strongSwan

= strongSwan User Documentation =

== Features ==

 * [wiki:VirtualIp Virtual IP] via mode-config (IKEv1) or configuration payload (IKEv2)

 * [wiki:NatTraversal NAT Traversal]

 * [wiki:MobIke MOBIKE]

== Configuration ==

 * [wiki:IpsecConf ipsec.conf] file

 * [wiki:IpsecSecrets ipsec.secrets] file

 * [wiki:IpsecDirectory ipsec.d] directory

 * [http://www.strongswan.org/docs/readme.htm Configuration HOWTO]

== Configuration Examples ==

Dozens of both simple and advanced VPN scenarios:

 * [http://www.strongswan.org/uml/testresults4/ikev1 IKEv1] examples

 * [http://www.strongswan.org/uml/testresults4/ikev2 IKEv2] examples

 * [http://www.strongswan.org/uml/testresults4/ike Mixed] IKEv1/IKEv2 examples

 * [http://www.strongswan.org/uml/testresults4/ipv6 IPv6] examples

 * [http://www.strongswan.org/uml/testresults4/p2pnat P2P NAT-T] examples

== Management Commands ==

 * The powerful [wiki:IpsecCommand ipsec] command starts, stops and monitors IPsec connections.

== Auxiliary Tools ==

 * ipsec [wiki:OpenAc openac] generates ''X.509 attribute certificates''

 * ipsec [wiki:ScepClient scepclient] implements the ''Simple Certificate Enrollment Protocol (SCEP)''

 * ipsec [wiki:IpsecStarter starter] starts, stops, and configures the IKE daemons

 * ipsec [wiki:IpsecStroke stroke] controls the IKEv2 charon daemon

 * ipsec [wiki:IpsecWhack whack] controls the IKEv1 pluto daemon

== Interoperability ==

 * [wiki:WindowsVista Windows Vista]

== Linux 2.6 IPsec ==

  * [http://www.linux-magazin.de/heft_abo/ausgaben/2004/12/sicherer_brandstifter Firewalling mit Linux 2.6 IPsec]

  * [http://www.linux-magazin.de/heft_abo/ausgaben/2006/08/doppelnase Linux netfilter IPsec policy matching]

== Frequently Asked Questions ==

 * A [wiki:FAQ] is maintained [wiki:FAQ here].