strongSwan

= strongSwan User Documentation =

Features * [wiki:VirtualIp Virtual IP] via mode-config (IKEv1) or configuration payload (IKEv2) * [wiki:NatTraversal NAT Traversal] * [wiki:MobIke MOBIKE] Configuration * [wiki:IpsecConf ipsec.conf] file * [wiki:IpsecSecrets ipsec.secrets] file * [wiki:IpsecDirectory ipsec.d] directory * [http://www.strongswan.org/docs/readme.htm Configuration HOWTO] Configuration Examples
Dozens of both simple and advanced VPN scenarios: * [http://www.strongswan.org/uml/testresults42/ikev1 IKEv1] examples * [http://www.strongswan.org/uml/testresults42/ikev2 IKEv2] examples * [http://www.strongswan.org/uml/testresults42/ike Mixed] IKEv1/IKEv2 examples * [http://www.strongswan.org/uml/testresults42/ipv6 IPv6] examples * [http://www.strongswan.org/uml/testresults42/p2pnat P2P NAT-T] mediation service examples * [http://www.strongswan.org/uml/testresults42/sql SQLite] database backend examples
Management Commands * The powerful [wiki:IpsecCommand ipsec] command starts, stops and monitors IPsec connections. Auxiliary Tools * ipsec [wiki:OpenAc openac] generates ''X.509 attribute certificates'' * ipsec [wiki:ScepClient scepclient] implements the ''Simple Certificate Enrollment Protocol (SCEP)'' * ipsec [wiki:IpsecStarter starter] starts, stops, and configures the IKE daemons * ipsec [wiki:IpsecStroke stroke] controls the IKEv2 charon daemon * ipsec [wiki:IpsecWhack whack] controls the IKEv1 pluto daemon Interoperability * [wiki:WindowsVista Windows Vista] Linux 2.6 IPsec * [http://www.linux-magazin.de/heft_abo/ausgaben/2004/12/sicherer_brandstifter Firewalling mit Linux 2.6 IPsec] * [http://www.linux-magazin.de/heft_abo/ausgaben/2006/08/doppelnase Linux netfilter IPsec policy matching] Frequently Asked Questions * A [wiki:FAQ] is maintained [wiki:FAQ here].