--- name: "vde_l3" section: "1" platform: "linux" package: "vde2" version: "2.3.3-10" release: "Arch Linux 2026-11-01" platforms: ["linux"] url: "https://new.carta.tech/vde_l3" --- # vde\_l3(1) Virtual Distributed Ethernet 'Layer 3' Switch. ## NAME vde\_l3 - Virtual Distributed Ethernet 'Layer 3' Switch. ## SYNOPSIS **vde\_l3** **-v** *vde\_plug:ipaddress/netmask* \[**-v***...\]* *\[***-r** *target\_network/netmask:gateway*\] \[**-G** *default\_gw*\] \[**-M** *mgmt\_socket*\]\ ## DESCRIPTION A **vde\_l3** connects to one or more vde\_switches, performing ip forwarding among its virtual interfaces. A new interface is created at startup for each **-v** option given at command line. Static routes to target networks can be defined using the **-r** option. **vde\_l3 -v /var/run/s1.ctl:192.168.0.1/24** connects to the vde sock at /var/run/s1.ctl with its virtual interface ve0, having the address 192.168.0.1 and netmask 255.255.255.0. **vde\_l3 \\** **-v /var/run/s1.ctl:192.168.0.1/24 \\** **-v /var/run/s2.ctl:10.0.0.254/255.255.0.0** connects to the two vde socks, with its virtual interfaces ve0 and ve1, having addressess 192.168.1.0 and 10.0.0.254 respectively. Hosts in each network can specify the **vde\_l3** as their gateway to reach the other one. ## OPTIONS - **-v *vde\_plug:ipaddress/netmask*** Creates a virtual network interfaces on the **vde\_l3** box, with address *ipaddress* and netmask *netmask*. Please note that the netmask can be specified either in the 'classic' A.B.C.D mode, or just by giving the number of leading bits (f.e., /17 for 255.255.128.0). One can define as many interfaces as she wants. - **-r *target\_network/netmask:gateway*** Specify a static route through *gateway* to reach hosts in *target\_network* with netmask *netmask*. One can define as many routes as she wants. - **-G *default\_gw*** Specify a default gateway, to be used whenever no static route is defined for a target host. - **-M *mgmt\_socket*** the unix socket where the parameters (interfaces addresses, routes, etc.) can be checked and changed runtime. [**unixterm**(1)](/unixterm/1.md) can be used as a remote terminal for wirefilter. ## NOTICE Virtual Distributed Ethernet is not related in any way with www.vde.com ("Verband der Elektrotechnik, Elektronik und Informationstechnik" i.e. the German "Association for Electrical, Electronic & Information Technologies"). ## SEE ALSO [**vde\_switch**(1)](/vde_switch/1.md), [**vdeq**(1)](/vdeq/1.md), [**unixterm**(1)](/unixterm/1.md), [**vde\_cryptcab**(1)](/vde_cryptcab/1.md), [**wirefilter**(1)](/wirefilter/1.md).\ ## AUTHORS VDE\_L3 is a tool by Daniele Lacamera \ VDE is a project by Renzo Davoli \