3.4. Configuring IP Networking with GNOME GUI In Red Hat Enterprise Linux 7, NetworkManager does not have its own graphical user interface (GUI). The network connection icon on the top right of the desktop is provided as part of the GNOME Shell and the Network settings configuration tool is provided as part of the new GNOME control-center GUI which supports the wired, wireless, vpn connections. The nm-connection-editor is the main tool for GUI configuration. Besides control-center 's features, it also applies the functionality which is not provided by the GNOME control-center such as configuring bond, team, bridge connections. In this section, you can configure a network interface using: the GNOME control-center application the GNOME nm-connection-editor application 3.4.1. Connecting to a Network Using the control-center GUI There are two ways to access the Network settings window of the control-center application: Press the Super key to enter the Activities Overview, type Settings and then press Enter . Then, select the Network tab on the left-hand side, and the Network settings tool appears. Proceed to the section called "Configuring New Connections with control-center" . Click on the GNOME Shell network connection icon in the top right-hand corner of the screen to open its menu. Figure 3.5. Network Configuration using the control-center application When you click on the GNOME Shell network connection icon, you are presented with: A list of categorized networks you are currently connected to (such as Wired and Wi-Fi ). A list of all Available Networks that NetworkManager has detected. Options for connecting to any configured Virtual Private Networks (VPNs) and An option for selecting the Network Settings menu entry. If you are connected to a network, this is indicated by a black bullet on the left of the connection name. If you click on Network Settings , the Network settings tool appears. Proceed to the section called "Configuring New Connections with control-center" . 3.4.2. Configuring New and Editing Existing Connections Using a GUI As a system administrator, you can configure a network connection. This enables users to apply or change settings of an interface. For doing that, you can use one of the following two ways: the GNOME control-center application the GNOME nm-connection-editor application 3.4.2.1. Configuring New and Editing Existing Connections Using control-center You can create and configure a network connection using the GNOME control-center application. Configuring New Connections with control-center To configure a new wired, wireless, vpn connection using the control-center application, proceed as follows: Press the Super key to enter the Activities Overview, type Settings and then press Enter . Then, select the Network tab on the left-hand side. The Network settings tool appears on the right-hand side menu: Figure 3.6. Opening the Network Settings Window Click the plus button to add a new connection. To configure: Wired connections , click the plus button to Wired entry and proceed to Section 3.4.6, "Configuring a Wired (Ethernet) Connection with a GUI" . VPN connections , click the plus button to VPN entry and proceed to Section 3.4.8.1, "Establishing a VPN Connection with control-center" For Wi-Fi connections , click the Wi-fi entry in the Settings menu and proceed to Section 3.4.7, "Configuring a Wi-Fi Connection with a GUI" Editing an Existing Connection with control-center Clicking on the gear wheel icon of an existing connection profile in the Network settings window opens the Details window, from where you can perform most network configuration tasks such as IP addressing, DNS , and routing configuration. Figure 3.7. Configure Networks Using the Network Connection Details Window For any connection type you add or configure, you can choose NetworkManager to connect to that network automatically when it is available. For doing that, select Connect automatically to cause NetworkManager to auto-connect to the connection whenever NetworkManager detects that it is available. Clear the check box if you do not want NetworkManager to connect automatically. If the check box is clear, you will have to select that connection manually in the network connection icon's menu to cause it to connect. To make a connection available to other users, select the Make available to other users check box. To apply changes after a connection modification, you can click the Apply button in the top right-hand corner of the connection window. You can delete a connection by clicking the Remove Connection Profile red box. 3.4.2.2. Configuring New and Editing Existing Connections Using nm-connection-editor Using the nm-connection-editor GUI application, you can configure any connection you want with additional features than control-center provides. In addition, nm-connection-editor applies the functionality which is not provided by the GNOME control-center such as configuring bond, bridge, VLAN, team connections. Configuring a New Connection with nm-connection-editor To add a new connection type using nm-connection-editor : Procedure Enter nm-connection-editor in a terminal: The Network Connections window appears. Click the plus button to choose a connection type: Figure 3.8. Adding a connection type using nm-connection-editor Figure 3.9. Choosing a connection type with nm-connection-editor To create and configure: Bond connections , click the Bond entry and proceed to Section 7.8.1, "Establishing a Bond Connection" ; Bridge connections , click the Bridge entry and proceed to Section 9.4.1, "Establishing a Bridge Connection with a GUI" ; VLAN connections , click the VLAN entry and proceed to Section 10.5.1, "Establishing a VLAN Connection" ; or, Team connections , click the Team entry and proceed to Section 8.14, "Creating a Network Team Using a GUI" . Editing an Existing Connection with nm-connection-editor For an existing connection type, click the gear wheel icon from the Network Connections dialog, see the section called "Configuring a New Connection with nm-connection-editor" . 3.4.3. Common Configuration Options Using nm-connection-editor If you use the nm-connection-editor utility, there are five common configuration options to the most connection types (ethernet, wifi, mobile broadband, DSL) following the procedure below: Procedure Enter nm-connection-editor in a terminal: The Network Connections window appears. Click the plus button to choose a connection type or the gear wheel icon to edit an existing connection. Select the General tab in the Editing dialog: Figure 3.10. Configuration options in nm-connection-editor Connection name - Enter a descriptive name for your network connection. This name is used to list this connection in the menu of the Network window. Connection priority for auto-activation - If the connection is set to autoconnect, the number is activated ( 0 by default). The higher number means higher priority. Automatically connect to this network when it is available - Select this box if you want NetworkManager to auto-connect to this connection when it is available. See the section called "Editing an Existing Connection with control-center" for more information. All users may connect to this network - Select this box to create a connection available to all users on the system. Changing this setting may require root privileges. See Section 3.4.5, "Managing System-wide and Private Connection Profiles with a GUI" for details. Automatically connect to VPN when using this connection - Select this box if you want NetworkManager to auto-connect to a VPN connection when it is available. Select the VPN from the drop-down menu. Firewall Zone - Select the firewall zone from the drop-down menu. See the Red Hat Enterprise Linux 7 Security Guide for more information on firewall zones. Note For the VPN connection type, only three of the above configuration options are available: Connection name , All users may connect to this network and Firewall Zone . 3.4.4. Connecting to a Network Automatically with a GUI For any connection type you add or configure, you can choose whether you want NetworkManager to try to connect to that network automatically when it is available. You can use one of the following ways: the GNOME control-center application the GNOME nm-connection-editor application 3.4.4.1. Connecting to a Network Automatically with control-center You can connect to a network automatically using control-center : Procedure Press the Super key to enter the Activities Overview, type Settings and then press Enter . Then, select the Network tab on the left-hand side. The Network settings tool appears on the right-hand side menu, see the section called "Configuring New Connections with control-center" . Select the network interface from the right-hand-side menu. Click on the gear wheel icon of a connection profile on the right-hand side menu. The Network details window appears. Select the Details menu entry, see the section called "Editing an Existing Connection with control-center" . Select Connect automatically to cause NetworkManager to auto-connect to the connection whenever NetworkManager detects that it is available. Clear the check box if you do not want NetworkManager to connect automatically. If the check box is clear, you will have to select that connection manually in the network connection icon's menu to cause it to connect. 3.4.4.2. Connecting to a Network Automatically with nm-connection-editor You can also use the GNOME nm-connection-editor application for connecting to a network automatically. For doing that, follow the procedure descibed in Section 3.4.3, "Common Configuration Options Using nm-connection-editor" , and check the Automatically connect to this network when it is available check box in the General tab. 3.4.5. Managing System-wide and Private Connection Profiles with a GUI NetworkManager stores all connection profiles . A profile is a named collection of settings that can be applied to an interface. NetworkManager stores these connection profiles for system-wide use ( system connections ), as well as all user connection profiles. Access to the connection profiles is controlled by permissions which are stored by NetworkManager . See the nm-settings(5) man page for more information on the connection settings permissions property. You can control access to a connection profile using the following graphical user interface tools: the nm-connection-editor application the control-center application 3.4.5.1. Managing Permissions for a Connection Profile with nm-connection-editor To create a connection available to all users on the system, follow the procedure descibed in Section 3.4.3, "Common Configuration Options Using nm-connection-editor" , and check the All users may connect to this network check box in the General tab. 3.4.5.2. Managing Permissions for a Connection Profile with control-center To make a connection available to other users, follow the procedure described in the section called "Editing an Existing Connection with control-center" , and select the Make available to other users check box in the GNOME control-center Network settings Details window. Conversely, clear the Make available to other users check box to make the connection user-specific instead of system-wide. Note Depending on the system's policy, you may need root privileges on the system in order to change whether a connection is user-specific or system-wide. NetworkManager 's default policy is to allow all users to create and modify system-wide connections. Profiles that are available at boot time cannot be private because they will not be visible until the user logs in. For example, if a user creates a connection profile user-em2 with the Connect Automatically check box selected but with the Make available to other users not selected, then the connection will not be available at boot time. To restrict connections and networking, there are two options which can be used alone or in combination: Clear the Make available to other users check box, which changes the connection to be modifiable and usable only by the user doing the changing. Use the polkit framework to restrict permissions of general network operations on a per-user basis. The combination of these two options provides fine-grained security and control over networking. See the polkit(8) man page for more information on polkit . Note that VPN connections are always created as private-per-user, since they are assumed to be more private than a Wi-Fi or Ethernet connection. 3.4.6. Configuring a Wired (Ethernet) Connection with a GUI You can configure a wired connection using GUI in two ways: the control-center application the nm-connection-editor application 3.4.6.1. Configuring a Wired Connection Using control-center Procedure Press the Super key to enter the Activities Overview, type Settings and then press Enter . Then, select the Network menu entry on the left-hand side, and the Network settings tool appears, see the section called "Configuring New Connections with control-center" . Select the Wired network interface if it is not already highlighted. The system creates and configures a single wired connection profile called Wired by default. A profile is a named collection of settings that can be applied to an interface. More than one profile can be created for an interface and applied as needed. The default profile cannot be deleted but its settings can be changed. Edit the default Wired profile by clicking the gear wheel icon. Basic Configuration Options You can see the following configuration settings in the Wired dialog, by selecting the Identity menu entry: Figure 3.11. Basic Configuration options of a Wired Connection Name - Enter a descriptive name for your network connection. This name will be used to list this connection in the menu of the Network window. MAC Address - Select the MAC address of the interface this profile must be applied to. Cloned Address - If required, enter a different MAC address to use. MTU - If required, enter a specific maximum transmission unit ( MTU ) to use. The MTU value represents the size in bytes of the largest packet that the link layer will transmit. This value defaults to 1500 and does not generally need to be specified or changed. Making Further Wired Configurations You can further configure an existing connection in the editing dialog. To configure: IPv4 settings for the connection, click the IPv4 menu entry and proceed to Section 5.4, "Configuring IPv4 Settings" or IPv6 settings for the connection, click the IPv6 menu entry and proceed to Section 5.5, "Configuring IPv6 Settings" . port-based Network Access Control (PNAC) , click the 802.1X Security menu entry and proceed to Section 5.2, "Configuring 802.1X Security" ; Saving Your New (or Modified) Wired Connection Once you have finished editing your wired connection, click the Apply button to save your customized configuration. If the profile was in use while being edited, restart the connection to make NetworkManager apply the changes. If the profile is OFF, set it to ON or select it in the network connection icon's menu. See Section 3.4.1, "Connecting to a Network Using the control-center GUI" for information on using your new or altered connection. Creating a New Wired Connection To create a new wired connection profile, click the plus button, see the section called "Configuring New Connections with control-center" . When you add a new connection by clicking the plus button, NetworkManager creates a new configuration file for that connection and then opens the same dialog that is used for editing an existing connection, see the section called "Editing an Existing Connection with control-center" . The difference between these dialogs is that an existing connection profile has a Details menu entry. 3.4.6.2. Configuring a Wired Connection with nm-connection-editor The nm-connection-editor GUI application provides more configuration options than the control-center GUI application. To configure a wired connection using nm-connection-editor : Enter the nm-connection-editor in a terminal. The Network Connections window appears. Select the ethernet connection you want to edit and click the gear wheel icon: Figure 3.12. Edit a wired connection The Editing dialog appears. To connect to a network automatically and restrict connections, click the General tab, see Section 3.4.3, "Common Configuration Options Using nm-connection-editor" . To configure the networking settings, click the Ethernet tab, see the section called "Configuring 802.3 Link Settings with nm-connection-editor" . To configure 802.1X Security for a wired connection, click the 802.1X Security tab, see Section 5.2.4, "Configuring 802.1X Security for Wired with nm-connection-editor" . To configure the IPV4 settings, click the IPV4 Settings tab, see the section called "Setting the Method for IPV4 Using nm-connection-editor" . To configure the IPV6 settings, click the IPV6 Settings tab, see Section 5.5, "Configuring IPv6 Settings" . 3.4.7. Configuring a Wi-Fi Connection with a GUI This section explains how to use NetworkManager to configure a Wi-Fi (also known as wireless or 802.11 a/b/g/n ) connection to an Access Point. An Access Point is a device that allows wireless devices to connect to a network. To configure a mobile broadband (such as 3G) connection, see Section 3.4.9, "Configuring a Mobile Broadband Connection with a GUI" . Connecting Quickly to an Available Access Point Procedure Click on the network connection icon to activate the network connection icon's menu, see Section 3.4.1, "Connecting to a Network Using the control-center GUI" . Locate the Service Set Identifier ( SSID ) of the access point in the list of Wi-Fi networks. Click on the SSID of the network. A padlock symbol indicates the access point requires authentication. If the access point is secured, a dialog prompts you for an authentication key or password. NetworkManager tries to auto-detect the type of security used by the access point. If there are multiple possibilities, NetworkManager guesses the security type and presents it in the Wi-Fi security drop-down menu. For WPA-PSK security (WPA with a passphrase) no choice is necessary. For WPA Enterprise (802.1X) you have to specifically select the security, because that cannot be auto-detected. Note that if you are unsure, try connecting to each type in turn. Enter the key or passphrase in the Password field. Certain password types, such as a 40-bit WEP or 128-bit WPA key, are invalid unless they are of a requisite length. The Connect button will remain inactive until you enter a key of the length required for the selected security type. To learn more about wireless security, see Section 5.2, "Configuring 802.1X Security" . If NetworkManager connects to the access point successfully, the network connection icon will change into a graphical indicator of the wireless connection's signal strength. You can also edit the settings for one of these auto-created access point connections just as if you had added it yourself. The Wi-Fi page of the Network window has a History button. Clicking it reveals a list of all the connections you have ever tried to connect to. See the section called "Editing an Existing Wi-Fi Connection" Connecting to a Hidden Wi-Fi Network All access points have a Service Set Identifier ( SSID ) to identify them. However, an access point may be configured not to broadcast its SSID, in which case it is hidden , and will not show up in NetworkManager 's list of Available networks. You can still connect to a wireless access point that is hiding its SSID as long as you know its SSID, authentication method, and secrets. To connect to a hidden wireless network: Procedure Press the Super key to enter the Activities Overview, type Settings and then press Enter . Then, select the Wi-Fi menu entry on the left-hand side. Select Connect to Hidden Network . There are two options: If you have connected to the hidden network before: Use the Connection drop-down to select the network. Click Connect . If not, proceed as follows: Leave the Connection drop-down as New . Enter the SSID of the hidden network. Select its Wi-Fi security method. Enter the correct authentication secrets. Click Connect . For more information on wireless security settings, see Section 5.2, "Configuring 802.1X Security" . Configuring a New Wi-Fi Connection Procedure Select the Wi-Fi menu entry of Settings . Click the Wi-Fi connection name that you want to connect to (by default, the same as the SSID). If the SSID is not in range, see the section called "Connecting to a Hidden Wi-Fi Network" for more information. If the SSID is in range, click the Wi-Fi connection profile on the right-hand side menu. A padlock symbol indicates a key or password is required. If requested, enter the authentication details. Editing an Existing Wi-Fi Connection You can edit an existing connection that you have tried or succeeded in connecting to in the past. Procedure Press the Super key to enter the Activities Overview, type Settings and press Enter . Select Wi-Fi from the left-hand-side menu entry. Select the gear wheel icon to the right of the Wi-Fi connection name that you want to edit, and the editing connection dialog appears. Note that if the network is not currently in range, click History to display past connections. The Details window shows the connection details. Basic Configuration Options for a Wi-Fi Connection To edit a Wi-Fi connection's settings, select Identity from the editing connection dialog. The following settings are available: Figure 3.13. Basic Configuration Options for a Wi-Fi Connection SSID The Service Set Identifier ( SSID ) of the access point (AP). BSSID The Basic Service Set Identifier ( BSSID ) is the MAC address, also known as a hardware address , of the specific wireless access point you are connecting to when in Infrastructure mode. This field is blank by default, and you are able to connect to a wireless access point by SSID without having to specify its BSSID . If the BSSID is specified, it will force the system to associate to a specific access point only. For ad-hoc networks, the BSSID is generated randomly by the mac80211 subsystem when the ad-hoc network is created. It is not displayed by NetworkManager MAC address Select the MAC address, also known as a hardware address , of the Wi-Fi interface to use. A single system could have one or more wireless network adapters connected to it. The MAC address field therefore allows you to associate a specific wireless adapter with a specific connection (or connections). Cloned Address A cloned MAC address to use in place of the real hardware address. Leave blank unless required. The following settings are common to the most connection types: Connect automatically - Select this box if you want NetworkManager to auto-connect to this connection when it is available. See the section called "Editing an Existing Connection with control-center" for more information. Make available to other users - Select this box to create a connection available to all users on the system. Changing this setting may require root privileges. See Section 3.4.5, "Managing System-wide and Private Connection Profiles with a GUI" for details. Making Further Wi-Fi Configurations You can further configure an existing connection in the editing dialog. To configure: security authentication for the wireless connection, click Security and proceed to Section 5.2, "Configuring 802.1X Security" . IPv4 settings for the connection, click IPv4 and proceed to Section 5.4, "Configuring IPv4 Settings" or IPv6 settings for the connection, click IPv6 and proceed to Section 5.5, "Configuring IPv6 Settings" . Saving Your New (or Modified) Connection Once you have finished editing the wireless connection, click the Apply button to save your configuration. Given a correct configuration, you can connect to your modified connection by selecting it from the network connection icon's menu. See Section 3.4.1, "Connecting to a Network Using the control-center GUI" for details on selecting and connecting to a network. 3.4.8. Configuring a VPN Connection with a GUI IPsec , provided by Libreswan , is the preferred method for creating a VPN. Libreswan is an open-source, user-space IPsec implementation for VPN. Configuring an IPsec VPN using the command line is documented in the Red Hat Enterprise Linux 7 Security Guide . 3.4.8.1. Establishing a VPN Connection with control-center IPsec , provided by Libreswan , is the preferred method for creating a VPN in Red Hat Enterprise Linux 7. For more information, see Section 3.4.8, "Configuring a VPN Connection with a GUI" . The GNOME graphical user interface tool described below requires the NetworkManager-libreswan-gnome package. To install the package, run the following command as root : See Red Hat Enterprise Linux System Administrator's Guide for more information on how to install new packages in Red Hat Enterprise Linux. Establishing a Virtual Private Network (VPN) enables communication between your Local Area Network (LAN), and another, remote LAN. This is done by setting up a tunnel across an intermediate network such as the Internet. The VPN tunnel that is set up typically uses authentication and encryption. After successfully establishing a VPN connection using a secure tunnel, a VPN router or gateway performs the following actions upon the packets you transmit: it adds an Authentication Header for routing and authentication purposes; it encrypts the packet data; and, it encloses the data in packets according to the Encapsulating Security Payload (ESP) protocol, which constitutes the decryption and handling instructions. The receiving VPN router strips the header information, decrypts the data, and routes it to its intended destination (either a workstation or other node on a network). Using a network-to-network connection, the receiving node on the local network receives the packets already decrypted and ready for processing. The encryption and decryption process in a network-to-network VPN connection is therefore transparent to clients. Because they employ several layers of authentication and encryption, VPNs are a secure and effective means of connecting multiple remote nodes to act as a unified intranet. Adding a New IPsec VPN Connection Procedure Press the Super key to enter the Activities Overview, type Settings and press Enter . Then, select the Network menu entry and the Network settings tool appears, see the section called "Configuring New Connections with control-center" . Click the plus button in the VPN entry. The Add VPN window appears. For manually configuration, select IPsec based VPN . Figure 3.14. Configuring VPN on IPsec mode In the Identity configuration form, you can specify the fields in the General and Advanced sections: Figure 3.15. General and Advanced sections In General section, you can specify: Gateway The name or IP address of the remote VPN gateway. User name If required, enter the user name associated with the VPN user's identity for authentication. User password If required, enter the password associated with the VPN user's identity for authentication. Group name The name of a VPN group configured on the remote gateway. In case it is blank, the IKEv1 Main mode is used instead of the default Aggressive mode. Secret It is a pre-shared key which is used to initialize the encryption before the user's authentication. If required, enter the password associated with the group name. The following configuration settings are available under the Advanced section: Phase1 Algorithms If required, enter the algorithms to be used to authenticate and set up an encrypted channel. Phase2 Algorithms If required, enter the algorithms to be used for the IPsec negotiations. Domain If required, enter the Domain Name. Note Configuring an IPsec VPN without using NetworkManager , see Section 3.4.8, "Configuring a VPN Connection with a GUI" . Editing an Existing VPN Connection Procedure Press the Super key to enter the Activities Overview, type Settings and press Enter . Then, select the Network menu entry and the Network settings tool appears, see the section called "Configuring New Connections with control-center" . Select the VPN connection you want to edit and click the gear wheel icon and edit the General and Advanced sections, see Section 3.4.8.1, "Establishing a VPN Connection with control-center" . Saving Your New (or Modified) Connection and Making Further Configurations Once you have finished editing your new VPN connection, click the Save button to save your customized configuration. If the profile was in use while being edited, power cycle the connection to make NetworkManager apply the changes. If the profile is OFF, set it to ON or select it in the network connection icon's menu. See Section 3.4.1, "Connecting to a Network Using the control-center GUI" for information on using your new or altered connection. You can further configure an existing connection by selecting it in the Network window and clicking Configure to return to the Editing dialog. Then, to configure: IPv4 settings for the connection, click the IPv4 Settings tab and proceed to Section 5.4, "Configuring IPv4 Settings" . 3.4.8.2. Configuring a VPN Connection with nm-connection-editor You can also use nm-connection-editor to add and configure a VPN connection. For doing that, proceed as follows: Procedure Enter nm-connection-editor in a terminal. The Network Connections window appears, see Section 3.4.3, "Common Configuration Options Using nm-connection-editor" . Click the plus button. The Choose a Connection Type menu opens. Select from the VPN menu entry, the IPsec based VPN option. Click Create to open the Editing dialog and proceed to the section called "Adding a New IPsec VPN Connection" to edit the General and Advanced sections. 3.4.9. Configuring a Mobile Broadband Connection with a GUI You can use NetworkManager 's mobile broadband connection abilities to connect to the following 2G and 3G services: 2G - GPRS ( General Packet Radio Service ), EDGE ( Enhanced Data Rates for GSM Evolution ), or CDMA (Code Division Multiple Access). 3G - UMTS ( Universal Mobile Telecommunications System ), HSPA ( High Speed Packet Access ), or EVDO (EVolution Data-Only). Your computer must have a mobile broadband device (modem), which the system has discovered and recognized, in order to create the connection. Such a device may be built into your computer (as is the case on many notebooks and netbooks), or may be provided separately as internal or external hardware. Examples include PC card, USB Modem or Dongle, mobile or cellular telephone capable of acting as a modem. 3.4.9.1. Configuring a Mobile Broadband Connection with nm-connection-editor You can configure a mobile broadband connection using the GNOME nm-connection-editor . Adding a New Mobile Broadband Connection Procedure Enter nm-connection-editor in a terminal. The Network Connections window appears, see Section 3.4.3, "Common Configuration Options Using nm-connection-editor" . Click the plus button. The Choose a Connection Type menu opens. Select the Mobile Broadband menu entry. Click Create to open the Set up a Mobile Broadband Connection assistant. Under Create a connection for this mobile broadband device , choose the 2G- or 3G-capable device you want to use with the connection. If the drop-down menu is inactive, this indicates that the system was unable to detect a device capable of mobile broadband. In this case, click Cancel , ensure that you do have a mobile broadband-capable device attached and recognized by the computer and then retry this procedure. Click the Continue button. Select the country where your service provider is located from the list and click the Continue button. Select your provider from the list or enter it manually. Click the Continue button. Select your payment plan from the drop-down menu and confirm the Access Point Name ( APN ) is correct. Click the Continue button. Review and confirm the settings and then click the Apply button. Edit the mobile broadband-specific settings by referring to the section called "Configuring the Mobile Broadband Tab" Editing an Existing Mobile Broadband Connection Procedure Enter nm-connection-editor in a terminal. The Network Connections window appears. Select the Mobile Broadband tab. Select the connection you want to edit and click the gear wheel icon. See Section 3.4.3, "Common Configuration Options Using nm-connection-editor" for more information. Edit the mobile broadband-specific settings by referring to the section called "Configuring the Mobile Broadband Tab" Configuring the Mobile Broadband Tab If you have already added a new mobile broadband connection using the assistant (see the section called "Adding a New Mobile Broadband Connection" for instructions), you can edit the Mobile Broadband tab to disable roaming if home network is not available, assign a network ID, or instruct NetworkManager to prefer a certain technology (such as 3G or 2G) when using the connection. Number The number that is dialed to establish a PPP connection with the GSM-based mobile broadband network. This field may be automatically populated during the initial installation of the broadband device. You can usually leave this field blank and enter the APN instead. Username Enter the user name used to authenticate with the network. Some providers do not provide a user name, or accept any user name when connecting to the network. Password Enter the password used to authenticate with the network. Some providers do not provide a password, or accept any password. APN Enter the Access Point Name ( APN ) used to establish a connection with the GSM-based network. Entering the correct APN for a connection is important because it often determines: how the user is billed for their network usage; whether the user has access to the Internet, an intranet, or a subnetwork. Network ID Entering a Network ID causes NetworkManager to force the device to register only to a specific network. This can be used to ensure the connection does not roam when it is not possible to control roaming directly. Type Any - The default value of Any leaves the modem to select the fastest network. 3G (UMTS/HSPA) - Force the connection to use only 3G network technologies. 2G (GPRS/EDGE) - Force the connection to use only 2G network technologies. Prefer 3G (UMTS/HSPA) - First attempt to connect using a 3G technology such as HSPA or UMTS, and fall back to GPRS or EDGE only upon failure. Prefer 2G (GPRS/EDGE) - First attempt to connect using a 2G technology such as GPRS or EDGE, and fall back to HSPA or UMTS only upon failure. Allow roaming if home network is not available Uncheck this box if you want NetworkManager to terminate the connection rather than transition from the home network to a roaming one, thereby avoiding possible roaming charges. If the box is checked, NetworkManager will attempt to maintain a good connection by transitioning from the home network to a roaming one, and vice versa. PIN If your device's SIM ( Subscriber Identity Module ) is locked with a PIN ( Personal Identification Number ), enter the PIN so that NetworkManager can unlock the device. NetworkManager must unlock the SIM if a PIN is required in order to use the device for any purpose. CDMA and EVDO have fewer options. They do not have the APN , Network ID , or Type options. Saving Your New (or Modified) Connection and Making Further Configurations Once you have finished editing your mobile broadband connection, click the Apply button to save your customized configuration. If the profile was in use while being edited, power cycle the connection to make NetworkManager apply the changes. If the profile is OFF, set it to ON or select it in the network connection icon's menu. See Section 3.4.1, "Connecting to a Network Using the control-center GUI" for information on using your new or altered connection. You can further configure an existing connection by selecting it in the Network Connections window and clicking Edit to return to the Editing dialog. Then, to configure: Point-to-point settings for the connection, click the PPP Settings tab and proceed to Section 5.6, "Configuring PPP (Point-to-Point) Settings" ; IPv4 settings for the connection, click the IPv4 Settings tab and proceed to Section 5.4, "Configuring IPv4 Settings" ; or, IPv6 settings for the connection, click the IPv6 Settings tab and proceed to Section 5.5, "Configuring IPv6 Settings" . 3.4.10. Configuring a DSL Connection with a GUI This section is intended for those installations which have a DSL card fitted within a host rather than the external combined DSL modem router combinations typical of private consumer or SOHO installations. 3.4.10.1. Configuring a DSL Connection with nm-connection-editor You can configure a DSL connection using the GNOME nm-connection-editor . Adding a New DSL Connection Procedure Enter nm-connection-editor in a terminal. The Network Connections window appears, see Section 3.4.3, "Common Configuration Options Using nm-connection-editor" . Click the plus button. The Choose a Connection Type list appears. Select DSL and press the Create button. The Editing DSL Connection 1 window appears. Editing an Existing DSL Connection Procedure Enter nm-connection-editor in a terminal. The Network Connections window appears. Select the connection you want to edit and click the gear wheel icon. See Section 3.4.3, "Common Configuration Options Using nm-connection-editor" for more information. Configuring the DSL Tab Username Enter the user name used to authenticate with the service provider. Service Leave blank unless otherwise directed by your service provider. Password Enter the password supplied by the service provider. Saving Your New (or Modified) Connection and Making Further Configurations Once you have finished editing your DSL connection, click the Apply button to save your customized configuration. If the profile was in use while being edited, power cycle the connection to make NetworkManager apply the changes. If the profile is OFF, set it to ON or select it in the network connection icon's menu. See Section 3.4.1, "Connecting to a Network Using the control-center GUI" for information on using your new or altered connection. You can further configure an existing connection by selecting it in the Network Connections window and clicking Edit to return to the Editing dialog. To configure: The MAC address and MTU settings, click the Wired tab and proceed to the section called "Basic Configuration Options " . Point-to-point settings for the connection, click the PPP Settings tab and proceed to Section 5.6, "Configuring PPP (Point-to-Point) Settings" . IPv4 settings for the connection, click the IPv4 Settings tab and proceed to Section 5.4, "Configuring IPv4 Settings" .

Commands:
~]USD nm-connection-editor
~]USD nm-connection-editor
~]USD nm-connection-editor
~]# yum install NetworkManager-libreswan-gnome