Linux network interfaces

The Linux kernel universally distinguishes between two types of software network interfaces:

eth0, eth8, radio0, wlan19, .. always represent an actual network hardware device such as a NIC, WNIC or some other kind of Modem. As soon as the device driver is loaded into the Kernel a corresponding physical network interface becomes present and available.

Any physical network interface is a named software representation by the operating system to the user to enable them to configure the hardware network device and also to integrate it into programs and scripts.

lo, eth0:1, eth0.1, vlan2, br0, pppoe-dsl, gre0, sit0 tun0, imq0, teql0, .. are virtual network interfaces that do NOT represent an existent hardware device but are linked to one (otherwise they would be useless). Virtual network interfaces were invented to give the system administrator maximum flexibility when configuring a Linux-based operating system. A virtual network interface is generally associated with a physical network interface (eth6) or another virtual interface (eth6.9) or be stand alone such as the loopback interface lo.

Types of virtual network interfaces

  • aliases: eth4:5, eth4:6, ..
    IP-aliases are an obsolete way to manage multiple IP-addresses/masks per interface. Newer tools such as iproute2 support multiple address/prefixes per interface, but aliases are still supported for backwards compatibility. Documentation/networking/alias.html
  • VLANs: eth4.0, eth4.1, eth4.3, vlan0, ..
    are created to partition a single layer 2 network into multiple virtual ones. The drivers all participating network cards must support IEEE 802.1Q and be configured accordingly. This standard allows for up to 4096 VLANs (12Bits).
  • Stacked VLANs: IEEE 802.1ad-support was mainlined in 2013-04-19: net: vlan: add 802.1ad support Configuration is done using ip link:
    ip link add link eth0 eth0.1000 type vlan proto 802.1ad id 1000
    ip link add link eth0.1000 eth0.1000.1000 type vlan proto 802.1q id 1000
  • bridges: br0, br-lan
    are used to make multiple virtual or physical network interfaces act as if they were just one network interface (quasi the opposite of VLANs). Can also be used for VPN and bridged interfaces. The Linux Ethernet bridge can be used for connecting multiple Ethernet devices together. The connecting is fully transparent: hosts connected to one Ethernet device see hosts connected to the other Ethernet devices directly. understanding how bridge-interfaces work
  • tunnel interfaces: pppoe-dsl, pppoa-dsl, tun0, vpn1,
    used to send packets over a tunneling protocol such as GRE, IPsec, PPPoE, etc.
  • special purpose: imq0, teql3
    used to change the order of outgoing network packets, or incoming network packet
  • wireless operating mode virtual interfaces: wlan0, wlan0_1, ath3, ath_monitor, ..
    Linux wireless subsystem: There is always one physical network interface for each WNIC called the master interface. The master interface is invisible. Then, depending on the wireless operating mode the master interface is configured to, ad-hoc (IBSS), managed , AP , WDS, mesh point, monitor, wireless virtual network interfaces with different properties are created. This is done automatically by default. When the WNIC driver is loaded, there always will be the master interface and (at least) one virtual interface!

Two network interfaces can also be bonded together (please see Link aggregation and Channel bonding and Ubuntu Wiki), Documentation/networking/bonding.txt

uci is a small C utility designed to centralize configuration in OpenWrt.
/etc/config/network is the network configuration file.
/etc/config/wireless is the wireless configuration file.
UCI creates an abstraction layer for configuring network interfaces:
In the network configuration you allocate a name like lan or internet_wire or whatever to each ifname-variable for every device and then this name is consistently used through the entire UCI configuration. But this can only be used in conjunction with UCI!

The OpenWrt default configuration is explained in ...

Most GNU/Linux distributions offer various software packages in their repositories which contain standard Unix networking tools for controlling the network subsystem of the Linux kernel; they serve the task of configuring network interfaces, routing tables, managing the ARP table, and so on. In Debian multiple such tools are combined into packages, e.g. net-tools, iproute2, vlan, bridge-utils, wireless-tools, iw and some more.

The utilities contained in the “net-tools”-suite are old and deprecated. The ones contained in the “iproute2”-suite communicate with the Linux kernel via the (rt)netlink interface, providing advanced features not available through the legacy “net-tools”- commands ifconfig and route. See e.g. iproute2 or net-tools VS iproute2) for a comparison.

In the OpenWrt software package repositories networking utilities are available as separate opkg-packages while core utilities like ifconfig, route, netstat and vconfig are also contained in busybox as applets: busybox-ifconfig, busybox-route, etc.
Utility Invocation Purpose
ip ip link network device configuration
ip addr protocol IPv4 or IPv6 address management on a device
ip addrlabel protocol address label management, label configuration for protocol address selection
ip l2tp establish static (aka unmanaged) L2TPv3 Ethernet tunnels.
For unmanaged tunnels, there is no L2TP control protocol so no userspace daemon is required - tunnels are manually created by issuing commands at a local system and at a remote peer.
L2TPv3 is suitable for Layer-2 tunneling. Static tunnels are useful to establish network links across IP networks when the tunnels are fixed. L2TPv3 tunnels can carry data of more than one session. Each session is identified by a session_id and its parent tunnel's tunnel_id. A tunnel must be created before a session can be created in the tunnel.
When creating an L2TP tunnel, the IP address of the remote peer is specified, which can be either an IPv4 or IPv6 address. The local IP address to be used to reach the peer must also be specified. This is the address on which the local system will listen for and accept received L2TP data packets from the peer.
L2TPv3 defines two packet encapsulation formats: UDP or IP. UDP encapsulation is most common. IP encapsulation uses a dedicated IP protocol value to carry L2TP data without the overhead of UDP. Use IP encapsulation only when there are no NAT devices or firewalls in the network path.
When an L2TPv3 Ethernet session is created, a virtual network interface is created for the session, which must then be configured and brought up, just like any other network interface. When data is passed through the interface, it is carried over the L2TP tunnel to the peer. By configuring the system's routing tables or adding the interface to a bridge, the L2TP interface is like a virtual wire (pseudowire) connected to the peer.
Establishing an unmanaged L2TPv3 Ethernet pseudowire involves manually creating L2TP contexts on the local system and at the peer. Parameters used at each site must correspond or no data will be passed. No consistency checks are possible since there is no control protocol used to establish unmanaged L2TP tunnels. Once the virtual network interface of a given L2TP session is configured and enabled, data can be transmitted, even if the peer isn't yet configured. If the peer isn't configured, the L2TP data packets will be discarded by the peer.
To establish an unmanaged L2TP tunnel, use
ip l2tp add tunnel and l2tp add session commands described in this document. Then configure and enable the tunnel's virtual network interface, as required.
Note that unmanaged tunnels carry only Ethernet frames. If you need to carry PPP traffic (L2TPv2) or your peer doesn't support unmanaged L2TPv3 tunnels, you will need an L2TP server which implements the L2TP control protocol. The L2TP control protocol allows dynamic L2TP tunnels and sessions to be established and provides for detecting and acting upon network failures.
See Documentation/networking/l2tp.txt
ip neigh neighbour/arp tables management, ARP or NDISC cache entry
ip netconf network configuration monitoring
utility can monitor IPv4 and IPv6 parameters (see /proc/sys/net/ipv[4|6]/conf/[all|DEV]/) like forwarding, rp_filter or mc_forwarding status.
ip netconf show
ip netns process network namespace management
A network namespace is logically another copy of the network stack, with its own routes, firewall rules, and network devices.
ip ntable neighbour table configuration
controls the parameters for the neighbour tables
ip route routing table management. Configuration files are:
ip rule routing policy database management
ip maddr multicast addresses management
ip mroute multicast routing cache management
ip tunnel tunnel over IP configuration
ip monitor state monitoring, see rtmon
ip xfrm setting xfrm, framework for IPsec protocol
ip tcp_metrics used to manipulate entries in the Linux kernel that keep TCP information for IPv4 and IPv6 destinations. The entries are created when TCP sockets want to share information for destinations and are stored in a cache keyed by the destination address. The saved information may include values for metrics (initially obtained from routes), recent TSVAL for TIME-WAIT recycling purposes, state for the Fast Open feature, etc. For performance reasons the cache can not grow above configured limit and the older entries are replaced with fresh information, sometimes reclaimed and used for new destinations. The kernel never removes entries, they can be flushed only with this tool.
Type ip tcp_metrics show to show cached entries
rtmon Listens to and monitors RTnetlink
nstat nstat and rtacct are simple tools to monitor kernel snmp counters and network interface statistics.
routel Set of helper scripts you can use instead of ip-commands.
The routel script will list routes in a format that some might consider easier to interpret then the ip route list equivalent.
The routef script does not take any arguments and will simply flush the routing table down the drain. Beware! This means deleting all routes which will make your network unusable!
ss utility to dump socket statistics. It allows showing information similar to the deprecated netstat. ss can display more TCP and state informations than other tools.
tc show / manipulate traffic control settings. tc is used to configure the Network packet scheduler of the Linux kernel
Unified Linux network statistics
A generalized and more feature-complete replacement for the old rtstat-utility. In addition to routing cache statistics, it supports any kind of statistics the Linux kernel exports via a file in /proc/net/stat/.
arpd userspace arp daemon
vconfig VLAN (IEEE 802.1q) configuration program. Allows you to create and remove VLAN−devices on a VLAN enabled Linux kernel. VLAN−devices are virtual Ethernet devices which represents the virtual lans on the physical lan
brctl Linux Ethernet bridge administration
bridge show / manipulate bridge addresses and devices; bridge uses facilities added in Linux 3.0. Although the forwarding table is maintained on a per-bridge device basis the bridge device is not part of the syntax. This is a limitation of the underlying netlink neighbour message protocol. When displaying the forwarding table, entries for all bridges are displayed. Add/delete/modify commands determine the underlying bridge device based on the bridge to which the corresponding ethernet device is attached.
iw show / manipulate wireless devices and their configuration, see also Wireless utilities: iw
iwinfo a CLI frontend to the library libinfo, which assembles information from various places, see also Wireless utilities: iwinfo
Purpose Utility Replaced with
IPv4/IPv6 address management ifconfig ip addr
Link configuration ifconfig ip link
Routing tables route ip route
Manipulate the kernel's ARP table. Add, delete an entry, or to dump the entire cache arp ip neigh
Adds, changes, deletes and shows an interface's tunnels iptunnel ip tunnel
Adds, deletes and shows an interface's multicast addresses ipmaddr ip maddr
Report network connections, routing tables, and interface statistics netstat ss
Manipulate the kernel's RARP table rarp
Name network interfaces based on MAC addresses nameif
Fine tune the PLIP device parameters, to improve its performance plipconfig
Attaches a network interface to a serial line. This allows to use normal terminal lines for point-to-point links to other computers slattach
Checks or sets the status of a network interface's Media Independent Interface (MII) unit mii-tool
configure a wireless network interface iwconfig iw
Display Wireless Events generated by drivers and setting changes iwevent iw
Report ESSID, NWID or AP/Cell Address of wireless network iwgetid iw
Get more detailed wireless information from a wireless interface iwlist iw
configure optionals (private) parameters of a wireless network interface iwpriv iw
Get wireless statistics from specific nodes iwspy iw
This website uses cookies. By using the website, you agree with storing cookies on your computer. Also you acknowledge that you have read and understand our Privacy Policy. If you do not agree leave the website.More information about cookies
  • Last modified: 2023/10/06 04:10
  • by vgaetera