fwmark |
uint32 |
0 |
The use of fwmark is optional and is by default off. Setting it to 0 disables it. Otherwise it is a 32-bit fwmark for outgoing packets. Note that "ip4-auto-default-route" or "ip6-auto-default-route" enabled, implies to automatically choose a fwmark. |
ip4-auto-default-route |
NMTernary (int32) |
|
Whether to enable special handling of the IPv4 default route. If enabled, the IPv4 default route will be placed to a dedicated routing-table and two policy routing rules will be added. The fwmark number is also used as routing-table for the default-route, and if fwmark is zero, a unused fwmark/table is chosen automatically. This corresponds to what wg-quick does with Table=auto. Leaving this at the default will enable this option automatically if ipv4.never-default is not set and there are any peers that use a default-route as allowed-ips. |
ip6-auto-default-route |
NMTernary (int32) |
|
Like ip4-auto-default-route, but for the IPv6 default route. |
listen-port |
uint32 |
0 |
The listen-port. If listen-port is not specified, the port will be chosen randomly when the interface comes up. |
mtu |
uint32 |
0 |
If non-zero, only transmit packets of the specified size or smaller, breaking larger packets up into multiple fragments. If zero a default MTU is used. Note that contrary to wg-quick's MTU setting, this does not take into account the current routes at the time of activation. |
peer-routes |
boolean |
TRUE |
Whether to automatically add routes for the AllowedIPs ranges of the peers. If TRUE (the default), NetworkManager will automatically add routes in the routing tables according to ipv4.route-table and ipv6.route-table. If FALSE, no such routes are added automatically. In this case, the user may want to configure static routes in ipv4.routes and ipv6.routes, respectively. |
peers |
array of 'a{sv}' |
|
Array of dictionaries for the WireGuard peers. |
private-key |
string |
|
The 256 bit private-key in base64 encoding. |
private-key-flags |
NMSettingSecretFlags (uint32) |
|
Flags indicating how to handle the "private-key" property. |