Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
technical:strongswan-primer [2026/01/10 21:34] – [Some basic concepts and terminology with StrongSwan] systemtechnical:strongswan-primer [2026/01/12 06:13] (current) – [What is StrongSwan] system
Line 1: Line 1:
 ====== StrongSwan Primer ====== ====== StrongSwan Primer ======
 ===== What is StrongSwan ===== ===== What is StrongSwan =====
-  * Their Summary: //StrongSwan is a comprehensive implementation of the Internet Key Exchange (IKE) protocols that allows securing IP traffic in policy- and route-based IPsec scenarios from simple to very complex.//+  * //StrongSwan is a comprehensive implementation of the Internet Key Exchange (IKE) protocols that allows securing IP traffic in policy- and route-based IPsec scenarios from simple to very complex.// **(From the StrongSwan website)**
  
 --------- ---------
Line 11: Line 11:
   * The implementation of these can vary from simple to very complex.   * The implementation of these can vary from simple to very complex.
   * In RADIUSdesk our philosophy always been to keep things as simple as possible because //Simplicity is the ultimate sophistication.//   * In RADIUSdesk our philosophy always been to keep things as simple as possible because //Simplicity is the ultimate sophistication.//
-  * Our implementation uses certificates (PKI) and Route based IPsec (xfrm interfaces) similar to the other VPN implementations like Wireguard and OpenVPN.+  * Our implementation uses certificates (PKI) and route-based IPsec (xfrm interfaces) similar to the other VPN implementations like Wireguard and OpenVPN.
  
 --------- ---------
Line 20: Line 20:
   * Initially things like NAT traversal and a client whose public address changes were not supported.   * Initially things like NAT traversal and a client whose public address changes were not supported.
   * With IKEv2 these shortcomings were addressed making the StrongSwan implementation just as versatile as other modern VPN solutions.   * With IKEv2 these shortcomings were addressed making the StrongSwan implementation just as versatile as other modern VPN solutions.
 +
 +----------
  
 ===== Some basic concepts and terminology with StrongSwan ===== ===== Some basic concepts and terminology with StrongSwan =====
Line 34: Line 36:
   * We will work mostly (directly or indirectly with swanctl).   * We will work mostly (directly or indirectly with swanctl).
   * Although there are many other plugins available and part of StrongSwan, we stick to these three items for now to prevent from getting overwhelmed.   * Although there are many other plugins available and part of StrongSwan, we stick to these three items for now to prevent from getting overwhelmed.
-  * To recap, Charon is in the center, Vici sits on top of it and Swanctl is on the outside, using Vici to speak with Charon.+  * To recap, **Charon** is in the center, **Vici** sits on top of it. **Swanctl** is on the outside, using Vici to speak with Charon.
  • technical/strongswan-primer.1768073646.txt.gz
  • Last modified: 2026/01/10 21:34
  • by system