strongSwan User Documentation » History » Version 73
« Previous -
Version 73/184
(diff) -
Next » -
Current version
Jean-Michel Pouré, 25.12.2009 13:05
Move GUIs to auxiliary tools
strongSwan User Documentation¶
Features¶
- Virtual IP via mode-config (IKEv1) or configuration payload (IKEv2)
- NAT Traversal
- MOBIKE
- Public Key Benchmark using various crypto libraries (gmp, gcrypt, openssl)
- Crypto tests provide a way to self-test used crypto implementations
- Integrity tests make sure that the daemons use plugins and libraries they were built against
Configuration Files¶
- ipsec.conf file
- ipsec.secrets file
- ipsec.d directory
- strongswan.conf file
Configuration HOWTOs¶
- NetworkManager client setup
- Authenticate road warriors using EAP-GTC and a PAM service
- Setting-up a simple CA using the strongSwan PKI tool
- Hash-and-URL HOWTO
- SQLite HOWTO
- Logger configuration HOWTO
- IKE_SA lookup tuning HOWTO
- Mobile IPv6 HOWTO
- Configuration HOWTO (slightly obsolete)
- strongSwan on FreeBSD (IKEv2 only)
- strongSwan on Mac OS X (IKEv2 only)
Configuration Examples¶
Dozens of both simple and advanced VPN scenarios:- IKEv1 examples
- IKEv2 examples - NEW with EAP-RADIUS support
- IPv6 examples
- Advanced Cipher Suite examples
- Integrity and Crypto Test examples
- IKEv2 Hash-and-URL example
- IKEv2 Mediation Extension mediation service examples
- SQLite database backend examples
Interoperability¶
- Windows 7 with IKEv2
- Windows Vista with IKEv1
- Windows Suite B Support with IKEv1
Management Commands¶
- The powerful ipsec command starts, stops and monitors IPsec connections.
Auxiliary Tools¶
- ipsec leases shows the assignment of virtual IP adresses stored in volatile memory
- ipsec openac generates X.509 attribute certificates
- ipsec pki generates and analyzes RSA/ECDSA private keys and X.509 certificates
- ipsec pool manages virtual IP address pools stored in an SQL database
- ipsec scepclient implements the Simple Certificate Enrollment Protocol (SCEP)
- ipsec starter starts, stops, and configures the IKE daemons
- ipsec stroke controls the IKEv2 charon daemon
- ipsec uci configuration plugin for OpenWRT
- ipsec whack controls the IKEv1 pluto daemon
- ipsec X-WRT end user configuration of X-WRT for OpenWRT
- CA management made easy using GUIs