strongSwan

= strongSwan User Documentation =

== Features ==
* [wiki:VirtualIp Virtual IP] via mode-config (IKEv1) or configuration payload (IKEv2)
* [wiki:NatTraversal NAT Traversal]
* [wiki:MobIke MOBIKE]

== Configuration ==
* [wiki:IpsecConf ipsec.conf] file
* [wiki:IpsecSecrets ipsec.secrets] file
* [wiki:IpsecDirectory ipsec.d] directory
* [http://www.strongswan.org/docs/readme.htm Configuration HOWTO]

== Configuration Examples ==
Dozens of both simple and advanced VPN scenarios:
* [http://www.strongswan.org/uml/testresults42/ikev1 IKEv1] examples
* [http://www.strongswan.org/uml/testresults42/ikev2 IKEv2] examples
* [http://www.strongswan.org/uml/testresults42/ike Mixed] IKEv1/IKEv2 examples
* [http://www.strongswan.org/uml/testresults42/ipv6 IPv6] examples
* [http://www.strongswan.org/uml/testresults42/p2pnat IKEv2 Mediation Extension] P2P NAT-T] mediation service examples
* [http://www.strongswan.org/uml/testresults42/sql SQLite] database backend examples
* [wiki:HashAndUrl Hash and URL (IKEv2)] how to

== Management Commands ==
* The powerful [wiki:IpsecCommand ipsec] command starts, stops and monitors IPsec connections.

== Auxiliary Tools ==

* ipsec [wiki:OpenAc openac] generates ''X.509 attribute certificates''
* ipsec [wiki:ScepClient scepclient] implements the ''Simple Certificate Enrollment Protocol (SCEP)''
* ipsec [wiki:IpsecStarter starter] starts, stops, and configures the IKE daemons
* ipsec [wiki:IpsecStroke stroke] controls the IKEv2 charon daemon
* ipsec [wiki:IpsecWhack whack] controls the IKEv1 pluto daemon

== Interoperability ==

* [wiki:WindowsVista Windows Vista]

== Linux 2.6 IPsec ==
* [http://www.linux-magazin.de/heft_abo/ausgaben/2004/12/sicherer_brandstifter Firewalling mit Linux 2.6 IPsec]
* [http://www.linux-magazin.de/heft_abo/ausgaben/2006/08/doppelnase Linux netfilter IPsec policy matching]

== Frequently Asked Questions ==

* A [wiki:FAQ] is maintained [wiki:FAQ here].