.TH "VDE_TUNCTL" "8" .SH "NAME" vde_tunctl \(em create and manage persistent TUN/TAP interfaces .SH "SYNOPSIS" .PP \fBvde_tunctl\fR [\fB-f\fP \fIclone-dev\fR] [\fB-u\fP \fIowner\fR] [\fB-g\fP \fIgroup\fR] [\fB-n\fR] [\fB-t\fP \fIdev-name\fR] .PP \fBvde_tunctl\fR [\fB-f\fP \fIclone-dev\fR] \fB-d\fP \fIdev-name\fR .SH "DESCRIPTION" .PP \fBvde_tunctl\fR allows the host sysadmin to preconfigure a TUN/TAP device for use by a particular user. That user may open and use the device, but may not change any aspects of the host side of the interface. .PP vde_tunctl is an extension of \fBtunctl\fR. .PP vde_tunctl defines tap interfaces unless \fIdev-name\fR begins by "tun" or the option \fR-n\fR appears in the command line. .SH "USAGE" .PP To create an interface for use by a particular user, invoke tunctl without the \-d option: .PP .nf # \fBvde_tunctl \-u someuser\fP Set 'tap0' persistent and owned by uid 500 .fi .PP Then, configure the interface as normal: .PP .nf # \fBifconfig tap0 192.168.0.254 up\fP # \fBroute add \-host 192.168.0.253 dev tap0\fP # \fBbash \-c 'echo 1 > /proc/sys/net/ipv4/conf/tap0/proxy_arp'\fP # \fBarp \-Ds 192.168.0.253 eth0 pub\fP .fi .PP To delete the interface, use the \-d option: .PP .nf # \fBvde_tunctl \-d tap0\fP Set 'tap0' nonpersistent .fi To create or destroy a tun interface (instead of tap): .nf # \fBvde_tunctl -n \-u someuser\fP Set 'tun0' persistent and owned by uid 500 # \fBvde_tunctl \-d tun0\fP Set 'tun0' nonpersistent .fi .SH "SEE ALSO" .PP \fBvde_switch\fP(1) \fBvde_plug2tap\fP(1) .SH "AUTHOR" .PP tunctl was written by Jeff Dike jdike@karaya.com .PP This manual page is based on tunctl manual page written by Matt Zimmerman mdz@debian.org for the \fBDebian GNU/Linux\fP system.