diff --git a/doc/reference/devices_nic.md b/doc/reference/devices_nic.md
index 71b6cb1ed3..2f4b0bc37f 100644
--- a/doc/reference/devices_nic.md
+++ b/doc/reference/devices_nic.md
@@ -118,7 +118,7 @@ Key                     | Type    | Default           | Managed | Description
 `boot.priority`         | integer | -                 | no      | Boot priority for VMs (higher value boots first)
 `gvrp`                  | bool    | `false`           | no      | Register VLAN using GARP VLAN Registration Protocol
 `hwaddr`                | string  | randomly assigned | no      | The MAC address of the new interface
-`mode`                  | string  | `bridge`          | no      | Macvlan mode (one of `bridge`, `vepa`, `passthrough` or `private`)
+`mode`                  | string  | `bridge`          | no      | Macvlan mode (one of `bridge`, `vepa`, `passthru` or `private`)
 `mtu`                   | integer | parent MTU        | yes     | The MTU of the new interface
 `name`                  | string  | kernel assigned   | no      | The name of the interface inside the instance
 `network`               | string  | -                 | no      | The managed network to link the device to (instead of specifying the `nictype` directly)
diff --git a/internal/server/device/nic.go b/internal/server/device/nic.go
index 270b62caa5..02f743967c 100644
--- a/internal/server/device/nic.go
+++ b/internal/server/device/nic.go
@@ -52,7 +52,7 @@ func nicValidationRules(requiredFields []string, optionalFields []string, instCo
 		"security.acls.default.ingress.logged": validate.Optional(validate.IsBool),
 		"security.acls.default.egress.logged":  validate.Optional(validate.IsBool),
 		"security.promiscuous":                 validate.Optional(validate.IsBool),
-		"mode":                                 validate.Optional(validate.IsOneOf("bridge", "vepa", "passthrough", "private")),
+		"mode":                                 validate.Optional(validate.IsOneOf("bridge", "vepa", "passthru", "private")),
 	}
 
 	validators := map[string]func(value string) error{}