strongSwan

= strongSwan User Documentation =

Features * [wiki:VirtualIp Virtual IP] via mode-config (IKEv1) or configuration payload (IKEv2) * [wiki:NatTraversal NAT Traversal] * [wiki:MobIke MOBIKE] Configuration Files * [wiki:IpsecConf ipsec.conf] file * [wiki:IpsecSecrets ipsec.secrets] file * [wiki:IpsecDirectory ipsec.d] directory * [wiki:strongswanConf strongswan.conf] file Configuration HOWTOs * [http://www.strongswan.org/docs/readme.htm Configuration HOWTO] * [wiki:HashAndUrl Hash-and-URL HOWTO] * [wiki:SqlLite SQLite HOWTO] * [wiki:LoggerConfiguration Logger configuration HOWTO] * [wiki:IkeSaTable IKE_SA lookup tuning HOWTO] * [wiki:MobileIPv6 Mobile IPv6 HOWTO] Configuration Examples
Dozens of both simple and advanced VPN scenarios: * [wiki:IKEv1Examples IKEv1] examples * [wiki:IKEv2Examples IKEv2] examples * [http://www.strongswan.org/uml/testresults42/ikev2/rw-hash-and-url IKEv2 Hash-and-URL] example * [http://www.strongswan.org/uml/testresults42/p2pnat IKEv2 Mediation Extension] mediation service examples * [http://www.strongswan.org/uml/testresults42/ike Mixed] IKEv1/IKEv2 examples * [http://www.strongswan.org/uml/testresults42/ipv6 IPv6] examples * [http://www.strongswan.org/uml/testresults42/sql SQLite] database backend examples * [http://www.strongswan.org/uml/testresults42/openssl OpenSSL] crypto plugin examples Management Commands * The powerful [wiki:IpsecCommand ipsec] command starts, stops and monitors IPsec connections. Auxiliary Tools * ipsec [wiki:OpenAc openac] generates ''X.509 attribute certificates'' * ipsec [wiki:ScepClient scepclient] implements the ''Simple Certificate Enrollment Protocol (SCEP)'' * ipsec [wiki:IpsecPool pool] manages virtual IP address pools stored in an SQL database * ipsec [wiki:IpsecLeases leases] shows the assignment of virtual IP adresses stored in volatile memory * ipsec [wiki:IpsecStarter starter] starts, stops, and configures the IKE daemons * ipsec [wiki:IpsecStroke stroke] controls the IKEv2 charon daemon * ipsec [wiki:IpsecWhack whack] controls the IKEv1 pluto daemon * ipsec [wiki:IpsecUci uci] configuration plugin for OpenWRT * ipsec [wiki:IpsecXWRT X-WRT] end user configuration of X-WRT for OpenWRT Interoperability * [wiki:Windows7 Windows 7] with IKEv2 * [wiki:WindowsVista Windows Vista] with IKEv1 Linux 2.6 IPsec * [http://www.linux-magazin.de/heft_abo/ausgaben/2004/12/sicherer_brandstifter Firewalling mit Linux 2.6 IPsec] * [http://www.linux-magazin.de/heft_abo/ausgaben/2006/08/doppelnase Linux netfilter IPsec policy matching] Frequently Asked Questions * A [wiki:FAQ] is maintained [wiki:FAQ here].