Project

General

Profile

strongSwan User Documentation » History » Version 148

Noel Kuntze, 25.10.2016 00:12

1 92 Andreas Steffen
h1. strongSwan User Documentation
2 91 Andreas Steffen
3 1 Martin Willi
{{>toc}}
4 1 Martin Willi
5 113 Tobias Brunner
h2. Introduction to strongSwan
6 113 Tobias Brunner
7 113 Tobias Brunner
* [[IntroductionTostrongSwan|Introduction to strongSwan]]
8 113 Tobias Brunner
** [[ForwardingAndSplitTunneling|Forwarding and Split-Tunneling]]
9 113 Tobias Brunner
10 147 Noel Kuntze
h2. Frequently Asked Questions
11 147 Noel Kuntze
12 147 Noel Kuntze
* A list of [[FAQ]] is maintained [[FAQ|here]].
13 147 Noel Kuntze
14 51 Andreas Steffen
h2. Features
15 51 Andreas Steffen
16 51 Andreas Steffen
* [[VirtualIp|Virtual IP]] via mode-config (IKEv1) or configuration payload (IKEv2)
17 51 Andreas Steffen
* [[NatTraversal|NAT Traversal]]
18 51 Andreas Steffen
* [[MobIke|MOBIKE]]
19 58 Martin Willi
* [[CryptoTest|Crypto tests]] provide a way to self-test used crypto implementations
20 58 Martin Willi
* [[IntegrityTest|Integrity tests]] make sure that the daemons use plugins and libraries they were built against
21 93 Martin Willi
* [[PluginList|Plugin list]] gives an overview about all optionally loadable strongSwan plugins
22 1 Martin Willi
23 1 Martin Willi
{{include_h(ConfigurationFiles)}}
24 1 Martin Willi
25 148 Noel Kuntze
h2. Benchmarks
26 148 Noel Kuntze
* [[PublicKeySpeed|Public Key Benchmark]] using various crypto libraries (gmp, gcrypt, openssl)
27 148 Noel Kuntze
* [[RaspberryPi2Benchmark|Raspberry Pi 2 ESP Benchmark]]
28 148 Noel Kuntze
29 51 Andreas Steffen
h2. HOWTOs
30 141 Noel Kuntze
31 148 Noel Kuntze
* [[Pcrypt|Parallel IPsec processing using pcrypt]]
32 144 Noel Kuntze
* [[RouteBasedVPN|Information about route based VPNs]]
33 141 Noel Kuntze
* [[CorrectTrafficDump|Taking traffic dumps correctly]]
34 140 Noel Kuntze
* [[SecurityRecommendations|Security Recommendations]]
35 71 Andreas Steffen
* [[NetworkManager|NetworkManager client setup]]
36 71 Andreas Steffen
* [[EapGtc|Authenticate road warriors using EAP-GTC and a PAM service]]
37 79 Martin Willi
* [[EapRadius|Use a RADIUS AAA server to authenticate clients with EAP]]
38 81 Martin Willi
* [[EapTls|EAP-TLS certificate authentication]]
39 80 Martin Willi
* [[HighAvailability|Configure a failsafe strongSwan High Availability cluster]]
40 71 Andreas Steffen
* [[SimpleCA|Setting-up a simple CA using the strongSwan PKI tool]]
41 75 Andreas Steffen
* [[CAmanagementGUIs|CA management made easy using GUIs]]
42 133 Andreas Steffen
* [[Bliss|Post-Quantum Bimodal Lattice Signature Scheme (BLISS) HOWTO]]
43 51 Andreas Steffen
* [[HashAndUrl|Hash-and-URL HOWTO]]
44 51 Andreas Steffen
* [[SqlLite|SQLite HOWTO]]
45 51 Andreas Steffen
* [[LoggerConfiguration|Logger configuration HOWTO]]
46 97 Tobias Brunner
* [[JobPriority|Job priority management HOWTO]]
47 51 Andreas Steffen
* [[IkeSaTable|IKE_SA lookup tuning HOWTO]]
48 55 Martin Willi
* [[MobileIPv6|Mobile IPv6 HOWTO]]
49 74 Jean-Michel Pouré
* [[SmartCards|Smartcard HOWTO]]
50 110 Andreas Steffen
* [[TrustedNetworkConnect|Trusted Network Connect (TNC) HOWTO]]
51 117 Andreas Steffen
* [[BYOD|Android BYOD Security based on TNC]]
52 110 Andreas Steffen
* [[IfMap|TNC IF-MAP HOWTO]]
53 120 Andreas Steffen
* [[StrongTnc|strongTNC Policy Manager HOWTO]]
54 110 Andreas Steffen
* [[IMA|Linux Integrity Measurement Architecture (IMA)]] 
55 110 Andreas Steffen
* [[AwsVpc|Setting up a VPN into the Amazon Public Cloud's VPC]] 
56 51 Andreas Steffen
57 131 Tobias Brunner
{{include_h(ConfigurationExamples)}}
58 1 Martin Willi
59 99 Tobias Brunner
h2. Portability
60 99 Tobias Brunner
61 125 Tobias Brunner
* [[Android|strongSwan on Android]]
62 118 Tobias Brunner
* [[FreeBSD|strongSwan on FreeBSD]]
63 1 Martin Willi
* [[MacOSX|strongSwan on Mac OS X]]
64 1 Martin Willi
* [[Windows|strongSwan on Windows]]
65 125 Tobias Brunner
* [[OpenWrt|strongSwan on OpenWrt]]
66 125 Tobias Brunner
* [[Maemo|strongSwan on Maemo (Nokia N900)]]
67 125 Tobias Brunner
68 99 Tobias Brunner
69 54 Andreas Steffen
h2. Interoperability
70 1 Martin Willi
71 145 Noel Kuntze
* [[Windows7|Windows 7 and newer]] with IKEv2
72 54 Andreas Steffen
* [[WindowsVista|Windows Vista]] with IKEv1
73 60 Andreas Steffen
* [[WindowsSuiteB|Windows Suite B Support]] with IKEv1
74 143 Noel Kuntze
* [[IOS_(Apple)|Apple iOS (iPhone, iPad) and Mac OS X]] with IKEv1/IKEv2
75 108 Andreas Steffen
* [[CharonPlutoIKEv1|strongSwan 4.x (pluto) - 5.x (charon)]] with IKEv1
76 142 Noel Kuntze
* [[BlackBerry|Blackberry OS 10 ]] with IKEv2
77 89 Andreas Steffen
78 51 Andreas Steffen
h2. Management Commands
79 1 Martin Willi
80 51 Andreas Steffen
* The powerful [[IpsecCommand|ipsec]] command starts, stops and monitors IPsec connections.
81 123 Martin Willi
* The alternative [[swanctl]] tool provides a new and portable configuration interface.
82 1 Martin Willi
83 24 Martin Willi
h2. Auxiliary Tools
84 36 Martin Willi
85 119 Tobias Brunner
* [[charon-cmd]] a simple command line IKE client
86 119 Tobias Brunner
87 105 Tobias Brunner
* ipsec [[IpsecAttest|attest]] manages measurement reference values used for TPM-based remote attestation
88 68 Andreas Steffen
* ipsec [[IpsecLeases|leases]] shows the assignment of virtual IP adresses stored in volatile memory
89 68 Andreas Steffen
* ipsec [[IpsecPKI|pki]] generates and analyzes RSA/ECDSA private keys and X.509 certificates  
90 95 Tobias Brunner
* ipsec [[IpsecPool|pool]] manages virtual IP address pools and attributes stored in an SQL database and provided by the [[attrsql|attr-sql plugin]]
91 51 Andreas Steffen
* ipsec [[ScepClient|scepclient]] implements the _Simple Certificate Enrollment Protocol (SCEP)_
92 51 Andreas Steffen
* ipsec [[IpsecStarter|starter]] starts, stops, and configures the IKE daemons
93 51 Andreas Steffen
* ipsec [[IpsecStroke|stroke]] controls the IKE charon daemon
94 146 Tobias Brunner
* ipsec [[IpsecConftest|conftest]] is a tool to test IKEv2 implementations