strongSwan Documentation

Configuration Examples

Modern vici-based Scenarios

These scenarios use the modern Versatile IKE Control Interface (VICI) as implemented by the vici plugin and the swanctl command line tool.

Legacy stroke-based Scenarios

These scenarios use the deprecated stroke interface as implemented by the stroke plugin and the ipsec command line tool.


  • swanctl configures, controls and monitors the charon IKE daemon

  • pki generates and analyzes RSA, ECDSA or EdDSA private keys and X.509 certificates