strongSwan Documentation

Introduction

Configuration Examples

Modern vici-based Scenarios

These scenarios use the modern Versatile IKE Control Interface (VICI) as implemented by the vici plugin and the swanctl command line tool.

Quickstart examples
IKEv2 examples
IKEv1 examples
IPv6 examples

Legacy stroke-based Scenarios

These scenarios use the deprecated stroke interface as implemented by the stroke plugin and the ipsec command line tool.

IKEv2 examples
IKEv1 examples
IPv6 examples

Notes on Configuration Examples

Platform Security

Using TPM 2.0 keys with strongSwan

Tools

swanctl configures, controls and monitors the charon IKE daemon
pki generates and analyzes RSA, ECDSA or EdDSA private keys and X.509 certificates