strongSwan

= strongSwan User Documentation =

== Features ==
* [wiki:VirtualIp Virtual IP] via mode-config (IKEv1) or configuration payload (IKEv2)
* [wiki:NatTraversal NAT Traversal]
* [wiki:MobIke MOBIKE]

== Configuration Files ==
* [wiki:IpsecConf ipsec.conf] file
* [wiki:IpsecSecrets ipsec.secrets] file
* [wiki:IpsecDirectory ipsec.d] directory
* [wiki:strongswanConf strongswan.conf] file

== Configuration HOWTOs ==
* [http://www.strongswan.org/docs/readme.htm Configuration HOWTO]
* [wiki:HashAndUrl Hash-and-URL HOWTO]
* [wiki:SqlLite SQLite HOWTO]
* [wiki:LoggerConfiguration Logger configuration HOWTO]
* [wiki:IkeSaTable IKE_SA lookup tuning HOWTO]
* [wiki:MobileIPv6 Mobile IPv6 HOWTO]
* [wiki:Debian:01_start Debian Howto]

== Configuration Examples ==
Dozens of both simple and advanced VPN scenarios:
* [wiki:IKEv1Examples IKEv1] examples
* [wiki:IKEv2Examples IKEv2] examples
* [http://www.strongswan.org/uml/testresults42/ikev2/rw-hash-and-url IKEv2 Hash-and-URL] example
* [http://www.strongswan.org/uml/testresults42/p2pnat IKEv2 Mediation Extension] mediation service examples
* [http://www.strongswan.org/uml/testresults42/ike Mixed] IKEv1/IKEv2 examples
* [http://www.strongswan.org/uml/testresults42/ipv6 IPv6] examples
* [http://www.strongswan.org/uml/testresults42/sql SQLite] database backend examples
* [http://www.strongswan.org/uml/testresults42/openssl OpenSSL] crypto plugin examples

== Management Commands ==
* The powerful [wiki:IpsecCommand ipsec] command starts, stops and monitors IPsec connections.

== Auxiliary Tools ==

* ipsec [wiki:OpenAc openac] generates ''X.509 attribute certificates''
* ipsec [wiki:ScepClient scepclient] implements the ''Simple Certificate Enrollment Protocol (SCEP)''
* ipsec [wiki:IpsecPool pool] manages virtual IP address pools stored in an SQL database
* ipsec [wiki:IpsecLeases leases] shows the assignment of virtual IP adresses stored in volatile memory
* ipsec [wiki:IpsecStarter starter] starts, stops, and configures the IKE daemons
* ipsec [wiki:IpsecStroke stroke] controls the IKEv2 charon daemon
* ipsec [wiki:IpsecWhack whack] controls the IKEv1 pluto daemon
* ipsec [wiki:IpsecUci uci] configuration plugin for OpenWRT
* ipsec [wiki:IpsecXWRT X-WRT] end user configuration of X-WRT for OpenWRT

== Interoperability ==

* [wiki:Windows7 Windows 7]
* [wiki:WindowsVista Windows Vista]

== Linux 2.6 IPsec ==
* [http://www.linux-magazin.de/heft_abo/ausgaben/2004/12/sicherer_brandstifter Firewalling mit Linux 2.6 IPsec]
* [http://www.linux-magazin.de/heft_abo/ausgaben/2006/08/doppelnase Linux netfilter IPsec policy matching]

== Frequently Asked Questions ==

* A [wiki:FAQ] is maintained [wiki:FAQ here].