理器（NetworkManager）会自动决定要使用的最佳方法，因此改变默认设置几乎没有意义。 用于传入的数据包，从 802.1p 优先级到 Linux SKB 优先级的映射列表。映射以 "从:到" 的格式给定，其中 "从" 和 "到" 都是无符号整数，如 "7:3"。 用于传出的数据包，从 Linux SKB 优先级到 802.1p 优先级的映射列表。映射以 "从:到" 的格式给定，其中 "从" 和 "到" 都是无符号整数，如 "7:3"。 强制在衍生密钥时使用新的 PEAP 标签。有些 RADIUS 服务器可能需要强制使用新的 PEAP 标签以与 PEAPv1 互操作。设为 "1" 以强制使用新的 PEAP 标签。详情请见 wpa_supplicant 文档。 当 "eap" 属性里的 EAP 方法指定为 PEAP 时，强制所使用的 PEAP 版本。未设定时，将使用服务器报告的版本。有时使用旧的 RADIUS 服务器时，强制客户端使用特定的 PEAP 版本时必须的。要这么做，此属性可以设为 "0" 或 "1" 以强制所指定的 PEAP 版本。 转发延时 转发延时 [15] GRE 组 GSM 调制解调器的 SIM 需要 PIN 码 GSM 调制解调器的 SIM 需要 PUK 码 GSM 调制解调器的 SIM 卡未插入 GSM 调制解调器的 SIM 错误 GSM 连接 GSM 移动宽带连接 GVRP、 网关 网关证书散列 常规设置 通用设置 分组 ID [无] 组前向掩码 组前向掩码 [0] 组密码 HTTP 代理密码 Hairpin [否] Hairpin 模式 散列长度太长（%d > %d）。 问候时间 呼叫时间 [2] 十六进制编码的 DHCPv4 客户 ID 十六进制编码的接口标识符 隐藏 提示：使用 '%s' 来获得更详细的信息。 主机名 主机名已设为 "%s"
发送至 DHCP 服务器的主机名 热点密码：%s
允许多少个附加的封装等级预置到数据包。此属性值只应用到 IPv6 隧道。 IEEE 802.15.4 IEEE 802.15.4（WPAN）上级设备或连接的 UUID IEEE 802.15.4 个人区域网络（PAN）标识符。 IEEE 802.15.4 频道页。一个正整数，或 -1 意味着“不设置，使用设备的设置”。 IEEE 802.15.4 频道。一个正整数，或 -1 意味着“不设置，使用设置的设置”。 INFINIBAND IP 隧道 IP 配置无法保留（无可用地址、超时等） IP 配置方法。 NMSettingIP4Config 和 NMSettingIP6Config 都支持“auto”，“manual”和“link-local”。对于其它值，请参阅相关子类的文档。通常情况下，对于“auto”方法，“dns”和“routes”等属性指定是在从自动配置返回的信息添加的信息。 "ignore-auto-routes" 和 "ignore-auto-dns"属性会改变这个行为。对于意味着没有上游网络的方法，如“shared”或“link-local”，这些性能必须为空。对于 IPv4 的方法“sharded”，IP 子网可以通过加入一个手工 IPv4 地址或选择 10.42.x.0/24 来配置。注意，shared 的方法必须在这个子网中的用来共享互联网的接口中进行配置，而不是在共享的上部连接中进行配置。 IP 隧道 IP 隧道连接 IP 隧道连接 %d IP 隧道设置 IP6GRE IP6IP6 IPIP IPIP6 IP 隧道 IPv4 配置 IPv4 地址（IP[/plen]）[无] IPv4 网关 [无] IPv4 协议 IPv6 配置 IPv6 SLAAC 地址生成模式 IPv6 地址（IP[/plen]）[无] IPv6 网关 [无] IPv6 协议 ISATAP 初始向量中包含非十六进制数字。 初始向量长度必须是偶数字节。 IV 需要最少包括 8 个字符 指定此网络设备与 z/VM 或 s390 主机通信使用的子通道的标识符。如 "mac-address" 用于非 z/VM 设备，此属性可用来确保此连接只应用到使用这些子通道的网络设备。列表应该包含 3 个字符串，且每个字符串只能由十六进制字符和半角句号（.）字符组成。 身份 用于 EAP 验证方法的标识字符串。通常是用户的用户名或登录名。 如果为 TRUE，隧道数据包的 IFF_VNET_HDR 将包含一个 virtio 网络首部。 如果为 TRUE，接口将前置一个描述到数据包的物理接口的 4 字节首部。 如果为 TURE，将不会请求 "deflate" 压缩。 如果为 TRUE，PPP 会话将需要 MPPE（微软点对点加密）且 "require-mppe" 也必须设为 TRUE。如果 128 位的 MPPE 不可用，会话将失败。 如果为 TURE，将不会请求 BSD 压缩。 如果为 TRUE，PPP 会话将需要 MPPE（微软点对点加密）。如果 64 位或 128 位的 MPPE 都不可用，会话将失败。注意 MPPE 不用在移动宽带连接。 如果为 TRUE，将不请求压缩 Van Jacobsen TCP 首部。 如果为 TRUE，当获取租约时发送主机名到 DHCP 服务器。有些 DHCP 服务器使用这个主机名来更新 DNS 数据库，实质上为计算机提供了个静态的主机名。如果 "dhcp-hostname" 属性为 NULL 且此属性为 TRUE，以计算机的当前永久主机。 如果为 TURE，允许进行整体网络配置不管此属性指定的配置是否超时。注意至少要有一个 IP 配置成功不然整体网络配置仍将失败。示例，在纯 IPv6 网络，在 NMSettingIP4Config 设置此属性为 TRUE 时允许整体网络配置在 IPv4 配置失败但 IPv6 配置成功完成时成功。 如果为 TRUE，不需要其他方（通常是 PPP 服务器）验证自己到客户端。如果为 FALSE，需要来自远端的验证。在大多数情况下，此属性应为 TRUE。 如果为 TRUE，代表网络是一个隐藏了其 SSID 的非广播网络。这适用于 infrastructure 模式和 AP 模式。对于 infrastructure 模式，可以使用不同的方法来更可靠地发现隐藏网络，例如探针扫描 SSID。然而，这些方法会暴露出隐藏了 SSID 的网络的不安全性，因此在使用隐藏了 SSID 的网络时应谨慎。对于 AP 模式，创建的网络不会广播其 SSID。请注意，把网络标记为隐藏对于您（infrastructure 模式）或客户端工作站（AP 模式）可能只是一个隐私问题，因为显式探针扫描可以识别它们。 如果为 TRUE，指定 pppd 应设定串口以使用通过 RTS 和 CTS 信号的硬件流量控制。此值通常应设为 FALSE。 如果为 TRUE，使用有状态 MPPE。关于有状态 MPPPE 的更多信息请查看 pppd 文档。 如果为 TRUE，将不会使用 CHAP 验证方法。 如果为 TRUE，将不会使用 EAP 验证方法。 如果为 TRUE，将不会使用 MSCHAP 验证方法。 如果为 TRUE，将不会使用 MSCHAPv2 验证方法。 如果为 TRUE，将不会使用 PAP 验证方法。 如果为 TRUE，此连接将永不成为此 IP 类型的默认连接，这表示网络管理器（NetworkManager）永远不会为其分配默认路由。 如果给定了，指定此 PPPoE 连接应被创建在的上级接口名。如果此属性未指定，连接将激活到 NMSettingConnection 的 "interface-name" 所指定的接口。 如果给定了，其指定 6LowPAN 接口应被创建在上级接口名称或上级连接的 UUID。 如果给定了，其指定从此 MAC-VLAN 接口应该创建自的上级接口名称或上级连接的 UUID。如果此属性未指定，该连接必须包含具有 "mac-address" 属性的 "802-3-ethernet" 设置。 如果给定了，其指定从此 MACSEC 接口应该创建自的上级接口名称或上级连接的 UUID。如果此属性未指定，该连接必须包含具有 "mac-address" 属性的 "802-3-ethernet" 设置。 如果给定了，其指定从此 VLAN 接口应该创建自的上级接口名称或上级连接的 UUID。如果此属性未指定，该连接必须包含具有 "mac-address" 属性的 "802-3-ethernet" 设置。 如果给定了，指定新设备将绑定到的上级接口名或上级连接 UUID，以让隧道的数据包只能通过该接口进行路由。 如果给定了，其指定上级接口名称或上级连接的 UUID。 如果给定，指定要在传出数据包使用的来源 IP 地址。 如果大于零，推迟 IP 寻址的成功，直到到达超时时间或 IP 网关应答了 ping。 如果非零，指示设备仅使用指定的比特率与接入点进行通信。单位为 Kb/s，示例 5500=5.5 Mbit/s。此属性依赖于驱动，并非所有设备都支持设置静态比特率。 如果非零，指示设备使用指定的传输功率。单位为 dBm。此属性依赖于驱动，并非所有设备都支持设置静态的传输功率。 如果非零，指示如果指定的 LCP 回响请求号码未被节点回应时 pppd 就认定到节点的连接失败了。如果要使用此属性，"lcp-echo-interval" 属性也必须设为非零值。 如果非零，指示 pppd 请求节点发送的数据包不要超过指定的大小。如果非零，MRU 应在 128 和 16384 之间。 如果非零，指示 pppd 每几秒发送一个 LCP 回响请求帧到节点（几秒为该属性指定）。注意有些 PPP 节点将响应回响请求而有些不会，并且无法自动检测此行为。 如果非零，指示 pppd 不要发送超过指定大小的数据包。 如果非零，指示 pppd 设定串口到指定的波特率。要自动选择速度时此值通常保留为 0。 如果非零，只传输指定大小或更小的数据包，将较大的数据包分成多个以太网帧。 如果非零，只传输指定大小或更小的数据包，将较大的数据包分成多个帧。 如果非零，只传输指定大小或更小的数据包，大的数据包会被分成多个以太网帧。如果为 0， 则使用默认的 MTU。请注意，与 wg-quick 的 MTU 不同，它不会考虑在激活时当前的路由。 如果非零，只传输指定大小或更小的数据包，将较大的数据包分成多个帧。 如果指定了，则指定设备只关联给定的接入点。此功能依赖于驱动，并非所有设备都支持。注意：此属性不会控制创建 Ad-Hoc 网络时使用的 BSSID，将来也不会。 如果指定了，指示 PPPoE 只启动与提供了指定服务的集线器的会话。对于大多数运营商，此属性应留空。如果有多个集线器存在或者特定服务需要时，此属性才需要设定。 如指定了，则请求该设备使用此 MAC 地址来代替它的固定 MAC 地址。这个可被称为 MAC 克隆或欺骗。除了明确地指定 MAC 地址，也支持 "preserve"、"permanent"、"random" 和 "stable" 等特殊值。"preserve" 表示激活时不动 MAC 地址。"permanent" 使用设备的永久硬件地址（在有永久地址的情况下，如果没有，则和使用 "preserve" 相同）。"random" 则在每个连接上创建随机的 MAC 地址。"stable" 则根据 connection.stable-id 和机器相关密钥创建散列的 MAC 地址。如未指定，该值可被全局默认值覆盖，参见 NetworkManager.conf 的手册。如还未指定，它就默认为 "permanent"。在 D-Bus 上, 此字段表示为 "assigned-mac-address" 或已弃用的 "cloned-mac-address"。 如指定了，则请求该设备使用此 MAC 地址来代替它的永久 MAC 地址。这个可被称为 MAC 克隆或欺骗。除了明确地指定 MAC 地址，也支持 "preserve"、"permanent"、"random" 和 "stable" 等特殊值。"preserve" 表示激活时不动 MAC 地址。"permanent" 使用设备的永久硬件地址。"random" 则在每个连接上创建随机的 MAC 地址。"stable" 则根据 connection.stable-id 和机器相关密钥创建散列的 MAC 地址。如未指定，该值可被全局默认值覆盖，参见 NetworkManager.conf 的手册。如还未指定，它就默认为 "permanent"。在 D-Bus 上, 此字段表示为 "assigned-mac-address" 或已弃用的 "cloned-mac-address"。 如果指定了，其为网桥的 MAC 地址。当创建新网桥时，将设定此 MAC 地址。如果不指定此字段，换成引用 "ethernet.cloned-mac-address" 来生成初始 MAC 地址。注意设置 "ethernet.cloned-mac-address" 怎样都会在之后激活网桥时覆盖网桥的 MAC 地址。因此，此属性被弃用。已弃用：1 如果指定了，其为基于幻数据包的 LAN 唤醒所使用的密码，表示为以太网 MAC 地址。如果为 NULL，将不需要密码。 如果指定了，此连接将从不应用到其永久 MAC 地址与列表里的地址匹配的以太网设备。每个 MAC 地址采用标准的十六进制数字和冒号标记（00:11:22:33:44:55）。 如果指定了，此连接将只应用到其永久 MAC 地址匹配的以太网设备。此属性不会改变设备的 MAC 地址（例如 MAC 欺骗）。 如果指定了，此连接将只应用到其永久 MAC 地址匹配的 IEEE 802.15.4 (WPAN) MAC 层设备。 如指定了，此连接将只应用到符合永久 MAC 地址的 IPoIB 设备。此属性不会改变设备的 MAC 地址（例如 MAC 欺骗）。 如指定了，此连接将只应用到符合永久 MAC 地址的 Wi-Fi 设备。此属性不会改变设备的 MAC 地址（例如 MAC 欺骗）。 如指定了，此连接将只应用到其 MAC 地址符合的 WiMAX 设备。此属性不会改变设备的 MAC 地址（又名 MAC 欺骗）。已弃用：1 如果 "dhcp-send-hostname" 属性为 TRUE，当获取租约时指定的 FQDN 将被发送到 DHCP 服务器。此属性与 "dhcp-hostname" 相互排斥而且无法被同时设定。 如果 "dhcp-send-hostname" 属性为 TRUE，当获取租约时指定的名称将被发送到 DHCP 服务器。此属性与 "dhcp-fqdn" 相互排斥而且无法被同时设定。 如果 SIM 被 PIN 锁住了，在请求任何其他操作前必须解锁。在这里指定 PIN 以允许设备的操作。 如果 VPN 连接需要用户名用于验证，应在这里提供。如果连接可用于多个用户，且 VPN 需要每个用户提供个不同的名称，那么让此属性留空。如果此属性留空，网络管理器（NetworkManager）将自动提供 VPN 连接所需要用户的用户名。 如果 VPN 服务支持持久连接，并且此属性为 TRUE，VPN 将尝试在链路更改和中断的整个期间都保持连接，直到手动断开连接。 如果属性设为 TRUE，接口将支持多个文件描述符（队列）以并行化数据包的发送和接收，接口将只支持单个队列。 如果您想创建一个 VPN 但列表中没有您想要创建的 VPN 类型，这很可能是您没有安装正确的 VPN 插件。 忽略 忽略自动获取的 DNS 参数 忽略自动获取的路由 正在忽略传给命令行的未识别日志域 "%s"。
索引 0 WEP 密钥。这个是在大多数网络下使用的 WEP 密钥。参见 "wep-key-type" 属性获取解释该密钥的描述。 索引 1 WEP 密钥。此 WEP 索引不在大多数网络下使用。参见 "wep-key-type" 属性获取解释该密钥的描述。 索引 2 WEP 密钥。此 WEP 索引不在大多数网络下使用。参见 "wep-key-type" 属性获取解释该密钥的描述。 索引 3 WEP 密钥。此 WEP 索引不在大多数网络下使用。参见 "wep-key-type" 属性获取解释该密钥的描述。 指示链路是否为连接启用快速初始链路设置（FILS/802.11ai）。NM_SETTING_WIRELESS_SECURITY_FILS_DEFAULT (0)（使用全局默认值）、 NM_SETTING_WIRELESS_SECURITY_FILS_DISABLE (1)（禁用 FILS）、 NM_SETTING_WIRELESS_SECURITY_FILS_OPTIONAL (2)（如果请求方和接入点支持 FILS 就启用）或 NM_SETTING_WIRELESS_SECURITY_FILS_REQUIRED (3)（启用 FILS，不支持就失败）之一。当设定为 NM_SETTING_WIRELESS_SECURITY_FILS_DEFAULT (0) 时且未设定全局默认值，FILS 将被选择启用。 指示是否必须为连接启用受保护的管理帧（PMF/802.11w）。NM_SETTING_WIRELESS_SECURITY_PMF_DEFAULT (0)（使用全局默认值）、 NM_SETTING_WIRELESS_SECURITY_PMF_DISABLE (1)（禁用 PMF）、 NM_SETTING_WIRELESS_SECURITY_PMF_OPTIONAL (2)（如果请求方和接入点支持 PMF 就启用）或 NM_SETTING_WIRELESS_SECURITY_PMF_REQUIRED (3)（启用 PMF，不支持就失败）之一。当设定为 NM_SETTING_WIRELESS_SECURITY_PMF_DEFAULT (0) 时且未设定全局默认值，PMF 将被选择启用。 InfiniBand InfiniBand P_Key 连接未指定上级接口名 InfiniBand 连接 InfiniBand 连接 %d InfiniBand 设备不支持已连接的模式 信息：%s
Infra 入口优先级映射 [无] 输入密钥 主设备的接口名或 UUID 或主连接。 接口： 接口： 内部配置文件位置 无效的 IPv4 地址 "%s" 无效 IPv4 地址前缀 "%u" 无效的 IPv6 地址 "%s" 无效 IPv6 地址前缀 "%u" 无效的初始向量长度（至少为 %d）。 无效的初始向量长度（至少为 %u）。 无效的初始向量长度（至少为 %zd）。 黑名单里无效的 MAC 地址：%s。 无效的配置选项 "%s"；允许 [%s]
无效的设备蓝牙地址。 无效的设备 MAC 地址 %s。 无效的设备 MAC 地址。 无效选项。请使用 --help 查看有效选项列表。 于 %s:%zu: %s 启动的无效 peer 无效的路由度量 "%s" 无效的密钥 无效的验证选项：%s
JSON 配置 密钥 用于连接的密钥管理。"none"（WEP）、"ieee8021x"（动态 WEP）、"wpa-none"（Ad-Hoc WPA-PSK）、"wpa-psk"（基础结构 WPA-PSK）或 "wpa-eap"（WPA 企业）之一。对于使用安全保护的任何 Wi-Fi 连接，此属性必须设定。 LACP 模式。"active"、"off" 或 "passive" 之一。 LACP 速率（"slow" 或 "fast"）[slow] LEAP LEAP 验证和 802.1x 设置不兼容 LEAP 验证和 Ad-Hoc 模式不兼容 LEAP 验证要求 IEEE 802.1x 密钥管理 LEAP 验证要求 LEAP 用户名 LEAP 用户名要求 "leap" 验证 松散绑定、 用来帮助基于 GSM 的调制解调器创建 PPP 数据会话的老的设置。已过期：1 链路关闭延时 链路监测 链路开启延时 连接的链路监视器配置：每个链路监视器都由一个目录定义，其密钥取决于所选的链路监视器。可用的链路监视器有 "ethtool"、"nsna_ping" 和 "arp_ping"，并且在目录中以密钥 "name" 指定。可用的密钥有： ethtool："delay-up"、"delay-down"、"init-wait"；nsna_ping："init-wait"、"interval"、"missed-max"、"target-host"；arp_ping：包括 nsna_ping 中的所有以及 "source-host"、"validate-active"、"validate-incative"、"send-always"。请参阅 teamd.conf 的 man 页了解详细信息。 本地链路 当基础连接本身激活时应一块激活的连接 UUID 列表。当前只支持 VPN 连接。 插件列表，以 "," 隔开 字符串列表，指定允许使用的 WPA 协议版本。每个元素可以为 "wpa"（允许 WPA）或 "rsn"（允许 WPA2/RSN）中的一个。如果未指定，WPA 和 RSN 连接都允许。 字符串列表，在 "phase 2" 验证期间将与验证服务器所提供证书里的 altSubjectName 匹配。如果列表为空，不执行服务器证书的 altSubjectName 验证。 字符串列表，将与验证服务器所提供证书里的 altSubjectName 匹配。如果列表为空，不执行服务器证书的 altSubjectName 验证。 本地 IP 本地地址 [无] 本地端点 [无] 以 "," 分开的日志域：可以是 [%s] 的任意组合 日志级别：取 [%s] 之一 MAC [无] MAC 地址老化时间 [300] MACVLAN MACVLAN 连接 MACVLAN 上级设备或连接 UUID MACsec MACsec EAP 身份验证 MACsec PSK 身份验证 MACsec 连接 MACsec 上级设备或连接 UUID MII（推荐） MKA CAK MKA_CKN MSCHAP MSCHAPv2 MTU MTU [自动] MVRP、 视所有警告为致命错误 错误的 PEM 文件格式：DEK-Info 不是第二个标记。 错误的 PEM 文件格式：Proc-Type 不是第一个标记。 错误的 PEM 文件格式：DEK-Info 标签中的初始向量格式无效。 错误的 PEM 文件格式：没有在 DEK-Info 标记找到初始向量。 错误的 PEM 文件格式：未知的 Proc-Type 标记 "%s"。 错误的 PEM 文件格式：未知的私钥密码 "%s"。 手动 主连接失败 匹配 最大寿命 最大寿命 [20] 最大来源端口 [0] Mesh 代理配置的方法，默认为 NM_SETTING_PROXY_METHOD_NONE (0) 方法返回类型 "%s"，但期望的是 "%s" 跃点数 最小来源端口 [0] 在 arp_ping 链路监视器里缺少 %s 缺失 IPv4 地址 缺失 IPv6 地址 缺少 ovs 接口设置 缺少 ovs 接口类型 在 nsna_ping 链路监视器里缺少目标主机 移动宽带 移动宽带连接 %d 移动宽带网络密码 模式 调制解调器出现故障或不再可用 调制解调器初始化失败 调制解调器现已就绪且可用 ModemManager 不可用 修改所有用户的网络连接 修改持久性全局 DNS 配置 修改系统固有主机名 更改个人网络连接 正在监视连接激活（按任意键继续）
监控频率 如果指定上级接口，则必须指定 P_Key 不可用 名称 该设备所需固件可能缺失 此连接应使用的 WiMAX 网络服务提供商（NSP）的名称。已弃用：1 网络注册遭拒绝 网络注册超时 网络管理器文本用户界面 网络管理器活动的配置集 网络管理器连接配置集 网络管理器已启动 网络管理器已停止 NetworkManaer 未运行。 网络管理器日志 网络管理器（NetworkManager）监视所有网络连接，并自动选择要使用的最佳连接。
它还允许用户指定计算机无线网卡连接的无线访问点。 NetworkManager 选项 网络管理器权限 网络管理器状态 网络管理器已挂起 联网 网络管理器未运行（等待中）。
网络管理器现在处于 "%s" 状态
始终不使用此网络于默认路由 新建连接 新连接激活已排队 新连接名称： 下一个跃点 无法建立载波 未指定连接 未定义自定义陆游。 无拨号音 没有指定接口 未给出原因 未指定服务 无此连接 "%s" 没有有效的密钥 不是有效的 PAC 脚本 不搜索网络 用在串口通信的停止位数量。要么是 1 要么是 2。以 "8n1" 中的 1 为例。 确定 OLPC Mesh OLPC Mesh 信道 [1] OLPC Mesh 连接 个自定义路由 NM_SETTING_MAC_RANDOMIZATION_DEFAULT (0)（从不随机化，除非用户设定了全局默认随机且请求方支持随机化）、NM_SETTING_MAC_RANDOMIZATION_NEVER (1)（从不随机化 MAC 地址）或 NM_SETTING_MAC_RANDOMIZATION_ALWAYS (2)（总是随机化 MAC 地址）之一。此属性已为 "cloned-mac-address" 所弃用。已弃用：1 NM_SETTING_WIRELESS_POWERSAVE_DISABLE (2)（禁用 Wi-Fi 的节能模式）、 NM_SETTING_WIRELESS_POWERSAVE_ENABLE (3)（启用 Wi-Fi 的节能模式）、 NM_SETTING_WIRELESS_POWERSAVE_IGNORE (1)（不改变当前配置）或 NM_SETTING_WIRELESS_POWERSAVE_DEFAULT (0)（使用全局配置值）之一。所有其他值都保留。 控制 VLAN 接口的行为和功能的一个或多个标志。标识包含 NM_VLAN_FLAG_REORDER_HEADERS (0x1)（重新排序输出数据包首部）、NM_VLAN_FLAG_GVRP (0x2)（使用 GVRP 协议）、NM_VLAN_FLAG_LOOSE_BINDING (0x4)（接口到它主设备运行状态的松散绑定）和 NM_VLAN_FLAG_MVRP (0x8)（使用 MVRP 协议）。此属性的默认值为 NM_VLAN_FLAG_REORDER_HEADERS，但它以前是 0。为了保持后向兼容性，D-Bus API 里的默认值继续为 0 而且 D-Bus 上缺少属性时仍视为 0。 开放系统 Open vSwitch 网桥 Open vSwitch 接口 Open vSwitch 端口 Open vSwitch 网桥设置 Open vSwitch 数据库连接失败 Open vSwitch 接口设置 Open vSwitch 插线接口设置 Open vSwitch 端口设置 打开 %s 失败：%s
输出文件名称： 输出密钥 PAC URL 用户获取 PAC 文件的 PAC URL。 PAC 脚本 用于连接的 PAC 脚本。 PAN 标识符（<0x0000-0xffff>） PAN 连接 PAN 连接无法指定 GSM、CDMA 或串行设置 PAN 已请求，但蓝牙设备不支持 NAP PAP PCI PEM 证书没有结束标记 "%s"。 PEM 证书没有起始标记 "%s"。 PEM 密钥文件没有结束标记 "%s"。 PEM 密钥文件没有 start tag PIN PIN 检查失败 移动宽带设备需要 PIN 码 需要 PIN 码 用于 EAP 验证方法的 PIN。 PPP PPP 配置 PPP 失败 PPP 服务已断开连接 PPP 服务无法启动 PPP 设置 PPPoE PPPoE 连接 PPPoE 上级设备 PPPoE 用户名 P_KEY [无] 页 (<default|0-31>) 上级 上级设备 [无] 上级接口 [无] 串口的奇偶校验设置。 密码 密码 [无] 密码必须是 UTF-8 格式 已提供密码，但密钥没有加密。 用于 EAP 验证方法的密码，以字节数组给定以允许其他不是 UTF-8 编码的密码能够使用。如果 "password" 属性和 "password-raw" 属性都指定了，首选 "password"。 用于 ADSL 服务验证的密码。 用于 PPPoE 服务验证的密码。 密码： 需要密码或密钥来访问无线网络 "%s"。 路径开销 同等 执行接口配置的检查点或回滚 请选择选项 插件文件不存在（%s） 插件不是有效的文件（%s） WPA 网络的预共享密钥（Pre-Shared-Key）。对于 WPA-PSK，它是一个 8 到 63 个字符的 ASCII 密码口令（由 802.11i 标准指定）通过哈希以获得实际的密钥，或为一个 64 位 hexadecimal 字符的密钥。WPA3-Personal 网络使用可以为任何长度的密码口令以进行 SAE 验证。 前缀 %s 的预共享密钥 主机 输出网络管理器配置并退出 输出网络管理器版本并退出 优先级 未知的私钥密码 "%s"。 私钥密码 配置集名称 属性名称？ 代理 挂起或唤醒网络管理器（应仅用于系统电源管理） 退出 初始化配置后退出 记录头、 无线电开关 重新加载网络管理器配置 远程 远程 IP 移除 需要 128 位加密 需要 IPv4 地址来完成这个连接 需要 IPv6 地址来完成这个连接 轮询 IPv4 的路由优先级 IPv6 的路由优先级 路由 SCI 端口 [1] SIM PIN 不正确 SIM 运营商 ID 必须为 5 或 6 个数字的 MCCMNC 代码 SIT SR-IOV 设置 SSID SSID 长度超出 <1-32> 字节范围 Wi-Fi 网络的 SSID。必须指定。 要加入的 mesh 网络的 SSID。 SSID 或 BSSID： STP 优先级 [32768] 使用 "autoconnect=yes" 保存该连接。这样会立即激活该连接。
您仍要保存吗？ %s 搜索域 未找到密钥（secret）标记属性 "%s" DSL 连接 "%s" 需要密钥。 需要密钥来访问 MACsec 网络 "%s"。 需要密钥来访问有线网络 "%s"。 连接到 WireGuard VPN '%s' 所需要的 secret 需要密钥，但未提供 安全性 选择您要创建的连接类型。 选择您要添加的从连接类型。 选择... 发送 PPP 回响数据包 串行设置 服务 服务 [无] 设置主机名 主机名已设为 "%s" 设置系统主机名 设定此网桥的生成树协议（STP）优先级。值越小优先级越高；最高优先级（值最低）的网桥将选为根桥。 设置 "%s" 在连接里未提供。
此从连接的主连接设备类型的设置名称（例如 "bond"），或者为 NULL 如果此连接不是从连接。 设置名称？ 共享 共享密钥 共享连接服务失败 共享连接服务启动失败 在受限环境中使用的短 IEEE 802.15.4 地址。 短地址（<0x0000-0xffff>） 显示 显示 NetworkManager 选项 显示密码 从连接需要有效的 "%s" 属性 从机 如果设备支持多个连接方法，指定其使用的端口类型。"tp"（双绞线）、"aui"（连接单元接口）、"bnc"（细以太网）或 "mii"（介质无关接口）之一。如果设备只支持一个端口类型，忽略此设置。 指定 NMSetting8021xAuthFlags 选项使用的 "phase 1" 外部验证所要用的验证标识。可以明确地禁用个别 TLS 版本。如果未设定确切的 TLS 禁用标识，将由请求方决定允许还是禁止它。TLS 选项映射到 tls_disable_tlsv1_x 设置。详情请见 wpa_supplicant 文档。 指定如何获取用于 MKA（MACsec 密钥协商）的 CAK（连接关联密钥）。 指定 DCB 优先级流量控制（PFC）的 NMSettingDcbFlags。标志可以是 NM_SETTING_DCB_FLAG_ENABLE (0x1)、NM_SETTING_DCB_FLAG_ADVERTISE (0x2) 和 NM_SETTING_DCB_FLAG_WILLING (0x4) 的任意组合。 指定 DCB 优先级组的 NMSettingDcbFlags。标志可以是 NM_SETTING_DCB_FLAG_ENABLE (0x1)、NM_SETTING_DCB_FLAG_ADVERTISE (0x2) 和 NM_SETTING_DCB_FLAG_WILLING (0x4) 的任意组合。 指定 DCB FCoE 应用程序的 NMSettingDcbFlags。标志可以是 NM_SETTING_DCB_FLAG_ENABLE (0x1)、NM_SETTING_DCB_FLAG_ADVERTISE (0x2) 和 NM_SETTING_DCB_FLAG_WILLING (0x4) 的任意组合。 指定 DCB FIP 应用程序的 NMSettingDcbFlags。标志可以是 NM_SETTING_DCB_FLAG_ENABLE (0x1)、NM_SETTING_DCB_FLAG_ADVERTISE (0x2) 和 NM_SETTING_DCB_FLAG_WILLING (0x4) 的任意组合。 指定 DCB iSCSI 应用程序的 NMSettingDcbFlags。标志可以是 NM_SETTING_DCB_FLAG_ENABLE (0x1)、NM_SETTING_DCB_FLAG_ADVERTISE (0x2) 和 NM_SETTING_DCB_FLAG_WILLING (0x4) 的任意组合。 指定要在传出数据包使用的 TOS 值。 指定连接到远程 VXLAN 隧道端点的 UDP 目标端口。 指定要使用的 VXLAN 网络标识符（或 VXLAN 分段标识符）。 当 "eap" 属性指定了使用内部 TLS 隧道的 EAP 方法时，指定其允许的 "phase 2" 内部基于 EAP 的验证方法。可识别的基于 EAP 的 "phase 2" 方法有 "md5", "mschapv2", "otp", "gtc", and "tls"。要成功验证，每个 "phase 2" 内部方法都需要特定的参数；详情请见 wpa_supplicant 文档。 当 "eap" 属性指定了使用内部 TLS 隧道的 EAP 方法时，指定其允许的 "phase 2" 内部非 EAP 验证方法。可识别的非 EAP "phase 2" 方法有 "pap"、"chap"、"mschap"、"mschapv2"、"gtc"、"otp"、"md5" 和 "tls"。要成功验证，每个 "phase 2" 内部方法都需要特定的参数；详情请见 wpa_supplicant 文档。 指定内核已获知 FDB 条目的生存期，以秒计。 指定连接到远程 VXLAN 隧道端点的最大 UDP 来源端口。 指定 FDB 条目的最大数量。零值表示允许内核存储不限量的条目。 指定连接到远程 VXLAN 隧道端点的最小 UDP 来源端口。 指定要在传出数据包使用的存活时间值。 指定要连接的远程 Open vSwitch 网桥端口的单播目标 IP 地址。 指定当目标链路层地址在 VXLAN 设备转发数据库中未知时要在传出数据包中使用的单播目标 IP 地址，或者要加入的多播 IP 地址。 指定传入帧的验证模式。 指定是否打开 ARP 代理。 指定是否生成网络链路 IP ADDR 未命中通知。 指定是否生成网络链路 LL ADDR 未命中通知。 指定是否打开路由短路。 指定 SCI（安全信道标识符）是否包括在每个数据包中。 指定配置集是否能在指定时刻激活多次。该值为 NMConnectionMultiConnect 类型。 指定是否让未知来源的链路层地址和 IP 地址输入进 VXLAN 设备转发数据库。 指定一个 PID 文件的位置 通过串口通信使用的速度。注意该值一般对移动宽带调制解调器没有效果，因为它们通常忽略速度设置并使用最高的可用速度。 no-auto-default 设备的状态文件 状态文件位置 设备状态 主题字符串，在 "phase 2" 验证期间将与验证服务器所提供证书的主题匹配。如果未设，不执行服务器证书的主题验证。就算设定了此属性也提供不了多少安全性，而且它的使用已废弃，取代的是 NMSetting8021x:phase2-domain-suffix-match。 主题字符串，将与验证服务器所提供证书的主题匹配。如果未设，不执行服务器证书的主题验证。就算设定了此属性也提供不了多少安全性，而且它的使用已废弃，取代的是 NMSetting8021x:domain-suffix-match。 成功 系统配置目录位置 系统策略阻止 Wi-Fi 扫描 系统策略阻止网络连接的控制 系统策略阻止启用或禁用 Wi-Fi 设备 系统策略阻止启用或禁用 WiMAX 移动宽带设备 系统策略阻止启用或禁用连接性检查 系统策略阻止启用或禁用设备统计 系统策略阻止启用或禁用移动宽带设备 系统策略阻止启用或禁用系统联网 系统策略阻止徐该全部用户的共用网络设置 系统策略阻止更改个人网络设置 系统策略阻止修改持久性全局 DNS 配置 系统策略阻止修改系统固有主机名 系统策略阻止挂起或唤醒网络管理器 系统策略阻止重新加载网络管理器 系统策略阻止使用受保护的 Wi-Fi 网络共享连接 系统策略阻止使用开放 Wi-Fi 网络共享连接 系统策略阻止检查点的创建或其回滚 组合 组合端口 TUN 连接 Tap [否] 组合 组合 JSON 配置 [无] 组合连接 组合连接 %d 组合设备 组合端口 以 base64 编码的 256 为私钥。 设备的蓝牙地址。 设备和连接的蓝牙地址不匹配。 蓝牙连接失败或超时 以太网 MAC 地址的老化时间，以秒计。 FCoE 控制器模式；为 "fabric"（默认）或 "vn2vn"。 当与基于 GSM 网络建立数据会话时指定使用的 APN 的 GPRS 接入点名称。APN 通常确定了用户如何为他们的网络使用付费，和用户能否访问互联网或只是运营商特定的封闭平台，因此为用户的移动带宽套餐使用正确的 APN 很重要。根据 GSM 03.60 章节 14.9，APN 只能由字符 a～z、0～9、. 和 - 组成。 IP 配置不再有效 IP-over-InfiniBand 传输模式。要么为 "datagram" 要么为 "connected"。 用于此设备的 InfiniBand P_Key。值 -1 代表使用默认的 P_Key（又名 "索引 0 的 P_Key"）。否则它是个 16 位无符号整数，其高位已设定如果它是个 "正式会员" P_Key。 组合（team）网络接口的 JSON 配置。此属性应包含适用于 teamd 的原始 JSON 配置，因为该值直接传递给 teamd。如果未指定则使用默认的配置。格式详情请参阅 teamd.conf 手册。 组合（team）接口的 JSON 配置。此属性应包含适用于 teamd 的原始 JSON 配置，因为该值直接传递给 teamd。如果未指定则使用默认的配置。格式详情请参阅 teamd.conf 手册。 设备和连接的 MAC 地址不匹配。 设备和连接的 MAC 地址不匹配。 启用 NMSettingWiredWakeOnLan 的选项。并非全部设备都支持所有选项。可以是以下选项的任意组合：NM_SETTING_WIRED_WAKE_ON_LAN_PHY (0x2)、NM_SETTING_WIRED_WAKE_ON_LAN_UNICAST (0x4)、NM_SETTING_WIRED_WAKE_ON_LAN_MULTICAST (0x8)、NM_SETTING_WIRED_WAKE_ON_LAN_BROADCAST (0x10)、NM_SETTING_WIRED_WAKE_ON_LAN_ARP (0x20)、NM_SETTING_WIRED_WAKE_ON_LAN_MAGIC (0x40) 或特殊值 NM_SETTING_WIRED_WAKE_ON_LAN_DEFAULT (0x1)（使用全局设置）和 NM_SETTING_WIRED_WAKE_ON_LAN_IGNORE (0x8000)（在网络管理器（NetworkManager）里禁用 LAN 唤醒的管理）。 启用 NMSettingWiredWakeOnWLan 的选项。并非全部设备都支持所有选项。可以是以下选项的任意组合：NM_SETTING_WIRELESS_WAKE_ON_WLAN_ANY (0x2)、NM_SETTING_WIRELESS_WAKE_ON_WLAN_DISCONNECT (0x4)、NM_SETTING_WIRELESS_WAKE_ON_WLAN_MAGIC (0x8)、NM_SETTING_WIRELESS_WAKE_ON_WLAN_GTK_REKEY_FAILURE (0x10)、NM_SETTING_WIRELESS_WAKE_ON_WLAN_EAP_IDENTITY_REQUEST (0x20)、NM_SETTING_WIRELESS_WAKE_ON_WLAN_4WAY_HANDSHAKE (0x40)、NM_SETTING_WIRELESS_WAKE_ON_WLAN_RFKILL_RELEASE (0x80)、NM_SETTING_WIRELESS_WAKE_ON_WLAN_TCP (0x100) 或特殊值 NM_SETTING_WIRELESS_WAKE_ON_WLAN_DEFAULT (0x1)（使用全局默认值）和 NM_SETTING_WIRELESS_WAKE_ON_WLAN_IGNORE (0x8000)（在网络管理器（NetworkManager）中禁用 WLAN 唤醒的管理）。 要强制指定网络注册的网络 ID（GSM LAI 格式，如 MCC-MNC）。如果指定了网络 ID，网络管理器（NetworkManager）将尝试强制设备只在指定的网络注册。当设备不能直接控制漫游时，这可以用于确保设备不漫游。 应该连接到的 P2P 设备。目前，这是唯一创建或加入一个组的方法。 此连接应用的 SIM 卡的唯一标识符（由 WWAN 管理服务给定）。如果给定了，此连接将应用到包含匹配给定标识符 SIM 卡的 "device-id" 所允许的任何设备。 生成树协议（STP）转发延迟，以秒计。 生成树协议（STP）呼叫时间，以秒计。 生成树协议（STP）最大消息寿命，以秒计。 通过此端口的目标的生成树协议（STP）端口开销。 此网桥端口的生成树协议（STP）优先级。 分配到隧道数据包的 TTL。0 为特殊值，表示数据包继承 TTL 值。 由此连接创建的接口应该分配的 VLAN 标识符。有效范围为从 0 到 4094，不包括保留的 ID 4095。 设备和连接的 VLAN 标识符不匹配。 VLAN 模式。"access"、"native-tagged"、"native-untagged"、"trunk" 之一或不设定。 VLAN 标记在 0～4095 范围内。 VPN 连接没有及时启动 VPN 服务启动失败 VPN 服务返回了无效配置 VPN 服务意外停止 设备和连接的 VXLAN 标识符不匹配。 要设置的 WFD（Wi-Fi Display）IE（Information Elements）。WFD 需要在特定 Wi-Fi 数据帧中设置一个特定于协议的 IE。它们可以在这里设置来建立连接。这个设置只在实现一个 WFD 客户端时有用。 无法找到 Wi-Fi P2P peer 未找到 Wi-Fi 网络 WireGuard 配置文件需要是一个有效的接口名再加上 ".conf" 当验证到 802.1x 网络时，所允许使用的 EAP 方法。有效方法有："leap"、"md5"、"tls"、"peap"、"ttls"、"pwd" 和 "fast"。每种方法需要使用此设置属性的不同配置；请参考 wpa_supplicant 文档以获取允许的组合。 自动连接优先级。如果连接设为自动连接时，首选高优先级的连接。默认为 0。数值越高优先级越高。 基础网络连接已中断 网桥失败模式。"secure"、"standalone" 之一或留空。 此连接和设备在 S390 子信道不相同。 连接尝试超时 此连接未指定接口名。 连接未保存。您真的要退出吗？%s 此连接为蓝牙 NAP 类型。 此连接配置集已被其他客户端移除了。您可以在主菜单中输入 "save" 来还原它。
此连接配置集已被其他客户端移除了。您可以输入 "save" 来还原它。
连接已断开 此连接不是蓝牙连接。 此连接不是 MAC-VLAN 连接。 此连接不是 VLAN 连接。 此连接不是 VXLAN 连接。 这个连接不是一个 Wi-Fi P2P 连接。 此连接不是 Wi-Fi 连接。 此连接不是 WiMAX 连接。 此连接不是绑定（bond）连接。 此连接不是网桥连接。 此连接不是虚拟（dummy）连接。 此连接不是通用的连接。 此连接不是调制解调器连接。 此连接不是 ovs 网桥连接。 此连接不是 ovs 接口连接。 此连接不是 ovs 端口连接。 此连接不是组合（team）连接。 此连接不是 tun 连接。 此连接不是有效的调制解调器连接。 此连接不是 wpan 连接。 此连接不是 ADSL 连接。 此连接不是以太网或 PPPoE 连接。 此连接不是 IP 隧道连接。 此连接不是 InfiniBand 连接。 此连接不是 OLPC Mesh 连接。 连接无效：%s 连接已被移除 网桥端口的默认 PVID，它是分配给入站的未经过 tag 的数据包的 VLAN id。 用于没有明确指定跃点的路由器的默认跃点。默认值 -1 表示根据设备类型自动选择跃点。该跃点应用到自动路由、没有明确跃点设置的手动（静态）路由、地址前缀路由和默认路由。注意对于 IPv6，内核接受零值（0）但会将其转为 1024（用户默认）。因此，设置此属性为零等于设置它为 1024。对于 IPv4，零是跃点的常规值。 设备配置未就绪 设备已消失 设备缺少连接所要求的蓝牙功能。 设备缺少连接所要求的 WPA 功能。 设备缺少连接所要求的 WPA2/RSN 功能。 设备缺少连接所要求的功能。 设备的上级管理已更改 此连接要应用的设备唯一标识符（由 WWAN 管理服务给定）。如果给定了，连接将只应用到指定的设备。 设备已被移除 设备的活动连接已消失 假定设备已有连接 设备的上级已更改 拨号尝试失败 拨号请求超时 错误无法自动修复。
预期的响应开头 要分配到隧道数据包的流量标签。此属性只应用到 IPv6 隧道。 与此配置关联的网关。它只在同时设置了 "addresses" 时才有意义。这还需要取消设置了 “never-default”。否则，网关将会在标准化期间被清除。 将拥有设备的组 ID。如果设为 NULL 则每个人都能使用设备。 设备和连接的硬件地址不匹配。 FCoE 帧应使用的最高用户优先级（0～7），或 -1 代表默认优先级。只当 "app-fcoe-flags" 属性包含 NM_SETTING_DCB_FLAG_ENABLE (0x1) 标志时使用。 FIP 帧应使用的最高用户优先级（0～7），或 -1 代表默认优先级。只当 "app-fip-flags" 属性包含 NM_SETTING_DCB_FLAG_ENABLE (0x1) 标志时使用。 iSCSI 帧应使用的最高用户优先级（0～7），或 -1 代表默认优先级。只当 "app-iscsi-flags" 属性包含 NM_SETTING_DCB_FLAG_ENABLE (0x1) 标志时使用。 此设备的上级设备的接口名称。一般是 NULL，但如果 "p_key" 已设定，您必须通过设置此属性或 "mac-address" 来指定基础设备。 这个设备的接口名和连接不匹配。 要管理的接口 接口类型。要么为 "internal"，要么留空。 连接性检查间隔（以秒计） 用于隧道输入数据包的密钥。该属性值对某些隧道模式有效（GRE、IP6GRE）。如果留空则不使用密钥。 用于隧道输出数据包的密钥。该属性值对某些隧道模式有效（GRE、IP6GRE）。如果留空则不使用密钥。 线路正忙 listen-port。如果 listen-port 没有被指定，则会在接口使用随机选择端口。 隧道的本地端点。值可以为空，否则它必须包含一个 IPv4 或 IPv6 地址。 日志后台的配置值。请参考 NetworkManager.conf 里的 logging.backend 传统 LEAP 连接的登录密码（示例，key-mgmt = "ieee8021x" 和 auth-alg = "leap"）。 传统 LEAP 连接的登录用户名（示例，key-mgmt = "ieee8021x" 和 auth-alg = "leap"）。 macvlan 模式，它指定了同一低层设备上的多个 macvlans 之间的通信机制。 设备和连接的模式不匹配 未找到调制解调器 此连接绑定的网络接口名称。如果未设定，此连接可以连接到任何合适类型的接口（受其他设置的限制）。对于软件设备，此值指定创建设备的名称。对于其接口名无法很容易固定的连接类型（例如 移动宽带或 USB 以太网），不应使用此属性。设置此属性会限制连接可以使用的接口，而且当接口名改变或重新排序了，连接可能会应用到错误的接口。 验证的重试次数。零代表无限次数；-1 代表使用全局默认值。如果全局默认值未设定，允许连接失败前验证重试 3 次。当前此属性只应用到 802.1x 验证。 自动激活放弃前连接应该尝试的次数。零表示从不，-1 表示全局默认值（未被覆盖时为 4 次）。设定此属性为 1 表示阻止自动连接前只尝试一次激活。注意一段超时时间后，网络管理器（NetworkManager）将重新尝试自动连接。 建立基于 CDMA 移动宽带网络连接的拨号号码，如果有的话。如未指定，需要时默认使用号码（#777）。 虚拟设备的操作模式。允许值有 NM_SETTING_TUN_MODE_TUN (1) 以创建第三层设备和 NM_SETTING_TUN_MODE_TAP (2) 以创建类以太网的第二层设备。 用于访问 "phase2-ca-cert" 属性里存储的 "phase2" CA 证书的密码。只在 PKCS#11 令牌里存储的证书需要登录时有意义。 用于访问 "phase2-client-cert" 属性里存储的 "phase2" 客户端证书的密码。只在 PKCS#11 令牌里存储的证书需要登录时有意义。 用于访问 "ca-cert" 存储的 CA 证书的密码。只在 PKCS#11 令牌里存储的证书需要登录时有意义。 用于访问 "client-cert" 属性里存储的客户端证书的密码。只在 PKCS#11 令牌里存储的证书需要登录时有意义。 用于与网络验证的密码，如果需要。很多运营商不需要密码，或是接受任何密码。但是如果需要密码，可在这里指定。 当私钥使用路径方案或为 PKCS#12 格式时，解密 "phase2-private-key" 属性指定的 "phase 2" 私钥所使用的密码。 当私钥使用路径方案或为 PKCS#12 格式时，解密 "private-key" 属性指定私钥所使用的密码。 SCI（安全信道标识符）的端口组件，介于 1 和 65534 之间。 用于 MACsec 密钥协商的预共享 CAK。 用于 MACsec 密钥协商的预共享 CKN（连接关联密钥名称）。 隧道的远程端点；值必须包含一个 IPv4 或 IPv6 地址。 选中的 IP 方法未支持 客户端目前可用 端口开始流量转发所需激活的时间。 端口被视为关闭所需停用的时间。 连接上次完全激活的时间，以秒计算和 Unix 时间表示。当连接激活时网络管理器（NetworkManager）会定期更新连接的时间戳以确保活动连接有最新的时间戳。该用来读取（此属性的更改不被保留）。 要创建的虚拟功能的总数。请注意，如果存在 sriov 设置（即使为 0），NetworkManager 都会强制实现在接口上的虚拟功能的数量。为了防止对 SR-IOV 参数的任何改变，则不要向连接添加 sriov 设置。 连接的信任级别。格式自由、不区分大小写的字符串（例如 "Home"、"工作"、"公共"）。NULL 或为指定区域表示连接将放置到防火墙定义的默认区域。当在当前激活的连接上更新此属性时，更改立即生效。 隧道模式，例如 NM_IP_TUNNEL_MODE_IPIP (1) 或 NM_IP_TUNNEL_MODE_GRE (2)。 设定在隧道数据包上的服务类型（IPv4）或流量等级（IPv6）字段。 使用 fwmark 是可选的，它被默认禁用。如果把它设为 0，则代表被禁用，其他情况下它是一个用于出站数据包的 32 位 fwmark。 将拥有设备的用户 ID。如果设为 NULL 则每个人都能使用设备。 用于与网络验证的用户名，如果需要。很多运营商不需要用户名，或是接受任何用户名。但是如果需要用户名，可在这里指定。 正确语法为：'<vid>[-<vid>] [pvid] [untagged]' 正确语法为：'[root | parent <handle>] [handle <handle>] <kind>' 有效语法为："ip[/prefix] [next-hop] [metric] [attribute=val]... [,ip[/prefix] ...]" 有效语法为："vf [attribute=value]... [,vf [attribute=value]...]" %2$s 有 %1$d 个可选的设置。
没有主连接
这代表了用于多个目的的连接标识。它允许通过配置多个配置集来共享这个标识。另外，stable-id 可以包括占位符，以便根据上下文来动态地进行替换。stable-id 用来生成带有 ipv6.addr-gen-mode=stable-privacy 的 IPv6 stable private 地址。它也被用来为 ethernet.cloned-mac-address=stable 和 wifi.cloned-mac-address=stable 生成的克隆做种子。同时，它也被用来作为带有 ipv4.dhcp-client-id=stable 的 DHCP 客户端标识符，并用来获得带有 ipv6.dhcp-duid=stable-[llt,ll,uuid] 的 DHCP DUID。请注意，取决于它使用时的上下文，其它参数也会作为生成算法中的种子。例如，一个主机的密钥通常会被包括，因此，不同系统会产生不同的 ID。或者在带有 ipv6.addr-gen-mode=stable-privacy 时，设备名通常也会被包括，因此不同的接口会产生不同的地址。'$' 是一个特殊的字符，在运行时会被动态替换。 当前支持的值包括 "${CONNECTION}"、"${DEVICE}", "${BOOT}"、 "${RANDOM}"。这会为每个连接，每个设备，每一次引导创建唯一的 ID。请注意，"${DEVICE}" 代表设备的接口名。'$'后任何其它当前不被支持的值都会被认为是原字符串，但是可能会被保留作为以后使用。因此，建议避免使用 '$'，或使用 "$$" 来对它进行转义。例如，"${CONNECTION}-${BOOT}-${DEVICE}" 对于这个连接会创建一个唯一的 id，它会在每次重启后改变，并根据配置集在不同的地方激活而不同。如果这个值没有设置，会使用一个全局默认连接。如果还没有设置，它的默认值会与 "${CONNECTION}" 类似，并为这个连接使用一个唯一的固定 ID。 每次发送字节到调制解调器的延迟时间，以微秒计。 等待连接时间，以秒计（没有该选项时，默认为 30） VPN 服务建立连接的超时时间。有些服务可能需要很多时间才能连接。值 0 表示默认的超时，即 60 秒（除非被配置文件中的 vpn.timeout 覆盖）。大于零的值表示以秒计算的超时时间。 用于检查网络中是否存在重复 IP 地址的超时时间。如果检测到了冲突，激活将失败。零值表示不执行重复 IP 检查，-1 表示默认值（配置 ipvx.dad-timeout 覆盖或 3 秒）。大于零的值为以毫秒计算的超时时间。该属性当前只实现于 IPv4。 流量控制 传输模式 Tun Tun 设备 隧道标志。当前支持下列值：NM_IP_TUNNEL_FLAG_IP6_IGN_ENCAP_LIMIT (0x1)、NM_IP_TUNNEL_FLAG_IP6_USE_ORIG_TCLASS (0x2)、NM_IP_TUNNEL_FLAG_IP6_USE_ORIG_FLOWLABEL (0x4)、NM_IP_TUNNEL_FLAG_IP6_MIP6_DEV (0x8)、NM_IP_TUNNEL_FLAG_IP6_RCV_DSCP_COPY (0x10)、NM_IP_TUNNEL_FLAG_IP6_USE_ORIG_FWMARK (0x20)。它们只对 IPv6 隧道有效。 输入 "describe [<设置>.<属性>]" 来获得详细的属性描述。 输入 "help" 或 "?" 查看可用的命令。 输入 "print" 来显示所有的连接属性。 URI 为空 URI 不是有效的 UTF-8 URI 非 NUL 终止符 USB UTF-8 编码的文件路径，包含用于 EAP-FAST 的 PAC。 用于 EAP 验证方法的 UTF-8 编码密码。如果 "password" 属性和 "password-raw" 属性都指定了，首选 "password"。 指向包含 PEM 或 DER 格式化证书目录的 UTF-8 编码路径，该证书将同 "ca-cert" 属性里的指定证书一起添加到验证链。 指向包含 PEM 或 DER 格式化证书目录的 UTF-8 编码路径，该证书将同 "phase2-ca-cert" 属性里的指定证书一起添加到验证链。 无法添加新连接：%s 无法删除连接：%s 无法确定私钥类型。 无法保存连接：%s 无法设置主机名：%s 加密后意外的数据量。 "%s" 后更随着意外的文件尾
正常化连接意外地失败 检验连接意外地失败 未知 未知的命令参数："%s"
未知命令："%s"
未知错误 未知的日志域 "%s" 未知的日志等级 "%s" 未知参数：%s 未知参数：%s
未知原因 未知的从类型 "%s" 未知的/未处理的蓝牙连接类型 不支持的 extra-argument 解密不支持的密钥密码 加密不支持的密钥密码 不支持的 to-string-flags 参数 用法 Usage: nmcli [OPTIONS] OBJECT { COMMAND | help }
OPTIONS
-a, --ask ask for missing parameters
-c, --colors auto|yes|no whether to use colors in output
-e, --escape yes|no escape columns separators in values
-f, --fields <field,...>|all|common specify fields to output
-g, --get-values <field,...>|all|common shortcut for -m tabular -t -f
-h, --help print this help
-m, --mode tabular|multiline output mode
-o, --overview overview mode
-p, --pretty pretty output
-s, --show-secrets allow displaying passwords
-t, --terse terse output
-v, --version show program version
-w, --wait <seconds> set timeout waiting for finishing operations
OBJECT
g[eneral] NetworkManager's general status and operations
n[etworking] overall networking control
r[adio] NetworkManager radio switches
c[onnection] NetworkManager's connections
d[evice] devices managed by NetworkManager
a[gent] NetworkManager secret agent or polkit agent
m[onitor] monitor NetworkManager changes
用法：nmcli agent all { help }
将 nmcli 同时作为网络管理器（NetworkManager）的密钥（secret）代理及 polkit 代理运行。
用法：nmcli agent polkit { help }
将 nmcli 注册为用于用户会话的 polkit 操作。
当 polkit 守护进程要求授权时，nmcli 询问用户后将其响应返回 polkit。
用法：nmcli agent secret { help }
将 nmcli 作为网络管理器（NetworkManager）的密钥（secret）代理运行。当 NetworkManager 要求密码时，它将请求
注册的代理提供。这个命令将使 nmcli 保持运行，如果要求密码则会请求用户提供。
用法：nmcli agent { 命令 | help }
命令 := { secret | polkit | all }
Usage: nmcli connection add { ARGUMENTS | help }
ARGUMENTS := COMMON_OPTIONS TYPE_SPECIFIC_OPTIONS SLAVE_OPTIONS IP_OPTIONS [-- ([+|-]<setting>.<property> <value>)+]
COMMON_OPTIONS:
type <type>
ifname <interface name> | "*"
[con-name <connection name>]
[autoconnect yes|no]
[save yes|no]
[master <master (ifname, or connection UUID or name)>]
[slave-type <master connection type>]
TYPE_SPECIFIC_OPTIONS:
ethernet: [mac <MAC address>]
[cloned-mac <cloned MAC address>]
[mtu <MTU>]
wifi: ssid <SSID>
[mac <MAC address>]
[cloned-mac <cloned MAC address>]
[mtu <MTU>]
[mode infrastructure|ap|adhoc]
wimax: [mac <MAC address>]
[nsp <NSP>]
pppoe: username <PPPoE username>
[password <PPPoE password>]
[service <PPPoE service name>]
[mtu <MTU>]
[mac <MAC address>]
gsm: apn <APN>
[user <username>]
[password <password>]
cdma: [user <username>]
[password <password>]
infiniband: [mac <MAC address>]
[mtu <MTU>]
[transport-mode datagram | connected]
[parent <ifname>]
[p-key <IPoIB P_Key>]
bluetooth: [addr <bluetooth address>]
[bt-type panu|nap|dun-gsm|dun-cdma]
vlan: dev <parent device (connection UUID, ifname, or MAC)>
id <VLAN ID>
[flags <VLAN flags>]
[ingress <ingress priority mapping>]
[egress <egress priority mapping>]
[mtu <MTU>]
bond: [mode balance-rr (0) | active-backup (1) | balance-xor (2) | broadcast (3) |
802.3ad (4) | balance-tlb (5) | balance-alb (6)]
[primary <ifname>]
[miimon <num>]
[downdelay <num>]
[updelay <num>]
[arp-interval <num>]
[arp-ip-target <num>]
[lacp-rate slow (0) | fast (1)]
bond-slave: master <master (ifname, or connection UUID or name)>
team: [config <file>|<raw JSON data>]
team-slave: master <master (ifname, or connection UUID or name)>
[config <file>|<raw JSON data>]
bridge: [stp yes|no]
[priority <num>]
[forward-delay <2-30>]
[hello-time <1-10>]
[max-age <6-40>]
[ageing-time <0-1000000>]
[multicast-snooping yes|no]
[mac <MAC address>]
bridge-slave: master <master (ifname, or connection UUID or name)>
[priority <0-63>]
[path-cost <1-65535>]
[hairpin yes|no]
vpn: vpn-type vpnc|openvpn|pptp|openconnect|openswan|libreswan|ssh|l2tp|iodine|...
[user <username>]
olpc-mesh: ssid <SSID>
[channel <1-13>]
[dhcp-anycast <MAC address>]
adsl: username <username>
protocol pppoa|pppoe|ipoatm
[password <password>]
[encapsulation vcmux|llc]
tun: mode tun|tap
[owner <UID>]
[group <GID>]
[pi yes|no]
[vnet-hdr yes|no]
[multi-queue yes|no]
ip-tunnel: mode ipip|gre|sit|isatap|vti|ip6ip6|ipip6|ip6gre|vti6
remote <remote endpoint IP>
[local <local endpoint IP>]
[dev <parent device (ifname or connection UUID)>]
macsec: dev <parent device (connection UUID, ifname, or MAC)>
mode <psk|eap>
[cak <key> ckn <key>]
[encrypt yes|no]
[port 1-65534]
macvlan: dev <parent device (connection UUID, ifname, or MAC)>
mode vepa|bridge|private|passthru|source
[tap yes|no]
vxlan: id <VXLAN ID>
remote <IP of multicast group or remote address>
[local <source IP>]
[dev <parent device (ifname or connection UUID)>]
[source-port-min <0-65535>]
[source-port-max <0-65535>]
[destination-port <0-65535>]
wpan: [short-addr <0x0000-0xffff>]
[pan-id <0x0000-0xffff>]
[page <default|0-31>]
[channel <default|0-26>]
[mac <MAC address>]
6lowpan: dev <parent device (connection UUID, ifname, or MAC)>
dummy:
SLAVE_OPTIONS:
bridge: [priority <0-63>]
[path-cost <1-65535>]
[hairpin yes|no]
team: [config <file>|<raw JSON data>]
IP_OPTIONS:
[ip4 <IPv4 address>] [gw4 <IPv4 gateway>]
[ip6 <IPv6 address>] [gw6 <IPv6 gateway>]
用法：nmcli connection clone { 参数 | help }
参数 := [--temporary] [id | uuid | path] <ID> <新名称>
克隆现有的连接配置集。新创建的连接将是 <ID> 的完全复制，除了 UUID 属性（将被生
成）和 ID（由 <新名称> 参数提供）不同。
用法：nmcli connection delete { 参数 | help }
参数 := [id | uuid | path] <ID>
删除一个连接配置集。
配置集由其名称、UUID 或 D-Bus 路径来确定。
用法：nmcli connection down { 参数 | help }
参数 := [id | uuid | path | apath] <ID> ...
从设备停用连接（无需阻止设备再次自动激活）。要停用的配置集由它的名称、UUID 或
D-Bus 路径来确定。
用法：nmcli connection edit { 参数 | help }
参数 := [id | uuid | path] <ID>
在交互式编辑器中编辑已有的连接配置集。
配置集由其名称、UUID 或 D-Bus 路径来确定。
参数 := [type <新连接类型>] [con-name <新连接名称>]
在交互式编辑器中添加新的连接配置文件。
用法：nmcli connection export { 参数 | help }
参数 := [id | uuid | path] <ID> [<输出文件>]
导出连接。目前只支持 VPN 连接。数据会导出到标准输出或文件（如果给定了）。
用法：nmcli connection import { 参数 | help }
参数 := [--temporary] type <类型> file <要导入的文件>
将外部配置作为网络管理器（NetworkManager）连接配置导入。输入文件的类型由 type 选项指定。
目前只支持 VPN 配置。配置通过 NetworkManager VPN 插件导入。
用法：nmcli connection load { 参数 | help }
参数 := <文件名> [<文件名>...]
从磁盘加载/重载一个或多个连接文件。在手动编辑连接文件后使用此方法以确保
网络管理器（NetworkManager）能注意到它的最新状态。
用法：nmcli connection modify { 参数 | help }
参数 := [id | uuid | path] <ID> ([+|-]<设置>.<属性> <值>)+
修改连接配置集的一个或多个属性。配置集由其名称、UUID 或 D-Bus 路径来确定。对
于具有多个值的属性，您可以在属性名称前插入可选的 "+" 或 "-"。"+" 符号允许附加项
而不是覆盖整个值。"-" 符号允许删除选中项而不是整个值。
示例：
nmcli con mod home-wifi wifi.ssid rakosnicek
nmcli con mod em1-1 ipv4.method manual ipv4.addr "192.168.1.2/24, 10.10.1.5/8"
nmcli con mod em1-1 +ipv4.dns 8.8.4.4
nmcli con mod em1-1 -ipv4.dns 1
nmcli con mod em1-1 -ipv6.addr "abbe::cafe/56"
nmcli con mod bond0 +bond.options mii=500
nmcli con mod bond0 -bond.options downdelay
用法：nmcli connection monitor { 参数 | help }
参数 := [id | uuid | path] <ID> ...
监视连接配置集活动。
每当指定的连接修改时，这个命令将其打印出来。如果没有指定则监视所有的连接。
用法：nmcli connection reload { help }
从磁盘重新载入所有的连接文件。
用法：nmcli connection show { 参数 | help }
参数 := [--active] [--order <排序规则>]
列出内存中以及磁盘上的连接配置集，其中也有些是活动的，如果它正被设备使用的话。
未使用参数时，所有的配置集都将列出。当指定 --active 选项时，只显示活动的配置
集。--order 允许自定义连接的顺序（请参考手册页）。
参数 := [--active] [id | uuid | path | apath] <ID> ...
显示指定连接的细节。在默认情况下，静态配置和活动连接数据都会被显示。您可以用全
局的 "--fields" 选项过滤输出。更多信息请参考手册页。当指定 --active 选项时，只
会考虑活动的配置集。请使用全局的 --show-secrets 选项以同时显示关联的密钥（secret）。
用法：nmcli connection up { 参数 | help }
参数 := [id | uuid | path] <ID> [ifname <接口名>] [ap <BSSID>] [nsp <名称>] [passwd-file <密码文件>]
激活设备上的连接。要激活的配置集由它的名称、UUID 或 D-Bus 路径来确定。
参数 := ifname <接口名称> [ap <BSSID>] [nsp <名称>] [passwd-file <密码文件>]
用连接激活设备。网络管理器（NetworkManager）会自动选择连接配置集。
ifname - 指定激活连接所用的设备
ap - 指定要连接的 AP（只对 Wi-Fi 有效）
nsp - 指定要连接的 NSP（只对 WiMAX 有效）
passwd-file - 激活连接所需的密码文件
Usage: nmcli connection { COMMAND | help }
COMMAND := { show | up | down | add | modify | clone | edit | delete | monitor | reload | load | import | export }
show [--active] [--order <order spec>]
show [--active] [id | uuid | path | apath] <ID> ...
up [[id | uuid | path] <ID>] [ifname <ifname>] [ap <BSSID>] [passwd-file <file with passwords>]
down [id | uuid | path | apath] <ID> ...
add COMMON_OPTIONS TYPE_SPECIFIC_OPTIONS SLAVE_OPTIONS IP_OPTIONS [-- ([+|-]<setting>.<property> <value>)+]
modify [--temporary] [id | uuid | path] <ID> ([+|-]<setting>.<property> <value>)+
clone [--temporary] [id | uuid | path ] <ID> <new name>
edit [id | uuid | path] <ID>
edit [type <new_con_type>] [con-name <new_con_name>]
delete [id | uuid | path] <ID>
monitor [id | uuid | path] <ID> ...
reload
load <filename> [ <filename>... ]
import [--temporary] type <type> file <file to import>
export [id | uuid | path] <ID> [<output file>]
用法：nmcli device connect { 参数 | help }
参数 := <接口名>
连接该设备。
网络管理器（NetworkManager）将尝试查找将激活的合适连接，包括那些没有设定为自动连接的连接。
用法：nmcli device delete { 参数 | help }
参数 := <接口名> ...
删除软件设备。
此命令用于移除接口。它仅适用于软件设备（如绑定、网桥等）。硬件设备不能用这个命
令来删除。
用法：nmcli device disconnect { 参数 | help }
参数 := <接口名>
断开设备的连接。
该命令断开设备的连接并阻止其在没有用户/手动干预的情况下继续自动激活连接。
用法：nmcli device lldp { 参数 | help }
参数 := [list [ifname <接口名>]]
列出通过 LLDP 发现的邻居设备。可使用 "ifname" 选项列出具体接口的邻居设备。
Usage: nmcli device modify { ARGUMENTS | --help }
ARGUMENTS := <ifname> ([+|-]<setting>.<property> <value>)+
修改设备上当前活动连接的一个或多个属性，但不用更改该连接的配置集。更改会即时生
效。对于多值属性，您可以在属性名前插可选的 "+" 或 "-" 符号。"+" 符号允许附加项
而不是是替换掉整个值。"-" 符号允许移除选中项而不是整个值。
例如：
nmcli dev mod em1 ipv4.method manual ipv4.addr "192.168.1.2/24, 10.10.1.5/8"
nmcli dev mod em1 +ipv4.dns 8.8.4.4
nmcli dev mod em1 -ipv4.dns 1
nmcli dev mod em1 -ipv6.addr "abbe::cafe/56"
用法：nmcli device monitor { 参数 | help }
参数 := [<接口名>] ...
监视设备活动。
每当指定的连接修改时，这个命令会将其打印出来。如果没有指定则监视所有的连接。
Usage: nmcli device reapply { ARGUMENTS | help }
ARGUMENTS := <ifname>
尝试将自上次应用以后对当前活跃连接所做出的改变应用到设备中。
用法：nmcli device set { 参数 | help }
参数 := 设备 { 属性 [ 属性 ... ] }
设备 := [ifname] <接口名>
属性 := { autoconnect { yes | no } |
{ managed { yes | no }
修改设备属性。
用法：nmcli device show { 参数 | help }
参数 := [<接口名>]
显示设备详情。
该命令列出所有设备或者给定设备的详情。
用法：nmcli device status { help }
显示所有设备的状态。
默认情况下，显示下列栏目：
DEVICE - 接口名称
TYPE - 设备类型
STATE - 设备状态
CONNECTION - 设备上激活的连接（如果有的话）
显示哪些栏目可以通过 "--fields" 全局选项改变。"status" 是默认命令，也就是说
"nmcli device" 会调用 "nmcli device status"。
Usage: nmcli device wifi { ARGUMENTS | help }
Perform operation on Wi-Fi devices.
ARGUMENTS := [list [ifname <ifname>] [bssid <BSSID>] [--rescan yes|no|auto]]
List available Wi-Fi access points. The 'ifname' and 'bssid' options can be
used to list APs for a particular interface, or with a specific BSSID. The
--rescan flag tells whether a new Wi-Fi scan should be triggered.
ARGUMENTS := connect <(B)SSID> [password <password>] [wep-key-type key|phrase] [ifname <ifname>]
[bssid <BSSID>] [name <name>] [private yes|no] [hidden yes|no]
Connect to a Wi-Fi network specified by SSID or BSSID. The command finds a
matching connection or creates one and then activates it on a device. This
is a command-line counterpart of clicking an SSID in a GUI client. If a
connection for the network already exists, it is possible to bring up the
existing profile as follows: nmcli con up id <name>. Note that only open,
WEP and WPA-PSK networks are supported if no previous connection exists.
It is also assumed that IP configuration is obtained via DHCP.
ARGUMENTS := hotspot [ifname <ifname>] [con-name <name>] [ssid <SSID>]
[band a|bg] [channel <channel>] [password <password>]
Create a Wi-Fi hotspot. Use 'connection down' or 'device disconnect'
to stop the hotspot.
Parameters of the hotspot can be influenced by the optional parameters:
ifname - Wi-Fi device to use
con-name - name of the created hotspot connection profile
ssid - SSID of the hotspot
band - Wi-Fi band to use
channel - Wi-Fi channel to use
password - password to use for the hotspot
ARGUMENTS := rescan [ifname <ifname>] [[ssid <SSID to scan>] ...]
Request that NetworkManager immediately re-scan for available access points.
NetworkManager scans Wi-Fi networks periodically, but in some cases it might
be useful to start scanning manually. 'ssid' allows scanning for a specific
SSID, which is useful for APs with hidden SSIDs. More 'ssid' parameters can be
given. Note that this command does not show the APs,
use 'nmcli device wifi list' for that.
Usage: nmcli device { COMMAND | help }
COMMAND := { status | show | set | connect | reapply | modify | disconnect | delete | monitor | wifi | lldp }
status
show [<ifname>]
set [ifname] <ifname> [autoconnect yes|no] [managed yes|no]
connect <ifname>
reapply <ifname>
modify <ifname> ([+|-]<setting>.<property> <value>)+
disconnect <ifname> ...
delete <ifname> ...
monitor <ifname> ...
wifi [list [ifname <ifname>] [bssid <BSSID>] [--rescan yes|no|auto]]
wifi connect <(B)SSID> [password <password>] [wep-key-type key|phrase] [ifname <ifname>]
[bssid <BSSID>] [name <name>] [private yes|no] [hidden yes|no]
wifi hotspot [ifname <ifname>] [con-name <name>] [ssid <SSID>] [band a|bg] [channel <channel>] [password <password>]
wifi rescan [ifname <ifname>] [[ssid <SSID to scan>] ...]
lldp [list [ifname <ifname>]]
用法：nmcli general hostname { 参数 | help }
参数 := [<主机名>]
获取或更改永久的系统主机名。
如果没有参数，则会输出当前配置的主机名。给定主机名后，网络管理器（NetworkManager）会将其设为
新的永久系统主机名。
用法：nmcli general logging { 参数 | help }
参数 := [level <日志级别>] [domains <日志域>]
获取或更改网络管理器（NetworkManager）的日志级别和域。
如果没有任何参数则显示当前日志级别和域。要更改日志状态，请提供级别和（或）域。
可能的日志域列表请参阅手册页。
用法：nmcli general permissions { help }
显示验证操作的调用程序权限。
用法：nmcli general status { help }
显示网络管理器（NetworkManager）的整体状态。
"status" 是默认操作，即 "nmcli gen" 调用 "nmcli gen status"
用法：nmcli general { 命令 | help }
命令 := { status | hostname | permissions | logging }
status
hostname [<主机名>]
permissions
logging [level <日志级别>] [domains <日志域>]
用法：nmcli monitor
监视网络管理器（NetworkManager）的更改。
每当 NetworkManager 出现更改时打印一行信息。
用法：nmcli networking connectivity { 参数 | help }
参数 := [check]
获取网络连接性状态。
可选的 "check" 参数可让网络管理器（NetworkManager）重新检查连接性。
用法：nmcli networking off { help }
关闭联网。
用法：nmcli networking on { help }
打开联网。
用法：nmcli networking { 命令 | help }
命令 := { [ on | off | connectivity ] }
on
off
connectivity [check]
用法：nmcli radio all { 参数 | help }
参数 := [on | off]
获取所有无线电开关的状态，或者打开/关闭它们。
用法：nmcli radio wifi { 参数 | help }
参数 := [on | off]
获取 Wi-Fi 无线电开关的状态，或者打开/关闭它。
用法：nmcli radio wwan { 参数 | help }
参数 := [on | off]
获取移动宽带无线电开关的状态，或者打开/关闭它。
用法：nmcli radio { 命令 | help }
命令 := { all | wifi | wwan }
all | wifi | wwan [ on | off ]
使用 "nmcli device show" 获取关于已知设备的完整信息，以及
"nmcli connection show" 获取活动连接配置集的概述。
完整的用法细节，可参考 nmcli(1) 和 nmcli-examples(7) 手册页。
使用 TCP 首部压缩 使用 IPv6 临时私有地址 使用点到点加密（MPPE） 使用有状态 MPPE 用户 ID [无] 用户设置 用户名 用户名 [无] 用于 ADSL 服务验证的用户名。 用于 PPPoE 服务验证的用户名。 ADSL 连接的 VCI 有索引为 %u 的虚拟功能，但虚拟功能总数为 %u 虚拟功能 %d 和 %d 未按升序排列 VLAN VLAN ID <0-4095> VLAN 连接 VLAN 连接 %d VLAN 标记（<0-7>）[无] VLAN 标识 VLAN 上级设备或连接 UUID ADSL 连接的 VPI VPN VPN 已连接 VPN 连接中 VPN 连接中（获取 IP 配置中） VPN 连接中（需要验证） VPN 连接中（准备） VPN 连接 VPN 连接 %d VPN 连接（名称、UUID 或路径）： VPN 连接失败 VPN 已断开 需要 VPN 密码 VTI VTI6 VXLAN VXLAN ID VXLAN 连接 有效的连接类型：%s
验证连接：%s
验证设置 "%s"：%s
Veth WEP 128位 密码 WEP 40/128 位密钥（Hex 或者 ASCII） WEP 索引 1（默认） 2 3 4 WEP 密钥索引已设为 "%d" 猜测 WEP 密钥为 "%s" 类型 WI-FI WPA & WPA2 企业 WPA & WPA2 个人 WPA Ad-Hoc 验证要求 "none" 配对密码 WPA Ad-Hoc 验证要求 "wpa" 协议 WPA Ad-Hoc 验证要求 Ad-Hoc 模式的 AP 由于内核程序错误禁用了 WPA Ad-Hoc WPA Ad-Hoc 要求 "tkip" 组密码 WPA 验证和共享密钥（Shared Key）验证不兼容 WPA 验证和非 EAP（原始的）LEAP 或动态 WEP 不兼容 WPA-EAP 验证要求 802.1x 设置 WPA-EAP 要求 "open" 验证 WPA-PSK 验证和 802.1x 兼容 WPA-PSK 要求 "open" 验证 WPAN 连接 WPAN 设置 需要 WPS WWAN 无线电开关 等待网络管理器启动而不是连接 等待网络管理完成激活启动网络连接。 LAN 唤醒模式 "default" 和 "ignore" 是相互排斥的标记 LAN 唤醒密码只能在幻数据包模式使用 WLAN 唤醒模式 "default" 和 "ignore" 是相互排斥的标记 WLAN 唤醒正在尝试设定未知的标记 警告：%s
警告：%s 不是任何现有连接配置集的 UUID
警告：%s.%s 已设为 "%s"，但在基础结构（infrastructure）模式下它可能会被忽略。
警告："%s" 应该是隐藏 AP 的 SSID，但看起来像 BSSID。
警告：已指定 "file"，忽略额外的参数。
警告：已指定 "type"，忽略额外的参数。
警告：名为 '%1$s' 的连接已存在。使用 uuid '%2$s' 来指代连接
警告：重复的参数 "%s"。
警告：正在编辑已有的连接 "%s"；"con-name" 参数已忽略
警告：正在编辑已有的连接 "%s"；"type" 参数已忽略
警告：master="%s" 没有引用任何现有的配置集。
警告："passwd-file" 里没有给定 "%s" 的密码而且 nmcli 没有 "--ask" 选项就无法进行
询问。
警告：polkit 代理初始化失败：%s
警告： 设置 %s.%s 需要删除 ipv4 和 ipv6 设置
当 "method" 设为 "auto" 且此属性为 TRUE 时，自动配置的名称服务器和搜索域被忽略且只有 "dns" 和 "dns-search" 属性中指定的名称服务器和搜索域被使用，如果有的话。 当 "method" 设为 "auto" 且此属性为 TRUE 时，自动配置的路由被忽略且只有 "routes" 属性中指定的路由被使用，如果有的话。 为 TRUE 时，强制速度和双工模式的自动协商。如果 "speed" 和 "duplex" 属性都指定了，只有那一个模式会在链路自动协商过程中被通告和接受：这只对 BASE-T 802.3 规范有效并用于强制吉比特模式，因为在这些情况下链路协商时强制性的。为 FALSE 时，"speed" 和 "duplex" 属性应该都设置，否则链路配置将被忽略。 为 TRUE 时，将只允许连接到本地网络，不会连接到漫游网络。 设为 TRUE 时，覆盖掉 "ca-path" 和 "phase2-ca-path" 属性，换成使用配置时 --system-ca-path 指定的系统 CA 目录。该目录中的证书同 "ca-cert" 和 "phase2-ca-cert" 属性指定的任何证书一起加入到验证链。如果以 --system-ca-path 提供的路径不是文件名（捆绑或受信任 CA 证书），它会变成覆盖 "ca-cert" 和 "phase2-ca-cert" 属性（为 wpa_supplicant 设定 ca_cert/ca_cert2 选项）。 当时使用 WEP 时（示例，key-mgmt = "none" 或 "ieee8021x"）表示接入点这里需要 802.11 验证算法。其中的 "open" 用于开放系统（Open System），"shared" 用于共享密钥，而 "leap" 用于思科 LEAP。当使用思科 LEAP（示例，key-mgmt = "ieee8021x" 和 auth-alg = "leap"）时，必须指定 "leap-username" 和 "leap-password" 属性。 当设定为大于 0 的值时，配置此设备使用指定的速度。如果 "auto-negotiate" 为 "yes"，只有指定的速度会在链路自动协商过程中被通告：这只对 BASE-T 802.3 规范有效并用于强制吉比特模式，因为在这些情况下链路协商时强制性的。如果值未设定（0，默认值），链路配置要么将被忽略（如果 "auto-negotiate" 为 "no"，默认值）要么将被自动协商（如果 "auto-negotiate" 为 "yes"），并且本地设备将通告所有支持的双工模式。单位为 Mbit/s，例如 100 == 100Mbit/s。如果非零，必须与 "duplex" 属性一块设定。在指定速度值前请确保您的设备支持。 设定值时，"half" 和 "full" 二选一，配置设备要使用的指定双工模式。如果 "auto-negotiate" 为 "yes"，只有指定的模式会在链路自动协商过程中被通告：这只对 BASE-T 802.3 规范有效并用于强制吉比特模式，因为在这些情况下链路协商时强制性的。如果值未设定（默认值），链路配置要么将被忽略（如果 "auto-negotiate" 为 "no"，默认值）要么将被自动协商（如果 "auto-negotiate" 为 "yes"），并且本地设备将通告所有支持的双工模式。如果指定，必须与 "speed" 属性一块设定。在指定双工模式前请确保您的设备支持。 当使用静态 WEP 时（例如 key-mgmt = "none"）并且接入点使用非默认的 WEP 密钥索引，在这里设置该 WEP 密钥索引。有效值从 0（默认密钥）到 3。注意有些用户接入点（如 Linksys WRT54G）编号密钥为 1～4。 DHCPv4 是否必须是成功的 是否为连接启用 LLDP。 连接是否启用 LLMNR（Link-Local Multicast Name Resolution）。LLMNR 是一个基于 DNS 的数据包格式，它可以使 IPv4 和 IPv6 主机对位于本地连接中的主机进行名称解析。它的值可以是: yes: 注册主机名并为连接进行解析，no: 在接口中禁用 LLMNR，resolve: 不注册主机名，但允许解析 LLMNR 主机名。这个功能需要支持 LLMNR 的插件。例如，dns-systemd-resolved 就是这样一个插件。 SLAAC 是否必须是成功的 是否为连接启用 mDNS。它的值可以是：yes: 注册主机名并为连接进行解析，no: 接口禁用 mDNS，resolve: 不注册主机名但允许解析 mDNS 主机名。这个功能需要一个支持 mDNS 的插件。dns-systemd-resolved 就是这样一个插件。 NetworkManger 激活此连接时，是否自动启动此连接的从连接。这只对主连接有实际效果。属性 "autoconnect"、"autoconnect-priority" 和 "autoconnect-retries" 跟此设置无关。允许的值有：0：保持从连接不变；1：激活此连接的所有从连接；-1：默认。如果设为 -1（默认）时，读取全局 connection.autoconnect-slaves 以确定实际值。如果它也是默认的，此设置回落到 0。 当连接资源可用时，网络管理器（NetworkManager）是否自动连接。TRUE 为自动激活连接，FALSE 为请求手动介入来激活连接。注意自动连接未实现于 VPN 配置集。要自动连接 VPN 配置集请参阅作为备用方法的 "secondaries"。 连接是否按流量计费。当在当前激活的连接上更新此属性时，更改立即生效。 接口是否应为 MACVTAP。 是否应将接口置于混杂模式。 代理配置是否只用于浏览器。 是否加密传输的流量。 是否为 peer 的 AllowedIPs 范围自动添加路由。如果为 TRUE (默认设置)，NetworkManager 会根据 ipv4.route-table 和 ipv6.route-table 在路由表中自动添加路由。如果为 FALSE，不会自动添加路由。在这种情况下，用户需要分别在 ipv4.routes 和 ipv6.routes 中添加静态路由。 是否通过兼容的驱动程序自动探测虚拟功能（virtual function）。如果设为 NM_TERNARY_TRUE (1)，内核将尝试绑定虚拟功能到兼容的驱动，而且如果成功，每个虚拟功能都将实例化一个新的网络接口。如果设为 NM_TERNARY_FALSE (0)，虚拟功能将不被声明且不会为它们创建网络接口。当设为 NM_TERNARY_DEFAULT (-1) 时，使用全局默认值；全局默认未指定的情况下则假定为 NM_TERNARY_TRUE (1)。 是否在此隧道启用路径 MTU 发现。 是否管理 IPv6 SLAAC Wi-Fi 自动 客户端 Wi-Fi P2P Wi-Fi P2P 连接 Wi-Fi 连接 Wi-Fi 连接 %d Wi-Fi 网络模式；"infrastructure"、"adhoc" 或 "ap" 之一。如果留空，假定为 infrastructure。 Wi-Fi 无线电开关 Wi-Fi 扫描列表 无 Wi-Fi 安全设置 WiMAX WiMAX NSP 名称 WiMAX 连接 WireGuard WireGuard VPN secret WireGuard VPN 设置 WireGuard 私钥 有线 有线 802.1X 身份验证 有线以太网 有线连接 有线连接 %d 用于 Wi-Fi 连接的无线信道。设备将只在指定的信道上加入（或创建 Ad-Hoc 网络）Wi-Fi 网络。因为信道号码在不同频段间重复，此属性也需要设定 "band" 属性。 "cloned-mac-address" 设置为 "random" 或 "stable" 时，按默认 MAC 地址的所有位都被扰乱，并创建一个本地管理的单播 MAC 地址。 此属性允许指定某些位为固定的。请注意，第一个 MAC 地址的最低有效位始终未被设置以创建单播MAC地址。如果属性为 NULL，它可以被默认的连接设置覆盖。如果该值还是 NULL 或为空字符串，默认值就为创建一个本地管理的单播 MAC 地址。如果该值包含一个 MAC 地址，此地址用作掩码。掩码的设置位将以设备的当前 MAC 地址填充，而未设置位将随机化。设为 "FE:FF:FF:00:00:00" 表示保留当前 MAC 地址的 OUI 且使用 "random" 或 "stable" 算法只随机最低三位。如果该值在掩码后包含一个附加的 MAC 地址，使用此地址来代替当前的 MAC 地址去填充那些不应该随机的位。示例，值 "FE:FF:FF:00:00:00 68:F7:28:00:00:00" 将设定 MAC 地址的 OUI 为 68:F7:28，而更低位随机化。值 "02:00:00:00:00:00 00:00:00:00:00:00" 将创建完全扰乱的全局管理烧录的 MAC 地址。如果值包含多个附加 MAC 地址，就随机选择其中一个。示例，"02:00:00:00:00:00 00:00:00:00:00:00 02:00:00:00:00:00" 将创建完全扰乱的 MAC 地址，随机地选择本地或全局管理。 写入 %s 失败：%s
异或 您可以多次指定此选项。按下 <回车键> 以完成。
您可以编辑下列属性：%s
您可编辑下列设置：%s
您可以运行 "verify fix" 来修复错误。
运行 %s 必须是根用户！
[ 类型：%s | 名称：%s | UUID：%s | 变动：%s | 临时：%s ]
["%s" 设置值]
[NM 属性描述] [nmcli 特定描述] 使用 "%s" 验证的连接无法指定 WPA 密文 使用 "%s" 验证的连接无法指定 WPA 协议 使用 "%s" 验证的连接无法指定 WPA 密码 使用 "%s" 验证的连接无法使用 WPA 密钥管理 只有启用路径 MTU 发现时才允许固定的 TTL 网关与 "%s" 不兼容 访问遭到拒绝 操作名缺失。 activate [<接口名>] [/<ap>|<nsp>] :: 激活连接
激活连接。
可用选项：
<接口名> - 将激活连接的设备。
/<ap>|<nsp> - AP (Wi-Fi) 或者 NSP (WiMAX)（未指定 <接口名> 时前置 / 符号。）
已激活 激活中 add [<值>] :: 附加新值到这个属性
如果该属性为容器类型，则这个命令在这个属性中添加提供的 <值>。对于单值属性，它会替换该值（和 "set" 一样）。
通告、 为代理拥有、 睡眠中 属性对 IPv4 路由无效 属性对 IPv6 路由无效 验证 自动 自动连接 back :: 转到上层菜单
带宽百分比总和必须为 100%% barbar 二进制数据缺失 蓝牙连接 静态链路配置需要设置速度和双工 速度和双工都应设定有效值或者都保持未设定 字节 无法设定属性：%s 不能同时启用和禁用 无法从类型为 "%s%s" 的值设置类型为 "" 的属性 无法为规则检测到地址家族 由于缺少 "%s%s"，无法加载 VPN 插件 ""。缺少客户端插件？ 无法在 "%s" 里加载 VPN 插件：无效的服务名称 无法在 "%s" 里加载 VPN 插件：缺少插件名称 无法为 "%s%s" 加载旧版限定的 VPN 插件 "" 无法加载插件 "%s"：%s 无法从文件 "%s" 读取 PAC 脚本 无法从文件 "%s" 读取组合（team）配置 无法为 VPN 设置设定 connection.multi-connect 无法设定空的 %s 选项 证书无效 证书是无效的：%s 证书或密钥文件 "%s" 不存在 change :: 更改当前值
显示当前值并允许编辑它。
除非 "%s" 包含 1（启用），否则更改无法生效 频道不能在 %d 和 %d 之间 冲突的 secret 标记 mac-address-randomization 和 cloned-mac-address 的值冲突 已连接 已连接（仅本地） 已连接（仅站点） 连接中 连接中（正在检查 IP 连接性） 连接中（正在配置） 连接中（正在获取 IP 配置） 连接中（需要验证） 连接中（准备） 连接中（正在启动次级连接） 连接 连接可用 连接和接入点不匹配 连接不匹配设备 连接失败 %s %u 连接类型 "%s" 无效 连接可用 对象 "%2$s" 的构造属性 "%1$s" 在构造后不能被设定 数据缺失 已停用 停用中 默认 值 %s 的末尾有舍弃的分号："%s" describe :: 描述属性
显示属性描述。您可以参阅 nm-settings(5) 手册页来查看所有的网络管理器（NetworkManager）设置和属性。
describe [<设置>.<属性>] :: 描述属性
显示属性描述。您可以参阅 nm-settings(5) 手册页来查看全部的网络管理器（NetworkManager）设置和属性。
设备 "%s" 与连接 "%s" 不兼容 设备 '%s' 与连接 '%s' 不兼容： 已禁用 已断开 断开中 不知道如何获取属性值 重复的虚拟功能索引 %u 重复的网桥 VLAN vid %u 重复的 "%s" 重复的 %s 重复的属性 重复的设置名称 元素无效 空文本没有描述一个规则 已启用 启用、 加载设置值时出错：%s 统计文件 %s 失败：%s 加载 VPN 插件 "%s" 失败：%s 从 %s 加载 nm_vpn_editor_plugin_factory() 失败（%s） 读取 passwd-file "%s" 失败：%s 设定绑定属性失败 %s 设定属性失败：%s 选择字段失败 字段 "%s" 必须是单独的 文件 "%s" 包含无效的 utf-8 %s 的文件权限 文件名具有无效的格式（%s） 文件名必须为绝对路径（%s） 标记无效 标志无效 标志无效 — 已禁用 完全 缺失固件 值 %s 的末尾有无用信息："%s" 如果没有配置地址，网关会无法设置 网关无效 goto <设置>[.<属性>] | <属性> :: 进入设置/属性进行编辑
该命令进入设置或属性来进行编辑。
示例：nmcli> goto connection
nmcli connection> goto secondaries
nmcli> goto ipv4.addresses
带有 from/src 但是 prefix-length 为 0 必须匹配 PKCS#12 的 "%s" 属性 带有 to/dst 但是 prefix-length 为 0 help/? [<命令>] :: nmcli 命令的帮助
help/? [<命令>] :: nmcli 命令的帮助
host.domain.org 硬件 接口 忽略无效的 %s 地址：%s 忽略无效的 %s 路由：%s 忽略无效的 DNS 服务器 IPv%c 地址 "%s" 忽略无效的 MAC 地址 忽略无效的 SSID 忽略无效的字节元素 "%d"（不在 0 和 255 之间） 忽略 %s%s 路由的无效网关 "" 忽略无效的数字 "%s" 忽略无效的原始密码 忽略无效的组合（team）配置：%s 忽略缺失的数字 "--order" 选项里有错误项 "%s" "--order" 选项的字符串 "%s" 错误 接口名包含无效字符 接口名长度超过 15 字符 接口名被保留 接口名太短 软件 infiniband 设备的接口名必须为 "%s" 或未设置（但现在是 "%s"） 无效 " 无效的 "from" 部分 无效的 "to" 部分 "%s" 或其值 "%s" 无效 无效的 DUID peer 的 allowed-ip 无效的 IP 地址 "%s" 无效的 IP 地址：%s 无效的 IPv%c 地址 '%s' 位置 %d 有无效的 JSON（%s） 无效的 PKCS#11 URI "%s" 无效的虚拟功能 %u：%s 无效操作 无效操作： 无效的 地址家族 无效的属性类型 "%s" 无效的验证标记 布尔值 "%1$s" 对属性 "%2$s" 无效 无效的证书格式 无效的目标端口范围 peer 无效的端点 无效字段 "%s%s%s%s%s"；%s%s%s 无效字段 "%s%s%s";允许的字段：[%s] 无效字段 "%s%s%s"；没有此类字段 无效字段 "%s"；允许的字段为 %s 和 %s，或 %s,%s 对 %d%s 无效的文件所有者 无效的 from/src 无效的网关地址 "%s" 无效的句柄："%s" 无效的 iifname 无效的 "%s" 无效的密钥 "%s"：%s 无效的密钥 "%s.%s" 无效的密钥/证书值 无效的密钥/证书值 data:;base64，不是 base64 无效的密钥/证书值 data:;base64,file:// 无效的密钥/证书值，不是有效的比特块（blob） 无效的密钥/证书值路径 "%s" 无效的 oifname 无效的选项 "%s" 或其值 "%s" 无效选项 "%s"，请使用 [%s] 的组合 无效选项 "%s"，请使用 [%s] 中的一个。 无效的奇偶校验值 "%s" '%s' 项中无效的 peer 公钥 无效的 peer secrets 无效的权限 "%s" 无效的二阶段私钥 无效的端口 %d 无效的前缀 %s 无效的前缀 '%s'; 只允许 <1-%d> %s 的前缀长度 "%s" 无效，默认为 %d from/src 无效的前缀长度 to/dst 无效的前缀长度 peer 无效的 preshared-key peer 无效的 preshared-key-flags 无效的优先级 无效的优先级映射 "%s" 无效的私有密钥 无效的代理方法 peer 无效的 public-key 无效的排队规则（qdisc）：%s 无效路由：%s。%s 无效的运行程序（runner）"%s" 无效的 secret '%s' 于 %s:%zu 无效的设置名称 "%s" "password" 条目 "%s" 里出现无效的设置名称 无效设置：%s 无效的源端口范围 无效的流量过滤器（tfilter）：%s 无效的 to/dst uint32 值 "%1$s" 对属性 "%2$s" 无效 uint8 值 "%1$s" 对属性 "%2$s" 无效 无效值 "%s" 无效的值 对 "%s" 无效的值：%s 无效的值 '%s' 于 %s:%zu 无效的变体类型 '%s'（对于 "%s"） ip4 默认 ip6 默认 不是 JSON 对象 不是有效的 MAC 地址 '%s.%s' 包括无效的 allowed-ips '%s.%s' 不是在 0 到 2^32 范围内的一个整数 密钥 '%s.%s' 不是一个以 base64 编码的有效的 256 位密钥 '%s.%s' 不是一个有效的端点 '%s.%s' 不是一个有效的 secret 标记 密钥 "%s.%s" 不是布尔值 密钥不能包含 ".." 密钥包含无效的字符 密钥太长 密钥需要是基于 base64 编码的 32 个字节 密码必须是 UTF-8 格式 密钥需要 "." 用于命名空间 缺少种类 不支持 libtool 归档（%s） 受限 %s %s macvlan 连接 缺少必填选项 "%s" 主连接 已达到最大的用户数据输入项 已达到最大的用户数据输入项（现为 %u，最大只有 %u ） 计量值 %d 无效 方法 "%s" 不支持 WireGuard 毫秒 缺少 " 缺少 "plugin" 设置 "%s" 缺少参数 "password" 条目 "%s" 缺失了冒号 "password" 条目 "%s" 缺失了点号 缺少文件名 缺少文件名来加载 VPN 插件信息 一个非 0 的 prefix-length 但没有 from/src 缺少密钥 在 "%2$s" 后缺少键值对分隔符 "%1$c" 缺少链路监视器名称 缺少 VPN 插件信息的名称 缺少名称，请尝试使用 [%s] 之一。 缺少 %s 的前缀长度 "%s"，默认为 %d peer 缺少 public-key 缺少 VPN 插件信息的服务 缺少设置 缺少来源地址 缺少表 缺少目标主机 一个非 0 的 prefix-length 但没有 to/dst mtu mtu 最大为 %u，但它的值是 %u "%s=%s" 不允许多个地址 必须为 psk (0) 或 eap (1) 必须包含 8 个用逗号分隔的数字 名称 没有给定有效的连接或设备 从不 新主机名 nm-iface-helper 是一个管理单个网络接口的小型独立进程。 nmcli [<conf-option> <value>] :: nmcli configuration
Configures nmcli. The following options are available:
status-line yes | no [default: no]
save-confirmation yes | no [default: yes]
show-secrets yes | no [default: no]
prompt-color <color> | <0-8> [default: 0]
%s
Examples: nmcli> nmcli status-line yes
nmcli> nmcli save-confirmation no
nmcli> nmcli prompt-color 3
nmcli 可接受直接 JSON 配置数据和包含该配置的文件名。在后一种情况下会读取该文件并将内容放到这个属性中。
例如：set team.config { "device": "team0", "runner": {"name": "roundrobin"}, "ports": {"eth1": {}, "eth2": {}} }
set team.config /etc/my-team.conf
nmcli 已成功地注册为网络管理器（NetworkManager）的密钥（secret）代理。
nmcli 已成功地注册为 polkit 代理。
nmcli 工具，版本 %s
否 否（猜测） 设备 "%s" 上没有活动的连接 没有活动的连接或设备 没有找到可用于连接 "%s" 的设备 只有通过（passthru）模式才允许无混杂操作 不存在 peer '%s' 无 不是一个文件（%s） 不是密钥（secret）属性 在位置 %u%lld，该以太网 MAC 地址 # 无效 对于 %lld 位置的掩码，该以太网 MAC 地址无效 不是有效的 hex 字符串 不是有效的接口名称 无效的私钥 不必需、 未保存、 不是有效的 utf-8 对象类 "%s" 没有名为 "%s" 的属性 关 卸载功能有无效的变种类型 开 只有 EUI64 地址生成模式才有意义 只有一个 VLAN 可以是 PVID 只能设置 "%s" 和 "%s" 中的一个 只对 psk 模式有效 openconnect 失败，信号为 %d openconnect 失败，状态为 %d openconnect 将运行以进行验证，完成后它将返回至 nmtui。 页需要在 %d 和 %d 之间 页需要和一个频道定义 缺少上级处理模块 未指定上级。 当证书不在 PKCS#11 令牌上时不支持密码 路径不是绝对路径（%s） peer #%u 带有无效的 allowed-ips 设置 peer #%u 带有无效的端点 peer #%u 带有无效的 public-key peer #%u 没有 public-key peer #%u 无效：%s peer #%u 缺少 public-key peer '%s' 无效 : %s 缺失插件 端口 入口 准备中 print [all] :: 输出设置或连接值
显示当前属性或整个连接。
示例：nmcli ipv4> print all
print [property|setting|connection] :: 输出属性（设置、连接）值
显示属性。提供参数您也可以显示整个设置或连接的值。
对象类 "%2$s" 的 "%1$s" 属性是不可写的 当设置了 dhcp-hostname 则不能设置属性 属性无效 属性无效（未启用） 属性为空 属性为空或大小错误 属性无效 缺少属性 未指定属性 属性未指定，也不是 "%s:%s" 缺少属性 属性必须只包含数字 方法设为禁用时属性应该是 TRUE 方法设为忽略时属性应该是 TRUE 属性类型应该设置为 "%s" 属性值 "%s" 为空或过长（>64） quit :: 退出 nmcli
此命令用于退出 nmcli。当被编辑的连接没有保存时，会询问用户确定操作。
拒绝 %s remove <设置>[.<属性>] :: 移除设置或重置属性值
该命令移除来自连接的输入项设置，或者如果给定属性，重置该属性为默认值。
示例：nmcli> remove wifi-sec
nmcli> remove eth.mtu
remove [<值>|<目录>|<选项名称>] :: 删除属性值
移除属性值。对于单值属性，将属性设置回其默认值。对于容器类属性，这将删除该属性
的所有值，或者您可以指定参数只删除单项或选项。参数可以是要删除项的值或索引，又
或者是选项名称（具有命名选项的属性）。
示例: nmcli ipv4.dns> remove 8.8.8.8
nmcli ipv4.dns> remove 2
nmcli bond.options> remove downdelay
需要 "%s" 或 "%s" 设置 需要连接中存在 "%s" 设置 需要设置 "%s" 属性 规则 #%u 无效：%s 规则无效：%s 运行中 s390 网络设备类型；"qeth"、"lcs" 或 "ctc" 之一，代表 s390 系统上可用的不同虚拟网络设备。 save [persistent|temporary] :: 保存连接
发送连接配置集到网络管理器（NetworkManager），可以选择永久保存或者是只保存在内存里。不带参数
的 "save" 表示 "save persistent"。
请注意，一旦您永久地保存了配置集，这些设置在重启机器/NM 后都会存在。随后的修改
可以是临时的，也可以是永久的，但任何临时的修改在重启后都会复原。如果您想完全删
除永久性连接，连接配置集就必须被删除。
秒 secret 标记不能为 "not-required" 未找到 secret 标记属性 密钥（secret）不是正确的类型 未找到密钥 密钥值为空 密钥为空 set [<设置>.<属性> <值>] :: 设置属性值
该命令用于设置属性值。
示例：nmcli> set con.id 我的连接
set [<值>] :: 设置新值
此命令用于设置提供的 <值> 到该属性
设置包含具有空名称的密钥 对于非从连接，设置是必需的 从连接中不允许设置 未找到设置 类型为 "%s" 的连接需要设置 设置此属性要求 "%s" 属性不为零 slave-type "%s" 要求连接中有 "%s" 设置 有些标记对所选模式无效：%s 来源主机 "%s" 包含无效的字符 已启动 启动中 总和不是 100% 软件 目标主机 "%s" 包含无效的字符 组合（team）配置超过大小限制 组合（team）配置文件 "%s" 包含无效的 utf-8 组合（team）配置必须为 JSON 目标 teamd 控制失败 密钥包含非十六进制字符 密钥为空 密钥必须是 %d 个字符 掩码不能包含位 0（STP）、1（MAC）或2（LACP） 跃点数（"%s"）必需在属性前 下一跳（"%s"）必须在首位 插件不支持导出功能 插件不支持导入功能 无法更改该属性 脚本不是有效的 utf8 脚本太大 脚本缺少 FindProxyForURL 功能 标记 ID 必须在 0～4094 范围内，但其是 %u 值 "%s" 不是有效的 UUID vlan id 的必须在范围 0～4094 内，但却是 %u 存在重复的 TC 过滤器 存在重复的 TC 排队规则 已存在具有相同 %s.%s 值的冲突插件（%s） 已存在具有相同名称（%s）的冲突插件 "%s=%s" 不允许这个属性为空 此属性不允许用于"%s=%s" 无方法时不允许此属性 令牌不是规范形式 参数太多。只能指定一个私钥或再指定一个可选的密码 只能为 GRE 隧道指定隧道密钥 无法从类型 "%3$s" 的值设定类型为 "%2$s" 的属性 "%1$s" 不可用 对于 %2$s 的意外字符 "%1$c"："%3$s"（位置 %4$td） 对于地址 %2$s 的意外字符 "%1$c"："%3$s"（位置 %4$td） 对于 %2$s，前缀长度中有意外字符 "%1$c"："%3$s"（位置 %4$td） 未知 未知的 VPN 插件 "%s" 未知属性 未知属性 "%s" 未知的连接 "%s" 未知设备 "%s"。 初始化插件 %s 时出现未知错误 未知的 ethtool 选项 "%s" 未知的链路监视器 "%s" 未知属性 未知的 secret 标记 未知的设置名称 未托管 无法识别的行 %s:%zu 不支持的操作选项："%s"。 不支持类型 "%2$s" 的属性 "%1$s" 不支持的 "%s" 不支持的卸载功能 不支持的排队规则（qdisc）选项："%s"。 不支持的 secret 标记 不支持的流量过滤器（tfilter）选项："%s"。 未结束的转义序列 先使用 "goto <设置>"，或 "describe <设置>.<属性>"
先使用 "goto <设置>"，或 "set <设置>.<属性>"
类型 "%2$s" 的值 "%1$s" 无效或超出类型为 "%4$s" 的属性 "%3$s" 范围 值 %d 无效 值 '%d' 超出了范围 <%d-%d> 值无法被解析为整数 值为 NULL 值为空 缺少值 值不是有效的令牌 值不是在 [%lld, %lld] 范围内的一个整数 值不是有效的 UTF-8 值太大 verify [all | fix] :: 验证设置或连接的有效性
验证设置或连接是否有效和可以稍后保存。发生错误时它会指出无效的值。有些错误可以
通过 "fix" 选项自动修复。
示例: nmcli> verify
nmcli> verify fix
nmcli bond> verify
vlan 设置也应该有以太网设置 vlanid 超出范围 [-1, 4094] 愿意、 模式 %s 不允许有线设置 错误的类型；应为一个字符串列表。 是 是（猜测）