strongSwan

= strongSwan User Documentation =

== Features ==

 * [wiki:VirtualIp Virtual IP] via mode-config (IKEv1) or configuration payload (IKEv2)

 * [wiki:NatTraversal NAT Traversal]

 * [wiki:MobIke MOBIKE]

== Configuration Files ==

 * [wiki:IpsecConf ipsec.conf] file

 * [wiki:IpsecSecrets ipsec.secrets] file

 * [wiki:IpsecDirectory ipsec.d] directory

 * [wiki:strongswanConf strongswan.conf] file

== Configuration HOWTOs ==

 * [http://www.strongswan.org/docs/readme.htm Configuration HOWTO]

 * [wiki:HashAndUrl Hash-and-URL HOWTO]

 * [wiki:SqlLite SQLite HOWTO]

 * [wiki:LoggerConfiguration Logger configuration HOWTO]

 * [wiki:IkeSaTable IKE_SA lookup tuning HOWTO]

 * [wiki:MobileIPv6 Mobile IPv6 HOWTO]

== Configuration Examples ==

Dozens of both simple and advanced VPN scenarios:

 * [wiki:IKEv1Examples IKEv1] examples

 * [wiki:IKEv2Examples IKEv2] examples

 * [http://www.strongswan.org/uml/testresults42/ikev2/rw-hash-and-url IKEv2 Hash-and-URL] example

 * [http://www.strongswan.org/uml/testresults42/p2pnat IKEv2 Mediation Extension] mediation service examples

 * [http://www.strongswan.org/uml/testresults42/ike Mixed] IKEv1/IKEv2 examples

 * [http://www.strongswan.org/uml/testresults42/ipv6 IPv6] examples

 * [http://www.strongswan.org/uml/testresults42/sql SQLite] database backend examples

 * [http://www.strongswan.org/uml/testresults42/openssl OpenSSL] crypto plugin examples

== Management Commands ==

 * The powerful [wiki:IpsecCommand ipsec] command starts, stops and monitors IPsec connections.

== Auxiliary Tools ==

 * ipsec [wiki:OpenAc openac] generates ''X.509 attribute certificates''

 * ipsec [wiki:ScepClient scepclient] implements the ''Simple Certificate Enrollment Protocol (SCEP)''

 * ipsec [wiki:IpsecPool pool] manages virtual IP address pools stored in an SQL database

 * ipsec [wiki:IpsecLeases leases] shows the assignment of virtual IP adresses stored in volatile memory

 * ipsec [wiki:IpsecStarter starter] starts, stops, and configures the IKE daemons

 * ipsec [wiki:IpsecStroke stroke] controls the IKEv2 charon daemon

 * ipsec [wiki:IpsecWhack whack] controls the IKEv1 pluto daemon

 * ipsec [wiki:IpsecUci uci] configuration plugin for OpenWRT

 * ipsec [wiki:IpsecXWRT X-WRT] end user configuration of X-WRT for OpenWRT

== Interoperability ==

 * [wiki:WindowsVista Windows Vista]

== Linux 2.6 IPsec ==

  * [http://www.linux-magazin.de/heft_abo/ausgaben/2004/12/sicherer_brandstifter Firewalling mit Linux 2.6 IPsec]

  * [http://www.linux-magazin.de/heft_abo/ausgaben/2006/08/doppelnase Linux netfilter IPsec policy matching]

== Frequently Asked Questions ==

 * A [wiki:FAQ] is maintained [wiki:FAQ here].